Ok, I tried a lot, but with current live-build without patching live-update-initramfs it is not possible getting a live system which supports encrypted partitions at boot time for persistence.
So it must get fixed in live build tools, eg in live-update-initramfs. Or cryptsetup changes the default - disabling security as default is a somewhat strange idea. I'd replaced the call to original update-initramfs with this line CRYPTSETUP=y /usr/sbin/update-initramfs.orig.initramfs-tools "${@}" (line 89 only) Yes, of course, it must be configure-able. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org