> What about virtual machines / machines booting off an image? We can't put a seed in the image, or it'll get distributed to all downstream consumers. Mitigati

> What about virtual machines / machines booting off an image? We can't put a seed in the image, or it'll get distributed to all downstream consumers. Mitigations within mitigations. Having one random seed per VM image that gets installed is better than having nothing at all -- now, an attacker needs to have your install image. Then the hardware RNG and the virtio random drivers help mix into that seed. Given that presumably you've already booted the image for testing, you've probably already generated the SSH keys that you need to be concerned about -- so you'd probably need to take care to regenerate them securely in any case, from a running system that has started to gather entropy from all the sources it can get its hands on, including the boot loader. And, ideally part of the imaging process would write some random data to the image. But I agree, most people wouldn't even think of doing that.