Ubuntu Secure Boot
Installing Ubuntu with encryption enabled only encrypts the root folder. That is enough
if you’re only worried about someone stealing your laptop and seeing your files.
However, there is another attack vector: someone gains access to your laptop, modifies
the kernel (he can since it’s on unencrypted /boot
) and hands it back, without you knowing.
If you want to defend against that, read on.