Is whole drive encryption possible?

[lllll]

I didn't look into the implementation details and didn't try to break it, but.. Mobian is offering disk encryption when using the installer. I have to enter a password every time when the device is booting and it refuses to boot when I'm entering a wrong one. So, if you are fine with Debian/Mobian this might be a possible solution without having to put too much effort in it.

Code:

mobian@mobian:~$ mount | grep crypt

/dev/mapper/calamares_crypt on / type ext4 (rw,relatime)

But since you are also talking about encrypted /tmp I'm not sure if this is good enough for you, I don't think Mobian itself doesn't offer protection at runtime.