BTRFS & Encryption

UPDATE 05.01.2022: If you are installing Arch with the btrfs file system from scratch, you'll notice an error when trying to add space_cache to the fs options. Use space_cache=v2 instead, and it'll work fine.

BTRFS with encryption has been requested a lot. So, here is a quick base install of Arch with it.

*** Donate to the channel by visiting my Website ***

My Hardware:
AMD Ryzen 9
32 GB RAM
Sapphire RX 5700 XT

My software:
Distro: Arch Linux
Video editing software: Kdenlive
Check out my Website and connect on Social Media!

#LinuxMadeSimple #HowTo #BTRFS

On any subject, I always know beforehand that your explanation, if it already exists, will be the best! Thank you.

[GuyPipili]

Cool! Glad to see that this is up. Still can't wait to see you do a full install in May using the newest iso in btrfs configuration. Have a great day!

[peterjansen]

You have got to love that ext2 still is useful for something. :)

[jiqu]

Spectacular video. Taught me that I was mounting my / directory with Btrfs incorrectly where I created the sub volumes but just treated the install like ext4. Definitely got me booted especially the look at how to set up grub. Thank you for this, I had a lot to learn!

[RonVichar]

this works well! the fun begins however, when and if you want to have encrypted swap functioning with hibernation for a laptop without having to enter two passwords.

[LalithMohan_T]

Excellent video. Worked like a charm for me. I also installed plymouth following the arch wiki for encryption. I'm loving it. Thank you very much

[umka]

Thanks for a video! It is very useful. But could you please explain difference between swap partition and swap file? What benefits have one over another?
I made my setup without swap partition but rather with @swap subvolume on BTRFS and I just placed swap file there. Then I need only one volume to encrypt.

[nejathakan]

Thank you so much that you did this remake having swap also encrypted. My best greetings from Germany to Switzerland. Du bist Ermanno *Knuddel*

[craigstone]

Heard you released btrfs with luks install video.... Very nice. I would put a key backup to usb addendum. Anyone who has tried to add a drive later and wound up with key corruption will thank you for the ability to be able to restore. No that never happened to me ;)

Been lurking, busy with arm cluster server setup for SOHO networks

[aryakiran]

Hey EF, I have a video idea for you. Why dont you make a video on encrypted arch install with /home on separate drive. A use for it will be for people like me who have an ssd and a hard drive and want /boot and / on the ssd and /home on the hdd. I would be very grateful if you can do that
Regards,
AK

[taidee]

Your work continues to be great wiki type of material. Thank you sir.

[giulianofiorotto]

I was waiting this video for so long. Thank you!

[JM-sneb]

You deleted previous video when I was in the middle of it 🤣
This video is great and of course something I wanted.
Thank you!

[Damian-hqwl]

Your videos are extremely helpful. Thank you. I have a question on how would I go about creating an encrypted system with 2 separate hard drives. One with encrypted root with btrfs and another with an encrypted home partition?

[elascaelasca]

Another very useful tutorial, Ermanno, thank you very much.

[juliuco_nikel]

you are the crash chacho, you are the children ermmano, you are the who make a brighter day champion

[marekeinla]

I'm getting
BTRFS error (device dm-0): cannot disable free space tree
BTRFS error (device dm-0): open_crtee failed
"mount: /mnt: wrong fs type, bad option, bad superblock on /dev/mapper/cryptroot, missing codepage or helper programm or other error"

[DominikSchmid]

Thank you Ermanno for the compact video. Regarding the btrfs-module in the mkinitcpio.conf file: it is only required if your btrfs file system spreads over more than one device, i.e. RAID or more than one hard drive.

[suyogmule]

There is problem with ebetables package which conflicts with iptables. So you can remove ebtables package from your list or add a line prior to installation of packages to remove iptables.
Because ebetables is iptables-nft

[marcello]

isn't it easier to create a swapfile and have it on the encrypted drive? or at least use LVM?