-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Yes, you can encrypt the whole secondary drive with LUKS, then add
entries in crypttab and fstab to have it auto-decrypt and automount on
dom0 startup.
These are general Linux things (not Qubes-specific), so we don't
maintain documentation for them. There are a lot of good guides
available on the Web.
iQIcBAEBCgAGBQJYy1YtAAoJENtN07w5UDAwzGYQAJO6CXVHq+YWcgf/pZ1OEK4w
oX0JfwPh8jkP2qy9qVz+OKARUd1SI6thJ+oR8EbPTb4UMb0PfQCd4PW9x8bqLN9f
gdPRq4ZZq0PJdpWL4lvNz1oumSJUAsK2F5QpSPAzZ9tTds9rQGu/jP2ZQ3HDACi4
5zIj13hC4c4WinGw4WV6otZ2PolPx+0rg4YEw01f8Za3WWW36xmfWlfF7OC0Yqkh
2P8EX7qpB9X/AbeWR5Nnsn1dWvGGcdlqjIeQAdMmaaYmcS/9IpK+Xzpr19DhE2Op
TzYeGLbOiXQeC25Na4WsD6K9PW2d2vxcZvqMTBCKVf9ybQDaQqvpXYMkz2+TzKkm
BuKCD7kWehTZ2yGAGOab+wDHcPC91uvm0Y68Ez/sgTmu/MpW741Li94x9WyGe+v6
amKKUtvg4MCNJsBWAsKhlhSv6hv5x/p2DdZm7S/vxWIoro8iO5XctGZG+xc2IH8v
ruDeCxCZzHL8Us5D3RNDGvvTOOrRrK4+NTpt3O3jfR83W61DQCVquS8HGr58Y+Da
IFlXgYg7W89F8rgQPJnf98a3XSWYn6URKuRKoN1enVpfs3WGMELRsOZl5qp8Gsfo
Vu1UUI0hGNiayrpSqyxY5qFEzWqu407YyIRB09ugilrMyMcvv7S3YoP71CkqKrq/
fCc0ahxiJHIQe03YDwAt
=aZJO
-----END PGP SIGNATURE-----