Workaround is mkdir -p /etc/systemd/system/systemd-cryptsetup@.service.d cat > /etc/systemd/system/systemd-cryptsetup@.service.d/stop-before-udevd.conf << EOF [Unit] After=systemd-udevd.service EOF systemctl daemon-reload But seriously, this is just wack-a-mole.