diff --git a/internal/cli/kraft/run/runner_kraftfile_runtime.go b/internal/cli/kraft/run/runner_kraftfile_runtime.go
index 598860012..d17243f7d 100644
--- a/internal/cli/kraft/run/runner_kraftfile_runtime.go
+++ b/internal/cli/kraft/run/runner_kraftfile_runtime.go
@@ -24,6 +24,7 @@ import (
 	"kraftkit.sh/tui/selection"
 	"kraftkit.sh/unikraft/app"
 	ukarch "kraftkit.sh/unikraft/arch"
+	"kraftkit.sh/unikraft/export/v0/ukrandom"
 	"kraftkit.sh/unikraft/target"
 )
 
@@ -358,6 +359,16 @@ func (runner *runnerKraftfileRuntime) Prepare(ctx context.Context, opts *RunOpti
 		machine.Spec.ApplicationArgs = runtime.Command()
 	}
 
+	var kernelArgs []string
+	if !runtime.KConfig().AllNoOrUnset(
+		"CONFIG_LIBUKRANDOM",
+		"CONFIG_LIBUKRANDOM_CMDLINE_INIT",
+	) {
+		kernelArgs = append(kernelArgs, ukrandom.ParamRandomBytes.WithValue(ukrandom.NewRandomBytes()).String())
+	}
+
+	machine.Spec.KernelArgs = kernelArgs
+
 	// If automounting is enabled, and an initramfs is provided, set it as a
 	// volume if a initram has been provided.
 	if runtime.KConfig().AnyYes(
diff --git a/internal/cli/kraft/run/runner_kraftfile_unikraft.go b/internal/cli/kraft/run/runner_kraftfile_unikraft.go
index ac39cc671..ad64e8c74 100644
--- a/internal/cli/kraft/run/runner_kraftfile_unikraft.go
+++ b/internal/cli/kraft/run/runner_kraftfile_unikraft.go
@@ -17,6 +17,7 @@ import (
 	volumeapi "kraftkit.sh/api/volume/v1alpha1"
 	"kraftkit.sh/config"
 	"kraftkit.sh/unikraft/app"
+	"kraftkit.sh/unikraft/export/v0/ukrandom"
 	"kraftkit.sh/unikraft/target"
 )
 
@@ -151,6 +152,11 @@ func (runner *runnerKraftfileUnikraft) Prepare(ctx context.Context, opts *RunOpt
 		"CONFIG_LIBVFSCORE_AUTOMOUNT_CI_EINITRD",
 	)
 
+	noRandom := t.KConfig().AllNoOrUnset(
+		"CONFIG_LIBUKRANDOM",
+		"CONFIG_LIBUKRANDOM_CMDLINE_INIT",
+	)
+
 	if runner.project.Rootfs() != "" && opts.Rootfs == "" && noEmbedded {
 		opts.Rootfs = runner.project.Rootfs()
 	}
@@ -184,6 +190,10 @@ func (runner *runnerKraftfileUnikraft) Prepare(ctx context.Context, opts *RunOpt
 		appArgs = append(appArgs, arg)
 	}
 
+	if !noRandom {
+		kernelArgs = append(kernelArgs, ukrandom.ParamRandomBytes.WithValue(ukrandom.NewRandomBytes()).String())
+	}
+
 	machine.Spec.KernelArgs = kernelArgs
 	machine.Spec.ApplicationArgs = appArgs
 
diff --git a/internal/cli/kraft/run/runner_package.go b/internal/cli/kraft/run/runner_package.go
index 5fd1f7765..266107d2f 100644
--- a/internal/cli/kraft/run/runner_package.go
+++ b/internal/cli/kraft/run/runner_package.go
@@ -26,6 +26,7 @@ import (
 	"kraftkit.sh/tui/processtree"
 	"kraftkit.sh/tui/selection"
 	"kraftkit.sh/unikraft"
+	"kraftkit.sh/unikraft/export/v0/ukrandom"
 	"kraftkit.sh/unikraft/target"
 
 	ocispec "github.com/opencontainers/image-spec/specs-go/v1"
@@ -338,6 +339,16 @@ func (runner *runnerPackage) Prepare(ctx context.Context, opts *RunOptions, mach
 		})
 	}
 
+	var kernelArgs []string
+	if !targ.KConfig().AllNoOrUnset(
+		"CONFIG_LIBUKRANDOM",
+		"CONFIG_LIBUKRANDOM_CMDLINE_INIT",
+	) {
+		kernelArgs = append(kernelArgs, ukrandom.ParamRandomBytes.WithValue(ukrandom.NewRandomBytes()).String())
+	}
+
+	machine.Spec.KernelArgs = kernelArgs
+
 	switch v := selected.Metadata().(type) {
 	case *ocispec.Image:
 		if machine.Spec.Env == nil {