https://www.sindastra.de/p/511/linux-full-disk-encryption