Based on @craftyguy 's #osk-sdl work i added cryptsetup-initramfs support to the #librem5's image-builder so one can build #luks encrypted images too. There's more work needed for this to hit the factory floor but at least one can build own images with encryption once all is merged. The video shows the devkit since this a bit simpler to debug over serial:
... and here's the same from yesterday but on a #librem5.
For some reason #plymouth chokes a little compared to the devkit. Patches are all out there now so everyone can build their own encrypted #PureOS images.
#osk-sdl changes are already merged upstream, thanks @craftyguy
@Phaserune @craftyguy i didn't look yet but i'll need to fix that to reduce boot flickering.