Arch Linux

astingengo

Member

Registered: 2013-10-28

Posts: 9

ArchIso baseline with encryption step by step

Can someone help me please with a step by step for an baseline archiso [or releng if baseline not possible] image encrypted?

The message from documentation doesn't help at all [I don't know exactly what custom repo to create, the package archiso-encryption doesn't seems to exists ... and so on]
And also ... assuming above worked, I still not have enough information about what steps I should do.

If someone can help will be amazing

Regards,

Last edited by astingengo (2022-01-23 03:44:44)

qinohe

Member

From: Netherlands

Registered: 2012-06-20

Posts: 1,498

Re: ArchIso baseline with encryption step by step

The message from documentation doesn't help at all [I don't know exactly what custom repo to create, the package archiso-encryption doesn't seems to exists ... and so on]
And also ... assuming above worked, I still not have enough information about what steps I should do.

The above statement is not true.
The 'archiso-encryption' package points to an online repo containing everything needed to build an luks based ISO.
mkarchiso is patched to be able to create a luks based ISO.
An extra profile 'encryption' - beside {baseline,releng} is available.
If you would like the baseline profile to contain files/configs available in 'encryption' than it's up to you 'the user' to add it to the baseline profile.

I would at least read this page: https://gitlab.archlinux.org/archlinux/ … issues/156
I have never used this 'encryption' patched archiso env. but it builds for sure & contains everything you need, good luck;-)

astingengo

Member

Registered: 2013-10-28

Posts: 9

Re: ArchIso baseline with encryption step by step

Thank you @qinohe

I managed to install archiso-encryption and cryptsetup-archiso [ I just forgot how things works on Arch as I didn't use it for more than 5 year]
I was able to see the encrypted profile as well but that profile is trying to install a package that it seems doesn't exist
The package name is cryptsetup-encryption

Error:

error: target not found: cryptsetup-encryption
==> ERROR: Failed to install packages to new root

Any idea?

qinohe

Member

From: Netherlands

Registered: 2012-06-20

Posts: 1,498

Re: ArchIso baseline with encryption step by step

Error:

error: target not found: cryptsetup-encryption
==> ERROR: Failed to install packages to new root

Any idea?

Yes, you installed that package from AUR.
If you like to add that package to the ISO too you need add a custom repo.
But, if it were me, just disable 'cryptsetup-ecryption' in the packages list.
The moment you are going to build ISO's from the an ISO than you'd need 'cryptsetup-encryption' on ISO.
custom-repo -  https://wiki.archlinux.org/title/Archis … repository

edit: seems you need 'cryptsetup-encryption' on the ISO.
Just follow the above link and create a custom repo.

Last edited by qinohe (2022-01-24 17:19:35)

astingengo

Member

Registered: 2013-10-28

Posts: 9

Re: ArchIso baseline with encryption step by step

But I have no package named cryptsetup-encryption.
I created custom repo but for package cryptsetup-archiso as states here https://wiki.archlinux.org/title/archiso#Encryption

L.E.: The problem is when I want to create the custom ISO. On packages.x86_64 file I have that package. If i'll remove it from the list it will not work neither
L.E.E: should I rename cryptsetup-archiso to cryptsetup-encryption ?

Last edited by astingengo (2022-01-24 17:28:51)

qinohe

Member

From: Netherlands

Registered: 2012-06-20

Posts: 1,498

Re: ArchIso baseline with encryption step by step

But I have no package named cryptsetup-encryption.
I created custom repo but for package cryptsetup-archiso as states here https://wiki.archlinux.org/title/archiso#Encryption

Once you have created the custom-repo with 'repo-add' you add that repo to you ISO's pacman.conf.
Now  you can install 'crypsetup-encryption' as normal.

edit: you need to first create the package OC...

Last edited by qinohe (2022-01-24 17:58:27)

astingengo

Member

Registered: 2013-10-28

Posts: 9

Re: ArchIso baseline with encryption step by step

I'm dummy I just don't get it. I know I need to create e custom repo and add it to pacman.conf [the one from the baseline in my case]
I need to create the package [first] and I know that ... the problem is that ... I can't find `cryptsetup-encryption` on AUR and I just don't know how to create that package

qinohe

Member

From: Netherlands

Registered: 2012-06-20

Posts: 1,498

Re: ArchIso baseline with encryption step by step

cryptsetup-archiso https://aur.archlinux.org/packages/cryptsetup-archiso/
archiso-encryption https://aur.archlinux.org/packages/archiso-encryption/

astingengo

Member

Registered: 2013-10-28

Posts: 9

Re: ArchIso baseline with encryption step by step

I just don't understand why are you pointing me to these two packages.
I created packages for both of them [zst files] and added both to a custom repo.

I can install with pacman both packages but that means cryptsetup-archisio and archisio-encryption. But when I want to install cryptsetup-encryption ... well ... that package doesn't exists

L.E.: I finally manage this [BUT i think there is a problem on mkarchiso]
I edited the PKGBUILD file and renamed the cryptsetup-archiso -> cryptsetup-encryption. Create the package, add it to the cusom repo and worked

Last edited by astingengo (2022-01-25 07:02:59)

astingengo

Member

Registered: 2013-10-28

Posts: 9

Re: ArchIso baseline with encryption step by step

Thank you @qinohe for you help. Much appreciated

qinohe

Member

From: Netherlands

Registered: 2012-06-20

Posts: 1,498

Re: ArchIso baseline with encryption step by step

I just don't understand why are you pointing me to these two packages.
I created packages for both of them [zst files] and added both to a custom repo.

You could have just installed 'archiso-encryption' and create a custum repo for 'cryptsetup-archiso' and use that with your archiso profile.

I can install with pacman both packages but that means cryptsetup-archisio and archisio-encryption. But when I want to install cryptsetup-encryption ... well ... that package doesn't exists

Yes, but if the dev changes names and doesn't change the ones that are problematic... ask @tallero why!

L.E.: I finally manage this [BUT i think there is a problem on mkarchiso]
I edited the PKGBUILD file and renamed the cryptsetup-archiso -> cryptsetup-encryption. Create the package, add it to the cusom repo and worked

You could have used 'cryptsetup-archiso' name and add this to 'packages.x86_64' and remove 'cryptsetup-encryption' from that list;-)
What problem did you encounter with mkarchiso? The mkarchiso you are using now is patched for using it with encryption.
Anyway, did you succesfully build an ISO?

astingengo

Member

Registered: 2013-10-28

Posts: 9

Re: ArchIso baseline with encryption step by step

I tried changing cryptsetup-encryption to cryptsetup-archiso but that didn't work.
I don't remember exactly what was the error printed

qinohe

Member

From: Netherlands

Registered: 2012-06-20

Posts: 1,498

Re: ArchIso baseline with encryption step by step

I tried changing cryptsetup-encryption to cryptsetup-archiso but that didn't work.

Really, I have tried it without problems!

I don't remember exactly what was the error printed

Well, I thought 'maybe he posts the error later'...
Without error no one is able to help you OC

astingengo

Member

Registered: 2013-10-28

Posts: 9

Re: ArchIso baseline with encryption step by step

This is what I get

[mkarchiso] INFO: Validating options...
[mkarchiso] ERROR: Validating 'uefi-x64.systemd-boot.eltorito': The 'cryptsetup-encryption' package is missing from t
he package list!
[mkarchiso] ERROR: 1 errors were encountered while validating the profile. Aborting.

Thanks

Last edited by astingengo (2022-02-01 07:29:21)

qinohe

Member

From: Netherlands

Registered: 2012-06-20

Posts: 1,498

Re: ArchIso baseline with encryption step by step

In post #8 I posted the links of the packages you would need!
When you would have installed them and created your archiso profile all you would need to do in 'packages.x86_64' is remove 'cryptsetup-encryption' and add 'cryptsetup-archiso'
Of course you need to create a custom-repo of 'cryptsetup-archiso' and add that custom repo to pacman.conf in your profile.