Void Linux (glibc/musl) += (encryption + gummiboot)

Provisioning:
{
    # fdisk:
    {
        No.	Size	Type
        1	1G	    EFI System
        2	rest	Linux filesystem
    }
    # mkfs.fat -F 32 -n efi /dev/<disk1>
    # cryptsetup luksFormat /dev/<disk2> --type luks2 --label luks
    # cryptsetup open --type luks /dev/<disk2> root
    # mkfs.ext4 -L root /dev/mapper/root
}
Installation:
{
    # mount /dev/mapper/root /mnt
    # mkdir /mnt/boot
    # mount /dev/<disk1> /mnt/boot
    # for dir in dev proc sys run; do
    > mkdir /mnt/$dir
    > mount --rbind --make-rslave /$dir /mnt/$dir
    > done
    
    # xbps-install -Sy -R https://repo-default.voidlinux.org/current -r /mnt base-system cryptsetup gummiboot vim apparmor (NetworkManager) git
    # chroot /mnt
    # chown root:root /
    # chmod 755 /
    # passwd root
    # echo <hostname> > /etc/hostname
    # vim /etc/crypttab:
    {
        > root /dev/disk/by-uuid none:
    }
    # lsblk -f |grep luks >> /etc/crypttab
    # vim /etc/crypttab:
    {  
        > root /dev/disk/by-uuid/<uuid> none:
    }
    # vim /etc/fstab:
    {
        > tmpfs /tmp tmpfs defaults,nosuid,nodev 0 0
        > efivarfs /sys/firmware/efi/efivars efivarfs defaults 0 0
        > /dev/disk/by-label/root / ext4 defaults,noatime 0 1
        > /dev/disk/by-label/efi /boot vfat defaults 0 2
    }
    # vim /etc/dracut.conf.d/30.conf:
    {
        > hostonly="yes"
        > use_fstab="yes"
        > install_items+=" /etc/crypttab "
        > add_drivers+=" vfat nls_cp437 nls_iso8859_1 "
    }
    # ln -s /etc/fstab /etc/fstab.sys
    # mv /etc/runit/core-services/03-filesystems.sh{,.bak}
    # vim /etc/xbps.d/xbps.conf:
    {
        > noextract=/etc/runit/core-services/03-filesystems.sh
    }
    # mount -t efivarfs efivarfs /sys/firmware/efi/efivars
    # gummiboot install
    # vim /boot/loader/void-options.conf:
    {
        > rw rd.luks.name=
    }
    # lsblk -f |grep luks >> /boot/loader/void-options.conf
    vim /boot/loader/void-options.conf:
    {
        > rw rd.luks.name=<uuid>=root root=/dev/mapper/root quiet splash apparmor=1 security=apparmor
    }
    vim /etc/default/libc-locales:
    {
        > en_US.UTF-8 UTF-8
    }
    # xbps-reconfigure -f glibc-locales
    # vim /etc/default/appamor:
    {
        > APPARMOR=enforce
    }
    # xbps-reconfigure -f linux{latest-version}
    # exit
    # umount -r /mnt
    # reboot
}
Post install:
{
    $ git clone https://git.bijl.us/luc/void-desktop.git
    Network:
    {
        # ln -s /etc/sv/NetworkManager /var/service
        # ln -s /etc/sv/dbus /var/service
        # vim /etc/NetworkManager/conf.d/rand_mac.conf:
        {
            > [device-mac-randomization]
            > wifi.scan-rand-mac-address=yes
            > [connection-mac-randomization]
            > ethernet.cloned-mac-address=random
            > wifi.cloned-mac-address=random
        }
    }
    Users:
    {
        # usermod -aG wheel,audio,video,kvm,tty,input(,bluetooth,_seatd) <user>
        # vim /etc/xbps.d/xbps.conf:
        {
            > ignorepkg=sudo
        }
        # xbps-remove -y sudo
        # xbps-install -y opendoas 
        # ln -s /bin/doas /bin/sudo
        # vim /etc/doas.conf:
        {
            > permit persist :wheel as root
        }

        $ cp void-desktop/config-files/bash/.bashrc .bashrc
        $ cp void-desktop/config-files/bash/.bash_profile .bash_profile
    }
    Linux-lts:
    {
        # vim /etc/xbps.d/xbps.conf:
        {
            > ignorepkg=linux
        }
        # xbps-install -y linux-lts linux-lts-headers
        # reboot now
        # xbps-remove -y linux-{version} linux{version}
    }
    Localtime:
    {
        # xbps-install -Sy chrony
        # ln -s /etc/sv/chronyd /var/service/
        # vim /etc/rc.conf:
        {
            > HARDWARECLOCK="localtime"
            > TIMEZONE=("Europe/Amsterdam")
        }
    }
    Swapfile:
    {
        # dd if=/dev/zero of=/swapfile bs=8M count=1024
        # chmod 600 /swapfile
        # mkswap /swapfile
        # swapon /swapfile
        // $ swapon --show
        # vim /etc/fstab:
        {
            > /swapfile none swap defaults 0 0
        }
    }
    Repos:
    {
        # xbps-install -Sy void-repo-multilib void-repo-nonfree void-repo-multilib-nonfree xtools git
        $ git clone https://github.com/void-linux/void-packages.git
        $ voidpackages/./xbps-src binary-bootstrap -j(N-threads)
        $ echo XBPS_ALLOW_RESTRICTED=yes >> etc/conf
        $ voidpackages/./xbps-src pkg <package_name> -j(N-threads)
        # xi <package_name>
    }
    AMD Firmware (cpu+gpu):
    {
        # xbps-install -Sy linux-firmware-amd vulkan-loader mesa-vulkan-radeon amdvlk xf86-video-amdgpu mesa-vaapi mesa-vdpau mesa-dri
    }
    Session & login manager:
    {
        # xbps-install -Sy elogind sddm sddm-kcm seatd wayland xorg-minimal xorg-fonts qt5-wayland qt6-wayland xorg-server-xwayland
        # ln -s /etc/sv/seatd /var/service/
        # ln -s /etc/sv/sddm /var/service/

        (chili theme)
        # xbps-install -Sy qt5 qt5-quickcontrols qt5-graphicaleffects
        # git clone https://github.com/MarianArlt/sddm-chili.git /usr/share/sddm/themes/chili
        # cp void-dekstop/data/chili-background/background.png /usr/share/sddm/themes/chili/assets/background.png
        # cp void-desktop/config-files/chili/theme.conf /usr/share/sddm/themes/chili/theme.conf
        # cp void-desktop/config-files/sddm/.face.icon /usr/share/sddm/faces/.face.icon
        # cp void-desktop/config-files/sddm/sddm.conf /etc/sddm.conf.d/sddm.conf
    }
    Window manager:
    {
        # xbps-install -Sy wayfire wcm dconf plata-theme
        $ cp void-desktop/config-files/wayfire/wayfire.ini .config/
        # usermod -aG _seatd <user>
    }
    Display:
    {
        # xbps-install kanshi wlr-randr wdisplays wlsunset
        $ cp -r void-desktop/config-files/kanshi .config/
        $ vim .config/wayfire.ini:
        {
            > [autostart]
            > outputs = kanshi
        }
    }
    Taskbar:
    {
        # xbps-install waybar (potential fonts and icons)
        $ cp -r void-desktop/config-files/waybar .config/
        $ vim .config/wayfire.ini:
        {
            > [autostart]
            > bar = waybar
        }
    }
    Tasklauncher:
    {
        # xbps-install wofi wlogout
        $ cp -r void-desktop/config-files/wofi .config/
        $ cp -r void-desktop/config-files/wlogout .config/
        $ vim .config/wayfire.ini:
        {
            > [command]
            > binding_launcher = <super> KEY_S
            > binding_wlogout = <super> KEY_P
            > command_launcher = wofi --show drun
            > command_wlogout = wlogout
        }
    }
    Notifications:
    {
        # xbps-install mako
        $ cp -r void-desktop/config-files/mako .config/
        $ vim .config/wayfire.ini:
        {
            > [autostart]
            > notifications = mako
        }
    }
    Audio:
    {

    }
    Lockscreen:
    {
        # xbps-install -Sy swayidle gtklock
        $ cp -r void-desktop/config-files/gtklock .config/
        $ vim .config/wayfire.ini:
        {
            > [autostart]
            > idle = swayidle -w timeout 590 gtklock before-sleep gtklock

            > [idle]
            > screensaver_timeout = 300
            > dpms_timeout = 600
        }
    }
    Auto mounting:
    {
        # xpbs-install -Sy udisks2 udiskie
        $ vim .config/wayfire.ini:
        {
            > [autostart]
            > automount = udiskie -As
        }
    }
    Bluetooth:
    {

    }
    Samba-mount:
    {
        # xbps-install cifs-utils
        $ vim $HOME/.smbpasswd:
        {
            > username=<username>
            > password=<password>
            > domain=<domain>
        }
        # chmod 644 $HOME/.smbpasswd
        # vim /etc/fstab:
        {
            > //<domain>/<homefolder> $HOME/<smbfolder> cifs credentials=$HOME/.smbpasswd,_netdev,uid=<uid> 0 0
        }
        # mount -a
    }
    Steam:
    {

    }
    Misc:
    {
        default-applications:
        {
            # xbps-install -Sy firefox vscode foot thunar element-desktop mpv baobab gimp
        }
        foot-openssh:
        {
            $ TERM=xterm-256color
        }
    }
}