Yeah, the reality is it's about 3 additional commands to get going (over any other normal volume)...and a very short chef cookbook to automate it. # create

Yeah, the reality is it's about 3 additional commands to get going (over any other normal volume)...and a very short chef cookbook to automate it. # create a key file dd if=/dev/urandom of=/etc/mykeyfile.key bs=512 count=1 # create the luks container cryptsetup luksFormat /dev/sdf1 /etc/mykeyfile.key # open the luks container cryptsetup luksOpen /dev/sdf1 myluksvolume --key-file /etc/mykeyfile.key # format the volume mkfs.xfs /dev/mapper/myluksvolume # mount the disk mount /dev/mapper/myluksvolume /mnt/mymountpoint