diff --git a/overlay/usr/local/bin/veilor-installer b/overlay/usr/local/bin/veilor-installer
index 7c8988e..69c84a8 100644
--- a/overlay/usr/local/bin/veilor-installer
+++ b/overlay/usr/local/bin/veilor-installer
@@ -555,6 +555,12 @@ bash $REPO/scripts/kde-theme-apply.sh
 mkdir -p /etc/dracut.conf.d
 cat > /etc/dracut.conf.d/99-veilor-no-plymouth.conf << 'EOF'
 omit_dracutmodules+=" plymouth "
+# Ensure systemd-cryptsetup module + systemd-ask-password agent are
+# included so LUKS prompt appears on tty1 (text mode) when plymouth
+# is omitted. Without these, dracut loops on devexists waiting for
+# an unlock that never happens.
+add_dracutmodules+=" crypt systemd-cryptsetup "
+install_items+=" /usr/bin/systemd-tty-ask-password-agent "
 EOF
 # Regenerate initramfs for the installed kernel(s).
 for kver in /lib/modules/*/; do