corrected CC kernel script, added cryptrootsetup with debootstrap