It's obvious cryptsetup should map partitions by UUID instead of dev entries (e.g. /dev/sda5) -- and it's obvious I don't know how difficult it is ;-) --, even more while cryptdisks service doesn't do enough validation on the partition used (https://bugs.launchpad.net/ubuntu/+source/cryptsetup/+bug/5099520).
Binary package hint: cryptsetup
It's obvious cryptsetup should map partitions by UUID instead of dev entries (e.g. /dev/sda5) -- and it's obvious I don't know how difficult it is ;-) --, even more while cryptdisks service doesn't do enough validation on the partition used (https:/ /bugs.launchpad .net/ubuntu/ +source/ cryptsetup/ +bug/5099520).