diff --git a/backend/windmill-worker/nsjail/download.py.config.proto b/backend/windmill-worker/nsjail/download.py.config.proto
index 17d5fcce4e..c718f0ec30 100644
--- a/backend/windmill-worker/nsjail/download.py.config.proto
+++ b/backend/windmill-worker/nsjail/download.py.config.proto
@@ -80,6 +80,12 @@ mount {
     rw: true
 }
 
+mount {
+    src: "/dev/urandom"
+    dst: "/dev/urandom"
+    is_bind: true
+}
+
 exec_bin {
  	path: "/bin/sh"
  	arg: "/download_deps.sh"