Installing Ubuntu to a new Notebook, I was surprised that I wasn't offered the option to encrypt the home directory any more.
I found some vague information that Ubuntu dropped ecryptfs support a while ago in favor of complete disc encryption with LUKS. For my use case it isn't desirable to encrypt the whole device as I aiming only to protect the data for unauthorized access in case the machine gets lost or stolen. No super sensitive data are involved and no hostile government agency (as far as I know) and I cant afford an extra password dialog.
So my question is simple: What is the recommended method to encrypt home directory in Ubuntu 21.04?
Am I for some reason discouraged to use ecryptfs?
Can I safely use the old method described bellow?
First install the packages ecryptfs-utils and rsync:
sudo apt install ecryptfs-utils rsync lsof
Then load the ecryptfs kernel module:
sudo modprobe ecryptfs
The user whose home directory you want to encrypt MUST NOT be logged in. For example, you can be logged as root in a tty.
Then run as root:
ecryptfs-migrate-home -u <username>