#!/bin/bash

start() {
        read -s -p "Encrypted file system passphrase: " passhash; echo

        # swap
        echo "$passhash" | /sbin/losetup -p 0 -P sha256 -k 256 -e aes /dev/loop0 /dev/hda1
	/sbin/swapon -p -1 /dev/loop0

	# home
	echo "$passhash" | /sbin/losetup -p 0 -P sha256 -k 256 -e aes /dev/loop1 /dev/hdb1
	/bin/mount -o noatime -t reiserfs /dev/loop1 /home

	# var
        echo "$passhash" | /sbin/losetup -p 0 -P sha256 -k 256 -e aes /dev/loop2 /dev/hda2
	/bin/mount -t ext3 /dev/loop2 /var/log

	touch /var/lock/subsys/encrypted
}

stop() {
	echo $"disabling encrypted file system: "
	/sbin/swapoff /dev/loop0
        /sbin/losetup -d /dev/loop0

	/bin/umount /home
	/sbin/losetup -d /dev/loop1

        /bin/umount /var/log
	/sbin/losetup -d /dev/loop2

	rm -f /var/lock/subsys/encrypted
}	

restart() {
  	stop
	start
}	

case "$1" in
  start)
  	start
	;;
  stop)
  	stop
	;;
  restart)
  	restart
	;;
  *)
	echo $"Usage: $0 {start|stop|restart}"
	exit 1
esac

exit $?