I am running Linux virtual machines on a cloud provider. So effectively, the disk is a VHD file. The machine will have some sensitive information on the disk, such as certificates, passwords... I would like to encrypt some part (or all) of the disk so that in case someone gets their hands on the VHD file, they can't recover the private information. Of course, since the server might be rebooted at any time by the cloud provider (security update, migration to a different physical host, etc...), asking for a password at bootup is not an option.
How can I achieve that, if that's even possible?