is there any insights on installing civicrm on mariadb with data encryption turned on? Is it workable? Thanks.
Logging tables until recently wouldn't be supported. If your install is older and you have logging turned on you might need to update the engine for the logging tables to InnoDB.
Otherwise I think it would just be regular system administration stuff not specific to CiviCRM.
But for me the issue with at-rest encryption has always been that storing the keys on the same server defeats the purpose, unless you're willing to password protect them and also not store the password on the server, i.e. manually start mysql any time the server needs rebooting and manually provide the password, and that may not even be doable depending on the hosting setup.
I see there is an eperi gateway plugin for mariadb which I was unaware of. That seems interesting.