I need to deploy a software installation on Ubuntu VM running on top of ESXi. The ESXi does not support any encryption on the VM level, so this has to be done on the guest OS. I basically want to prevent someone from copying the image and reading the software.
AFAIK there's the option of encryption the Ubuntu partion during installation with the LVM. However this requires a key to be entered on every restart, or storing the key on the unprotected boot partion, both of which are not optimal.
Are there any workarounds for LVM encryption or is there any other tool that can be used in this situation?