lang: core: embedded: provisioner: Encrypt the filesystem

The provisioner should be able to encrypt things. We should use an empty
passphrase so that the choosing of the actual passphrase can be done at
first boot.

lang/core/embedded/provisioner/main.mcl

@@ -568,6 +568,7 @@ class base:host($name, $config) {
 	panic(len($password) != 0 and len($password) != 106) # length of salted password
 
 	$part = $config->part || ""	# partitioning scheme
+	$luks = $config->luks || true	# enable luks encryption
 
 	$empty_list_str []str = []	# need an explicit type on empty list definition
 	$packages = $config->packages || $empty_list_str
@@ -826,6 +827,7 @@ class base:host($name, $config) {
 		password => $password,	# salted
 		bios => $bios,
 		part => $part,
+		luks => true, # set empty password
 		flavour => $flavour,
 		url => "http://${router_ip}:${http_port_str}/fedora/releases/${version}/Everything/${arch}/os/",
 		repos => {