#!/bin/sh

# initramfs-tools hook: embed the staged re-encryption key and target,
# plus the tools the local-top script needs. Inert (adds nothing) when
# no re-encryption is staged.

PREREQ=""
prereqs() { echo "$PREREQ"; }
case "$1" in
	prereqs) prereqs; exit 0;;
esac

. /usr/share/initramfs-tools/hook-functions

[ -f /var/lib/eydos-installer/reencrypt-key ]    || exit 0
[ -f /var/lib/eydos-installer/reencrypt-device ] || exit 0

mkdir -p "${DESTDIR}/etc/eydos-reencrypt"
cp /var/lib/eydos-installer/reencrypt-key    "${DESTDIR}/etc/eydos-reencrypt/key"
cp /var/lib/eydos-installer/reencrypt-device "${DESTDIR}/etc/eydos-reencrypt/device"
chmod 600 "${DESTDIR}/etc/eydos-reencrypt/key"

copy_exec /sbin/cryptsetup
copy_exec /sbin/dmsetup
copy_exec /sbin/e2fsck
copy_exec /sbin/resize2fs
copy_exec /sbin/blockdev

manual_add_modules dm_crypt dm_mod aes xts sha256

exit 0
