system startup + cryptsetup