Install EndeavourOS with full encryption + BTRFS

General system EndeavourOS installation
1

I’ve only used Arch so far, but I’m currently already trying out CachyOS and want to test also EndeavourOS at the weekend. Im unsure what EndeavourOS uses as default encryption and for some reasons, i want to full encrypt my system.

During installation and if I choose “Replace Partition,” BTRFS as Filesystem and check “Encryption” in Calamares, will this create a Luks2 encrypted partition? Will in this case also the boot partition encrypted with Luks2? And is Luks2 using Argon2id?

Or do i have to encrypt manually, when i want to use the above setup?

I want to use systemd-boot, no grub, if this matters.

One additional nice-to-have question: Does EndeavourOS install plymouth boot animations by default or do i have to do that later manually, like in Arch?

2

We do not.

Yes

1 Like
3

Nice. Many thx.

1 Like
4

The systemd-boot implementation is having kernels on the ESP efi boot partition that’s fat32 and unencrypted there it only have system root encrypted including users path indeed but not kernel images.
Grub is so called full encrypted only .. there kernel images are stored under the encrypted root path

5

With systemd-boot, you will get luks2 encryption.

We don’t use a separate /boot partition. The EFI system partition will not be encrypted because it cannot be encrypted. It needs to be read by the BIOS/firmware.

Yes, with systemd-boot you will get luks2 with argonid.

It does matter, with grub, you will get luks1.

It needs to be done manually.

4 Likes