HardenedArray

## Efficient Encrypted UEFI-Booting Arch Installation


# OBJECTIVE:  Install Arch Linux with encrypted root and swap filesystems and boot from UEFI.

# Note this encrypted installation method, while perfectly correct and highly secure, CANNOT support encrypted /boot and
# also CANNOT be subsequently converted to support an encrypted /boot!!!  A CLEAN INSTALL will be required!

# Therefore, if you want to have an encrypted /boot or will want an encrypted /boot system at some point in the future,
# please ONLY follow my encrypted /boot installation guide, which lives here:

## Efficient UEFI Encrypted Root and Swap Arch Linux Installation Procedure with an ENCRYPTED BOOT


# OBJECTIVE:  Install Arch Linux with encrypted root and swap filesystems with an ENCRYPTED BOOT and boot from UEFI.  We will
also decrypt and mount our entire encrypted system using a single LUKS passphrase entry.

# Note:  This method supports both dedicated Arch installs and those who wish to install Arch on a multi-OS-UEFI booting system.

# External USB HDD/SSD Installers Notes:  Encrypted Arch installs can be booted and run from an external USB HDD or SSD, but
# only when the installation is correctly set up.  There are several necessary changes to my standard procedure you'll want
# to make during the install process.  Read my External USB HDD/SSD Installation section below before proceeding.

## Encrypted Arch with Bcache Support Installation Procedure

    # OBJECTIVE:  Install Arch Linux with encrypted root and swap filesystems with full Bcache SSD/HDD support
    # and boot from UEFI.

    # RATIONALE:  As most users realize, you have to pay for marginal speed improvements in all circuits which compute.
    # This holds true for CPUs, GPUs, DRAM, SRAM, Drives, including memory cards and USB sticks.  If you want speed, you
    # must be willing to pay the price premium that a faster device commands versus a slower alternative.

    # SSDs are incredibly fast, but expensive to produce, and therefore, only offer limited storage space.
    # HDDs, by comparison, are ridiculously slow, but offer immense storage space per dollar expended.

## Encrypted Arch Linux VirtualBox Guest Installation Procedure

# OBJECTIVES:  Install Arch Linux as a VirtualBox Guest with a complete Plasma5/KDE environment.
# Provide encrypted root and swap filesystems and UEFI boot our Arch Guest from within VirtualBox.

# Note:  This install method is specific to VirtualBox (VBox) to allow non-Arch users and Arch testers to evaluate a properly
# configured and secure Arch OS while running a fully enabled Plasma/KDE system, and also by concurrently taking advantage
# of the multiple isolation safeguards inherently provided by the VBox environment.

# For those who want to install Arch on bare metal in a way that supports both dedicated Arch installations and Arch
# installation on a SSD/HDD multi-OS-UEFI-booting system, please refer to my Arch System Installation Guide, here:


	# OBJECTIVE: Install Arch Linux with encrypted root and swap filesystems and boot from UEFI.

	# Note this encrypted installation method, while perfectly correct and highly secure, CANNOT support encrypted /boot and
	# also CANNOT be subsequently converted to support an encrypted /boot!!! A CLEAN INSTALL will be required!

	# Therefore, if you want to have an encrypted /boot or will want an encrypted /boot system at some point in the future,
	# please ONLY follow my encrypted /boot installation guide, which lives here:


	# OBJECTIVE: Install Arch Linux with encrypted root and swap filesystems with an ENCRYPTED BOOT and boot from UEFI. We will
	also decrypt and mount our entire encrypted system using a single LUKS passphrase entry.

	# Note: This method supports both dedicated Arch installs and those who wish to install Arch on a multi-OS-UEFI booting system.

	# External USB HDD/SSD Installers Notes: Encrypted Arch installs can be booted and run from an external USB HDD or SSD, but
	# only when the installation is correctly set up. There are several necessary changes to my standard procedure you'll want
	# to make during the install process. Read my External USB HDD/SSD Installation section below before proceeding.

	# OBJECTIVE: Install Arch Linux with encrypted root and swap filesystems with full Bcache SSD/HDD support
	# and boot from UEFI.

	# RATIONALE: As most users realize, you have to pay for marginal speed improvements in all circuits which compute.
	# This holds true for CPUs, GPUs, DRAM, SRAM, Drives, including memory cards and USB sticks. If you want speed, you
	# must be willing to pay the price premium that a faster device commands versus a slower alternative.

	# SSDs are incredibly fast, but expensive to produce, and therefore, only offer limited storage space.
	# HDDs, by comparison, are ridiculously slow, but offer immense storage space per dollar expended.

	# OBJECTIVES: Install Arch Linux as a VirtualBox Guest with a complete Plasma5/KDE environment.
	# Provide encrypted root and swap filesystems and UEFI boot our Arch Guest from within VirtualBox.

	# Note: This install method is specific to VirtualBox (VBox) to allow non-Arch users and Arch testers to evaluate a properly
	# configured and secure Arch OS while running a fully enabled Plasma/KDE system, and also by concurrently taking advantage
	# of the multiple isolation safeguards inherently provided by the VBox environment.

	# For those who want to install Arch on bare metal in a way that supports both dedicated Arch installations and Arch
	# installation on a SSD/HDD multi-OS-UEFI-booting system, please refer to my Arch System Installation Guide, here: