#!/bin/sh -eu
tool=$(readlink -e "${0%/*}/..")
. "$tool"/host/lib.sh

if ! mount | grep -q "^$vm_dev_disk_root "
 then
	sudo cryptsetup luksFormat --hash=sha512 --key-size=512 \
	 --cipher=aes-xts-essiv:sha256 --align-payload=8 $vm_dev_disk_root
	sudo cryptsetup luksOpen $vm_dev_disk_root ${vm_lvm_lv}_root_deciphered
	sudo mke2fs -t ext4 -c -c -m 5 -T ext4 -b $vm_e2fs_block_size \
	 -E resize=30G${vm_e2fs_extended_options} \
	 -L ${vm_lvm_lv}_root \
	 /dev/mapper/${vm_lvm_lv}_root_deciphered
	! mountpoint -q /mnt/$vm_fqdn
	sudo mount -v /dev/mapper/${vm_lvm_lv}_root_deciphered /mnt/$vm_fqdn
	sudo install -d -m 770 -o root -g root \
	 /mnt/$vm_fqdn/boot \
	 /mnt/$vm_fqdn/dev \
	 /mnt/$vm_fqdn/home \
	 /mnt/$vm_fqdn/proc \
	 /mnt/$vm_fqdn/root \
	 /mnt/$vm_fqdn/root/src \
	 /mnt/$vm_fqdn/root/src/$vm \
	 /mnt/$vm_fqdn/sys \
	 /mnt/$vm_fqdn/var
	sudo umount -v /mnt/$vm_fqdn
	sudo cryptsetup luksClose ${vm_lvm_lv}_root_deciphered
 fi