Re:Fedora on the PinePhone: Pipewire Calling
by mswann on Wednesday February 10, 2021 @03:39AM
(#26086841)
Haven't heard of levinboot yet, LGTM, thanks for the hint!
Where do you get your entropy from? Does levinboot provide some (enough?) to the kernel? Right now I delay booting via a sleep in the initramfs so that I have time to randomly press as many keys as possible to get crng initialized before cryptsetup is called. Configuring my U-Boot build to provide entropy to the kernel is still on my to do list, haven't looked into it yet and don't know whether it already does or not. At least last time I checked I observed that KASLR didn't work due to missing entropy (the artificial delay won't work here as KASLR happens way before calling init).
Re:Fedora on the PinePhone: Pipewire Calling
by megous on Wednesday February 10, 2021 @05:00AM
(#26087353)
It's in the feature list: https://gitlab.com/DeltaGem/levinboot
> providing entropy to the kernel (KASLR and RNG seeds) via the DTB
I might as well add this feature to p-boot too. :)
[1] https://xnux.eu/log/#015
At least suspend to idle works as a sort of replacement for suspend to ram. PBP can stay for long enough in that state, so it's usable on the go even without suspend to RAM.