Kickstart will not prompt for a passphrase when the actual passphrase is omitted as documented in kickstart-docs.txt. I'm using options "--encrypted --passphrase=". Result is unencrypted devices. Happens with both "text" and graphical installs. Actually giving a password using --passphrase=password works, but is insecure to embed in the kickstart file. 100% reproducible. I'm hopeful an anaconda patch to load during kickstart will appear so we don't have to wait for F10.
Bump, vote or whatever. I really need this or even better to be able to specify a location to write a key to such as "--key-file=/dev/sdc1/disk.key" would be unbelievably handy. I can then prompt the user either post-install or at first-boot to set a pass-phrase as an alternative or then and a company wide recovery key somehow.
Fix will be in anaconda-11.4.1.29-1 (rawhide).