cryptsetup -c aes-xts-plain -s 512 luksFormat /dev/sdX2
cryptsetup luksOpen /dev/sdX2 luks

mkfs.ext4 /dev/mapper/luks 

echo luks UUID=$(cryptsetup luksUUID /dev/sdX2) none luks|tee -a /etc/crypttab

mount /dev/sdX1 /mnt
grub-install --root-directory=/mnt /dev/sdX
wget -NP /mnt/boot/grub http://kanotix.com/files/fix/crypto/grub.cfg
umount /mnt

# this part after first boot:

mkdir -p /etc/keys
echo -n YOUR_KEY > /etc/keys/root.key
chmod 600 /etc/keys/root.key 
chmod 700 /etc/keys/
wget -NP /etc/initramfs-tools/hooks http://kanotix.com/files/fix/crypto/key
chmod +x /etc/initramfs-tools/hooks/key
update-initramfs -u

perl -pi 's/luks.*\n//' /etc/crypttab
echo luks UUID=$(cryptsetup luksUUID /dev/sdX2) /etc/keys/root.key luks,keyscript=/bin/cat|tee -a /etc/crypttab

history -c