# Swap partitions. These should come first so that no keys make their way into unencrypted swap

# If no options are given, they will default to: -c aes -h sha1 -d /dev/urandom

# If no makefs is given then mkswap will be assumed

swap=crypt-swap source='/dev/main/swap'

# Mounts

# If no options are given, they will default to: -c aes -h sha1

# No mkfs is run unless you specify a makefs option

mount=crypt-tmp options='-d /dev/urandom' source='/dev/main/tmp' pre_mount='/sbin/mkreiserfs -f -f ${dev}' post_mount='chown root:root ${mount_point}; chmod 1777 ${mount_point}'

	ebegin 'Setting up dm-crypt mappings'

	if [ -f /etc/conf.d/cryptfs ]

	then

		cryptfs_status=0

		/bin/egrep '^(mount|swap)' /etc/conf.d/cryptfs | \

		while read mountline

		do

			mount=

			swap=

			options=

			pre_mount=

			eval ${mountline}

			if [ -n "${mount}" ]

			then

				target=${mount}

				[ -z "${options}" ] && options='-c aes -h sha1'

			elif [ -n "${swap}" ]

			then

				target=${swap}

				[ -z "${options}" ] && options='-c aes -h sha1 -d /dev/urandom'

			else

				ewarn "Invalid line in /etc/conf.d/cryptomount: ${mountline}"

			fi

			! /bin/cryptsetup status ${target}|egrep '\<active:' > /dev/null

			configured=$?

			if [ ${configured} -eq 0 ]

			then

				einfo "dm-crypt map ${target}"

				if ! /bin/cryptsetup ${options} create ${target} ${source} >/dev/console </dev/console

				then

					ewarn "Failure configuring ${target}"

					cryptfs_status=1

				else

					if [ -n "${swap}" ]

					then

						[ -z "${pre_mount}" ] && pre_mount='mkswap ${dev}'

					fi

					if [ -n "${pre_mount}" ]

					then

						dev="/dev/mapper/${target}"

						einfo "  Running pre_mount commands on: ${target}"

						if ! eval "${pre_mount}" > /dev/null

						then

							ewarn "Failed to run pre_mount commands on: ${target}"

							cryptfs_status=1

						fi

					fi

				fi

			else

				ewarn "dm-crypt mapping ${target} is already configured"

				cryptfs_status=1

			fi

		done 

	fi

	ewend ${cryptfs_status} 'Failed to setup a mapping or swap device.'

# Try to remove any dm-crypt mappings

if [ -f /etc/conf.d/cryptfs ]

then

    ebegin "Removing dm-crypt mappings"

	/bin/egrep "^(mount|swap)" /etc/conf.d/cryptfs | \

	while read mountline

	do

		mount=

		swap=

		target=

		eval ${mountline}

		if [ -n "${mount}" ]

		then

			target=${mount}

		elif [ -n "${swap}" ]

		then

			target=${swap}

		else

			ewarn "Invalid line in /etc/conf.d/cryptfs: ${mountline}"

		fi

		einfo "Removing dm-crypt mapping for: ${target}"

		if ! /bin/cryptsetup remove ${target}

		then

			ewarn "Failed to remove dm-crypt mapping for: ${target}"

		fi

	done

fi

	# Run any post_mount commands for cryptfs

	if [ -f /etc/conf.d/cryptfs ]

	then

		ebegin "Running post_mount commands for cryptfs"

		/bin/egrep "^mount" /etc/conf.d/cryptfs | \

		while read mountline

		do

			mount=

			mount_point=

			post_mount=

			eval ${mountline}

			target=${mount}

			! /bin/cryptsetup status ${target}|egrep '\<active:' > /dev/null

			configured=$?

			if [ ${configured} -eq 1 ]

			then

				mount_point=`/bin/awk "/\/dev\/mapper\/${target}/ { print \\$2 }" /proc/mounts`

				if [ -n "${mount_point}" ]

				then

					if [ -n "${post_mount}" ]

					then

						if ! eval "${post_mount}" > /dev/null

						then

							ewarn "Failed to run post_mount commands on: ${target}"

						fi

					fi

				else

					ewarn "Failed to find mount point to ${target}. Skipping"

				fi

			else

				ewarn "Target ${target} wasn't mapped, skipping"

			fi

		done

	fi