boot.kernel.randstructSeed

Provides a custom seed for the RANDSTRUCT security option of the Linux kernel. Note that RANDSTRUCT is only enabled in NixOS hardened kernels. Using a custom seed requires building the kernel and dependent packages locally, since this customization happens at build time.

Type
string
Default
""
Example
"my secret seed"
Declared
<nixpkgs/nixos/modules/system/boot/kernel.nix>