#!/bin/sh -eu
tool=$(readlink -e "${0%/*}/..")
. "$tool"/host/lib.sh

if ! mount | grep -q "^$local_dev_disk_root "
 then
	sudo cryptsetup luksFormat --hash=sha512 --key-size=512 \
	 --cipher=aes-xts-essiv:sha256 --align-payload=8 $local_dev_disk_root
	sudo cryptsetup luksOpen $local_dev_disk_root ${local_lvm_lv}_root_deciphered
	sudo mke2fs -t ext4 -c -c -m 5 -T ext4 -b $local_e2fs_block_size \
	 -E resize=30G${local_e2fs_extended_options} \
	 -L ${local_lvm_lv}_root \
	 /dev/mapper/${local_lvm_lv}_root_deciphered
	! mountpoint -q /mnt/$local_fqdn
	sudo mount -v /dev/mapper/${local_lvm_lv}_root_deciphered /mnt/$local_fqdn
	sudo install -d -m 770 -o root -g root \
	 /mnt/$local_fqdn/boot \
	 /mnt/$local_fqdn/dev \
	 /mnt/$local_fqdn/home \
	 /mnt/$local_fqdn/proc \
	 /mnt/$local_fqdn/root \
	 /mnt/$local_fqdn/root/src \
	 /mnt/$local_fqdn/root/src/$vm \
	 /mnt/$local_fqdn/sys \
	 /mnt/$local_fqdn/var
	sudo umount -v /mnt/$local_fqdn
	sudo cryptsetup luksClose ${local_lvm_lv}_root_deciphered
 fi