cryptoboot is set of tools for disk encryption on Unix. It is especially suited to encrypt root partition, so _everything_ (except kernel and cryptoboot inself) is encrypted.