linux-image-manager/scripts/encryption/storage/base.sh

#!/bin/bash
# shellcheck disable=SC2015  # Deactivating bool hint
# shellcheck disable=SC2034  # Unused variables
# shellcheck disable=SC2154  # Referenced but not assigned
# shellcheck disable=SC1090  # Can't follow non-constant source. Use a directive to specify location.
# shellcheck disable=SC2001  # See if you can use ${variable//search/replace} instead
source "$(dirname "$(readlink -f "${0}")")/../../../base.sh" || (echo "Loading base.sh failed." && exit 1)

set_device_mount_partition_and_mapper_paths(){
  set_device_path &&
  mapper_name="encrypteddrive-$device" &&
  mapper_path="/dev/mapper/$mapper_name" &&
  mount_path="/media/$mapper_name" &&
  partition_path="$device_path""1" &&
  info "mapper name set to : $mapper_name" &&
  info "mapper path set to : $mapper_path" &&
  info "mount path set to : $mount_path" ||
  error
}

# @var $1 mapper_path
# @var $2 partition_path
create_luks_key_and_update_cryptab(){
  LUKS_KEY_DIRECTORY="/etc/luks-keys/"  &&
  info "Creating luks-key-directory..." &&
  sudo mkdir $LUKS_KEY_DIRECTORY || warning "Directory exists: $LUKS_KEY_DIRECTORY" || error
  luks_key_name="$1.keyfile" &&
  secret_key_path="$LUKS_KEY_DIRECTORY$luks_key_name" &&
  info "Generate secret key under: $secret_key_path" || error
  if [ -f "$secret_key_path" ]
    then
      warning "File already exists. Overwriting!"
  fi
  sudo dd if=/dev/urandom of="$secret_key_path" bs=512 count=8 &&
  
  info "Opening and closing device to verify that everything works fine..." &&
  sudo cryptsetup -v luksClose "$1" || info "No need to luksClose $1." &&
  sudo cryptsetup -v luksOpen "$2" "$1" --key-file="$secret_key_path" &&
  sudo cryptsetup -v luksClose "$1" &&
  info "Reading UUID..." &&
  uuid_line=$(sudo cryptsetup luksDump "$2" | grep "UUID") &&
  uuid=$(echo "${uuid_line/UUID:/""}"|sed -e "s/[[:space:]]\+//g") &&
  crypttab_path="/etc/crypttab" &&
  crypttab_entry="$1 UUID=$uuid $secret_key_path luks" &&
  info "Adding crypttab entry..." || error
  if sudo grep -q "$crypttab_entry" "$crypttab_path";
    then
      warning "File $crypttab_path already contains the following entry:" &&
      echo "$crypttab_entry" &&
      info "Skipped." ||
      error
    else
      sudo sh -c "echo '$crypttab_entry' >> $crypttab_path" ||
      error
  fi

  info "The file $crypttab_path contains now the following:" &&
  sudo cat $crypttab_path ||
  error
}


# @var $1 mapper_name
# @var $2 mount_path
#
# If mount doesn't work adapt it manually to
# @see https://gist.github.com/MaxXor/ba1665f47d56c24018a943bb114640d7
update_fstab(){
  fstab_path="/etc/fstab"
  fstab_entry="$1 $2 btrfs   defaults   0       2"
  info "Adding fstab entry..."
  if sudo grep -q "$fstab_entry" "$fstab_path"; then
    warning "File $fstab_path contains allready a the following entry:" &&
    echo "$fstab_entry" &&
    info "Skipped." ||
    error
  else
    sudo sh -c "echo '$fstab_entry' >> $fstab_path" ||
    error
  fi

  info "The file $fstab_path contains now the following:" &&
  sudo cat $fstab_path ||
  error
}