Debian live with encrypted persistence support thanks to cgraff , haylo on #debian-live OFTC use auto scripts to config lb config lb build to copy the image on an usb stick do the following # MAKE THE PARTITION, sudo parted "${devicel}" mkpart primary "${bytes}" "${usb_size}" # ENCRYPT THE PARTITION sudo cryptsetup --verbose --verify-passphrase luksFormat "${devicel}2" # OPEN THE ENCRYPTED PARTITION sudo cryptsetup luksOpen "${devicel}2" my_usb # MAKE A FILESYSTEM ON IT AND LABEL IT "persistence" sudo mkfs.ext3 -L persistence /dev/mapper/my_usb # MAKE A MOUNT POINT sudo mkdir -p /mnt/my_usb # MOUNT THE OPENED ENCYRYPTION PARTITION sudo mount /dev/mapper/my_usb /mnt/my_usb/ # MAKE THE PERSISTENCE.CONF FILE echo "/ union" > ~/persistence.conf && sudo mv ~/persistence.conf \ /persistence.conf && sudo mv /persistence.conf /mnt/my_usb # UMOUNT IT sudo umount /dev/mapper/my_usb # CLOSE THE LUKS PARTITION sudo cryptsetup luksClose /dev/mapper/my_usb