https://www.sindastra.de/p/2696/in-place-root-encryption-linux