csmk

I don't know if you already figured out, but I'll leave here my boot.conf
boot {     generate grub     default "Funtoo Linux Hardened"     timeout 3 }   "Funtoo Linux Hardened" {     params root=/dev/mapper/root     params += crypt_root=/dev/vda3     params += rootfstype=ext4     params += ro     params += quiet     kernel /vmlinuz-3.17.7-hardened-r1     initrd /initramfs-genkernel-x86_64-3.17.7-hardened-r1 } After I compile the kernel (and make "modules_install"/"install"), I run "genkernel --luks --install initramfs" to build the initramfs.
 

looks like you do not use initramfs with encryption support. This is required for decrypting the dirves