For directly installing Debian Sid not supported by the Debian installer, namely:
- Single LUKS2 encrypted partition which contains the full installation
- Single BTRFS filesystem (integrated home partition)
- Encrypted swapfile in BTRFS subvolume (supports laptop suspend but not hibernate)
- Uses systemd-boot bootloader (instead of Grub2, also optional rEFInd instructions)
- Minimal Gnome install (plus instructions for any other DE you wish)
- Proper user groups for common security tools like sudo-less Wireshark, etc...
- Optional removal of crypto keys from RAM during laptop suspend
- Optional configurations for laptops (including fingerprint readers)