Matthew Garrett (mjg59(a)srcf.ucam.org) said:
This patchset means that there's a /dev/hwrng available in the
guest, so
you still need to run something like rngd to mix that into the kernel's
entropy pool.
Speaking of, why is it a thing that we need a separate userspace daemon
to dump data from kernel bucket A (/dev/hwrng) into kernel bucket B
(the entropy pool)?
Bill