autopart-encrypted-2.ks.in

%ksappend repos/default.ks
network --bootproto=dhcp

bootloader --timeout=1
zerombr
clearpart --all --initlabel
autopart --type=lvm --encrypted --passphrase="passphrase" --cipher="aes-xts-plain64"

keyboard us
lang en
timezone America/New_York
rootpw qweqwe
shutdown

%packages
%end

%post
# Check the cipher name of the LUKS device.
crypted="$(blkid --match-token TYPE="crypto_LUKS" --output device)"
cipher="$(cryptsetup luksDump ${crypted} | awk '{ if ($1 == "Cipher:") print $2; }' )"

if [[ "$cipher" != "aes-xts-plain64" ]] ; then
    echo "*** unexpected cipher ${cipher} of ${crypted}" > /root/RESULT
    exit 1
fi

echo 'SUCCESS' > /root/RESULT
%end