[mswann]

Haven't heard of levinboot yet, LGTM, thanks for the hint! Where do you get your entropy from? Does levinboot provide some (enough?) to the kernel? Right now I delay booting via a sleep in the initramfs so that I have time to randomly press as many keys as possible to get crng initialized before cryptsetup is called. Configuring my U-Boot build to provide entropy to the kernel is still on my to do list, haven't looked into it yet and don't know whether it already does or not. At least last time I checked I observed that KASLR didn't work due to missing entropy (the artificial delay won't work here as KASLR happens way before calling init).

[megous]

It's in the feature list: https://gitlab.com/DeltaGem/levinboot

> providing entropy to the kernel (KASLR and RNG seeds) via the DTB

I might as well add this feature to p-boot too. :)