| 1 | #+title: sources of aminb.org's pages and posts |
| 2 | |
| 3 | #+hugo_base_dir: .. |
| 4 | #+seq_todo: TODO DRAFT DONE |
| 5 | #+property: header-args :eval never-export |
| 6 | #+options: author:nil |
| 7 | |
| 8 | #+macro: abbr @@html:<abbr>$1</abbr>@@ |
| 9 | #+macro: span @@html:<span class="$1">$2</span>@@ |
| 10 | |
| 11 | * Home |
| 12 | :PROPERTIES: |
| 13 | :EXPORT_HUGO_SECTION: / |
| 14 | :EXPORT_FILE_NAME: _index |
| 15 | :END: |
| 16 | |
| 17 | I'm a [[/uw][graduate student]] in the [[https://watform.uwaterloo.ca][WatForm]] group at University of Waterloo, |
| 18 | supervised by [[https://cs.uwaterloo.ca/~nday/][Dr. Nancy Day]]. I'm interested in using formal methods, |
| 19 | especially type systems, to help make software more reliable. |
| 20 | |
| 21 | * Pages |
| 22 | :PROPERTIES: |
| 23 | :EXPORT_HUGO_SECTION: / |
| 24 | :EXPORT_HUGO_MENU: :menu topnav |
| 25 | :END: |
| 26 | |
| 27 | ** CV |
| 28 | :PROPERTIES: |
| 29 | :EXPORT_FILE_NAME: cv |
| 30 | :END: |
| 31 | |
| 32 | My academic {{{abbr(CV)}}} is available as [[/cv.pdf][cv.pdf]], |
| 33 | and an outdated professional resume is available as [[/resume.pdf][resume.pdf]] as |
| 34 | well. |
| 35 | |
| 36 | I'm interested in functional programming and functional languages, |
| 37 | type systems, and formal methods in general. I love writing Haskell |
| 38 | and I'm looking into Rust and Lean as well. Feel free to [[/contact][drop me a |
| 39 | line]] if you like to geek out about any of the above. |
| 40 | |
| 41 | ** TODO Now |
| 42 | |
| 43 | ** TODO Projects |
| 44 | |
| 45 | ** DONE Contact |
| 46 | CLOSED: [2018-09-03 Mon 20:44] |
| 47 | :PROPERTIES: |
| 48 | :EXPORT_FILE_NAME: contact |
| 49 | :EXPORT_HUGO_CUSTOM_FRONT_MATTER: :customTitle "Say hello!" |
| 50 | :END: |
| 51 | |
| 52 | #+macro: xmpp @@html:<a href="xmpp:$1">$1</a>@@ |
| 53 | |
| 54 | You can contact me via email or through my accounts on various online |
| 55 | platforms. |
| 56 | |
| 57 | *** Contact info |
| 58 | |
| 59 | - [[mailto:amin@aminb.org][amin@aminb.org]] |
| 60 | - [[mailto:amin@gnu.org][amin@gnu.org]], I'm a volunteer [[https://www.gnu.org/people/webmeisters.html#aminb][GNU webmaster]] |
| 61 | - [[mailto:abandali@uwaterloo.ca][abandali@uwaterloo.ca]], I'm a [[file:uw.org][grad student]] @ UW |
| 62 | - gpg key: [[https://pgp.surfnet.nl/pks/lookup?op=vindex&fingerprint=on&search=0xD1FBA36627D65876][CDDE 75F9 0353 8E71 813C DA27 D1FB A366 27D6 5876]] |
| 63 | - aminb on [[https://freenode.net][freenode]] and [[https://wiki.mozilla.org/IRC][moznet]] IRC |
| 64 | - [[https://matrix.to/#/@aminb:matrix.org][@aminb:matrix.org]] on Matrix |
| 65 | - {{{xmpp(aminb@member.fsf.org)}}} via XMPP |
| 66 | - [[https://pleroma.site/users/aminb][aminb@pleroma.site]] on the [[https://en.wikipedia.org/wiki/Fediverse][fediverse]] |
| 67 | |
| 68 | *** Other online places |
| 69 | |
| 70 | - [[https://git.sr.ht/%257Eaminb][~aminb]] on [[https://sr.ht][sr.ht]] |
| 71 | - [[https://lobste.rs/u/aminb][aminb]] on Lobsters |
| 72 | - [[https://gitlab.com/aminb][aminb]] on GitLab |
| 73 | - [[https://keybase.io/amin][amin]] on Keybase |
| 74 | - [[https://news.ycombinator.com/user?id=aban][aban]] on HN |
| 75 | - [[https://www.reddit.com/u/aminb][aminb]] on Reddit |
| 76 | - +[[https://github.com/aminb][aminb]] on GitHub+ |
| 77 | - +[[https://twitter.com/aminban][aminban]] on Twitter+ |
| 78 | |
| 79 | * Posts |
| 80 | :PROPERTIES: |
| 81 | :EXPORT_HUGO_SECTION: post |
| 82 | :EXPORT_HUGO_MENU: :menu main |
| 83 | :EXPORT_HUGO_AUTO_SET_LASTMOD: t |
| 84 | :END: |
| 85 | |
| 86 | ** Arch GNU/Linux on MacBook Air 2013 :arch:macbook: |
| 87 | :PROPERTIES: |
| 88 | :EXPORT_FILE_NAME: arch-macbook-air |
| 89 | :EXPORT_DATE: 2016-11-01 |
| 90 | :EXPORT_OPTIONS: ^:{} |
| 91 | :EXPORT_HUGO_MENU: :menu main |
| 92 | :EXPORT_HUGO_ALIASES: /2016/11/arch-macbook-air |
| 93 | :EXPORT_HUGO_CUSTOM_FRONT_MATTER: :toc true |
| 94 | :END: |
| 95 | |
| 96 | This post summarizes how I install and dual-boot Arch GNU/Linux with |
| 97 | Full-Disk Encryption alongside macOS. It is not meant to be a |
| 98 | replacement for the [[https://wiki.archlinux.org/index.php/installation_guide][Installation Guide]] or the former [[https://csdietz.github.io/arch-beginner-guide/][Beginner's Guide]]. |
| 99 | Rather, it mostly serves as a small summary with a few useful notes |
| 100 | about the gotchas. |
| 101 | |
| 102 | So, make sure you understand what you type into your terminal. If you |
| 103 | don't, checking out the Arch wiki should probably be your first step. |
| 104 | |
| 105 | /Note:/ you will need internet access throughout the installation and |
| 106 | the MacBook Air's WiFi doesn't work out of the box on Arch. I |
| 107 | recommend using your phone's USB Tethering (if it does support it), or |
| 108 | using an Ethernet-USB adapter. |
| 109 | |
| 110 | *** Shrinking the macOS partition |
| 111 | |
| 112 | The first step I take is resizing the HFS+ macOS partition to make |
| 113 | room for the new {{{abbr(GNU/Linux)}}} installation. There are plenty |
| 114 | of tutorials on how to do this using macOS's Disk Utility, so do that |
| 115 | and then come back! |
| 116 | |
| 117 | *** Creating a bootable Arch Installer USB |
| 118 | |
| 119 | There are different ways of creating a bootable Arch USB, all |
| 120 | documented on the [[https://wiki.archlinux.org/index.php/USB_flash_installation_media][USB flash installation media]] page on the Arch wiki, |
| 121 | but the simplest one is using =dd= if you already have access to |
| 122 | another UNIX system. |
| 123 | |
| 124 | {{{span(red,Warning:)}}} make sure you backup the data on your flash |
| 125 | drive, as =dd= will irrevocably destroy all data on it. |
| 126 | |
| 127 | Use =lsblk= to find the name (block device) of your USB drive, then |
| 128 | run =dd= (as root) as shown below: |
| 129 | |
| 130 | #+begin_src bash |
| 131 | dd bs=4M if=/path/to/archlinux.iso of=/dev/sdx status=progress && sync |
| 132 | #+end_src |
| 133 | |
| 134 | Replace =/path/to/archlinux.iso= with the path to the Arch image you |
| 135 | have downloaded, and =/dev/sdx= with your drive. |
| 136 | |
| 137 | *** Booting up from the USB |
| 138 | |
| 139 | After creating the install USB, reboot your laptop and hold the alt |
| 140 | key and boot into the USB. |
| 141 | |
| 142 | When booting is complete and you're presented with the prompt, it's a |
| 143 | good time to make sure you're connected to the internet (see the |
| 144 | /note/ at the top of this post). |
| 145 | |
| 146 | Use =ping= to verify that you've established a connection: |
| 147 | |
| 148 | #+begin_src bash |
| 149 | ping archlinux.org |
| 150 | #+end_src |
| 151 | |
| 152 | *** Updating the system clock |
| 153 | |
| 154 | Once you're connected to the internet, make sure the system clock is |
| 155 | accurate: |
| 156 | |
| 157 | #+begin_src bash |
| 158 | timedatectl set-ntp true # start and enable systemd-timesyncd |
| 159 | #+end_src |
| 160 | |
| 161 | You can check the service status using =timedatectl status=. |
| 162 | |
| 163 | *** Partitioning |
| 164 | :PROPERTIES: |
| 165 | :CUSTOM_ID: partitioning |
| 166 | :END: |
| 167 | |
| 168 | I won't dive into partitioning and instead, I'll refer you to the |
| 169 | [[https://wiki.archlinux.org/index.php/Partitioning][Partitioning]] page of Arch wiki. Of the available partitioning tools, I |
| 170 | personally prefer =cfdisk=. |
| 171 | |
| 172 | *** Setting up LVM & LUKS |
| 173 | |
| 174 | I use a [[https://wiki.archlinux.org/index.php/Dm-crypt/Encrypting_an_entire_system#LVM_on_LUKS][LVM on LUKS]] setup, where I set up LVM on top of the encrypted |
| 175 | partition. |
| 176 | |
| 177 | First, let's set up the underlying encrypted partition: |
| 178 | |
| 179 | #+begin_src bash |
| 180 | cryptsetup -v --cipher aes-xts-plain64 --key-size 512 --hash sha512 \ |
| 181 | --iter-time 5000 --use-urandom -y luksFormat /dev/sdaX |
| 182 | #+end_src |
| 183 | |
| 184 | where =/dev/sdaX= is the partition you created in the last step |
| 185 | (e.g. =/dev/sda4=). For more information about the =cryptsetup= |
| 186 | options, see the [[https://wiki.archlinux.org/index.php/Dm-crypt/Device_encryption#Encryption_options_for_LUKS_mode][LUKS encryption options]]. |
| 187 | |
| 188 | Then we open the container: |
| 189 | |
| 190 | #+begin_src bash |
| 191 | cryptsetup open --type luks /dev/sdaX lvm |
| 192 | #+end_src |
| 193 | |
| 194 | Now it's time to use lvm and prepare the logical volume(s): |
| 195 | |
| 196 | #+begin_src bash |
| 197 | pvcreate /dev/mapper/lvm |
| 198 | vgcreate vg /dev/mapper/lvm |
| 199 | lvcreate --extents +100%FREE -n root vg |
| 200 | #+end_src |
| 201 | |
| 202 | This will create a physical volume on the mapping we just opened, |
| 203 | create a volume group named =vg= on the physical volume, and create a |
| 204 | logical volume named =root= that spans the entire volume group. More |
| 205 | complex setups are possible thanks to the great flexibility of lvm. |
| 206 | |
| 207 | We now format the logical volume with =ext4=: |
| 208 | |
| 209 | #+begin_src bash |
| 210 | mkfs.ext4 /dev/mapper/vg-root |
| 211 | #+end_src |
| 212 | |
| 213 | *** Installing the base system |
| 214 | |
| 215 | Let's mount the logical volume, make a directory for the mount point |
| 216 | of the boot partition, and mount the boot partition (=/dev/sda1=): |
| 217 | |
| 218 | #+begin_src bash |
| 219 | mount /dev/mapper/vg-root /mnt |
| 220 | mkdir /mnt/boot |
| 221 | mount /dev/sda1 /mnt/boot |
| 222 | #+end_src |
| 223 | |
| 224 | Finally, let's install the base system (and optionally =base-devel=): |
| 225 | |
| 226 | #+begin_src bash |
| 227 | pacstrap /mnt base base-devel |
| 228 | #+end_src |
| 229 | |
| 230 | *** Configuring the system |
| 231 | |
| 232 | Let's generate the fstab: |
| 233 | |
| 234 | #+begin_src bash |
| 235 | genfstab -U /mnt >> /mnt/etc/fstab |
| 236 | #+end_src |
| 237 | |
| 238 | Use your favorite terminal-based editor, edit the fstab file and add |
| 239 | the =discard= option for the root partition to enable TRIM on the SSD. |
| 240 | |
| 241 | Now we change root into our newly installed system and will configure |
| 242 | it. Adjust these according to your own setup. |
| 243 | |
| 244 | #+begin_src bash |
| 245 | arch-chroot /mnt /bin/bash |
| 246 | passwd # set the root password |
| 247 | echo myhostname > /etc/hostname # set the hostname |
| 248 | ln -s /usr/share/zoneinfo/Canada/Eastern /etc/localtime # time zone |
| 249 | hwclock --systohc --utc # write system clock to hardware clock (UTC) |
| 250 | useradd -m -G wheel -s /bin/bash myuser # create myuser |
| 251 | passwd myuser # set the password for myuser |
| 252 | echo "myuser ALL=(ALL) NOPASSWD: ALL" >> /etc/sudoers.d/myuser |
| 253 | # uncomment en_US.UTF-8 UTF-8 and other needed locales in /etc/locale.gen |
| 254 | locale-gen |
| 255 | echo LANG=en_US.UTF-8 > /etc/locale.conf |
| 256 | export LANG=en_US.UTF-8 |
| 257 | #+end_src |
| 258 | |
| 259 | Then adjust the initramfs hooks in =/etc/mkinitcpio.conf= and enable |
| 260 | the =encrypt= and =lvm2= hooks, and make sure =keyboard= is available |
| 261 | before =encrypt= so you can actually type in the LUKS password when |
| 262 | booting. Your =HOOKS= line should look similar to this: |
| 263 | |
| 264 | #+begin_src |
| 265 | HOOKS="base udev autodetect modconf block keyboard encrypt lvm2 filesystems fsck" |
| 266 | #+end_src |
| 267 | |
| 268 | After adjusting the hooks, build the initramfs: |
| 269 | |
| 270 | #+begin_src bash |
| 271 | mkinitcpio -p linux |
| 272 | #+end_src |
| 273 | |
| 274 | Now, install the =intel-ucode= package. We'll configure the bootloader |
| 275 | to enable intel microcode updates. |
| 276 | |
| 277 | #+begin_src bash |
| 278 | pacman -S intel-ucode |
| 279 | #+end_src |
| 280 | |
| 281 | Create the =/boot/loader/loader.conf= with the following content |
| 282 | (adjust the timeout to your liking): |
| 283 | |
| 284 | #+begin_src |
| 285 | default arch |
| 286 | timeout 3 |
| 287 | #+end_src |
| 288 | |
| 289 | Then create the entry for Arch: |
| 290 | |
| 291 | #+begin_src bash |
| 292 | mkdir -p /boot/loader/entries |
| 293 | touch /boot/loader/entries/arch.conf |
| 294 | #+end_src |
| 295 | |
| 296 | Now edit =/boot/loader/entries/arch.conf= to specify the Arch entry: |
| 297 | |
| 298 | #+begin_src |
| 299 | title Arch GNU/Linux |
| 300 | linux /vmlinuz-linux |
| 301 | initrd /intel-ucode.img |
| 302 | initrd /initramfs-linux.img |
| 303 | options cryptdevice=/dev/sdaX:vg:allow-discards root=/dev/mapper/vg-root rw |
| 304 | #+end_src |
| 305 | |
| 306 | Again, =/dev/sdaX= is the partition you created in the [[#partitioning][partitioning]] |
| 307 | step as the underlying encrypted partition. |
| 308 | |
| 309 | Finally, install the bootloader, exit the chroot, umount and reboot! |
| 310 | |
| 311 | #+begin_src bash |
| 312 | bootctl install |
| 313 | exit |
| 314 | umount -R /mnt |
| 315 | reboot |
| 316 | #+end_src |
| 317 | |
| 318 | *** Post-installation recommendations |
| 319 | |
| 320 | Congratulations! You now have a minimal Arch installation. |
| 321 | |
| 322 | At this point, I usually install my favorite AUR helper, [[https://aur.archlinux.org/packages/pacaur/][pacaur]], then |
| 323 | I install the [[https://aur.archlinux.org/packages/broadcom-wl-dkms/][broadcom-wl-dkms]] wireless driver and [[https://aur.archlinux.org/packages/mba6x_bl-dkms/][mba6x_bl-dkms]] |
| 324 | backlight driver to fix the post suspend/resume issue where three's no |
| 325 | brightness after waking up from suspend, and the only available |
| 326 | brightness would be 100%. |
| 327 | |
| 328 | #+begin_src bash |
| 329 | pacaur -S linux-headers dkms # linux-headers is required for dkms |
| 330 | pacaur -S broadcom-wl-dkms |
| 331 | pacaur -S mba6x_bl-dkms |
| 332 | #+end_src |
| 333 | |
| 334 | Then, I'd like to install |
| 335 | |
| 336 | - input, graphics, and sound drivers, |
| 337 | - a desktop environment (I prefer Xfce or LXQt), |
| 338 | - a display manager for login screen (lightdm or sddm), and |
| 339 | - a network manager (NetworkManager or ConnMan). |
| 340 | |
| 341 | Check out the [[https://wiki.archlinux.org/index.php/General_recommendations][General recommendations]] for more details. |
| 342 | |
| 343 | *** References |
| 344 | |
| 345 | Here are some resources I've come across each with lots of useful bits |
| 346 | and pieces, about installing Arch on a MacBook: |
| 347 | |
| 348 | - [[https://github.com/pandeiro/arch-on-air][pandeiro/arch-on-air]] |
| 349 | - [[https://loicpefferkorn.net/2015/01/arch-linux-on-macbook-pro-retina-2014-with-dm-crypt-lvm-and-suspend-to-disk/][Arch Linux on MacBook Pro Retina 2014 with DM-Crypt, LVM and suspend to disk]] |
| 350 | - [[http://frankshin.com/installing-archlinux-on-macbook-air-2013/][Installing Archlinux on Macbook Air 2013]] |
| 351 | - [[http://panks.me/posts/2013/06/arch-linux-installation-with-os-x-on-macbook-air-dual-boot/][Arch Linux Installation with OS X on Macbook Air (Dual Boot)]] |
| 352 | - [[https://visual-assault.org/2016/03/05/install-encrypted-arch-linux-on-apple-macbook-pro/][Installing (encrypted) Arch Linux on an Apple MacBook Pro]] |
| 353 | - [[http://alexeyzabelin.com/arch-on-mac][Installing Arch Linux on a MacBook Air 2013]] |
| 354 | - [[https://medium.com/phils-thought-bubble-of-recent-stuff/arch-linux-running-on-my-macbook-2ea525ebefe3][Arch Linux running on my MacBook]] |
| 355 | - [[http://codylittlewood.com/arch-linux-on-macbook-pro-installation/][Dual boot Arch Linux on MacBook Pro Installation]] |
| 356 | |
| 357 | * Meta |
| 358 | ** Search |
| 359 | :PROPERTIES: |
| 360 | :EXPORT_HUGO_SECTION: / |
| 361 | :EXPORT_FILE_NAME: search |
| 362 | :EXPORT_HUGO_LAYOUT: search |
| 363 | :EXPORT_HUGO_OUTPUTS: html json |
| 364 | :EXPORT_HUGO_CUSTOM_FRONT_MATTER: :sitemap '((priority . 0.1)) |
| 365 | :END: |
| 366 | Results from static site search implemented using /Fusejs/, /jquery/ |
| 367 | and /mark.js/. -- [[https://gist.github.com/eddiewebb/735feb48f50f0ddd65ae5606a1cb41ae][Source]] |
| 368 | |
| 369 | * COMMENT Local Variables :ARCHIVE: |
| 370 | # Local Variables: |
| 371 | # org-hugo-footer: "\n\n[//]: # \"Exported with love from a post written in Org mode\"\n[//]: # \"- https://github.com/kaushalmodi/ox-hugo\"" |
| 372 | # End: |