Re: Of /var/db/entropy-file and booting kernels

["Eric S. Hvozda" <hvozda%ack.org@localhost>]

> On May 6, 2020, at 6:10 PM, Chavdar Ivanov <ci4ic4%gmail.com@localhost> wrote:
> 
> You don't boot KASLR this way.
> 
> You put
> 
> menu=Boot KASLR:rndseed /var/db/entropy-file;pkboot netbsd_kaslr
> 
> in your boot.cfg and copy /usr/mdec/prekern to / .
> 
> (I copy the KASLR kernel to /netbsd_kaslr).

Ah ha!

For those who read this thread later, consider looking at this:

https://wiki.netbsd.org/security/kaslr/

I’ll still have to make mods to my setup to deal with the entropy-file, but PR #48702 points the way.

Thanks to all who showed the way...