Best way is to have an Ubuntu boot CD with the
http://bitaddress.org on a thumb drive. Boot from the CD, generate the Public/Private key and print with a cheap "dumb" printer. That way nothing is saved to the hard drive or printer and you're not connected to the internet.
You can download bitaddress.org files at:
https://github.com/pointbiz/bitaddress.orgIt's this file:
bitaddress.org.html