Not really that technologically literate with Ubuntu. It's already installed, can I still encrypt the home?
just use pendrivelinux to run an os that never touches the internet then you are safe from key loggers. And just use the regular encryption that comes with all bitcoin clients and you will be safe from brute force.
dont forget to back up your encrypted wallet.dat in several places, if you use the method described above you can even store the wallet.dat file publicly.