NAS verschluesselung

99-unlock-luks.rules:
## identify usb-key and run script
#BUS=="usb", 
SUBSYSTEMS=="usb"
KERNEL=="sd[b-z]2", 
ACTION=="add"
#ENV{DEVNAME}=="/dev/disk/by-label/lock",
ATTRS{vendor}=="SMI",
ATTRS{rev}=="1100",
#[...]
#SYMLINK+="usbkey%n", 
RUN+="/scripts/unlock-luks"

unlock-luks:
#! /bin/bash

## script to unlock and mount encrypted device on key insert
f_error(){    ## default error message
    echo "" >>/dev/ttyS0
    echo "Es ist ein Fehler aufgetreten bei Befehl $1." >>/dev/ttyS0
    echo "" >>/dev/ttyS0
    exit 1
}


if ! ( mount | grep -icq "/dev/mapper/storage" ); then
    if [ -e /dev/disk/by-label/lock ]; then
        mount -t ext4 /dev/disk/by-label/lock /lock
        if [ $? -ne 0 ]; then
            exit 1
        fi
        cryptsetup luksOpen --key-file=/lock/key.256 UUID=b4f34d1f-c647-410c-80df-7163e6713256 storage
        sleep 1
        mount /services/storage
        if [ $? -ne 0 ]; then
            f_error "mount /dev/mapper/storage"
        fi
        umount /lock
        echo "storage wurde erfolgreich eingehangen..." >>/dev/ttyS0
        if [ -e /run/lock/menu ]; then
            if ( mount | grep -icq '/dev/mapper/storage' ); then
                for SERVICE in $(cat /config/services.list); do 
                    if ( $( service ${SERVICE} status | egrep -icq "not running | stopped" ) ); then
                        echo "" >>/dev/ttyS0
                        echo "starte ${SERVICE}" >>/dev/ttyS0
                        echo "" >> /dev/ttyS0
                        service ${SERVICE} start
                        if [ $? -ne 0 ]; then
                            f_error ${SERVICE}
                            break
                        else
                            echo "" >>/dev/ttyS0
                            echo "service ${SERVICE} erfolgreich gestartet." >>/dev/ttyS0
                        fi
                    fi
                done
            fi
        fi
    fi
fi
exit 0