I am installing from the alternate CD and using the LVM encrypted hard drive.
The installer is now asking if I want to encrypt my home directory, is this overkill?
Ask Ubuntu is a question and answer site for Ubuntu users and developers. It only takes a minute to sign up.Sign up to join this community
It's overkill for most systems. By "encrypted LVM" you likely mean "LUKS" (Linux Unified Key Setup).
Encrypting the home directory protects you from:
But not from:
Encrypting your system using LUKS (full disk-encryption in the case of the alternative installer):
So, if you are the only user of the system, encrypting your home directory does not add significant protection and will only worsen the performance. Neither should you do that if you're sharing your machine with people you can trust and your computer does not contains top-secret information. A final case: if you are sharing the machine and there are multiple operating systems installed on the machine and you're the only one who knows the passphrase, there is still no need to encrypt your home directory.
Whether or not it's overkill depends on your circumstances. An encrypted home directory will protect your personal data from other users on the system as well as from outside intruders. Additionally, each additional level of encryption makes it more difficult for an attacker to break in. On my backup drive, which has images of client machines, some of which contain credit card and social security numbers, I use entire disk encryption, followed by an encrypted home directory with a different password and a [PPP]: https://www.grc.com/ppp.htm code. For the things with people's personal information, I will additionally stick it inside a TrueCrypt container with cascading encryption. It is probably overkill, but it covers all the bases. Someone who steals my drive is locked out of everything, somebody who somehow hacks the running system is locked out of my files, and somebody who gains console access while I have it backing something up only gets the currently decrypted backup set (Which is most likely their own data.)
Deciding what level you need is largely a matter of discovering what the possible attacks someone would be likely to make against your system and locking them out. Entire disk encryption is probably more than enough for 99% of single-user systems.