#!/bin/sh
# -*- mode: shell-script; indent-tabs-mode: nil; sh-basic-offset: 4; -*-
# ex: ts=8 sw=4 sts=4 et filetype=sh
if ! getargbool 1 rd.luks -n rd_NO_LUKS; then
    info "rd.luks=0: removing cryptoluks activation"
    rm -f /etc/udev/rules.d/70-luks.rules
else
    {
        echo 'SUBSYSTEM!="block", GOTO="luks_end"'
        echo 'ACTION!="add|change", GOTO="luks_end"'
    } > /etc/udev/rules.d/70-luks.rules

    LUKS=$(getargs rd.luks.uuid rd_LUKS_UUID)

    if [ -n "$LUKS" ]; then
        for luksid in $LUKS; do 
            luksid=${luksid##luks-}
            {
                printf 'ENV{ID_FS_TYPE}=="crypto_LUKS", '
                printf 'ENV{ID_FS_UUID}=="*%s*", ' $luksid
                printf 'RUN+="/sbin/initqueue --unique --onetime '
                printf -- '--name cryptroot-ask-%%k /sbin/cryptroot-ask '
                printf '$env{DEVNAME} luks-$env{ID_FS_UUID}"\n'
            } >> /etc/udev/rules.d/70-luks.rules

            printf '[ -e /dev/disk/by-uuid/*%s* ] || exit 1\n' $luksid \
                >> $hookdir/initqueue/finished/90-crypt.sh
            {
                printf '[ -e /dev/disk/by-uuid/*%s* ] || ' $luksid
                printf 'warn "crypto LUKS UUID "%s" not found"\n' $luksid
            } >> $hookdir/emergency/90-crypt.sh
        done
    else
        echo 'ENV{ID_FS_TYPE}=="crypto_LUKS", RUN+="/sbin/initqueue' \
            '--unique --onetime --name cryptroot-ask-%k' \
            '/sbin/cryptroot-ask $env{DEVNAME} luks-$env{ID_FS_UUID}"' \
            >> /etc/udev/rules.d/70-luks.rules
    fi

    echo 'LABEL="luks_end"' >> /etc/udev/rules.d/70-luks.rules
fi
