• Encrypt data on storage devices using LUKS.
  • Manage automatic decryption during system boot with NBDE.