set CRYPTSETUP=y when calling update-initramfs