--- /dev/null
+#!/bin/sh -eu
+tool=$(readlink -e "${0%/*}/..")
+. "$tool"/host/lib.sh
+
+if ! mount | grep -q "^$vm_dev_disk_root "
+ then
+ sudo cryptsetup luksFormat --hash=sha512 --key-size=512 \
+ --cipher=aes-xts-essiv:sha256 --align-payload=8 $vm_dev_disk_root
+ sudo cryptsetup luksOpen $vm_dev_disk_root ${vm_lvm_lv}_root_deciphered
+ sudo mke2fs -t ext4 -c -c -m 5 -T ext4 -b $vm_e2fs_block_size \
+ -E resize=30G${vm_e2fs_extended_options} \
+ -L ${vm_lvm_lv}_root \
+ /dev/mapper/${vm_lvm_lv}_root_deciphered
+ ! mountpoint -q /mnt/$vm_fqdn
+ sudo mount -v /dev/mapper/${vm_lvm_lv}_root_deciphered /mnt/$vm_fqdn
+ sudo install -d -m 770 -o root -g root \
+ /mnt/$vm_fqdn/boot \
+ /mnt/$vm_fqdn/dev \
+ /mnt/$vm_fqdn/home \
+ /mnt/$vm_fqdn/proc \
+ /mnt/$vm_fqdn/root \
+ /mnt/$vm_fqdn/root/src \
+ /mnt/$vm_fqdn/root/src/$vm \
+ /mnt/$vm_fqdn/sys \
+ /mnt/$vm_fqdn/var
+ sudo umount -v /mnt/$vm_fqdn
+ sudo cryptsetup luksClose ${vm_lvm_lv}_root_deciphered
+ fi