Quick script to create an encrypted luks container, create a zfs pool for it along with a mount point, add a new user, then write the crypttab line for boot

encrypted-zfs-home.sh

#!/bin/bash
echo "enter username:"
read USERNAME
echo "enter # of gigabytes the home drive should be, just the number"
read SIZE
echo "Executing:" "sudo dd if=/dev/null of=/$USERNAME.img count=0 seek=${SIZE}G"
cd /
sudo adduser $USERNAME
sudo rm -rf /home/${USERNAME} # removing the home directory it created
sudo dd if=/dev/null of=/$USERNAME.img count=0 seek=${SIZE}G
sudo cryptsetup luksFormat /$USERNAME.img
echo "dont screw this up, i did not do any checking..."
sudo cryptsetup luksOpen /$USERNAME.img $USERNAME
sudo zpool create -o ashift=12 -O normalization=formD -O atime=off -m none -R /home/$USERNAME -O compression=lz4 ${USERNAME}tank /dev/mapper/$USERNAME
sudo zfs create -o mountpoint=/home/$USERNAME ${USERNAME}tank/HOME

sudo chown $USERNAME:$USERNAME -R /home/$USERNAME
sudo echo $USERNAME /$USERNAME.img none luks,timeout=120,tries=5 >> /etc/crypttab

echo "reboot and see if the new dataset is mounted, if not it might have created /home/$USERNAME which would block the new mount"
echo "if this is the case, then delete the directory it created and then run zpool import ${USERNAME}tank && zfs mount -a "