I'm using LUKS on lvm as specified here:
https://libreboot.org/docs/gnulinux/encrypted_parabola.html
# dd if=/dev/urandom of=/dev/sda; sync
# cryptsetup -v --cipher serpent-xts-plain64 --key-size 512 --hash whirlpool --iter-time 500 --use-random --verify-passphrase luksFormat /dev/sda1
# cryptsetup luksOpen /dev/sda1 lvm
# pvcreate /dev/mapper/lvm
# vgcreate matrix /dev/mapper/lvm
etc.
It's a well written guide, I use it with the parabola/arch guide when I setup a new parabola install.
I'll look into ecryptfs this summer, thanks for the tip.
http://ecryptfs.org/
https://en.wikipedia.org/wiki/ECryptfs
https://wiki.archlinux.org/index.php/ECryptfs