% cryptsetup luksOpen /dev/md1 crypt_dev_md1 # make sure to use the same crypted device name as is in /etc/crypttab in the system, or else grub and the initramfs stuff will get confused.# Add a filter to the lvm config that only accepts this one PV.# Add something like this to the devices section:# filter = [ "a|/dev/mapper/crypt_dev_md1|", "r|.*/|" ]# (there are a bunch of examples there already.)% vi /etc/lvm/lvm.conf% vgchange -a y 70 logical volume(s) in volume group "vg_ganeti" now active% mkdir /TARGET% fsck /dev/vg_ganeti/root% mount /dev/vg_ganeti/root /TARGET% cd /TARGET% fsck /dev/md0% mount /dev/md0 boot% mount -o bind /proc proc% mount -o bind /dev dev% mount -o bind /sys sys% mount -o bind /run run% chroot .%% update-initramfs -u# check cat /proc/partitions to find the boot disks, re-install grub%% grub-install /dev/nvme0n1Installing for i386-pc platform.Installation finished. No error reported.%% grub-install /dev/nvme1n1Installing for i386-pc platform.Installation finished. No error reported.%% update-grub%% exit% umount ./*% cd /% umount TARGET% vgchange -a n% cryptsetup luksClose crypt_dev_md1% reboot