====== Wireless Network Setup ======

<code>
iwctl device list
iwctl station wlan0 scan
iwctl station wlan0 get-networks
iwctl --passphrase <passphrase> station wlan0 connect <SSID>
</code>

====== Base ======

<code>
gdisk
cryptsetup luksFormat /dev/<root>
mkfs.ext4 /dev/<boot>
cryptsetup open /dev/<root> <crypt-root>
mkfs.ext4 /dev/mapper/<crypt-root>
mount /dev/mapper/<crypt-root> /mnt
mkdir /mnt/boot
mount /dev/<boot> /mnt/boot
mkdir /mnt/efi
mount /dev/<efi> /mnt/efi
pacstrap -K /mnt base linux linux-firmware vim
genfstab -U /mnt >> /mnt/etc/fstab
arch-chroot /mnt
ln -sf /usr/share/zoneinfo/America/Detroit /etc/localtime
vim /etc/locale.gen # uncomment en_US entries
locale-gen
vim /etc/hostname
vim /etc/mkinitcpio.conf # add encrypt hook between block and filesystems
</code>

Reference https://wiki.archlinux.org/title/Dm-crypt/Encrypting_an_entire_system#Configuring_mkinitcpio

<code>
mkinitcpio -P
passwd
</code>



====== GRUB ======

<code>
pacman -S grub efibootmgr
grub-install --efi-directory=/efi --bootloader-id=GRUB
vim /etc/default/grub
# Add cryptdevice=UUID=<UUID>:<crypt_root>
</code>

Reference https://wiki.archlinux.org/title/Dm-crypt/Encrypting_an_entire_system#Configuring_the_boot_loader

To boot Windows, add to ''/etc/grub.d/40_custom'':

<code>
menuentry 'Windows' {
  insmod part_gpt
  insmod chain
  search --no-floppy --fs-uuid --set=root ABCD-EFGH
  chainloader /EFI/Microsoft/Boot/bootmgfw.efi
}
</code>

To chain to another Linux partition:

<code>
menuentry 'Arch Secure' {
  insmod part_gpt
  search --no-floppy --fs-uuid --set=root <UUID>
  configfile ($root)/grub/grub.cfg
}
</code>

<code>
grub-mkconfig -o /boot/grub/grub.cfg
</code>

====== Desktop Environment ======

<code>
pacman -S xorg-server xorg-apps sddm sddm-kcm plasma-desktop plasma-x11-session dolphin okular \
  xfce4-terminal firefox vlc kscreen
systemctl enable sddm.service
</code>

====== Audio ======

<code>
pacman -S alsa-utils pulseaudio pulseaudio-alsa kmix
</code>

====== Network ======

===== Dynamic - Option 1 =====

<code>
pacman -S dhcpcd
systemctl enable dhcpcd.service
</code>

===== Dynamic - Option 2 (good for wireless) =====

<code>
pacman -S iwd networkmanager plasma-nm
systemctl enable NetworkManager.service
</code>

===== Static =====

Create ''/etc/systemd/network/20-wired.network '':

<code>
[Match]
Name=enp8s0

[Network]
Address=192.168.16.68/24
Gateway=192.168.16.1
DNS=192.168.16.10
</code>

====== User ======

<code>
pacman -S sudo
useradd -m josh
passwd josh
visudo # enable wheel line
vim /etc/group # wheel, games
</code>

====== SSH ======

<code>
pacman -S openssh x11-ssh-askpass
</code>

====== Printing ======

<code>
pacman -S cups print-manager system-config-printer
systemctl enable cups.service
</code>

====== Misc ======

<code>
pacman -S which man man-pages rsync kwalletmanager base-devel less
</code>

===== Setting GTK application theme =====

<code>
pacman -S kde-gtk-config adw-gtk-theme
</code>

====== NFS ======

<code>
pacman -S nfs-utils
</code>

In ''/etc/fstab'':

<code>
server:/path /path nfs _netdev,noauto,x-systemd.automount,x-systemd.mount-timeout=10,rsize=8192,wsize=8192,timeo=14,intr 0 0
</code>

====== Reboot ======

<code>
exit
umount -R /mnt
reboot
</code>

====== After reboot, as user ======

===== ssh-agent setup =====

<code>
systemctl --user enable ssh-agent.service
</code>

Put in profile:

<code>
export SSH_AUTH_SOCK="$XDG_RUNTIME_DIR/ssh-agent.socket"
</code>

Reference https://wiki.archlinux.org/title/SSH_keys#Start_ssh-agent_with_systemd_user