{{tag>[arch linux Lenovo x1 carbon 2015]}}
=====Lenovo X1 Carbon 2015 - Arch Linux install=====
**Updated 2015-08-03: newer ISO version, updated kernel, better supported now...**


==== BIOS Settings ====
  * Disable Secure boot
  * Disable Intel Rapid Start
  * Disable Intel(R) AMT
  * Disable Intel NFF Control
  * Disable Computrace Module Activation
  * Optional: enable Fn Sticky Key


==== Prerequisites ====
  * Download ISO, for example: archlinux-2015.08.01-dual.iso
  * Create USB drive:<code>dd if=archlinux-2015.08.01-dual.iso of=/dev/<usbkey> bs=1M</code>


==== Boot from USB ====
  * Connect the ethernet adapter.
  * Boot laptop, press enter to interrupt boot.
  * Press F12, select USB HDD
  * Boot Arch Linux (x86_64)
  * If display is HiDPI, change fontsize: <code>setfont sun12x22</code>
  * If you do not have IP connectivity yet, get DHCP lease:<code>dhclient enp0s25</code>
  * Update packages:<code>pacman -Sy</code>
  * Install gpart: <code>pacman -S gpart</code>
  * Install and run OpenSSHd so that we can login remotely to complete the install. <code>pacman -S openssh
passwd root
systemctl start sshd</code>

==== Create partitions ====
  * Destroy old GPT partitions:<code>wipefs /dev/sda -a
sgdisk --zap /dev/sda</code>
  * If you used the SDD before, please securely erase the drive first. 
  * Check with fdisk to see if the partition table is empty.
  * Create 512MiB EFI partition (gpart).
  * Create a new (rest of the disk) LVM partition (gpart).
  * Format EFI partiton:<code>mkfs.vfat -F32 /dev/sda1</code>
  * Encrypt harddrive:<code>cryptsetup -c aes-xts-plain64 -h sha256 -s 512 luksFormat /dev/sda2</code>
  * Check results:<code>cryptsetup luksDump /dev/sda2</code>
  * Open the device:<code>cryptsetup luksOpen /dev/sda2 lvm</code>
  * Create LVM PV, VG and LVs:<code>pvcreate /dev/mapper/lvm
vgcreate ssd /dev/mapper/lvm
lvcreate -L 8G ssd -n swapvol
lvcreate -l +100%FREE ssd -n rootvol</code>
  * Create filesystems:<code>mkfs.ext4 /dev/mapper/ssd-rootvol
mkswap /dev/mapper/ssd-swapvol</code>
  * Mount filesystems:<code>mount /dev/ssd/rootvol /mnt
mkdir -p /mnt/boot/efi
mount /dev/sda1 /mnt/boot/efi
swapon /dev/ssd/swapvol</code>
==== Install Arch Linux ====
  * Bootstrap base:<code>pacstrap /mnt base</code>
  * Generate fstab:<code>genfstab -L -p /mnt >> /mnt/etc/fstab</code>
  * chroot into installtion:<code>arch-chroot /mnt</code>
  * Set hostname:<code>echo yourhostname > /etc/hostname</code>
  * Configure timezone:<code>ln -sf /usr/share/zoneinfo/Europe/Amsterdam /etc/localtime</code>
  * Generate locale:<code>vi /etc/locale.gen # search for _US, uncomment
locale-gen
echo LANG=en_US.UTF-8 > /etc/locale.conf</code>
  * Create encryption key file to be able to 'login once':<code>dd bs=512 count=4 if=/dev/urandom of=/crypto_keyfile.bin</code>
  * Add keyfile:<code>cryptsetup luksAddKey /dev/sda2 /crypto_keyfile.bin</code>
  * Generate initrd:<code>mkinitcpio -p linux</code>
  * Set root password:<code>passwd</code>
  * Install grub:<code>pacman -S grub freetype2 dosfstools efibootmgr</code>
  * Edit /etc/mkinitcpio.conf and add: <code>
HOOKS=...encrypt lvm2...
FILES=/crypto_keyfile.bin</code>
  * Run mkinitcpio again:<code>mkinitcpio -p linux</code>
  * Changes access rights to crypto key:<code>chmod 000 /crypto_keyfile.bin</code>
  * Edit grub config:<code>vi /etc/default/grub
GRUB_ENABLE_CRYPTODISK=y
GRUB_CMDLINE_LINUX="cryptdevice=/dev/sda2:root"</code>
  * Install grub boot loader:<code>grub-mkconfig -o /boot/grub/grub.cfg
grub-install /dev/sda</code>
  * Install additional needed packages:<code>pacman -S iw dialog net-tools pkgfile wpa_supplicant dhclient openssh</code>
  * Enable SSHd:<code>systemctl enable sshd</code>
  * Configure DHCP client:<code>cp /etc/netctl/examples/ethernet-dhcp /etc/netctl
vi /etc/netctl/ethernet-dhcp # use correct NIC name
netctl enable ethernet-dhcp</code>
  * Reboot:<code>exit
reboot</code>
==== Configure Arch Linux ====
  * Configure larger font for Grub2:<code>pacman -S ttf-dejavu
grub-mkfont -s 32 -o /boot/grub/DejaVuSansMono.pf2 /usr/share/fonts/TTF/DejaVuSansMono.ttf


vi /etc/default/grub
#add a line saying GRUB_FONT=/boot/grub/DejaVuSansMono.pf2,

grub-mkconfig -o /boot/grub/grub.cfg</code>
  * Install terminus console font (needed for HiDPI):<code>pacman -S terminus-font</code>
  * Edit /etc/vconsole.conf<code>FONT=ter-u32n</code>
  * Copy systemd service file:<code>cp /usr/lib/systemd/system/systemd-vconsole-setup.service /etc/systemd/system/systemd-vconsole-setup.service

vi /etc/systemd/system/systemd-vconsole-setup.service

#Add under [Unit]
After=systemd-udev-settle.service
Wants=systemd-udev-settle.service</code>
  * Disable SSHd root login.
  * Install chrony (NTP client):<code>pacman -S chrony
vi /etc/chrony.conf
systemctl enable chrony
systemctl start chrony

#test
chronyc sources</code>
  * Install vim:<code>pacman -S vim</code>
  * Get KMS working by adding i915 to the modules line<code>
/etc/mkinitcpio.conf
MODULES="i915"

mkinitcpio -p linux</code>
====Install X====
  * Install X:<code>pacman -S gnome gnome-extra libva-intel-driver xf86-video-intel xf86-input-evdev xf86-input-synaptics</code>
  * Enable GDM:<code>systemctl enable gdm</code>
  * Install additional tools:<code>pacman -S acpi acpid ethtool wireless_tools</code>
  * Switch to networkmanager:<code>netctl disable ethernet-dhcp
systemctl disable netctl
systemctl enable NetworkManager
systemctl start NetworkManager</code>
  * Install modemmanager (might need reboot):<code>pacman -S modemmanager usb_modeswitch usbutils
systemctl enable ModemManager
systemctl start ModemManager
systemctl restart NetworkManager</code>
  * Install finger print reader driver:<code>pacman -S fprintd libfprint
systemctl enable fprintd
systemctl start fprintd</code>