part-luks-2.ks.in

%ksappend repos/default.ks
network --bootproto=dhcp

bootloader --timeout=1
zerombr
clearpart --all --initlabel

# Test LUKS 2 with default values.

reqpart
part / --fstype="ext4" --size=7891 --encrypted --passphrase="passphrase" --luks-version=luks2
part /boot --fstype="ext4" --size=1024
part swap --fstype="swap" --size=1024

keyboard us
lang en
timezone America/New_York
rootpw qweqwe
shutdown

%packages
%end

%post

# Find the LUKS device.
crypted="$(blkid --match-token TYPE="crypto_LUKS" --output device)"

if [[ $? != 0 ]] ; then
    echo "*** couldn't find a LUKS device" > /root/RESULT
    exit 1
fi

# Check if the type of the crypted device is crypto_LUKS.
type="$(blkid -o value -s TYPE ${crypted})"

if [[ "$type" != "crypto_LUKS" ]] ; then
    echo "*** unexpected type ${type} of ${crypted}" >> /root/RESULT
fi

# Check if the LUKS version is luks2.
result="$(cryptsetup luksDump ${crypted} | awk '{ if ($1 == "Version:") print $2; }' )"

if [[ "$result" != "2" ]] ; then
    echo "*** unexpected LUKS version for ${crypted}: ${result}" >> /root/RESULT
fi

# Try to use the passphrase.
echo "passphrase" | cryptsetup luksOpen --test-passphrase "${crypted}"

if [[ $? != 0 ]] ; then
    echo "*** cannot open ${crypted} with the passphrase" >> /root/RESULT
fi

# The test was successful.
if [ ! -e /root/RESULT ]; then
    echo SUCCESS > /root/RESULT
fi

%end