I was about to write that you can easily enable full-disk encryption with Ubuntu on install, but then I realised you had a requirement to use TPM for this. Ubuntu doesn't support this mode without finagling, so this wouldn't meet your requirements.