luks support

[Adphi]

depends on:

• 23

steps:

• [x] encrypt root partition: cryptsetup luksFormat --batch-mode --verify-passphrase --type luks2 $ROOT_DEVICE $KEY_FILE
• [x] open it: cryptsetup open -d $KEY_FILE $ROOT_DEVICE $ROOT_LABEL
• [x] mount /dev/mapper/$ROOT_LABEL instead of $ROOT_DEVICE
• [x] close it when done: cryptsetup close /dev/mapper/$ROOT_LABEL

syslinux / Initramfs:

• [x] Alpine:
  • [x] in /etc/mkinitfs/mkinitfs.conf: add cryptsetup to features and re-run mkinitfs
  • [x] in /boot/syslinux.cfg append to the kernel cmdline:
  • [x] change root to root=/dev/mapper/$ROOT_LABEL
  • [x] add cryptroot=UUID=$ROOT_PARTITION_UUID
  • [x] add cryptdm=root
• [x] Debian
• [x] Ubuntu
• [x] CentOS

Work done in #30