• Vollverschlüsselte Festplatte
• (U)EFI Boot direkt in den Kernel
• Hibernate

cryptsetup luksFormat -c aes-xts-plain64 –hash sha256 -s 256 /dev/nvme0n1p3

cryptsetup luksOpen /dev/nvme0n1p3 lvm

pvcreate /dev/mapper/lvm

vgcreate vg0 /dev/mapper/lvm

lvcreate -L50G -n root vg0

lvcreate -L18G -n swap vg0

lvcreate -l 100%FREE -n home vg0

mkfs.ext4 /dev/mapper/vg0-root

mkswap /dev/mapper/vg0-swap swapon /dev/mapper/vg0-swap

mkfs.ext4 /dev/mapper/vg0-home

mkdir /mnt/gentoo

mount /dev/mapper/vg0-root /mnt/gentoo

mkdir /mnt/gentoo/home

mount /dev/mapper/vg0-home /mnt/gentoo/home

mkdir /mnt/gentoo/boot

mount /dev/nvme0n1p2 /mnt/gentoo/boot

mkdir /mnt/gentoo/boot/efi

mount /mnt/nvme0n1p1 /mnt/gentoo/boot/efi

cd /etc/gentoo

• Wir wollen direkt vom Kernel booten
  • https://wiki.gentoo.org/wiki/EFI_System_Partition
  • https://wiki.gentoo.org/wiki/EFI_stub_kernel