PSA: know where your #grml stick is. and then something like

mkdir /chroot
cryptsetup luksOpen /dev/nvme0n1pX emergency
vgchange -ay
mount /dev/mapper/emergency-root /chroot
grml-chroot /chroot
...
vgchange -an
cryptsetup close emergency

(maybe add a few more mounts for /var /home /partition/of/your/choice. but /sys, /dev, /proc are handled by grml-chroot)

you know … in case you find yourself at #38c3 and need a bit more stress reduction on top of your backup at home.