cryptsetup -c aes-xts-plain -s 512 luksFormat /dev/sdX2 cryptsetup luksOpen /dev/sdX2 lukslvm pvcreate /dev/mapper/lukslvm vgcreate vgkanotix /dev/mapper/lukslvm lvcreate -L 1500M -n swap vgkanotix mkswap /dev/mapper/vgkanotix-swap lvcreate -l 100%FREE -n root vgkanotix mkfs.ext4 /dev/mapper/vgkanotix-root echo lukslvm UUID=$(cryptsetup luksUUID /dev/sdX2) none luks|tee -a /etc/crypttab mount /dev/sdX1 /mnt grub-install --root-directory=/mnt /dev/sdX wget -NP /mnt/boot/grub http://kanotix.com/files/fix/crypto/lvm/grub.cfg umount /mnt # this part after first boot: mkdir -p /etc/keys echo -n YOUR_KEY > /etc/keys/root.key chmod 600 /etc/keys/root.key chmod 700 /etc/keys/ wget -NP /etc/initramfs-tools/hooks http://kanotix.com/files/fix/crypto/key chmod +x /etc/initramfs-tools/hooks/key update-initramfs -u perl -pi 's/lukslvm.*\n//' /etc/crypttab echo lukslvm UUID=$(cryptsetup luksUUID /dev/sdX2) /etc/keys/root.key luks,keyscript=/bin/cat|tee -a /etc/crypttab history -c