#!/bin/bash

source .env

sgdisk --zap-all /dev/$_SYS_DEV
sgdisk -n 1:0:+$_EFI_SIZE -t 1:ef00 -c 1:"EFI" /dev/$_SYS_DEV
sgdisk -n 2:0:+$_SWAP_SIZE -t 2:8200 -c 2:"SWAP" /dev/$_SYS_DEV
sgdisk -n 3:0:0 -t 3:8309 -c 3:"LUKS-Data" /dev/$_SYS_DEV
sgdisk -p /dev/$_SYS_DEV

sgdisk --zap-all /dev/${_HEADER_DEV}
sgdisk -n 1:0:+16M -t 1:8309 -c 1:"LUKS-Header" /dev/${_HEADER_DEV}
sgdisk -p /dev/${_HEADER_DEV}
sync

#HEADER_PART=/dev/${_HEADER_DEV}1
wipefs -a /dev/${_HEADER_DEV}1
wipefs -a /dev/${_SYS_DEV}1

#dd if=/dev/zero of=/dev/$_HEADER_DEV bs=512 count=32768 status=progress
echo -n "$_LUKS_PASS" | cryptsetup luksFormat --type luks2 --batch-mode --key-file - --header /dev/${_HEADER_DEV}1 /dev/${_SYS_DEV}3
echo -n "$_LUKS_PASS" | cryptsetup open /dev/${_SYS_DEV}3 --header /dev/${_HEADER_DEV}1 --key-file - cryptroot
_LUKS_UUID=$(cryptsetup luksUUID /dev/${_SYS_DEV}3 --header /dev/${_HEADER_DEV}1)
echo "LUKS UUID: $_LUKS_UUID"
ls /dev/mapper/cryptroot