Differences

This shows you the differences between two versions of the page.

--- isolated_multi-boot [2018/05/23 18:32] – admin
+++ isolated_multi-boot [2018/05/23 19:29] – admin
@@ Line 311: / Line 311: @@
 </code>
+====Kali====
+  * Add a new 32GiB partition:<code>parted /dev/sdX
+parted /dev/sdX
+unit s
+mkpart Kali 143980395s 211088235s
+align-check optimal 4
+quit
+partprobe /dev/sdX</code>
+  * Setup encryption:<code>
+cryptsetup luksFormat /dev/sdX4
+cryptsetup open /dev/sdX4 cryptroot</code>
+  * Create an ext4 filesystem:<code>mkfs.ext4 /dev/mapper/cryptroot</code>
+  * Mount the filesystem:<code>
+mkdir /mnt/kaliroot
+mount /dev/mapper/cryptroot /mnt/kaliroot
+mkdir -p /mnt/kaliroot/boot/efi</code>
+  * Install debootstrap:<code>dnf install debootstrap</code>
+  * Install Kali:<code>
+# Path is needed when installing from Fedora...
+curl "http://git.kali.org/gitweb/?p=packages/debootstrap.git;a=blob_plain;f=scripts/kali;hb=refs/heads/kali/master" > kali-debootstrap
+PATH="$PATH:/bin:/sbin:/usr/sbin" debootstrap --arch amd64 kali-rolling /mnt/kaliroot http://http.kali.org/kali ./kali-debootstrap
+..
+..
+I: Base system installed successfully.</code>
+  * Enter the chroot:<code>mount -t proc none /mnt/kaliroot/proc
+mount -t sysfs none /mnt/kaliroot/sys
+mount -o bind /dev /mnt/kaliroot/dev
+mount -o bind /dev/pts /mnt/kaliroot/dev/pts  ## important for pacman (for signature check)
+cp -L /etc/resolv.conf /mnt/kaliroot/etc      ## this is needed to use networking within the chroot
+modprobe efivarfs
+mount -t efivarfs efivarfs /mnt/kaliroot/sys/firmware/efi/efivars
+XTERM=xterm-color LANG=C.UTF-8 PATH="$PATH:/bin:/sbin:/usr/sbin" chroot /mnt/kaliroot bash</code>
+  * Edit the fstab:<code>
+lsblk -f /dev/sdX4 # run outside chroot, UUID of the cryptroot.
+vi /etc/fstab
+UUID=cbd33fa1-9d89-4308-a24f-b3128671874a /     ext4    defaults        0 1</code>
+  * Configure Kali:<code>
+apt install locales
+dpkg-reconfigure locales tzdata
+# Install kernel, efibootmgr, grub
+apt install linux-image-amd64 efibootmgr grub-efi-amd64 cryptsetup initramfs-tools
+# don't install the grub bootloader yet...
+vi /etc/crypttab # lookup UUID with blkid /dev/sdX4
+cryptroot UUID=<UUID> none luks
+Modify "CRYPTSETUP=y" in /etc/cryptsetup-initramfs/conf-hook
+update-initramfs -ut
+vi /etc/default/grub
+GRUB_ENABLE_CRYPTODISK=y
+grub-mkconfig -o /boot/grub/grub.cfg
+set hostname in /etc/hostname
+passwd root
+useradd...
+tasksel install desktop
+tasksel install laptop
+exit
+umount -R /mnt/kaliroot
+</code>
+  * Add Kali to grub **Note:** change the UUID's to the blkid found earlier:<code>
+mount /dev/sdX4 /mnt
+vi /mnt/boot/grub2/grub.cfg
+menuentry 'Kali' {
+  insmod gzio
+  insmod part_gpt
+  insmod cryptodisk
+  insmod luks
+  insmod gcry_rijndael
+  insmod gcry_sha256
+  insmod ext2
+  cryptomount -u 333324c1f7744493a20ab5a45bc5e06f
+  set root='cryptouuid/333324c1f7744493a20ab5a45bc5e06f'
+  configfile /boot/grub/grub.cfg
+}
+</code>
 {{tag>[hardware linux uefi esp]}}