gpdd

# securely erase the disk
cryptsetup open --type plain /dev/sda container
dd if=/dev/zero of=/dev/mapper/container

# create partitions
sgdisk -Z /dev/sda
sgdisk -n 1:0:+200M -t 1:EF00 -n 2:0:0 -t 2:8300 -p /dev/sda

# encrypt /dev/sda2
cryptsetup luksFormat /dev/sda2