00:40 <zzywysm> kettenis: it looks like the u-boot apple_m1_defconfig doesn't enable BOARD_RNG_SEED. does that mean that the entropy chunk that m1n1 grabs from sep_get_random() doesn't make it to the linux kernel?

00:54 <zzywysm> kettenis: nvm, looks like that stuff hasn't been wired up yet for Apple Silicon, which is likely why it's disabled

09:33 <kettenis> zzywysm: kaslr-seed is set by m1n1 and makes it through to the kernel

09:36 <kettenis> Implementing EFI_RNG_PROTOCOL would be good since it would allow the Linux kernel efistub to randomize the physical address of the kernel

09:40 <kettenis> So implementing a UCLASS_RNG driver for SEP might be worth the effort

13:20 <zzywysm> kettenis: i spent some time exploring u-boot's apple_m1_defconfig inside menuconfig yesterday, and found a couple of (what i believe are) no-brainer improvements

13:20 <zzywysm> https://github.com/zzywysm/u-boot/commit/1ee0bb6e30de81b8589e74b6b7f6baa23808e706

13:21 <zzywysm> feel free to steal

16:00 <kettenis> sorry, but such "optimizations" are pretty pointless

16:00 <kettenis> a few extra bytes are not going to hurt on this hardware