I have been using ecryptfs encryption for a long time. I prefer per user encryption. That means even a root user can not read a user files when the user is not logged in. When an user is not logged in, any users (including root) should not be able to read his files. But ecryptfs is not an encryption for the entire system.
So today, I am thinking to use LUKS to encrypt the entire partition and then use ecryptfs to encrypt per user's home. Is this recommended (standard) way to achieve what I want? should I use both LUKS and ecryptfs at the same time?
Thanks a lot.