08-10-2023, 05:21 PM
First of all, you need an unencrypted /boot partition so that the kernel can load and bring up a minimum userspace. If even /boot is encrypted, the passphrase prompt is done in GRUB, which does not support advanced features such as a virtual keyboard. And then the minimal userspace in the initramfs must contain the virtual keyboard, and the passphrase prompt must be done in an environment that supports it (usually an X11 or Wayland session).