Linux Full Disk Encryption

Pop!_OS (and probably some others) does it transparently, which is nice.

I have not figured out how to do it manually yet but Linode seems to have a good guide.