Fedora Silverblue installation with lvm luks encryption with vmware how do I do disk partitioning, how many GB of space should I allocate to partitions?

I started the installation with fedora silverblue .iso file with vmware on 50GB space. I want to partition the disk manually. I will create /var, /var/log, /tmp, / (root), /home, swap, 2MB mandatory partition related to boot (I forgot the name) and /boot partitions. I will install with custom installation options or custom gui installation option. I will encrypt the disk. I will choose keyboard tr. I have allocated 50 GB of space for the virtual machine OS. How much space should I allocate for partitions? My local AI that I installed on my AI workstation machine suggested me to allocate: 10 GB for /var, 1GB for /var/log, 2 GB for /tmp, 15 GB for / (root), 17 GB for /home, 4GB for swap; 2 MB for a partition needed for boot (I forgot the name), 1GB for /boot. I was skeptical, because silverblue installs packages in a container, so I guess silverblue installs them in /var. If that’s the case, shouldn’t I make the /var partition bigger: /var 18-20GB, /10GB, /home 12-14GB? What should I do, how should I partition the areas?


The second thing I would like to know is; since I want to install with luks encryption, how should I install it manually? Which partitions should I encrypt. should I encrypt them all separately (actually I installed it this way, but I couldn’t boot the system because it gave a password error, so I don’t know if it was installed properly)? Or should I create a primary partition with lvm, encrypt the primary partition with luks, create 6 logical partitions (/var, /var/log, /tmp, / (root), /home, swap) inside the primary partition and enable luks encryption on each partition? (I installed GuixOS this way, so I think this approach might be right. ) Should I create the remaining two boot partitions as separate primary partitions (as far as I know I shouldn’t encrypt these partitions)? How should I do the disk partitioning and encryption? Should I install with the custom installation option or with the custom GUI installation option?

Could you make the caption a bit smaller?

Why do you want to use LVM so badly? Normally a Fedora Atomic Desktop setup uses BTRFS like this:

nvme0n1                                       259:0    0  1,8T  0 disk  
├─nvme0n1p1                                   259:1    0  576M  0 part  /boot/efi
├─nvme0n1p2                                   259:2    0 24,3G  0 part  /boot
└─nvme0n1p3                                   259:3    0  1,8T  0 part  
  └─luks-64ae1755-4591-455d-b723-1e46c31ffe53 253:0    0  1,8T  0 crypt /var/home
                                                                        /var
                                                                        /sysroot/ostree/deploy/fedora/var
                                                                        /usr
                                                                        /etc
                                                                        /
                                                                        /sysroot

This is my layout including a LUKS encrypted BTRFS root partition, with BTRFS volumes inside.

2 Likes

I checked today and it was up and running without any problems. I installed it correctly. The password error was that I was typing the password incorrectly because the keyboard setting on the luxury password prompt screen was “en” English and the English characters were incompatible with my physical keyboard tr keypad. I couldn’t tell if I was typing it incorrectly because the password was displayed as ******* so that the password would not appear in the password box. The problem was that the keyboard setting was not tr.

You asked why I wanted to do this partitioning, and you claimed it was bad partitioning. I set up an AI workstation server at home for personal use, 4 Nvidia H100s connected. I told my AI assistant that sometimes I need to do a clean fedora format of my system for security or privacy reasons, or sometimes because of a system crash, and when I do, I want my system settings, configurations, application configurations, application data; my flatpak applications (from fedora flatpak repo or flathub repo), flatpak application settings and configurations; my appimage applications and configurations; my compiled applications and the settings and configurations of these applications to be deleted. I also asked how to ensure that the temp record is minimal and the log records are very limited. I also asked how to use the /home and /var directories from the system directories in the virtual machine when I format the PC. I also asked that I want to protect my log, temp and personal information, that I will encrypt the lux password with a physical security setting to prevent unauthorized access to the system, so I asked how I should do partitioning and partition encryption. I am trying to find out the accuracy of the answers he gave me by asking experienced users on the forum. I will both understand how much I can trust AI and decide how to set up the system with your answers.

Unfortunately there is no btrfs option in manual manual partitioning. ext4 is available.

Yes it is, I just set it up. There are 2 different types of manual partitioning in the installer and I think both allow BTRFS.

But why not go with the automatic layout? It works fine too. There are no privacy reasons or whatever and it also doesnt affect any logs

1 Like

That comment was strange. You asked your AI that or you answer me that?

As I explained, I don’t want to keep unnecessary logs and templates on the system and if I have to format again, I want to move the /var and /home directories and continue where I left off.

The answer: