I'm trying to install arch on a vm, before attempting it on my laptop. I found a few guides and read into what each command does and I'm getting stuck on one part where they describe how to create a Unified Kernel Image (UKI) but in their example, they create btrfs subvolumes and then never mount them which is weird and results in a broken btrfs implementation, because you can't use tools like TimeShift.
So I tried modifying these isntructions to mount the subvolumes, then installed Linux, and then fail to boot.
When I try to boot I get an error Failed to start Switch Root. which I'm 99% certain is because Discoverable partitions cannot find my root volume. -- I can't tell from reading online (because some sources are old and others are unclear) whether booting to a btrfs volume using Discoverable partitions in a UKI is supported.
My overall goals for this install were:
- luks2 encrypted volume auto-unlocked with TPM2
- secure boot enabled for a signed bootloader (which I have read people have issues with after kernel updates, requiring them to re-sign their bootloader each time) (Is it even recommended to attempt secure boot with UKI?)
- btrfs w/ subvolumes so I can easily rollback if an update cooks my system
Has anyone had success doing something similar? I'm not die-hard for UKI, I'd go with Grub if I knew I should.
This was the initial guide I followed which didn't mount its btrfs subvolumes https://www.walian.co.uk/arch-install-with-secure-boot-btrfs-tpm2-luks-encryption-unified-kernel-images.html
has anyone had success doing so in a maintainable fashion? I'd like my laptop to not have a fragile install if possible.
This is a twist on my current Arch install method. This install will result in a very clean base install using btrfs for a filesystem, mkinitcpio...