description: >
    D-bus interface to manage a logical storage volume. Currently, this
    interface only supports LUKS encrypted volumes, but it can be extended in
    the future to support other types of volumes, as well.

methods:
    - name: FormatLuks
      description: >
          Format a LUKS encrypted device and create a filesystem.
      parameters:
          - name: Password
            type: array[byte]
            description: >
                Array of bytes to use as the LUKS password.
          - name: Type
            type: enum[self.FilesystemType]
            description: >
                Type of filesystem, e.g. ext2, ext3, ext4, vfat.
      errors:
          - xyz.openbmc_project.Common.Error.InternalFailure
          - xyz.openbmc_project.Common.Error.ResourceNotFound
          - xyz.openbmc_project.Common.Error.UnsupportedRequest

    - name: Erase
      description: >
          Erase the contents of the volume.
      parameters:
          - name: EraseType
            type: enum[self.EraseMethod]
            description: >
                Describes what type of erase is done.
      errors:
          - xyz.openbmc_project.Common.Error.InternalFailure
          - xyz.openbmc_project.Common.Error.ResourceNotFound

    - name: Lock
      description: >
          Unmount the filesystem, lock the volume, and remove sensitive data
          (e.g. volume key) from memory.
      errors:
          - xyz.openbmc_project.Common.Error.InternalFailure
          - xyz.openbmc_project.Common.Error.UnsupportedRequest

    - name: Unlock
      description: >
          Activate the volume and mount the filesystem.
      parameters:
          - name: Password
            type: array[byte]
            description: >
                Array of bytes to use as the LUKS password.
      errors:
          - xyz.openbmc_project.Common.Error.InternalFailure
          - xyz.openbmc_project.Common.Error.ResourceNotFound

    - name: ChangePassword
      description: >
          Change the LUKS password that unlocks the storage volume.
      parameters:
          - name: OldPassword
            type: array[byte]
            description: >
                Array of bytes for the old LUKS password.
          - name: NewPassword
            type: array[byte]
            description: >
                Array of bytes to use as the LUKS password.
      errors:
          - xyz.openbmc_project.Common.Error.InternalFailure
          - xyz.openbmc_project.Common.Error.ResourceNotFound

properties:
    - name: Locked
      type: boolean
      default: false
      description: >
          Indicates whether the LUKS volume is locked.

enumerations:
    - name: EraseMethod
      description: >
          Indicates which erase method/step is being requested.
      values:
          - name: CryptoErase
            description: >
                Destroys the encryption key slots, preventing decyrption.
          - name: VerifyGeometry
            description: >
                Confirms a set percent of the disk is accessible.
          - name: LogicalOverWrite
            description: >
                Overwrites the disk with a reproducible incompressible pattern.
          - name: LogicalVerify
            description: >
                Verifies a reproducible pattern has been written to the disk.
          - name: VendorSanitize
            description: >
                Uses the sanitization provided by the device firmware.
          - name: ZeroOverWrite
            description: >
                Writes zeros over the whole disk.
          - name: ZeroVerify
            description: >
                Verifies the the entire disk has been zeroed.
          - name: SecuredLocked
            description: >
                Locks the disk to prevent data being written to it.

    - name: FilesystemType
      description: >
          Type of filesystem used on the storage device.
      values:
          - name: ext2
            description: >
                Filesystem type ext2
          - name: ext3
            description: >
                Filesystem type ext3
          - name: ext4
            description: >
                Filesystem type ext4
          - name: vfat
            description: >
                Filesystem type vfat