#!/bin/sh

set -e

modprobe brd rd_size=1024000 max_part=2 rd_nr=1
passphrase=$(head /dev/urandom | tr -dc "a-zA-Z0-9" | fold -w 32 | head -n 1)
certs_path=$(grep base_cert_dir /etc/octavia/amphora-agent.conf | awk '{print $3}')
if [ -z "${certs_path}" ] ; then
	certs_path=/var/lib/octavia/certs
fi
mkdir -p "${certs_path}"
chown octavia:octavia ${certs_path}
echo -n "${passphrase}" | cryptsetup luksFormat /dev/ram0 -
echo -n "${passphrase}" | cryptsetup luksOpen /dev/ram0 certfs-ramfs -
mkfs.ext2 /dev/mapper/certfs-ramfs
mount /dev/mapper/certfs-ramfs ${certs_path}
chown octavia:octavia ${certs_path}
