# dd if=/dev/urandom of=/dev/sda; sync # cryptsetup -v --cipher serpent-xts-plain64 --key-size 512 --hash whirlpool --iter-time 500 --use-random --verify-passphrase luksFormat /dev/sda1 # cryptsetup luksOpen /dev/sda1 lvm # pvcreate /dev/mapper/lvm # vgcreate matrix /dev/mapper/lvm etc. It's a well written guide, I use it with the parabola/arch guide when I setup a new parabola install.
I'll look into ecryptfs this summer, thanks for the tip.