feat: cryptsetup step

This adds a step to use cryptsetup to encrypt a block device with
LUKS, using the cryptsetup tool. A crypttab is written by the fstab
step.

Sponsored-by: author

1 files changed, 16 insertions, 1 deletions

diff --git a/vmdb/plugins/mkfs_plugin.py b/vmdb/plugins/mkfs_plugin.py
index 83c6aff..7bb32b6 100644
--- a/vmdb/plugins/mkfs_plugin.py
+++ b/vmdb/plugins/mkfs_plugin.py
@@ -53,10 +53,25 @@ class MkfsStepRunner(vmdb.StepRunnerInterface):
 
         options = values["options"] or None
         if options:
-            for opt in options.split(' '):
+            for opt in options.split(" "):
                 cmd.append(opt)
 
         cmd.append(device)
         vmdb.runcmd(cmd)
 
+        uuid = (
+            vmdb.runcmd(
+                [
+                    "blkid",
+                    "-c/dev/null",
+                    "-ovalue",
+                    "-sUUID",
+                    device,
+                ]
+            )
+            .decode()
+            .strip()
+        )
+
         state.tags.set_fstype(tag, fstype)
+        state.tags.set_fsuuid(tag, uuid)