• Vollverschlüsselte Festplatte
• (U)EFI Boot direkt in den Kernel
• Hibernate

• https://wiki.gentoo.org/wiki/Full_Disk_Encryption_From_Scratch_Simplified

cryptsetup luksFormat -c aes-xts-plain64 –hash sha256 -s 256 /dev/nvme0n1p3

cryptsetup luksOpen /dev/nvme0n1p3 lvm

pvcreate /dev/mapper/lvm

vgcreate vg0 /dev/mapper/lvm

lvcreate -L50G -n root vg0

lvcreate -L18G -n swap vg0

lvcreate -l 100%FREE -n home vg0

mkfs.ext4 /dev/mapper/vg0-root

mkswap /dev/mapper/vg0-swap swapon /dev/mapper/vg0-swap

mkfs.ext4 /dev/mapper/vg0-home

mkdir /mnt/gentoo

mount /dev/mapper/vg0-root /mnt/gentoo

mkdir /mnt/gentoo/home

mount /dev/mapper/vg0-home /mnt/gentoo/home

mkdir /mnt/gentoo/boot

mount /dev/nvme0n1p2 /mnt/gentoo/boot

mkdir /mnt/gentoo/boot/efi

mount /mnt/nvme0n1p1 /mnt/gentoo/boot/efi

cd /etc/gentoo

wget https://linux.rz.ruhr-uni-bochum.de/download/gentoo-mirror/releases/amd64/autobuilds/current-stage3-amd64/stage3-amd64-20200722T214503Z.tar.xz

https://linux.rz.ruhr-uni-bochum.de/download/gentoo-mirror/

tar xvf stage3-amd64-20200722T214503Z.tar.xz –xattrs –numeric-owner

mkdir etc/portage/repos.conf

cp usr/share/portage/config/repos.conf etc/portage/repos.conf/gentoo.conf

cp /etc/resolv.conf etc/resolv.conf

mount -t proc /proc proc mount –rbind /sys sys mount –make-rslave sys mount –rbin /dev dev mount –make-rslave dev

chroot /mnt/gentoo /bin/bash

source /etc/profile

export PS1=„(chroot) $PS1“

/etc/portage/make.conf

# These settings were set by the catalyst build script that automatically
# built this stage.
# Please consult /usr/share/portage/config/make.conf.example for a more
# detailed example.
COMMON_FLAGS="-march=native -O2 -pipe"
CFLAGS="${COMMON_FLAGS}"
CXXFLAGS="${COMMON_FLAGS}"
FCFLAGS="${COMMON_FLAGS}"
FFLAGS="${COMMON_FLAGS}"

# NOTE: This stage was built with the bindist Use flag enabled
PORTDIR="/var/db/repos/gentoo"
DISTDIR="/var/cache/distfiles"
PKGDIR="/var/cache/binpkgs"

# This sets the language of build output to English.
# Please keep this setting intact when reporting bugs.
LC_MESSAGES=C

MAKEOPTS="-j5"

GENTOO_MIRRORS="ftp://ftp.wh2.tu-dresden.de/pub/mirrors/gentoo https://linux.rz.ruhr-uni-bochum.de/do
wnload/gentoo-mirror/ http://linux.rz.ruhr-uni-bochum.de/download/gentoo-mirror/ https://ftp.halifax.
rwth-aachen.de/gentoo/ http://ftp.halifax.rwth-aachen.de/gentoo/ ftp://ftp.halifax.rwth-aachen.de/gen
too/ rsync://ftp.halifax.rwth-aachen.de/gentoo/ https://ftp.fau.de/gentoo http://ftp.fau.de/gentoo ft
p://ftp.fau.de/gentoo rsync://ftp.fau.de/gentoo https://ftp-stud.hs-esslingen.de/pub/Mirrors/gentoo/ 
http://ftp-stud.hs-esslingen.de/pub/Mirrors/gentoo/ ftp://ftp-stud.hs-esslingen.de/pub/Mirrors/gentoo
/ rsync://ftp-stud.hs-esslingen.de/gentoo/"

USE=""

EMERGE_DEFAULT_OPTS="--ask --tree --quiet --verbose"

VIDEO_CARDS="intel"
INPUT_DEVICES="libinput"

emerge-webrsync

eselect profile set „default/linux/amd64/17.1/desktop/gnome“

• Wir wollen direkt vom Kernel booten
  • https://wiki.gentoo.org/wiki/EFI_System_Partition
  • https://wiki.gentoo.org/wiki/EFI_stub_kernel