1 min readAug 26, 2019
Disk encryption is done with just LUKS (i.e. cryptsetup). You can read more about it at https://wiki.archlinux.org/index.php/Disk_encryption. It’s Arch’s wiki, but most of the info is generic.
Now if you don’t have a TPM chip, you will not have a secure storage for your encryption key, so you will have to enter it manually every boot.