I'm glad you've solved your issue. I read your original (very detailed) mail and I had nothing to contribute with respect to a fix; but I was interested to follow it, as I rely upon remote decryption of the root filesystem myself.
>From what you write, I think you are correct that some component (perhaps cryptroot-initramfs) should be enhanced to handle this scenario better. I'm not sure of exactly what change would be required, nor where that change should be made. There are very few Debian developers monitoring this list. For there to be any chance at all of this enhancement being made, someone will need to spend the time to write up a summary and submit it as a bug against the cryptroot-initramfs package. (perhaps the cryptroot-initramfs maintainers decide the bug better belongs to another component: bugs can be re-assigned after filing with ease). >From there, with luck and a following wind, it may get resolved. Good luck, -- Please do not CC me for listmail. 👱🏻 Jonathan Dowland ✎ j...@debian.org 🔗 https://jmtd.net