News for hackers. Stuff that matters.

A comment on /story/47412569. Parent comment

Re: by adammiribyan on Wednesday March 18, 2026 @01:55AM (#47422007)
Good callout. We seed entropy before snapshot to unblock getrandom(), but forks still share CSPRNG state. The proper fix per Firecracker’s docs is RNDADDENTROPY + RNDRESEEDCRNG after each fork, plus reseeding userspace PRNGs like numpy separately. On the roadmap. https://github.com/firecracker-microvm/firecracker/blob/main...
[ Parent | on HN ]
Re: by mkj on Wednesday March 18, 2026 @02:17AM (#47422124)
It looks like firecracker already supports ACPI vmgenid, which will trigger Linux random to reseed? https://github.com/firecracker-microvm/firecracker/blob/main...

https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/lin...

So that just (!) leaves userspace PRNGs.

[ Parent | on HN ]