diff --git a/modules/x-os/boot.nix b/modules/x-os/boot.nix
index f0e97c9..2ed1369 100644
--- a/modules/x-os/boot.nix
+++ b/modules/x-os/boot.nix
@@ -9,6 +9,11 @@ with lib;
     default = false;
     description = "Feature flag for iso builds";
   };
+  options.pub-solar.x-os.disk-encryption-active = mkOption {
+    type = types.bool;
+    default = true;
+    description = "Whether it should be assumed that there is a cryptroot device";
+  };
   config = {
     # Enable plymouth for better experience of booting
     boot.plymouth.enable = true;
@@ -16,7 +21,7 @@ with lib;
     # Mount / luks device in initrd
     # Allow fstrim to work on it.
     # The ! makes this enabled by default
-    boot.initrd = mkIf (!cfg.iso-options.enable) {
+    boot.initrd = mkIf (!cfg.iso-options.enable && cfg.disk-encryption-active) {
       luks.devices."cryptroot" = {
         allowDiscards = true;
       };