OpenRC script to prompt for ZFS passwords on boot

zfs-import-key-prompt

#!/sbin/openrc-run
# Distributed under the terms of the GNU General Public License v2

depend() {
	before zfs-mount
	after zfs-import
	keyword -timeout
}

start() {
	retval=0
	ebegin "Loading ZFS encryption key(s)"
	OLDIFS="$IFS"
	IFS=$'\n'
	for line in $(zfs list -Ho name,encryptionroot,keystatus,keylocation); do
		name=$(echo "$line" | cut -f1)
		encryptionroot=$(echo "$line" | cut -f2)
		keystatus=$(echo "$line" | cut -f3)
		keylocation=$(echo "$line" | cut -f4)
		if [ "$encryptionroot" != "-" ] &&
			[ "$name" = "$encryptionroot" ] &&
			[ "$keystatus" = "unavailable" ] &&
			[ "$keylocation" != "none" ]
		then
			if [ "$keylocation" = "prompt" ]; then
				args="-L prompt"
			else
				args=""
			fi
			if ! eval zfs load-key $args \"$encryptionroot\"; then
				retval=1
			fi
		fi

	done
	IFS="$OLDIFS"
	eend $retval
	return $retval
}

stop() {
	retval=0
	ebegin "Unloading ZFS encryption key(s)"
	OLDIFS="$IFS"
	IFS=$'\n'
	for line in $(zfs list -Ho name,encryptionroot,keystatus,keylocation); do
		name=$(echo "$line" | cut -f1)
		encryptionroot=$(echo "$line" | cut -f2)
		keystatus=$(echo "$line" | cut -f3)
		keylocation=$(echo "$line" | cut -f4)
		if [ "$encryptionroot" != "-" ] &&
			[ "$name" = "$encryptionroot" ] &&
			[ "$keystatus" = "available" ] &&
			[ "$keylocation" != "none" ]
		then
			if ! zfs unload-key $encryptionroot; then
				retval=1
			fi
		fi
	done
	IFS="$OLDIFS"
	eend $retval
	return $retval
}