Support systemd-boot random seed #129

New issue

Open

opened 2023-03-09 17:42:02 +00:00 by Conni2461 · 3 comments

Conni2461 commented

2023-03-09 17:42:02 +00:00

(Migrated from github.com)

Thanks for your work on this amazing project.

I've just successfully setup lanzaboote and enabled random seed using bootctl. After a reboot i noticed that random seed exists but isn't passed to the OS.

Random Seed:
 Passed to OS: no
 System Token: set
       Exists: yes

Thanks for your work on this amazing project. I've just successfully setup lanzaboote and enabled random seed using `bootctl`. After a reboot i noticed that random seed exists but isn't passed to the OS. ``` Random Seed: Passed to OS: no System Token: set Exists: yes ```

👍 5

nikstur commented

2023-03-10 09:28:39 +00:00

(Migrated from github.com)

Relates to #126 because it requires writing a "system secret" into the efivars.

blitz commented

2023-03-10 11:04:09 +00:00

(Migrated from github.com)

Is there documentation on how the random seed is supposed to work?

nikstur commented

2023-03-10 11:36:54 +00:00

(Migrated from github.com)

There is this article that explains it fairly well.

Edit: This 0be72218f1 describes the current implementation.

There is this [article](https://systemd.io/RANDOM_SEEDS/) that explains it fairly well. Edit: This https://github.com/systemd/systemd/commit/0be72218f1c90af5755ab40f94d047ee6864aea8 describes the current implementation.