FROM alpine:latest
RUN apk add cryptsetup
RUN rm /etc/profile.d/*
# copy the PATH extender
COPY cryptsetup.env.sh "/etc/profile.d/cryptsetup.env.sh"
COPY deploy.sh "/tmp/deploy.sh"
CMD ["/bin/sh","-c","--","source /tmp/deploy.sh; while true; do sleep 30; done;" ]

#!/bin/sh

# required mounts (container -> host):
# /mnt/host.profile.d/ -> /etc/profile.d # used to extend $PATH
# /mnt/host.cryptsetup/ -> /var/lib/cryptsetup # used to provide CLI
# /mnt/host.lib/ -> /lib/ # used to deploy libs

# deploying PATH extender
cp -v /etc/profile.d/*.sh /mnt/host.profile.d/

# deploying CLI
rm /mnt/host.cryptsetup/*
# see https://pkgs.alpinelinux.org/contents?file=&path=&name=cryptsetup&repo=main&arch=x86_64
cp /sbin/cryptsetup /mnt/host.cryptsetup/
cp /sbin/cryptsetup-reencrypt /mnt/host.cryptsetup/
cp /sbin/integritysetup /mnt/host.cryptsetup/
cp /sbin/veritysetup /mnt/host.cryptsetup/

# deploying libs
#rm /mnt/host.lib/libcryptsetup*
cp /lib/libcryptsetup* /mnt/host.lib/

apiVersion: apps/v1
kind: DaemonSet
metadata:
  name: cryptsetup-deployer
  namespace: longhorn-system
  labels:
    k8s-app: cryptsetup-deployer
spec:
  selector:
    matchLabels:
      name: cryptsetup-deployer
  template:
    metadata:
      labels:
        name: cryptsetup-deployer
    spec:
      containers:
      - name: cryptsetup-deployer
        image: dgrechka/cryptosetup_deployer:latest
        imagePullPolicy: Always
        securityContext:
          privileged: true
        volumeMounts:
        - name: sbin
          mountPath: /mnt/host.cryptsetup/
          mountPropagation: Bidirectional   
        - name: profile-d
          mountPath: /mnt/host.profile.d/
          mountPropagation: Bidirectional   
        - name: lib
          mountPath: /mnt/host.lib/
          mountPropagation: Bidirectional   
      volumes:
      - name: sbin
        hostPath:
          path: /var/lib/cryptsetup/
      - name: profile-d
        hostPath:
          path: /etc/profile.d/
      - name: lib
        hostPath:
          path: /lib/

k8s-charlie [~]# cryptsetup
Error relocating /var/lib/cryptsetup/cryptsetup: crypt_token_external_disable: symbol not found
Error relocating /var/lib/cryptsetup/cryptsetup: crypt_reencrypt_run: symbol not found
Error relocating /var/lib/cryptsetup/cryptsetup: crypt_logf: symbol not found
Error relocating /var/lib/cryptsetup/cryptsetup: crypt_activate_by_token_pin: symbol not found
Error relocating /var/lib/cryptsetup/cryptsetup: crypt_header_is_detached: symbol not found
Error relocating /var/lib/cryptsetup/cryptsetup: crypt_token_external_path: symbol not found
Error relocating /var/lib/cryptsetup/cryptsetup: crypt_dump_json: symbol not found