The Alis scripts let you choose if you want encryption or not.

It will encrypt your root partition and home partition with luks2.

In the context of Arch Linux, LUKS2 (Linux Unified Key Setup 2) refers to the second version of the standard for hard disk encryption. LUKS is widely used in the Linux ecosystem to facilitate secure, user-friendly disk encryption. LUKS2 introduces several improvements over its predecessor, LUKS1, including a more flexible on-disk format, support for additional cryptographic algorithms, and enhanced features like dynamic resizing of LUKS containers and integrated metadata redundancy to improve the resilience against data corruption.

When using Arch Linux, users have the option to encrypt their system partitions during the installation process using LUKS2, enhancing the security of the data stored on these partitions. For instance, during an Arch Linux installation, one could use the `cryptsetup` command with LUKS2 to encrypt a partition, and then proceed to set up the operating system on this encrypted partition. This ensures that without the correct passphrase or keyfile, the encrypted data cannot be accessed, providing a strong layer of security against unauthorized access.

LUKS2 is particularly relevant for users who require high security for their data, such as those handling sensitive information. Arch Linux’s documentation and community resources, like the Arch Wiki, provide detailed guidance on how to implement LUKS2 encryption, making it accessible for users with varying levels of experience. This reflects Arch’s philosophy of user empowerment and control, allowing users to customize their security settings according to their needs while benefiting from the latest advancements in encryption technology.

The video discusses the importance of encryption in Linux installations, highlighting the creator’s journey through creating three videos on this topic. Emphasizing Linux’s flexibility, the presenter has explored encryption using Calamares on projects like ArcoLinux, Alci, and Carli, demonstrating how it secures data by requiring a password at boot.

The Arch Linux installer script, ArchInstall, is showcased for setting up an encrypted system with Cinnamon and SDDM from a minimal base.

Another project, Ariser, is introduced as a pure Arch ISO method, using scripts for an installation closely aligned with Arch’s philosophy but allowing on-the-fly customization.

The video guides through creating a custom Arch Linux ISO named “Area” within 60 minutes, using the ALIS (Arch Linux Install Script) project by Pico. It stresses the automated, unattended nature of the installation, advocating for the ALIS script for its efficiency and the ease of updating through Git, even on older ISOs.

The tutorial also covers modifying ALIS configurations for personal preferences, including system locale and encryption settings, underlining the importance of understanding Arch’s package management system, Pacman, for anyone attempting the project. The video concludes by demonstrating the reboot process post-encryption and comparing boot times, highlighting the practicality of encryption for security-conscious users while maintaining the simplicity and minimalism of an Arch Linux setup with XFCE.

https://wiki.archlinux.org/title/Dm-crypt/Encrypting_an_entire_system