first steps

1.disks.sh

@@ -0,0 +1,15 @@
+#!/bin/bash
+
+source .env
+
+echo $_EFI_SIZE
+sgdisk --zap-all /dev/$_SYS_DEV
+sgdisk -n 1:0:+$_EFI_SIZE -t 1:ef00 -c 1:"EFI" /dev/$_SYS_DEV
+sgdisk -n 2:0:+$_SWAP_SIZE -t 2:8200 -c 2:"SWAP" /dev/$_SYS_DEV
+sgdisk -n 3:0:0 -t 3:8309 -c 3:"LUKS-Data" /dev/$_SYS_DEV
+sgdisk -p /dev/$_SYS_DEV
+
+dd if=/dev/zero of=/dev/$_HEADER_DEV bs=512 count=32768 status=progress
+cryptsetup luksFormat --type luks2 --header /dev/$_HEADER_DEV /dev/${_SYS_DEV}3
+cryptsetup open /dev/${_SYS_DEV}3 --header /dev/$_HEADER_DEV cryptroot
+ls /dev/mapper/cryptroot