Create encrypted volume file

vaultfile

# derived from: https://opensource.com/article/21/4/linux-encryption

# create empty file
dd if=/dev/urandom of=vaultfile.img bs=1M count=512

# create LUKS volume
cryptsetup --verify-passphrase luksFormat vaultfile.img

# open the LUKS volume
sudo cryptsetup open --type luks vaultfile.img vault
ls /dev/mapper

# create a filesystem
sudo mkfs.ext4 -L vault /dev/mapper/vault

# start the volume
sudo cryptsetup open --type luks vaultfile.img vault
sudo mkdir ~/vault
sudo mount /dev/mapper/vault ~/vault

# first time permissions
sudo chown jsgoyette:jsgoyette ~/vault

# close the system
sudo umount ~/vault
sudo cryptsetup close vault