Minimal Arch Linux ISO with CLI-based installation and post-installation scripts, using dialog for a simple text-based UI.
All installation scripts are written in Bash.
- Language: French by default
- Network configuration: Wi-Fi (iwd) / Ethernet (Static or DHCP)
- Disk setup: Partitioning and LUKS encryption
- Base system installation
- grub installation and configuration
- Package installation (git, cron, wget, lynx, python3, go, sudo, openssh...)
- Creation of
localadmandrescueusers with their own bashrc/vimrc files - Add main user without sudo rights
- Sudo configuration
- Installation of
yay(AUR helper) /bootmounted asnoautowith pacman warnings (avoids accidental writes to umount/bootwhile updating)
Install and configure GUI environment if selected
- Gnome basic install with GDM
- Hyprland Proposed config based on Hyprland config (with SDDM)
- Xfce4 Proposed config based on Xfce4 config (with lightdm)
- Firejail: Sandboxing tool installation with custom globals.local and automated Pacman hooks for all binaries.
- MFA for localadm: Adds Google Authenticator (2FA) requirement for su and lightdm to secure the administrator account.
- Grub Security: Add a password to the bootloader to prevent unauthorized editing of kernel parameters at startup.
- Grub Background: Customizes the GRUB boot menu with a dedicated background image.
- Auditd: Kernel-level auditing for security monitoring.
Added a simple configuration for Plymouth using the same background as Grub.
- When you are prompted to enter your password, the following message appears (at the bottom of the screen): "Enter disk password."
- When you start typing, the following message appears: "Typing Password..."
- If the message "Enter disk password." reappears, it indicates that you have entered an incorrect password.
- SSH Server
- Apparmor
- SELinux
- Hardened Malloc
- Add Secure boot config to Grub Security