Is there a script to unlock several LUKS drives at once and restart docker+mergerfs?

#!/bin/bash

# Check if the script is run as root (necessary for unlocking, managing systemd services, and mergerfs)
if [ "$EUID" -ne 0 ]; then
  echo "Please run this script as root."
  exit 1
fi

# Stop the Docker systemd service
#systemctl stop docker

# Ask the user for the LUKS password
read -s -p "Enter the LUKS password: " luks_password
echo # Add a new line after password input

# List all devices and attempt to unlock LUKS devices
for device in $(lsblk -o NAME | tail -n +2); do
  if cryptsetup isLuks "/dev/$device" 2>/dev/null; then
    luks_name="${device}-crypt"
    echo "Unlocking /dev/$device as $luks_name..."
    echo "$luks_password" | cryptsetup luksOpen "/dev/$device" "$luks_name"
    if [ $? -eq 0 ]; then
      echo "Successfully unlocked /dev/$device as $luks_name."
    else
      echo "Failed to unlock /dev/$device."
    fi
  fi
done

# Restart the monit systemd service
#systemctl restart monit

# Mount all decrypted drives
mount -a

# Restart the mergerfs mount systemd service
systemctl restart srv-mergerfs-poolname.mount

# Start the Docker systemd service again
systemctl restart docker

echo "All LUKS encrypted drives unlocked, mergerfs pool restarted, and Docker service restarted."

#!/bin/bash
#
# OpenMediaVault (OMV) LUKS Unlock Helper Script
#
# This script automates the process of unlocking each drive and restarting the Docker service
# and the MergerFS pool(s) via the command line. This script assumes that all encrypted drives accept the same 
# passphrase. If your setup involves multiple passphrases, this script may not be suitable without
# modification.
#
# -----------------------------------------------------------------------

# Check if the script is run as root (necessary for unlocking, managing systemd services, and mergerfs)
if [ "$EUID" -ne 0 ]; then
  echo "Please run this script as the root user or with sudo privileges."
  exit 1
fi

read -s -p "Enter the LUKS passphrase: " luks_passphrase
echo # Add a new line after passphrase input

# Array to hold LUKS devices
luks_devices=()

# List all devices and attempt to unlock LUKS devices
for device in $(lsblk -o NAME | tail -n +2); do
  if cryptsetup isLuks "/dev/$device" 2>/dev/null; then
    luks_name="${device}-crypt"
    echo "Unlocking /dev/$device as $luks_name..."
    echo "$luks_passphrase" | cryptsetup luksOpen "/dev/$device" "$luks_name"
    if [ $? -eq 0 ]; then
      echo "Successfully unlocked /dev/$device as $luks_name."
      luks_devices+=("$luks_name")
    else
      echo "Failed to unlock /dev/$device."
    fi
  fi
done

# Check if all LUKS devices are successfully unlocked
if [ "${#luks_devices[@]}" -eq 0 ]; then
  echo "No LUKS devices unlocked. Exiting."
  exit 1
fi

echo "Mounting all decrypted drives..."
mount -a

echo "Restarting the mergerfs mount systemd service..."
systemctl restart srv-mergerfs-POOLNAME.mount

echo "Retarting the Docker systemd service..."
systemctl restart docker

echo "All LUKS-encrypted drives unlocked, mergerfs pool restarted, and Docker service restarted."

#!/bin/bash
#
# OpenMediaVault (OMV) LUKS Unlock Helper Script for RAID with LUKS
#
# This script automates unlocking LUKS-encrypted drives, assembling RAID arrays,
# and unlocking RAID arrays encrypted with LUKS. It also restarts Docker and MergerFS services.
# Assumes all LUKS devices (including RAID) share the same passphrase.
#
# -----------------------------------------------------------------------

# Check if the script is run as root
if [ "$EUID" -ne 0 ]; then
  echo "Please run this script as the root user or with sudo privileges."
  exit 1
fi

read -s -p "Enter the LUKS passphrase: " luks_passphrase
echo # Add a new line after passphrase input

# Array to hold individual LUKS devices
luks_devices=()

# RAID LUKS device (if applicable)
raid_luks_device=""

# Step 1: Unlock individual LUKS devices
for device in $(lsblk -o NAME | tail -n +2); do
  if cryptsetup isLuks "/dev/$device" 2>/dev/null; then
    luks_name="${device}-crypt"
    echo "Unlocking /dev/$device as $luks_name..."
    echo "$luks_passphrase" | cryptsetup luksOpen "/dev/$device" "$luks_name"
    if [ $? -eq 0 ]; then
      echo "Successfully unlocked /dev/$device as $luks_name."
      luks_devices+=("/dev/mapper/$luks_name")
    else
      echo "Failed to unlock /dev/$device."
    fi
  fi
done

# Check if any LUKS devices were unlocked
if [ "${#luks_devices[@]}" -eq 0 ]; then
  echo "No individual LUKS devices unlocked. Exiting."
  exit 1
fi

# Step 2: Assemble RAID arrays (if any)
echo "Checking for RAID arrays to assemble..."
for device in "${luks_devices[@]}"; do
  mdadm_detail=$(mdadm --examine "$device" 2>/dev/null)
  if [[ $? -eq 0 ]]; then
    raid_array=$(echo "$mdadm_detail" | grep "ARRAY" | awk '{print $2}')
    if [[ -n "$raid_array" ]]; then
      echo "Device $device is part of RAID array $raid_array."
      echo "Assembling RAID array $raid_array..."
      mdadm --assemble "$raid_array"
      if [ $? -eq 0 ]; then
        echo "Successfully assembled $raid_array."
        # Check if the RAID array is LUKS-encrypted
        if cryptsetup isLuks "$raid_array" 2>/dev/null; then
          raid_luks_device="$raid_array"
        fi
      else
        echo "Failed to assemble $raid_array."
      fi
    fi
  fi
done

# Step 3: Unlock the RAID LUKS device (if applicable)
if [[ -n "$raid_luks_device" ]]; then
  echo "Unlocking RAID LUKS device $raid_luks_device..."
  luks_name="raid-crypt"
  echo "$luks_passphrase" | cryptsetup luksOpen "$raid_luks_device" "$luks_name"
  if [ $? -eq 0 ]; then
    echo "Successfully unlocked RAID LUKS device as $luks_name."
  else
    echo "Failed to unlock RAID LUKS device."
    exit 1
  fi
fi

# Step 4: Mount all decrypted drives
echo "Mounting all decrypted drives..."
mount -a

# Step 5: Restart MergerFS and Docker services
echo "Restarting the mergerfs mount systemd service..."
systemctl restart srv-mergerfs-POOLNAME.mount

echo "Restarting the Docker systemd service..."
systemctl restart docker

echo "All LUKS-encrypted drives and RAID arrays unlocked, MergerFS pool restarted, and Docker service restarted."