Hey. Has anyone been able to run this kind of installation recently?
Qubes installation GUI has changed a lot since the original posting of this thread and it seems 51lieal has gone radio silent.
I contacted him personally last year to ask for help for a particular setup involving a detached encrypted boot and header along with a single OS drive and a two-disk RAID to store the vm-pool. Sadly, I’ve been too busy with a lot of stuff to actually go through with the thing.
I recently tried taking a stab at this.
Here’s the first of the scripts.
Script a
#!/bin/bash
# Check lsblk first then change the variables according to the listed devices' directories
RT="/dev/sdb" # M.2 SSD
VM1="/dev/sda" # SATA SSD 1
VM2="/dev/sdc" # SATA SSD 2
FD="/dev/sde" # USB Flash Drive
EF="/dev/sde1"
BT="/dev/sde2"
# Rescan Drive
partprobe $RT
partprobe $FD
partprobe $VM1
partprobe $VM2
# Create boot, EFI, and LUKS partitions for USB Flash Drive (FD)
sgdisk -n 0:0:+600MiB -t 0:ef02 $FD
sgdisk -n 0:0:+2GiB -t 0:ef00 $FD
sgdisk -n 0:0:+16MiB -t 0:8309 $FD
sgdisk -n 0:0:+16MiB -t 0:8309 $FD
sgdisk -n 0:0:+16MiB -t 0:8309 $FD
partprobe $FD
mkfs.vfat $EF
mkfs.xfs -f $BT
# Encrypt root partition
cryptsetup -c serpent-xts-plain64 -h ripemd160 -s 512 -y -i 60000 --use-random --pbkdf argon2id luksFormat $RT #M.2 SSD
cryptsetup -c twofish-xts-plain64 -h whirlpool -s 512 -y -i 60000 --use-random --pbkdf argon2id luksFormat $VM1 # SATA SSD 1
cryptsetup -c twofish-xts-plain64 -h whirlpool -s 512 -y -i 60000 --use-random --pbkdf argon2id luksFormat $VM2 # SATA SSD 2
# Open root device
cryptsetup luksOpen $RT luks-root #M.2 SSD
cryptsetup luksOpen $VM1 luks-vm1 # SATA SSD 1
cryptsetup luksOpen $VM2 luks-vm2 # SATA SSD 2
# Create PV
pvcreate /dev/mapper/luks-root #M.2 SSD
pvcreate /dev/mapper/luks-vm1 # SATA SSD 1
pvcreate /dev/mapper/luks-vm2 # SATA SSD 2
# Create VG
vgcreate qubes_dom0 /dev/mapper/luks-root #M.2 SSD
vgcreate qubes_domU /dev/mapper/luks-vm1 /dev/mapper/luks-vm2 # SATA SSD 1 & 2, prepare to make RAID array
# Create LV
lvcreate -n swap -L 16G qubes_dom0 #Create (encrypted) SWAP partition in root
lvcreate -T -L 64G qubes_dom0/root-pool
lvcreate -V32G -T qubes_dom0/root-pool -n root
# According to 51lieal, if the root exceeds 32GB, it will extend the partition to 64GB (as defined above)
lvcreate -m 1 --type raid1 -L 100G --nosync -n vm qubes_domU # Create RAID1 array
# Format Partition
mkfs.xfs /dev/qubes_domU/vm
mkswap /dev/qubes_dom0/swap
After running script a, I’m supposed to go back to the GUI to finish the installation. The install, as 51lieal and I discussed, would involve the logical volume manager however I was unable to set any mount points for the partitions created in /sdb (my main OS drive) so I tried to contact him. No reply so far.
So I wonder if anybody else here can help me.
Thanks.