From a6c5902c083a889c23a1fcc559f61ffdd5a8a557 Mon Sep 17 00:00:00 2001
From: Mikaela Suomalainen <mikaela+git@mikaela.info>
Date: Fri, 27 Dec 2019 19:46:30 +0200
Subject: [PATCH] etc/default/grub: add random.trust_cpu=on

Possibly some help to boot time entropy exhaustion, but it may have been
enabled by default already.
---
 etc/default/grub.d/random.trust_cpu.cfg | 4 ++++
 1 file changed, 4 insertions(+)
 create mode 100644 etc/default/grub.d/random.trust_cpu.cfg

diff --git a/etc/default/grub.d/random.trust_cpu.cfg b/etc/default/grub.d/random.trust_cpu.cfg
new file mode 100644
index 00000000..1bd922ea
--- /dev/null
+++ b/etc/default/grub.d/random.trust_cpu.cfg
@@ -0,0 +1,4 @@
+# Trust CPU random number generator, possibly controversial, but possibly
+# safe due to not being the only source of entropy
+# https://en.wikipedia.org/wiki/RDRAND#Reception
+GRUB_CMDLINE_LINUX_DEFAULT="$GRUB_CMDLINE_LINUX_DEFAULT random.trust_cpu=on"