Full-disk encryption on Linux with LUKS beyond the installer defaults — how dm-crypt and LUKS headers work, keyslot and key rotation, TPM-backed and automated unlock, and a recovery plan for when you need one years later.
Cryptsetup
-
LUKS and Full-Disk Encryption: Root Partitions, TPM Unlock, and Key Management