with https://github.com/rdkr/lvm-on-luks#unencrypted-boot I can get full disk encryption working (with encrypted hibernate) @rcasero might be worth adding it to the guide.