How do I get full-disk encryption on Linux without having to type a password twice on boot? This is not a surface-level issue you can solve at distribution / DE level, and it’s not the only one.

A good pre-installed environment of current tools would be nice, of course.