Re:Fixing Getrandom()
by mehrdadn on Tuesday October 01, 2019 @05:02PM
(#21130597)
Yeah, so while creating it, they seed it. If you don't trust that, you install another OS yourself, with a kernel your trust, and seed it yourself when installing, from whatever sources of randomness you want. I fail to see why this wouldn't work.
[ Parent
| on HN ]
They can't seed it while creating the AMI. If they did that, everyone would share the initial seed and I could boot up the published image, run the generator with that seed, and be able to predict (for example) what ssh key your server will have.
(Or if you meant creating the VM, as explained before they can't do that for encrypted volumes for example)