Other Debian GNU/Linux tips

• Download and burn the Debian GNU/Linux testing installation CD
• Boot off of the CD
• You will be brought to a boot: prompt
• Enter expert and hit enter
• This will start the text-based installer, which allows you to perform a fully encrypted install
• In the first step select Language and Keyboard, the keyboard selection is important as the keyboard layout you select will be hardcoded into the initrd.img file generated later. Thus if you select a Dvorak keyboard here, the system will then later when you run it off of the USB stick boot straight with the Dvorak keyboard loaded - necessary to enter the password properly
• Then follow the installation steps up to the Disk Partitioner step
• Here select manual mode
• In the manual mode I created the following partitions: I have a 16GB USB stick, thus made the 1st partition a 4.8 GB FAT32, this allows Windows computers to see this partition when the stick is entered. If you need to get some data from someone they can just copy it on the stick, you'll be later able to get it from this first partition, when booting off of the system.
• The second partition is a 100MB ext2, mounted as boot, mounted with noatime flag
• Create a third partition for the rest of the space of the USB stick, designate it as Physical volume for encryption, confirm the default choices there
• Then go to Setup disks for encryption at the top of the menu
• Setup your encryption passphrase, make it very long, so that it's very strong, 30+ characters are good
• When this is done, you'll see one more partition on the ecrypted volume in the partitioner
• Select it and create an ext2 system on it, mounted as / and mounted with noatime flag
• That's it, go forth
• The system will warn you that you didn't designate swap and ask you to go back. Don't do this, don't create swap, as that would kill the USB stick, and don't go back.
• Then follow the installation steps up to when it asks you which kernel you want to install
• THIS IS VERY IMPORTANT: Before you hit enter and select which kernel you want to install you must do the following:
• Switch to virtual console number 2 by pressing Alt+F2
• Hit enter to activate the console
• mkdir -p /target/etc/initramfs-tools/hooks
• mkdir -p /target/etc/initramfs-tools/scripts/local-top
• cd /target/etc/initramfs-tools/hooks
• cp /target/usr/share/initramfs-tools/hooks/cryptroot .
• cd ../scripts/local-top
• cp /target/usr/share/initramfs-tools/scripts/local-top/cryptroot .
• nano cryptroot
• Find the line reading modprobe -q dm_crypt
• After it insert the following three lines
  echo "Sleeping for 20 seconds to allow USB detection."
  sleep 20
  echo "Awake, mounting encrypted partition."
• This is necessary so that the kernel detects the USB before it attempts to open the crypted volume, otherwise the system will hang on boot. 20 seconds should be enough, I tried 15, but on some systems the detection happens at after 14 seconds dangerously close to the limit, so 20 is safer.
• Assuming your USB disk is mounted as /dev/sdb:
• Determine the root partition UUID: /lib/udev/vol_id /dev/sdb4
• Modify /etc/crypttab and /etc/fstab to mount root by UUID
• Add tmpfs mounts to /etc/fstab
• Switch back to console 1 by pressing Alt+F1 and select the kernel you want to install.
• Carry out the regular installation steps up to where it asks if it should install GRUB to the master boot record of the 1st hard disk
• Select no to not install it there, it'll ask you where you want to install it
• Assuming your USB stick is /dev/sda write /dev/sda there
• Switch to the 2nd virtual console again
• cd /target/boot/grub/
• nano menu.lst
• Change the three lines reading:
  root (hd1,1)
  to
  root (hd0,1)
  
• and delete the splash at the end of the line after the first root... line
• Now you can boot your USB stick and Debian GNU/Linux will start