What we really need is a xenrand that gets entropy from the dom0's /dev/random and feeds into domU as valid random bits. But in this case, a compiler insisting on hard random numbers from /dev/random really does not make sense. It's not generating keys, presumably.