Differences

This shows you the differences between two versions of the page.

--- en:server:operating_systems:arch_linux [2022/06/15 06:21] – [doas] dan
+++ en:server:operating_systems:arch_linux [2024/03/07 20:29] – [Create an initial ramdisk] updated upstream changes - microcode hook by default dan
@@ Line 18: / Line 18: @@
   * Xorg
   * KDE / Plasma
-  * SDDM
+  * SDDM/xinit
 ===== Download the ISO =====
 [[https://www.archlinux.org/download/]]
+==== Verify the ISO image ====
+Check the two files in the same folder with the following command(s):
+  * for Arch users
+    * ''pacman-key -v archlinux-<version>-x86_64.iso.sig''
+  * other GnuPGP systems
+    * ''gpg %%--%%keyserver pgp.mit.edu %%--%%keyserver-options auto-key-retrieve %%--%%verify archlinux-<version>-x86_64.iso.sig''
+  * and check the sha256sum with the following command
+    * ''sha256sum archlinux-<version>-x86_64.iso''
+<alert type="info" icon="fa fa-info-circle">Another method to verify the authenticity of the signature is to ensure that the public key's fingerprint is identical to the key fingerprint of the [[https://www.archlinux.org/people/developers/|Arch Linux developer]] who signed the ISO-file. See [[https://en.wikipedia.org/wiki/Public-key_cryptography|Wikipedia:Public-key_cryptography]] for more information on the public-key process to authenticate keys.</alert>
 ===== Inital setup =====
@@ Line 143: / Line 156: @@
 pacstrap /mnt base base-devel linux-hardened linux-hardened-docs linux-hardened-headers linux-firmware nano networkmanager lvm2 opendoas openssh
 </code>
+<alert type="info" icon="fa fa-info-circle">If you encounter some issues, e.g. if you are using an older ISO, first run ''%%pacman -Sy archlinux-keyring && pacman-key --init && pacman-key --populate archlinux%%''.</alert>
 ===== Configure the system =====
@@ Line 219: / Line 234: @@
 <code>
-HOOKS=(base udev autodetect keyboard keymap modconf block encrypt lvm2 filesystems fsck)
+HOOKS=(base udev autodetect microcode modconf kms keyboard keymap consolefont block filesystems fsck encrypt lvm2)
 </code>
@@ Line 243: / Line 258: @@
 linux /vmlinuz-linux-hardened
 initrd  /initramfs-linux-hardened-fallback.img
-options cryptdevice=UUID=$(blkid -s UUID -o value /dev/sda2)=root root=/dev/vg0/root rw" >> /boot/loader/entries/arch-fallback.conf
+options cryptdevice=UUID=$(blkid -s UUID -o value /dev/sda2):root root=/dev/vg0/root rw" >> /boot/loader/entries/arch-fallback.conf
 </code>