Skip to content

Instantly share code, notes, and snippets.

@speedybunny
speedybunny / arch_luks2.md
Created November 30, 2022 15:32
Arch Linux with encrypted `/boot` and detached LUKS2 header

Arch Linux with encrypted /boot and detached LUKS2 header

WARNING: backup your files before beginning!

Setup

USB stick /dev/sdb:

  • /dev/sdb1: non-encrypted EFI System Partition (ESP)
  • /dev/sdb2: LUKS2 encrypted partition that contains the /boot partition