Include rng-tools5 by default to copy random bits from TPM to /dev/random

Development
1

TPMs are becoming ubiquitous in new computers, especially with fTPM, so this might be worth it.

Kernel docs indicate rng-tools is the best way to make use of trng entropy (writes from /dev/hwrng to /dev/random)
docs.kernel.org/admin-guide/hw_random.html

Seems to be the currently most popular package:

Considerations to test:
How does this behave with devices that do not have hardware rngs?

Does xen provide virtio-rng to guests by default?

1 Like
2

First blocker, horribly outdated in Debian as per Debian upstream bug report:
Please consider using rng-tools >= 6

Not that I can find.

search term:
site:xen.org virtio-rng

That’s why Qubes has this: