| fdisk /dev/nvme1n1
|
|
|
| #fdisk:
|
| g
|
| n
|
| <enter> #partition number 1
|
| <enter> #first sector
|
| +1G
|
| t
|
| 1 #efi type
|
| n
|
| <enter> #partition number 2
|
| <enter> #first sector
|
| <enter> #last sector
|
| t
|
| <enter> #selected partition 2
|
| 44 #lvm type
|
| w
|
|
|
| cryptsetup luksFormat /dev/nvme1n1p2
|
| YES
|
| <pwd>
|
| <pwd>
|
| cryptsetup luksOpen /dev/nvme1n1p2 lvm
|
| lvm pvcreate /dev/mapper/lvm
|
| vgcreate vg0 /dev/mapper/lvm
|
| lvcreate -L 24G -n swap vg0
|
| lvcreate -l 100%FREE -n root vg0
|
|
|
| mkfs.vfat -F 32 /dev/nvme1n1p1
|
| mkfs.xfs /dev/mapper/vg0-root
|
| mkswap /dev/mapper/vg0-swap
|
| swapon /dev/mapper/vg0-swap
|
|
|
| mkdir --parents /mnt/gentoo
|
| mount /dev/mapper/vg0-root /mnt/gentoo
|
| mkdir --parents /mnt/gentoo/efi
|
|
|
| cd /mnt/gentoo
|
|
|
| date <date>
|
|
|
| lynx https://www.gentoo.org/downloads/mirrors/
|
| #<verifying>
|
| tar xpvf stage3-*.tar.xz --xattrs-include='*.*' --numeric-owner
|
|
|
| nano /mnt/gentoo/etc/portage/make.conf
|
| #make.conf:
|
| COMMON_FLAGS="-march=native -O2 -pipe"
|
| VIDEO_CARDS="intel"
|
|
|
| cp --dereference /etc/resolv.conf /mnt/gentoo/etc/
|
|
|
| mount --types proc /proc /mnt/gentoo/proc
|
| mount --rbind /sys /mnt/gentoo/sys
|
| mount --make-rslave /mnt/gentoo/sys
|
| mount --rbind /dev /mnt/gentoo/dev
|
| mount --make-rslave /mnt/gentoo/dev
|
| mount --bind /run /mnt/gentoo/run
|
| mount --make-slave /mnt/gentoo/run
|
|
|
| test -L /dev/shm && rm /dev/shm && mkdir /dev/shm
|
| mount --types tmpfs --options nosuid,nodev,noexec shm /dev/shm
|
|
|
| chmod 1777 /dev/shm /run/shm
|
|
|
| chroot /mnt/gentoo /bin/bash
|
| source /etc/profile
|
| export PS1="(chroot) ${PS1}"
|
|
|
| #mount /dev/nvme1n1p1 /efi
|
| mount /dev/nvme1n1p1 /boot
|
|
|
| emerge --sync
|
|
|
| eselect news list
|
| eselect news read
|
|
|
| eselect profile list
|
| #[23]
|
|
|
| emerge -av1 app-portage/cpuid2cpuflags
|
| echo "*/* $(cpuid2cpuflags)" > /etc/portage/package.use/00cpu-flags
|
|
|
| nano /etc/portage/package.license
|
| #package.license:
|
| sys-kernel/linux-firmware linux-fw-redistributable
|
| sys-firmware/intel-microcode intel-ucode
|
|
|
| emerge --ask --verbose --update --deep --changed-use @world
|
| emerge --ask --depclean
|
|
|
| ln -sf ../usr/share/zoneinfo/Europe/Berlin /etc/localtime
|
|
|
| nano -w /etc/locale.gen
|
| #locale.gen:
|
| en_US ISO-8859-1
|
| en_US.UTF-8 UTF-8
|
| de_DE ISO-8859-1
|
| de_DE.UTF-8 UTF-8
|
|
|
| locale-gen
|
| locale -a
|
|
|
| eselect locale list
|
| eselect locale set 2
|
|
|
| env-update && source /etc/profile && export PS1="(chroot) ${PS1}"
|
|
|
| nano /etc/portage/package.use/sys-kernel
|
| sys-kernel/installkernel dracut
|
|
|
| nano /etc/portage/package.use/sys-fs
|
| sys-fs/lvm2 lvm
|
|
|
| emerge -av sys-apps/pciutils sys-kernel/linux-firmware sys-firmware/sof-firmware sys-kernel/installkernel sys-kernel/gentoo-sources
|
|
|
| eselect kernel set 1
|
| eselect kernel list
|
|
|
| blkid
|
|
|
| cd /usr/src/linux
|
| make nconfig
|
|
|
| #kernel config:
|
| Processor types and features
|
| [*] Built-in kernel command line
|
| root=UUID=<id root> rd.luks.uuid=<id partition> rd.lvm.vg=vg0
|
| Device Drivers --->
|
| NVME Support --->
|
| <*> NVM Express block device
|
| [*] NVMe multpath support
|
| [*] NVMe hardware monitoring
|
| File systems --->
|
| <XFS> filesystem support
|
| Device Drivers --->
|
| HID support --->
|
| [*] Battery level reporting for HID devices
|
| <*> Unified support for USB4 and Thunderbolt
|
| Enable the block layer --->
|
| Partition Types --->
|
| [*] Advanced partition selection
|
| [*] EFI GUID Partition support
|
| Processor type and features -->
|
| Processor faimily
|
| Crore 2 /newe Xeon
|
| Device Drivers
|
| Graphics support --->
|
| Frame buffer Devices --->
|
| <*> Support for frame buffer devices --->
|
| [*} EFI-based Framebuffer Support
|
| File Systems
|
| Pseudo filesystems --->
|
| <*> EFI Variable filesystem
|
| Cryptographic API
|
| Userspce interface
|
| <*> Hash algorithms
|
| <*> symmetric key cipher algorithms
|
| Length-preserving ciphers
|
| <*> XTS
|
| Block ciphers
|
| <*> AES (Advanced Encryption standard)
|
| <*> AES cipher algorithms
|
| Device Drivers
|
| [*] Multiple devices driver support
|
| <*> Crypt target support
|
|
|
| Device Drivers
|
| Graphics support
|
| Frame buffer devices
|
| <*> Support for frame buffer device drivers
|
| <*> Simple framebuffer support
|
|
|
| make -j22 && make modules_install
|
|
|
| nano /etc/fstab
|
| #fstab:
|
| #PARTUUID=<myid> /efi vfat unmask=0077 0 2
|
| PARTUUID=<myid> /boot vfat defaults 0 2
|
| /dev/mapper/vg0-swap none swap sw 0 0
|
| /dev/mapper/vg0-root / xfs defaults,noatime 0 1
|
|
|
| echo thinkpad > /etc/hostname
|
|
|
| emerge -av app-admin/sysklogd
|
| rc-update add sysklogd default
|
|
|
| emerge -av dosfstools xfsprogs sys-block/io-scheduler-udev-rules sys-boot/grub sys-fs/cryptsetup intel-microcode dracut
|
|
|
| nano /etc/dracut.conf
|
| add_dracutmodules+=" crypt dm rootfs-block lvm "
|
|
|
| #nano /etc/default/grub
|
| #GRUB_ENABLE_CRYPTODISK=y
|
|
|
| make install
|
|
|
| #grub-install --efi-directory=/efi
|
| grub-install --efi-directory=/boot
|
|
|
| grub-mkconfig -o /boot/grub/grub.cfg
|
|
|
| exit
|
| umount -l /mnt/gentoo/dev{/shm,/pts,}
|
| umount -R /mnt/gentoo
|
| reboot
|