#!/usr/bin/sh

if [[ $EUID -ne 0 ]]; then
    echo "Must run as root!" >&2;
    exit 1
fi

if [[ $1 ]]; then
    char_num=$1;
else
    char_num=64;
fi

cat /dev/urandom | tr -dc 'a-zA-Z0-9!@#$%^&*' | fold -w $char_num | head -n 1 \
    | systemd-creds encrypt -qp --name=salt - - 2> /dev/null