1 files changed, 45 insertions, 1 deletions

diff --git a/old-school/mdadm-dup.sh b/old-school/mdadm-dup.sh
index 16e3dfd..fe18e92 100644
--- a/old-school/mdadm-dup.sh
+++ b/old-school/mdadm-dup.sh
@@ -116,7 +116,51 @@ mdadm_subdevices()
     mdadm -D "$md_dev" -Y | sed -ne 's/^MD_DEVICE_.*_DEV=//p'
 }
 
-mdadm_copy_eject() # NOT INITRD; uses non-busybox "losetup"
+cryptsetup_temp()
+{
+    local sectors="$1" cryptname="$2" temp_file="$3" parms=$- secret
+    set +x
+    # Add 4096 sectors for LUKS header
+    truncate -s $(((sectors + 4096) * 512)) "$temp_file" || return
+    cleartext_dev=$(LoSetup -f --show "$temp_file")      || return
+    secret="$(head -c256 /dev/urandom)"                  || return
+    printf %s "$secret" |
+        cryptsetup luksFormat "$cleartext_dev" - || return
+    printf %s "$secret" |
+        cryptsetup --key-file - luksOpen "$cleartext_dev" "$cryptname" || return
+    unset secret
+    set $parms
+
+    wait_for_dm_device /dev/mapper/"$cryptname"
+    echo /dev/mapper/"$cryptname"
+}
+
+mdadm_copy_eject_crypt()
+{
+    local md_dev="$1" temp_file="$2"
+
+    [ -b "$md_dev" ]                                  || return
+    [ ! -e "$temp_file" ]                             || return
+
+    local output_dev sectors
+
+    old_subdev=$(mdadm_subdevices "$md_dev"|head -n1) || return
+    [ -b "$old_subdev" ]                              || return
+    # TODO: truncate to the ISO fs size if the device is larger
+    sectors=$(blockdev --getsz "$md_dev")             || return
+
+    output_dev=$(cryptsetup_temp "$sectors" samizdatiso "$temp_file") || return
+
+    mdadm "$md_dev" --add "$output_dev"               || return
+    mdadm "$md_dev" --grow -n2                        || return
+
+    mdadm_wait_remove "$md_dev" "$old_subdev"         || return
+
+    mdadm "$md_dev" --grow -n1 --force                || return
+    dm_snapshot_teardown "$old_subdev"
+}
+
+mdadm_copy_eject()
 {
     local md_dev="$1" output_file="$2"