I read two very interesting howtos:
Both are interesting. I could not figure out how to:
1. make the bootloader to load keyfile from USB (like in A above) which also has a passphrase to authenticate remotely using ssh (like in B) or say a combination of A and B?
2. make the bootloader to first search for keyfile, if there is a keyfile, the unencrypted volume would be decrypted (like A above) . If no keyfile found, it can alternatively wait to be remotely get passphrase (as in B above) or say either-keyfile-else- passphrase approach?