I want to set up virtual machine with encrypted root disk (yes, it requires entering decryption password on the boot; VNC console should do that).
Yes, I know there is multiple ways to circumvent the encryption: someone from Digital Ocean could easily eavesdrop the password or dump memory contents and obtain the password from there.
These answers are provided by our Community. If you find them useful, show some love by clicking the heart. If you run into issues leave a comment, or add your own answer to help others.