Conversation
…efault and this is no longer needed, and provides options to trust or not trust the different sources Signed-off-by: Justin Cormack <justin@specialbusservice.com>
|
It also needs to be removed from the various build ymls, such as |
|
A quick check shows it in |
|
I think I removed it from all those. Its hard to see with the giant diff! |
|
Nope. See attached. |
Signed-off-by: Justin Cormack <justin@specialbusservice.com>
|
oops forgot to push those changes, added. |
deitch
left a comment
There was a problem hiding this comment.
With an updated pkg/sysctl, you will need to build and push out he updated sysctl, and run scripts/update-component-sha.sh for that on any dependencies.
|
CI failed on something |
|
So I am no longer in the linuxkit docker hub org - can you add me back? |
|
@justincormack looking at the linuxkit hub org, it's currently at "6 of 3 seats filled". I'll ask about increasing it |
The kernel now injects all the random seeds by default and this is no longer needed, and provides options to trust or not trust the different sources
CONFIG_RANDOM_TRUST_CPU=y and CONFIG_RANDOM_TRUST_BOOTLOADER=y are now defaults, and the kernel randomness has been reworked to remove the reasons to not do this before. Most hardware devices are now credited to the kernel entropy pool directly as well, on all sorts of devices.