qubes-random-seed: feed kernel rng with randomness from dom0

vm-systemd/qubes-random-seed.service

@@ -0,0 +1,10 @@
+[Unit]
+Description=Qubes Random Seed
+DefaultDependencies=no
+RequiresMountsFor=/proc/xen/
+After=qubes-db.service
+
+[Service]
+Type=oneshot
+RemainAfterExit=yes
+ExecStart=/usr/lib/qubes/init/qubes-random-seed.sh

vm-systemd/qubes-random-seed.sh

@@ -0,0 +1,7 @@
+#!/bin/bash
+
+set -e
+set -o pipefail
+
+qubesdb-read /qubes-random-seed | base64 -d > /dev/urandom
+qubesdb-rm /qubes-random-seed