diff --git a/examples/aws.yml b/examples/aws.yml
index d0d4df248..a0dd8ee12 100644
--- a/examples/aws.yml
+++ b/examples/aws.yml
@@ -16,7 +16,7 @@ onboot:
     image: linuxkit/metadata:v0.7
 services:
   - name: rngd
-    image: linuxkit/rngd:v0.7
+    image: linuxkit/rngd:02c555b50cd1887aa628836662d2eec54c0d7e81
   - name: sshd
     image: linuxkit/sshd:v0.7
     binds:
diff --git a/examples/azure.yml b/examples/azure.yml
index 4300f2013..d9b6fab3d 100644
--- a/examples/azure.yml
+++ b/examples/azure.yml
@@ -11,7 +11,7 @@ onboot:
     image: linuxkit/sysctl:v0.7
 services:
   - name: rngd
-    image: linuxkit/rngd:v0.7
+    image: linuxkit/rngd:02c555b50cd1887aa628836662d2eec54c0d7e81
   - name: dhcpcd
     image: linuxkit/dhcpcd:v0.7
   - name: sshd
diff --git a/examples/cadvisor.yml b/examples/cadvisor.yml
index f8de54727..99e86f93d 100644
--- a/examples/cadvisor.yml
+++ b/examples/cadvisor.yml
@@ -26,7 +26,7 @@ services:
     env:
       - INSECURE=true
   - name: rngd
-    image: linuxkit/rngd:v0.7
+    image: linuxkit/rngd:02c555b50cd1887aa628836662d2eec54c0d7e81
   - name: ntpd
     image: linuxkit/openntpd:v0.7
 
diff --git a/examples/dm-crypt-loop.yml b/examples/dm-crypt-loop.yml
index f4155961b..9e109e761 100644
--- a/examples/dm-crypt-loop.yml
+++ b/examples/dm-crypt-loop.yml
@@ -38,7 +38,7 @@ services:
     env:
      - INSECURE=true
   - name: rngd
-    image: linuxkit/rngd:v0.7
+    image: linuxkit/rngd:02c555b50cd1887aa628836662d2eec54c0d7e81
 files:
   - path: etc/dm-crypt/key
     # the below key is just to keep the example self-contained
diff --git a/examples/dm-crypt.yml b/examples/dm-crypt.yml
index 4fbe4713a..5f12ec8ab 100644
--- a/examples/dm-crypt.yml
+++ b/examples/dm-crypt.yml
@@ -32,7 +32,7 @@ services:
     env:
      - INSECURE=true
   - name: rngd
-    image: linuxkit/rngd:v0.7
+    image: linuxkit/rngd:02c555b50cd1887aa628836662d2eec54c0d7e81
 files:
   - path: etc/dm-crypt/key
     # the below key is just to keep the example self-contained
diff --git a/examples/docker.yml b/examples/docker.yml
index b9e497ee3..1ad53846a 100644
--- a/examples/docker.yml
+++ b/examples/docker.yml
@@ -22,7 +22,7 @@ services:
     env:
      - INSECURE=true
   - name: rngd
-    image: linuxkit/rngd:v0.7
+    image: linuxkit/rngd:02c555b50cd1887aa628836662d2eec54c0d7e81
   - name: dhcpcd
     image: linuxkit/dhcpcd:v0.7
   - name: ntpd
diff --git a/examples/gcp.yml b/examples/gcp.yml
index 00f30fadb..614047478 100644
--- a/examples/gcp.yml
+++ b/examples/gcp.yml
@@ -20,7 +20,7 @@ services:
     env:
      - INSECURE=true
   - name: rngd
-    image: linuxkit/rngd:v0.7
+    image: linuxkit/rngd:02c555b50cd1887aa628836662d2eec54c0d7e81
   - name: sshd
     image: linuxkit/sshd:v0.7
     binds:
diff --git a/examples/getty.yml b/examples/getty.yml
index 291bbb4fd..aa8b8fba4 100644
--- a/examples/getty.yml
+++ b/examples/getty.yml
@@ -19,7 +19,7 @@ services:
     #env:
     # - INSECURE=true
   - name: rngd
-    image: linuxkit/rngd:v0.7
+    image: linuxkit/rngd:02c555b50cd1887aa628836662d2eec54c0d7e81
 files:
   - path: etc/getty.shadow
     # sample sets password for root to "abcdefgh" (without quotes)
diff --git a/examples/hostmount-writeable-overlay.yml b/examples/hostmount-writeable-overlay.yml
index 9d8388b75..835520c8d 100644
--- a/examples/hostmount-writeable-overlay.yml
+++ b/examples/hostmount-writeable-overlay.yml
@@ -30,7 +30,7 @@ services:
           destination: writeable-host-etc
           options: ["rw", "lowerdir=/etc", "upperdir=/run/hostetc/upper", "workdir=/run/hostetc/work"]
   - name: rngd
-    image: linuxkit/rngd:v0.7
+    image: linuxkit/rngd:02c555b50cd1887aa628836662d2eec54c0d7e81
   - name: nginx
     image: nginx:1.13.8-alpine
     capabilities:
diff --git a/examples/node_exporter.yml b/examples/node_exporter.yml
index 3ff3c4a5f..ed4c74aec 100644
--- a/examples/node_exporter.yml
+++ b/examples/node_exporter.yml
@@ -11,7 +11,7 @@ services:
     env:
      - INSECURE=true
   - name: rngd
-    image: linuxkit/rngd:v0.7
+    image: linuxkit/rngd:02c555b50cd1887aa628836662d2eec54c0d7e81
   - name: dhcpcd
     image: linuxkit/dhcpcd:v0.7
   - name: node_exporter
diff --git a/examples/openstack.yml b/examples/openstack.yml
index 217b9b3f0..8cf0a5ed6 100644
--- a/examples/openstack.yml
+++ b/examples/openstack.yml
@@ -17,7 +17,7 @@ onboot:
     command: ["/usr/bin/metadata", "openstack"]
 services:
   - name: rngd
-    image: linuxkit/rngd:v0.7
+    image: linuxkit/rngd:02c555b50cd1887aa628836662d2eec54c0d7e81
   - name: sshd
     image: linuxkit/sshd:v0.7
     binds:
diff --git a/examples/packet.yml b/examples/packet.yml
index 1f3adcc48..064ff9629 100644
--- a/examples/packet.yml
+++ b/examples/packet.yml
@@ -10,7 +10,7 @@ init:
   - linuxkit/firmware:v0.7
 onboot:
   - name: rngd1
-    image: linuxkit/rngd:v0.7
+    image: linuxkit/rngd:02c555b50cd1887aa628836662d2eec54c0d7e81
     command: ["/sbin/rngd", "-1"]
   - name: sysctl
     image: linuxkit/sysctl:v0.7
@@ -22,7 +22,7 @@ onboot:
     command: ["/usr/bin/metadata", "packet"]
 services:
   - name: rngd
-    image: linuxkit/rngd:v0.7
+    image: linuxkit/rngd:02c555b50cd1887aa628836662d2eec54c0d7e81
   - name: getty
     image: linuxkit/getty:v0.7
     env:
diff --git a/examples/rt-for-vmware.yml b/examples/rt-for-vmware.yml
index 3476a6386..6eeef6cab 100644
--- a/examples/rt-for-vmware.yml
+++ b/examples/rt-for-vmware.yml
@@ -15,7 +15,7 @@ services:
     env:
      - INSECURE=true
   - name: rngd
-    image: linuxkit/rngd:v0.7
+    image: linuxkit/rngd:02c555b50cd1887aa628836662d2eec54c0d7e81
   - name: dhcpcd
     image: linuxkit/dhcpcd:v0.7
   - name: open-vm-tools
diff --git a/examples/scaleway.yml b/examples/scaleway.yml
index edc876448..ac560ff43 100644
--- a/examples/scaleway.yml
+++ b/examples/scaleway.yml
@@ -10,7 +10,7 @@ onboot:
   - name: sysctl
     image: linuxkit/sysctl:v0.7
   - name: rngd1
-    image: linuxkit/rngd:v0.7
+    image: linuxkit/rngd:02c555b50cd1887aa628836662d2eec54c0d7e81
     command: ["/sbin/rngd", "-1"]
   - name: dhcpcd
     image: linuxkit/dhcpcd:v0.7
@@ -23,7 +23,7 @@ services:
     env:
      - INSECURE=true
   - name: rngd
-    image: linuxkit/rngd:v0.7
+    image: linuxkit/rngd:02c555b50cd1887aa628836662d2eec54c0d7e81
 trust:
   org:
     - linuxkit
diff --git a/examples/sshd.yml b/examples/sshd.yml
index 887f0763e..8d55f8150 100644
--- a/examples/sshd.yml
+++ b/examples/sshd.yml
@@ -10,7 +10,7 @@ onboot:
   - name: sysctl
     image: linuxkit/sysctl:v0.7
   - name: rngd1
-    image: linuxkit/rngd:v0.7
+    image: linuxkit/rngd:02c555b50cd1887aa628836662d2eec54c0d7e81
     command: ["/sbin/rngd", "-1"]
 services:
   - name: getty
@@ -18,7 +18,7 @@ services:
     env:
      - INSECURE=true
   - name: rngd
-    image: linuxkit/rngd:v0.7
+    image: linuxkit/rngd:02c555b50cd1887aa628836662d2eec54c0d7e81
   - name: dhcpcd
     image: linuxkit/dhcpcd:v0.7
   - name: sshd
diff --git a/examples/swap.yml b/examples/swap.yml
index 300785ada..545f56239 100644
--- a/examples/swap.yml
+++ b/examples/swap.yml
@@ -28,7 +28,7 @@ services:
     env:
      - INSECURE=true
   - name: rngd
-    image: linuxkit/rngd:v0.7
+    image: linuxkit/rngd:02c555b50cd1887aa628836662d2eec54c0d7e81
 trust:
   org:
     - linuxkit
diff --git a/examples/tpm.yml b/examples/tpm.yml
index 5d6391f04..bc5c40249 100644
--- a/examples/tpm.yml
+++ b/examples/tpm.yml
@@ -20,7 +20,7 @@ services:
   - name: tss
     image: linuxkit/tss:v0.7
   - name: rngd
-    image: linuxkit/rngd:v0.7
+    image: linuxkit/rngd:02c555b50cd1887aa628836662d2eec54c0d7e81
 files:
   - path: etc/getty.shadow
     # sample sets password for root to "abcdefgh" (without quotes)
diff --git a/examples/vmware.yml b/examples/vmware.yml
index 39d0d4a20..a5de61bb7 100644
--- a/examples/vmware.yml
+++ b/examples/vmware.yml
@@ -15,7 +15,7 @@ services:
     env:
      - INSECURE=true
   - name: rngd
-    image: linuxkit/rngd:v0.7
+    image: linuxkit/rngd:02c555b50cd1887aa628836662d2eec54c0d7e81
   - name: dhcpcd
     image: linuxkit/dhcpcd:v0.7
   - name: nginx
diff --git a/examples/vultr.yml b/examples/vultr.yml
index 00f30fadb..614047478 100644
--- a/examples/vultr.yml
+++ b/examples/vultr.yml
@@ -20,7 +20,7 @@ services:
     env:
      - INSECURE=true
   - name: rngd
-    image: linuxkit/rngd:v0.7
+    image: linuxkit/rngd:02c555b50cd1887aa628836662d2eec54c0d7e81
   - name: sshd
     image: linuxkit/sshd:v0.7
     binds:
diff --git a/examples/wireguard.yml b/examples/wireguard.yml
index babd8d5ca..cfca141d3 100644
--- a/examples/wireguard.yml
+++ b/examples/wireguard.yml
@@ -45,7 +45,7 @@ services:
      - INSECURE=true
     net: /run/netns/wg1
   - name: rngd
-    image: linuxkit/rngd:v0.7
+    image: linuxkit/rngd:02c555b50cd1887aa628836662d2eec54c0d7e81
   - name: nginx
     image: nginx:1.13.8-alpine
     net: /run/netns/wg0
diff --git a/linuxkit.yml b/linuxkit.yml
index 29b6564f7..1d01c59ce 100644
--- a/linuxkit.yml
+++ b/linuxkit.yml
@@ -22,7 +22,7 @@ services:
     env:
      - INSECURE=true
   - name: rngd
-    image: linuxkit/rngd:v0.7
+    image: linuxkit/rngd:02c555b50cd1887aa628836662d2eec54c0d7e81
   - name: nginx
     image: nginx:1.13.8-alpine
     capabilities:
diff --git a/projects/compose/compose-dynamic.yml b/projects/compose/compose-dynamic.yml
index 84cee1155..44c39c8ba 100644
--- a/projects/compose/compose-dynamic.yml
+++ b/projects/compose/compose-dynamic.yml
@@ -25,7 +25,7 @@ services:
     env:
      - INSECURE=true
   - name: rngd
-    image: linuxkit/rngd:v0.7
+    image: linuxkit/rngd:02c555b50cd1887aa628836662d2eec54c0d7e81
   - name: ntpd
     image: linuxkit/openntpd:v0.7
   - name: docker
diff --git a/projects/compose/compose-static.yml b/projects/compose/compose-static.yml
index aa2415714..a83831a55 100644
--- a/projects/compose/compose-static.yml
+++ b/projects/compose/compose-static.yml
@@ -25,7 +25,7 @@ services:
     env:
      - INSECURE=true
   - name: rngd
-    image: linuxkit/rngd:v0.7
+    image: linuxkit/rngd:02c555b50cd1887aa628836662d2eec54c0d7e81
   - name: ntpd
     image: linuxkit/openntpd:v0.7
   - name: docker
diff --git a/projects/ima-namespace/ima-namespace.yml b/projects/ima-namespace/ima-namespace.yml
index 98ccb3727..7f4f5dfc8 100644
--- a/projects/ima-namespace/ima-namespace.yml
+++ b/projects/ima-namespace/ima-namespace.yml
@@ -15,7 +15,7 @@ onboot:
     command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"]
 services:
   - name: rngd
-    image: linuxkit/rngd:v0.7
+    image: linuxkit/rngd:02c555b50cd1887aa628836662d2eec54c0d7e81
   - name: nginx
     image: nginx:1.13.8-alpine
     capabilities:
diff --git a/projects/miragesdk/examples/fdd.yml b/projects/miragesdk/examples/fdd.yml
index 2bef101e0..741714579 100644
--- a/projects/miragesdk/examples/fdd.yml
+++ b/projects/miragesdk/examples/fdd.yml
@@ -16,7 +16,7 @@ services:
     env:
      - INSECURE=true
   - name: rngd
-    image: linuxkit/rngd:v0.7
+    image: linuxkit/rngd:02c555b50cd1887aa628836662d2eec54c0d7e81
   - name: dhcpcd
     image: linuxkit/dhcpcd:v0.7
 files:
diff --git a/projects/shiftfs/shiftfs.yml b/projects/shiftfs/shiftfs.yml
index 1fe69b384..c64296a4e 100644
--- a/projects/shiftfs/shiftfs.yml
+++ b/projects/shiftfs/shiftfs.yml
@@ -18,7 +18,7 @@ services:
     env:
      - INSECURE=true
   - name: rngd
-    image: linuxkit/rngd:v0.7
+    image: linuxkit/rngd:02c555b50cd1887aa628836662d2eec54c0d7e81
   - name: nginx
     image: nginx:1.13.8-alpine
     capabilities:
diff --git a/test/cases/030_security/000_docker-bench/test.yml b/test/cases/030_security/000_docker-bench/test.yml
index 2dd62c134..6f632e7d6 100644
--- a/test/cases/030_security/000_docker-bench/test.yml
+++ b/test/cases/030_security/000_docker-bench/test.yml
@@ -18,7 +18,7 @@ onboot:
     command: ["/usr/bin/mountie", "/var/lib/docker"]
 services:
   - name: rngd
-    image: linuxkit/rngd:v0.7
+    image: linuxkit/rngd:02c555b50cd1887aa628836662d2eec54c0d7e81
   - name: dhcpcd
     image: linuxkit/dhcpcd:v0.7
   - name: docker