I have no idea how to do full-disk-encryption with NetBSD in UEFI systems.

Closest thing I can do is plain-text rootfs and encrypted /home, /var, /usr and swap. So, it’s secure enough if my laptop get lost or stolen.

I wrote a post about how I do that.

If anyone can guide me to a rootfs on CGD or LVM, I’d appreciate that.