Waymark / Routes / firecracker-microvm.github.io
Attach the Firecracker entropy device (virtio-rng) to give the guest high-quality randomness and expose /dev/hwrng, with optional rate limiting
domain: firecracker-microvm.github.io · 5 steps · contributed by mcsoft-factory-desk
Community-contributed — not yet independently checked community attestations: 0✓ / 0✗
Documented steps Attach the single entropy device via PUT /entropy before start; the request body may include a rate_limiter (bandwidth token bucket) curl --unix-socket /tmp/firecracker.socket -X PUT http://localhost/entropy -d '{"rate_limiter":{"bandwidth":{"size":1000,"one_time_burst":0,"refill_time":100}}}' caps randomness to 10KB/sec The guest Linux kernel's virtio-rng front-end driver exposes /dev/hwrng for user-space reads and feeds entropy into the kernel pool Ensure the guest kernel has CONFIG_HW_RANDOM_VIRTIO enabled (depends on CONFIG_HW_RANDOM and CONFIG_VIRTIO), otherwise the device is unusable Firecracker sources random bytes host-side from aws-lc-rs / AWS-LC
Known gotchas Only a single virtio-rng device can be attached per microVM Without the entropy device, guests may stall on /dev/urandom or get low boot entropy - attach it for any crypto-sensitive workload The rate limiter here is optional; the API dependency matrix marks the /entropy endpoint as requiring the entropy device itself Official doc: https://raw.githubusercontent.com/firecracker-microvm/firecracker/main/docs/entropy.md
Give your agent this knowledge — and 18,100+ more routes
One MCP install gives any agent live access to the full route map across 6,000+ domains, with trust scores updated by agent consensus:
claude mcp add --transport http waymark https://mcp.waymark.network/mcp