inspired from https://habet.dev/blog/raspberry-pi-encrypted-boot-with-ssh/ (archived at https://web.archive.org/web/20220821171435/https://habet.dev/blog/raspberry-pi-encrypted-boot-with-ssh/)
Download Debian for Orange Pi 5 with custom kernel
http://www.orangepi.org/html/hardWare/computerAndMicrocontrollers/service-and-support/Orange-pi-5.html which currently points to https://drive.google.com/drive/folders/1F2uc8v_EQnvsNrevDihwoymOJlFgM-dZ
Use 2 sdcards: one for boot & make the final image and the other to write the image to.
Fix from tutorial (discard option was not added):