Sounds like all you need is an Ext4 USB drive with a LUKS key on it. Then add kernel parameters like
rd.luks.key=UUID=/.keys/TheKey:LABEL=KEYS rd.luks.options=discard,keyfile-timeout=10s
in GRUB and it’ll autoboot.
Pull the key and power down and you’re back to normal. I use it in a low threat model environment so I can hit reboot and go get a coffee and come back to a DE.
ETA: sorry, got the timeout format wrong, I don’t use it.






He profits just fine. The companies not so much.
Except NVIDIA, they’re making shovels and shitloads and he probably gets something under the table from them too.