LUKS rootfs encryption

[arrow53]

I'm on nanbield with an orin nano and external nvme.

I'm set up fine with A / B boot including rootfs. I'd like to add LUKS encryption to the rootfs partitions.

Can anyone provide some guidance on the current state of how to perform this? I'm fine with doing the encryption on device as discussed here https://elinux.org/images/1/14/Tales_from_the_crypt_v2.pdf