Kernel update requires a reboot, which means one has to provide a passphrase to unlock the disk. To provide a passphrase a keyboard and physical presence are required. This is inconvenient in headless and remote setups. As a result, people may choose to keep using old kernels, which may lead to security issues.

To address this problem, I created MIT-licesed tool that does the reboot, but asks for the passphrase before, not after. This way entire operation could be performed remotely via ssh.

If you are interested in details, you can read my post about it here: https://blog.pawelpokrywka.com/p/rebooting-linux-with-encryp...

I hope cryptreboot will help people to better secure their systems. If you have questions or feedback, I can answer them here in comments.