25 lines
929 B
Bash
Executable File
25 lines
929 B
Bash
Executable File
#!/bin/bash
|
|
|
|
source .env
|
|
|
|
sgdisk --zap-all /dev/$_SYS_DEV
|
|
sgdisk -n 1:0:+$_EFI_SIZE -t 1:ef00 -c 1:"EFI" /dev/$_SYS_DEV
|
|
sgdisk -n 2:0:+$_SWAP_SIZE -t 2:8200 -c 2:"SWAP" /dev/$_SYS_DEV
|
|
sgdisk -n 3:0:0 -t 3:8309 -c 3:"LUKS-Data" /dev/$_SYS_DEV
|
|
sgdisk -p /dev/$_SYS_DEV
|
|
|
|
sgdisk --zap-all /dev/${_HEADER_DEV}
|
|
sgdisk -n 1:0:+16M -t 1:8309 -c 1:"LUKS-Header" /dev/${_HEADER_DEV}
|
|
sgdisk -p /dev/${_HEADER_DEV}
|
|
sync
|
|
|
|
#HEADER_PART=/dev/${_HEADER_DEV}1
|
|
wipefs -a /dev/${_HEADER_DEV}1
|
|
|
|
#dd if=/dev/zero of=/dev/$_HEADER_DEV bs=512 count=32768 status=progress
|
|
echo -n "$_LUKS_PASS" | cryptsetup luksFormat --type luks2 --batch-mode --key-file - --header /dev/${_HEADER_DEV}1 /dev/${_SYS_DEV}3
|
|
echo -n "$_LUKS_PASS" | cryptsetup open /dev/${_SYS_DEV}3 --header /dev/${_HEADER_DEV}1 --key-file - cryptroot
|
|
_LUKS_UUID=$(cryptsetup luksUUID /dev/${_SYS_DEV}3 --header /dev/${_HEADER_DEV}1)
|
|
echo "LUKS UUID: $_LUKS_UUID"
|
|
ls /dev/mapper/cryptroot
|