From 7fc49d3dd0a7b0c8cf10c1d88d3c28c7bf1ace5c Mon Sep 17 00:00:00 2001
From: Marc Beninca <git@marc.beninca.link>
Date: Sat, 13 May 2023 02:26:42 +0200
Subject: [PATCH] ovh-rescue-wipe

---
 bash/ovh-rescue.sh | 56 ++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 56 insertions(+)

diff --git a/bash/ovh-rescue.sh b/bash/ovh-rescue.sh
index 6f230ca..5e943f5 100644
--- a/bash/ovh-rescue.sh
+++ b/bash/ovh-rescue.sh
@@ -82,3 +82,59 @@ else
     return 1
 fi
 }
+
+function ovh-rescue-wipe-1-2TB {
+    local device='/dev/sda'
+    local unit='mib'
+    #
+    echo -n 'WIPE' "${device}" '/?\\ OR CANCEL /!\\'
+    read
+    #
+    parted "${device}" --script mktable gpt
+    #
+    parted "${device}" unit "${unit}" mkpart 'crypt' 65795 1907729
+    #
+    parted "${device}" unit "${unit}" mkpart 'boot' 259 65795
+    #
+    parted "${device}" unit "${unit}" mkpart 'esp' 2 259
+    parted "${device}" set 3 esp on
+    #
+    parted "${device}" unit "${unit}" mkpart bios 1 2
+    parted "${device}" set 4 bios_grub on
+    # wipe bios
+    dd if='/dev/zero' of='/dev/sda4'
+    # format esp
+    mkfs.vfat -F 32 -n 'esp' '/dev/sda3'
+    # format boot
+    mkfs.ext4 -L 'boot' '/dev/sda2'
+    # encrypt
+    cryptsetup \
+    --verbose \
+    --type luks2 \
+    --pbkdf argon2id \
+    --cipher aes-xts-plain64 \
+    --iter-time 8192 \
+    --key-size 512 \
+    --hash sha512 \
+    --use-random \
+    luksFormat \
+    '/dev/sda1'
+    # open
+    cryptsetup luksOpen '/dev/sda1' 'crypt'
+    # pv
+    pvcreate '/dev/mapper/crypt'
+    # vg
+    vgcreate 'crypt' '/dev/mapper/crypt'
+    # lv swap
+    lvcreate --name 'swap' --size '68719476736b' 'crypt'
+    # lv data
+    lvcreate --name 'data' --extents '100%FREE' 'crypt'
+    # format swap
+    mkswap --label 'swap' '/dev/mapper/crypt-swap'
+    # format data
+    mkfs.ext4 -L 'data' '/dev/mapper/crypt-data'
+    # vg off
+    vgchange --activate n 'crypt'
+    # close
+    cryptsetup luksClose 'crypt'
+}