Шифруем всё и вся

emerge -s sharutils

head -c 2880 /dev/urandom | uuencode -m - | head -n 65 | tail -n 64 > root.key

cryptsetup -c sha512 -d /path/to/key/file/root.key create xen /dev/vg/lvm

mkreiserfs /dev/mapper/name

cryptsetup remove name

cryptsetup -d /path/to/key/file/root.key create xen /dev/vg/lvm

mount /dev/mapper/name /mount_point

cryptsetup status name