--- /dev/null
+#!/bin/sh -eu
+tool=$(readlink -e "${0%/*}/..")
+. "$tool"/host/lib.sh
+
+! mountpoint -q /mnt/$vm_fqdn ||
+sudo umount -v /mnt/$vm_fqdn
+! test -e /dev/mapper/${vm_lvm_lv}_root_deciphered ||
+sudo cryptsetup luksClose ${vm_lvm_lv}_root_deciphered