ZFS with native encryption
zpool create -o ashift=12 -O compression=lz4 -O dnodesize=auto -O normalization=formD -O relatime=on -O xattr=sa -O atime=off -O acltype=posixacl -O encryption=aes-256-gcm -O keylocation=prompt -O keyformat=passphrase tank0 mirror wwn-0x5000cca22dcbf093 wwn-0x5000cca22dd2fc89 mirror wwn-0x5000cca22dd31cdb wwn-0x5000cca22dd0624