fdisk /dev/nvme1n1

#fdisk:
g
n
<enter> #partition number 1
<enter> #first sector
+1G
t
1 #efi type
n
<enter> #partition number 2
<enter> #first sector
<enter> #last sector
t
<enter> #selected partition 2
44 #lvm type
w

cryptsetup luksFormat /dev/nvme1n1p2
YES
<pwd>
<pwd>
cryptsetup luksOpen /dev/nvme1n1p2 lvm
lvm pvcreate /dev/mapper/lvm
vgcreate vg0 /dev/mapper/lvm
lvcreate -L 24G -n swap vg0
lvcreate -l 100%FREE -n root vg0

mkfs.vfat -F 32 /dev/nvme1n1p1
mkfs.xfs /dev/mapper/vg0-root
mkswap /dev/mapper/vg0-swap
swapon /dev/mapper/vg0-swap

mkdir --parents /mnt/gentoo
mount /dev/mapper/vg0-root /mnt/gentoo
mkdir --parents /mnt/gentoo/efi

cd /mnt/gentoo

date <date>

lynx https://www.gentoo.org/downloads/mirrors/
#<verifying>
tar xpvf stage3-*.tar.xz --xattrs-include='*.*' --numeric-owner

nano /mnt/gentoo/etc/portage/make.conf
#make.conf:
COMMON_FLAGS="-march=native -O2 -pipe"
VIDEO_CARDS="intel"

cp --dereference /etc/resolv.conf /mnt/gentoo/etc/

mount --types proc /proc /mnt/gentoo/proc
mount --rbind /sys /mnt/gentoo/sys
mount --make-rslave /mnt/gentoo/sys
mount --rbind /dev /mnt/gentoo/dev
mount --make-rslave /mnt/gentoo/dev
mount --bind /run /mnt/gentoo/run
mount --make-slave /mnt/gentoo/run

test -L /dev/shm && rm /dev/shm && mkdir /dev/shm
mount --types tmpfs --options nosuid,nodev,noexec shm /dev/shm

chmod 1777 /dev/shm /run/shm

chroot /mnt/gentoo /bin/bash
source /etc/profile
export PS1="(chroot) ${PS1}"

#mount /dev/nvme1n1p1 /efi
mount /dev/nvme1n1p1 /boot

emerge --sync

eselect news list
eselect news read

eselect profile list
#[23]

emerge -av1 app-portage/cpuid2cpuflags
echo "*/* $(cpuid2cpuflags)" > /etc/portage/package.use/00cpu-flags

nano /etc/portage/package.license
#package.license:
sys-kernel/linux-firmware linux-fw-redistributable
sys-firmware/intel-microcode intel-ucode

emerge --ask --verbose --update --deep --changed-use @world
emerge --ask --depclean

ln -sf ../usr/share/zoneinfo/Europe/Berlin /etc/localtime

nano -w /etc/locale.gen
#locale.gen:
en_US ISO-8859-1
en_US.UTF-8 UTF-8
de_DE ISO-8859-1
de_DE.UTF-8 UTF-8

locale-gen
locale -a

eselect locale list
eselect locale set 2

env-update && source /etc/profile && export PS1="(chroot) ${PS1}"

nano /etc/portage/package.use/sys-kernel
sys-kernel/installkernel dracut

nano /etc/portage/package.use/sys-fs
sys-fs/lvm2 lvm

emerge -av sys-apps/pciutils sys-kernel/linux-firmware sys-firmware/sof-firmware sys-kernel/installkernel sys-kernel/gentoo-sources

eselect kernel set 1
eselect kernel list

blkid

cd /usr/src/linux 
make nconfig

#kernel config:
Processor types and features
        [*] Built-in kernel command line
		root=UUID=<id root> rd.luks.uuid=<id partition> rd.lvm.vg=vg0
Device Drivers --->
	NVME Support --->
		<*> NVM Express block device
		[*] NVMe multpath support
		[*] NVMe hardware monitoring
File systems --->
	<XFS> filesystem support
Device Drivers --->
	HID support --->
		[*] Battery level reporting for HID devices
	<*> Unified support for USB4 and Thunderbolt
Enable the block layer --->
	Partition Types --->
		[*] Advanced partition selection
		[*] EFI GUID Partition support
Processor type and features -->
	Processor faimily
		Crore 2 /newe Xeon
Device Drivers 
	Graphics support --->
		Frame buffer Devices --->
			<*> Support for frame buffer devices --->
				[*} EFI-based Framebuffer Support
File Systems
	Pseudo filesystems --->
		<*> EFI Variable filesystem
Cryptographic API
	Userspce interface
		<*> Hash algorithms
		<*> symmetric key cipher algorithms
	Length-preserving ciphers
		<*> XTS
	Block ciphers
		<*> AES (Advanced Encryption standard)
		<*> AES cipher algorithms
Device Drivers
	[*] Multiple devices driver support
		<*> Crypt target support

Device Drivers
	Graphics support
		Frame buffer devices
			<*> Support for frame buffer device drivers
				<*> Simple framebuffer support

make -j22 && make modules_install

nano /etc/fstab
#fstab:
#PARTUUID=<myid>					/efi   vfat    unmask=0077	        0 2
PARTUUID=<myid>					/boot	vfat	defaults		0 2
/dev/mapper/vg0-swap                            none    swap    sw                      0 0
/dev/mapper/vg0-root                            /       xfs     defaults,noatime        0 1

echo thinkpad > /etc/hostname

emerge -av app-admin/sysklogd
rc-update add sysklogd default

emerge -av dosfstools xfsprogs sys-block/io-scheduler-udev-rules sys-boot/grub sys-fs/cryptsetup intel-microcode dracut

nano /etc/dracut.conf
add_dracutmodules+=" crypt dm rootfs-block lvm "

#nano /etc/default/grub
#GRUB_ENABLE_CRYPTODISK=y

make install

#grub-install --efi-directory=/efi
grub-install --efi-directory=/boot

grub-mkconfig -o /boot/grub/grub.cfg

exit 
umount -l /mnt/gentoo/dev{/shm,/pts,} 
umount -R /mnt/gentoo
reboot