#cwd := $(notdir $(patsubst %/,%,$(dir $(abspath $(lastword $(MAKEFILE_LIST))))))
losurdo_disk        := /dev/disk/by-id/FIXME
#losurdo_cipher      :=
losurdo_cipher      := aes-128-gcm
losurdo_autotrim    :=
losurdo_reservation := 1G
#losurdo_channel     := $$(nix-env -p /nix/var/nix/profiles/per-user/$$USER/channels -q nixpkgs --no-name --out-path)

wipeout: umount
	sudo zpool labelclear -f $(losurdo_disk)-part3 || true
	sudo zpool labelclear -f $(losurdo_disk)-part5 || true
	sudo $$(which sgdisk) --zap-all $(losurdo_disk)

partition:
	sudo modprobe zfs
	if test -e sfdisk; then \
		sudo $$(which sfdisk) $(losurdo_disk) <sfdisk.txt; \
	else \
		sudo $$(which sgdisk) --zap-all $(losurdo_disk); \
		sudo $(which sgdisk) -a1 -n1:34:2047  -t1:EF02 $(losurdo_disk); \
		sudo $(which sgdisk)     -n2:1M:+512M -t2:EF00 $(losurdo_disk); \
		sudo $(which sgdisk)     -n3:0:+512M  -t3:8300 $(losurdo_disk); \
		sudo $(which sgdisk)     -n4:0:+4G    -t4:8200 $(losurdo_disk); \
		sudo $(which sgdisk)     -n5:0:0      -t5:BF01 $(losurdo_disk); \
		sudo $$(which sfdisk) -d $(losurdo_disk) | \
		sed -e 's:/dev/sd.:$(losurdo_disk):' >sfdisk.txt; \
	fi
	sudo $$(which sgdisk) --randomize-guids $(losurdo_disk)
	sudo partprobe

format:
	# DOC: https://github.com/zfsonlinux/zfs/wiki/Debian-Buster-Root-on-ZFS
	sudo mkdir -p /mnt/losurdo
	blkid -t TYPE=ext2 $(losurdo_disk)-part3; test $$? != 2 || \
	mkfs.ext2 $(losurdo_disk)-part3
	# swap
	# Note: configured with a volatile key in losurdo.nix
	#blkid -t TYPE=crypto_LUKS $(losurdo_disk)-part4; test $$? != 2 || \
	#sudo cryptsetup luksFormat --cipher aes-xts-plain64 --key-size 256 --hash sha256 $(losurdo_disk)-part4
	#sudo cryptsetup luksOpen $(losurdo_disk)-part4 swap
	#blkid -t TYPE=swap /dev/mapper/-swap; test $$? != 2 || \
	#sudo mkswap --check --label swap
	#sudo cryptsetup luksClose $(losurdo_disk)-part4 swap
	# rpool
	sudo zpool list rpool 2>/dev/null || \
	sudo zpool create -o ashift=12 \
	 $(if $(losurdo_cipher),-O encryption=$(losurdo_cipher) \
	 -O keyformat=passphrase \
	 -O keylocation=prompt) \
	 -O normalization=formD \
	 -R /mnt/losurdo rpool $(losurdo_disk)-part5
	sudo zfs set \
	 acltype=posixacl \
	 atime=off \
	 $(if $(losurdo_autotrim),autotrim=on) \
	 canmount=off \
	 compression=lz4 \
	 dnodesize=auto \
	 relatime=on \
	 xattr=sa \
	 mountpoint=/ \
	 rpool
	# https://nixos.wiki/wiki/NixOS_on_ZFS#Reservations
	sudo zfs list rpool/reserved 2>/dev/null || \
	sudo zfs create -o canmount=off -o mountpoint=none rpool/reserved
	sudo zfs set refreservation=$(losurdo_reservation) rpool/reserved
	# /
	# NOTE: mountpoint=legacy is required to let NixOS mount the ZFS filesystems.
	sudo zfs list rpool/root 2>/dev/null || \
	sudo zfs create \
	 -o canmount=on \
	 -o mountpoint=legacy \
	 rpool/root
	# /boot
	#sudo zfs list bpool/boot 2>/dev/null || \
	#sudo zfs create \
	# -o canmount=on \
	# -o mountpoint=legacy \
	# bpool/boot
	# /boot/efi
	sudo blkid $(losurdo_disk)-part2 -t TYPE=vfat || \
	sudo mkfs.vfat -F 32 -s 1 -n EFI $(losurdo_disk)-part2
	# /*
	for p in \
	 home \
	 nix \
	 var \
	 var/cache \
	 var/log \
	 var/mail \
	 var/redis \
	 var/tmp \
	 var/www \
	 ; do \
		sudo zfs list rpool/"$$p" 2>/dev/null || \
		sudo zfs create \
		 -o canmount=on \
		 -o mountpoint=legacy \
		 rpool/"$$p" ; \
	 done
	sudo zfs set \
	 com.sun:auto-snapshot=false \
	 rpool/nix
	sudo zfs set \
	 com.sun:auto-snapshot=false \
	 rpool/var/cache
	sudo zfs set \
	 com.sun:auto-snapshot=false \
	 sync=disabled \
	 rpool/var/tmp

mount:
	# scan needed zpools
	#sudo zpool list bpool || \
	#sudo zpool import -f bpool
	sudo zpool list rpool || \
	sudo zpool import -f rpool
	# load encryption key
	zfs get -H encryption rpool | \
	grep -q '^rpool\s*encryption\s*off' || \
	zfs get -H keystatus rpool | \
	grep -q '^rpool\s*keystatus\s*available' || \
	sudo zfs load-key rpool
	# /
	sudo mkdir -p /mnt/losurdo
	sudo mountpoint /mnt/losurdo || \
	sudo mount -v -t zfs rpool/root /mnt/losurdo
	# /boot
	sudo mkdir -p /mnt/losurdo/boot
	sudo mountpoint /mnt/losurdo/boot || \
	sudo mount -v $(losurdo_disk)-part3 /mnt/losurdo/boot
	#sudo mount -v -t zfs bpool/boot /mnt/losurdo/boot
	# /boot/efi
	sudo mkdir -p /mnt/losurdo/boot/efi
	sudo mountpoint /mnt/losurdo/boot/efi || \
	sudo mount -v $(losurdo_disk)-part2 /mnt/losurdo/boot/efi
	# /*
	for p in \
	 home \
	 nix \
	 var \
	 var/cache \
	 var/log \
	 var/mail \
	 var/redis \
	 var/tmp \
	 var/www \
	 ; do \
		sudo mkdir -p /mnt/losurdo/"$$p"; \
		sudo mountpoint /mnt/losurdo/"$$p" || \
		sudo mount -v -t zfs rpool/"$$p" /mnt/losurdo/"$$p" ; \
	 done
	sudo chmod 1777 /mnt/losurdo/var/tmp

bootstrap: mount
	#test "$$(sudo grub-probe /mnt/losurdo/boot)" = zfs
	# NOTE: nixos-install will install GRUB following losurdo.nix
	# BIOS
	#sudo grub-install $(losurdo_disk)
	# UEFI
	#sudo grub-install \
	# --target=x86_64-efi \
	# --efi-directory=/mnt/losurdo/boot/efi \
	# --bootloader-id=nixos \
	# --recheck \
	# --no-floppy
	
	pass servers/losurdo/dropbear/host.key | \
	sudo install -D -o root -g root -m 400 /dev/stdin \
	 /mnt/losurdo/etc/dropbear/host.key && \
	test -s /mnt/losurdo/etc/dropbear/host.key
	
	#trap "test ! -e SHRED-ME || sudo find SHRED-ME -type f -exec shred -u {} + && sudo rm -rf SHRED-ME" EXIT ;
	sudo \
	 GNUPGHOME="$$GNUPGHOME" \
	 GPG_TTY="$$GPG_TTY" \
	 LANG="$$LANG" \
	 LC_CTYPE="$$LC_CTYPE" \
	 NIXOS_CONFIG="$$(readlink -e configuration.nix)" \
	 NIX_CONF_DIR="$$NIX_CONF_DIR" \
	 NIX_PATH="$$NIX_PATH" \
	 PASSWORD_STORE_DIR="$$PASSWORD_STORE_DIR" \
	 PATH="$$PATH" \
	 SSL_CERT_FILE="$$SSL_CERT_FILE" \
	 $$(which nixos-install) \
	 --root /mnt/losurdo \
	 $(if $(losurdo_channel),--channel "$(losurdo_channel)") \
	 --no-root-passwd \
	 --show-trace

umount:
	for p in \
	 boot/efi \
	 boot \
	 home \
	 nix \
	 var/cache \
	 var/log \
	 var/mail \
	 var/redis \
	 var/tmp \
	 var/www \
	 var \
	 "" \
	 ; do \
		! sudo mountpoint /mnt/losurdo/"$$p" || \
		sudo umount -v /mnt/losurdo/"$$p" ; \
	 done
	! sudo zpool list rpool 2>/dev/null || \
	zfs get -H encryption rpool | \
	grep -q '^rpool\s*encryption\s*off' || \
	zfs get -H keystatus rpool | \
	grep -q '^rpool\s*keystatus\s*unavailable' || \
	sudo zfs unload-key rpool
	#! sudo zpool list bpool 2>/dev/null || \
	#sudo zpool export bpool
	! sudo zpool list rpool 2>/dev/null || \
	sudo zpool export rpool

unlock:
	pass servers/losurdo/zfs/rpool | \
	NIXOPS_DEPLOYMENT="$${NIXOPS_DEPLOYMENT:-$(LOSURDO_DEPLOYMENT)}" \
	nixops ssh losurdo -p 2222 'zfs load-key rpool && pkill zfs'