I’ve been using fscrypt to encrypt my home directory for over a year now and it seems to work fine: https://wiki.archlinux.org/index.php/Fscrypt

Hi! Author of fs-crypt dropping in from the interwebs.

I also created eCryptfs, which was Ubuntu's original home directory encryption technology, with lots of additional distro integration work by Dustin Kirkland. Unfortunately I had to make some compromises when going with the stackable model, and that caused some problems.

I took the lessons I learned from that first attempt and created fs-crypt as a sort of atonement. I think I got a lot more right on my second attempt at file-base encryption in Linux. At least, it's good enough to be the technology that now encrypts Android storage.

The problem with Linux supporting stuff forever is that some things really need to be retired once a better solution has come along. However so long as there are eCryptfs users out there, I don't think it's going to ever go away at this point.

Thanks for all the great work on both 'ecryptfs' and 'fs-crypt'!

Thanks for that... I’ll check it out

BTW: The only issue I‘ve come across was that the pulseaudio user daemon couldn’t initialize during login (because it started before fscrypt unlocked home dir). There is an easy workaround for Ubuntu 20: https://github.com/google/fscrypt/issues/270

Around 16.04 if you enabled encryption during installation, you got ecryptfs home directories - later (18.04?) they changed to encrypting the entire disk.

In some ways, encrypting the entire disk is more secure.

On Ubuntu, you probably want zfs native encryption - either full disk, or per user:

https://talldanestale.dk/2020/04/06/zfs-and-homedir-encrypti...

Hope general zfs support will improve in the installer, though. As well as automation and tooling around automatic snapshots.