Karol Wąsowski Kwasow

## secure_eduroam.md

      
              1 file
            
          
              0 forks
            
          
                1 comment
              
            
              2 stars
            
          
                varqox
                / secure_eduroam.md
            
            
              Created
              October 6, 2021 21:30
            
              
                How to setup a *secure* eduroam connection for University of Warsaw students on Linux
              
          
    Introduction

This tutorial covers using NetworkManager with either wpa_supplicant or IWD backend. If you did not heard of IWD, it is propbable your NetworkManager uses wpa_supplicant.
wpa_supplicant


Edit connection and set:


Authentication to Protected EAP (PEAP)
Anonymous identity to anonymous@uw.edu.pl
Domain to eduroam.uw.edu.pl
CA certificate to file located at /etc/ssl/certs/Comodo_AAA_Services_root.pem
Uncheck No CA certifcate is required


## full-disk-encryption-arch-uefi.md

      
              1 file
            
          
              83 forks
            
          
                50 comments
              
            
              406 stars
            
          
                huntrar
                / full-disk-encryption-arch-uefi.md
            
            
              Last active
              October 5, 2025 02:48
            
              
                Arch Linux Full-Disk Encryption Installation Guide [Encrypted Boot, UEFI, NVMe, Evil Maid]
              
          
    Arch Linux Full-Disk Encryption Installation Guide

This guide provides instructions for an Arch Linux installation featuring full-disk encryption via LVM on LUKS and an encrypted boot partition (GRUB) for UEFI systems.
Following the main installation are further instructions to harden against Evil Maid attacks via UEFI Secure Boot custom key enrollment and self-signed kernel and bootloader.
Preface

You will find most of this information pulled from the Arch Wiki and other resources linked thereof.
Note: The system was installed on an NVMe SSD, substitute /dev/nvme0nX with /dev/sdX or your device as needed.