reproducible boot environment with LVM2 and cryptsetup