Looking at various disk encryption methods. When this device had
debian on it, I was using encrypted LVM -- encrypting the entire disk, excluding
/boot.

Still want to use entire disk encryption with the new install. Is encrypted LVM still a good way to go? Do you guys know of a better way, a more secure way? I'mhoping to impliment a passphrase on a usb key, which LVM can do, but I hadn't dont last install.

Thanks!