Arch Linux Install: Disk Prep & Encryption

This is Part 1 of the Arch Linux Install series. In this post, we’ll partition and encrypt the drive with LUKS2, lay out BTRFS subvolumes, and get everything mounted and ready for the base install in Part 2. Why LUKS2 and BTRFS? Arch’s default install guide doesn’t set up encryption or BTRFS. I’m using both here, and it’s worth explaining why before diving in. Full-disk encryption (LUKS2): If this machine is ever lost or stolen, an unencrypted drive means anyone with physical access can read every file on it just by booting from a USB stick. LUKS2 makes the drive unreadable without the passphrase, even if it’s pulled out and connected to another machine directly. ...

July 25, 2026 · 7 min

Arch Linux Install: Base Install & System Configuration

This is Part 2 of the Arch Linux Install series. With the drive partitioned and encrypted in Part 1, we’ll now install the base system, get it booting, configure the essentials, and set up automatic snapshots with Snapper. Why systemd-boot and Snapper? systemd-boot over GRUB: GRUB is the safer default when you need to dual-boot Windows or juggle multiple kernels with automatic OS detection, but this is a single-OS UEFI system, and none of that complexity buys us anything. systemd-boot is a fraction of the size, configures itself from a couple of short text files instead of a generated script, and boots straight from EFI without an intermediate stage. For a dedicated Linux install, it’s less to configure and less to break. ...

July 25, 2026 · 6 min

Arch Linux Install: Package Management & Core Services

This is Part 3 of the Arch Linux Install series. With a bootable, networked system from Part 2, we’ll now expand pacman with multilib and the AUR, and bring up the core hardware services (audio, bluetooth, printing, and graphics), everything the desktop in Part 4 will need. Why PipeWire and yay? PipeWire over PulseAudio: PulseAudio has been the default Linux audio server for over a decade, but it only handles audio. Getting professional audio routing meant running JACK alongside it, often fighting over the same devices. PipeWire replaces both: it speaks PulseAudio’s protocol for regular desktop audio and JACK’s protocol for pro-audio and screen-sharing pipelines, all from one daemon. That’s why we install pipewire-pulse instead of pulseaudio itself. It’s a compatibility layer, not a second audio server. ...

July 25, 2026 · 5 min

Arch Linux Install: Desktop Environment (KDE Plasma)

Welcome to Part 4 of the Arch Linux installation guide! In Part 1 and Part 2, we built an encrypted, unbreakable file system and got it fully installed and configured. In Part 3, we built the invisible engines that drive our audio, network, and graphics. Now it’s time to have a GUI! We are going to install KDE Plasma, one of the most modern yet fast desktop environments in the Linux world. With the foundation we previously set, this process is going to be incredibly smooth. ...

July 25, 2026 · 5 min

Building an Encrypted Arch Linux Setup

Welcome! This series walks through installing Arch Linux from scratch with full-disk encryption, BTRFS subvolumes with automatic snapshots, and a complete KDE Plasma desktop, split into four parts you can follow start to finish or jump into individually. What You’ll Build By the end of this series, you’ll have a fully encrypted Arch Linux desktop: LUKS2 full-disk encryption, BTRFS subvolumes with automatic Snapper snapshots, a properly configured package manager with AUR support, working audio, bluetooth, printing, and graphics, and a KDE Plasma desktop on top of it all. ...

July 25, 2026 · 2 min