Phase 2: Disk & Encryption

lsblk -o NAME,SIZE,TYPE,FSTYPE,LABEL,MOUNTPOINTS

fdisk -l /dev/nvme0n1

# Wipe partition table and create fresh GPT
# -Z = zap (destroy) both the GPT and any MBR data structures
# After this, the disk has NO partitions — completely blank
sgdisk -Z /dev/nvme0n1

# EFI System Partition (512M)
# -n 1:0:+512M = new partition 1, start at first available sector, 512M size
# -t 1:ef00 = set partition 1 type to EFI System (required by UEFI firmware)
sgdisk -n 1:0:+512M -t 1:ef00 /dev/nvme0n1

# /boot partition (2G) — Linux filesystem type (8300)
# OS-managed kernel storage. pacman installs here, pacman hook syncs to ESP.
# This is NOT a XBOOTLDR partition — systemd-boot doesn't read from it.
sgdisk -n 2:0:+2G -t 2:8300 /dev/nvme0n1

# Root partition (250G)
# -t 3:8309 = Linux LUKS type (tells the system this partition is encrypted)
# 250G cap matches the Razer — prevents system packages from consuming all space
sgdisk -n 3:0:+250G -t 3:8309 /dev/nvme0n1

# Home partition (remaining space — ~1.7T)
# -n 4:0:0 = start at next available, end at last sector (uses all remaining space)
sgdisk -n 4:0:0 -t 4:8309 /dev/nvme0n1

# Verify — should show 4 partitions with correct sizes and types
sgdisk -p /dev/nvme0n1

# EFI — must be FAT32 per UEFI spec. The firmware reads this directly to find the bootloader.
mkfs.fat -F32 /dev/nvme0n1p1

# /boot — ext4 for OS kernel management. pacman installs kernels here.
# systemd-boot does NOT read from ext4 — a pacman hook copies kernels to the ESP.
# 2G is generous for staging; the actual boot files live on the 512M ESP.
mkfs.ext4 /dev/nvme0n1p2

# Root — btrfs on top of LUKS. The -L flag sets a human-readable label ("archroot")
# that shows up in lsblk, fstab, and mount output instead of a UUID.
mkfs.btrfs -L archroot /dev/mapper/cryptroot

# Home — same stack: btrfs on LUKS. Separate label for clarity.
mkfs.btrfs -L archhome /dev/mapper/crypthome

# Mount root subvolume with production btrfs options
mount -o noatime,compress=zstd:3,ssd,discard=async,space_cache=v2,subvol=@ /dev/mapper/cryptroot /mnt

# Create mount points on the root btrfs subvolume
# NOTE: Do NOT create boot/efi here — it must be created AFTER /boot is mounted
mkdir -p /mnt/{boot,home,.snapshots,var/log}

# Mount remaining root subvolumes (snapshots + logs)
mount -o noatime,compress=zstd:3,ssd,discard=async,space_cache=v2,subvol=/@snapshots /dev/mapper/cryptroot /mnt/.snapshots
mount -o noatime,compress=zstd:3,ssd,discard=async,space_cache=v2,subvol=/@var_log /dev/mapper/cryptroot /mnt/var/log

# Mount home from the separate LUKS volume
mount -o noatime,compress=zstd:3,ssd,discard=async,space_cache=v2,subvol=/@home /dev/mapper/crypthome /mnt/home

# Mount /boot (ext4, outside LUKS)
mount /dev/nvme0n1p2 /mnt/boot

# Create efi directory AFTER /boot is mounted — if created before, the ext4
# mount overlays the btrfs layer and the efi/ directory disappears
mkdir -p /mnt/boot/efi

# Mount EFI
mount /dev/nvme0n1p1 /mnt/boot/efi

# Should show all 6 mount points: /, /.snapshots, /var/log, /home, /boot, /boot/efi
lsblk -o NAME,SIZE,TYPE,FSTYPE,MOUNTPOINTS /dev/nvme0n1

# Detailed mount options — verify btrfs options are correct
findmnt -t btrfs,vfat,ext4 --output TARGET,SOURCE,FSTYPE,OPTIONS -n