Nobody cared, closing.

Ok thanks for the update, if someone is motivated to integrate this into grml2hd 
I'm happy to accept that (I personally am not interested enough to implement it 
on my own right now).

with a separate /boot partition it should just be a matter of adding crypto-root 
to /etc/crypttab, the decrypted device to /etc/fstab and refresh the initrd.

but i'm not sure if the initrd refresh is really needed anymore.

Gebi, do you have an idea how much effort it would take to support crypted root 
within grml2hd nowadays? If it's not that much effort we could add support for 
it, otherwise I tend to close this bugreport with "won't fix" unless someone 
comes up with the according code.

regards,
-mika-

grml2hd currently supports encrypted swap and /home partitions, but not
encrypted root-partitions ('/').
as i understand, this is possible though and 'only' not done because simply no
one wrote the code.
here's a vote to implement this for the next release.