diff --git a/src/internal/syscall/unix/getrandom.go b/src/internal/syscall/unix/getrandom.go
index 7ffab77e6..b2540b4a9 100644
--- a/src/internal/syscall/unix/getrandom.go
+++ b/src/internal/syscall/unix/getrandom.go
@@ -1,5 +1,9 @@
+//go:build !tinygo.wasm
+
 package unix
 
+import "syscall"
+
 type GetRandomFlag uintptr
 
 const (
@@ -8,5 +12,7 @@ const (
 )
 
 func GetRandom(p []byte, flags GetRandomFlag) (n int, err error) {
-	panic("todo: unix.GetRandom")
+	// Not supported on most TinyGo targets.
+	// On real Linux the sysrand package will fall back to /dev/urandom.
+	return 0, syscall.ENOSYS
 }
diff --git a/src/internal/syscall/unix/getrandom_wasi.go b/src/internal/syscall/unix/getrandom_wasi.go
new file mode 100644
index 000000000..1aab2ab10
--- /dev/null
+++ b/src/internal/syscall/unix/getrandom_wasi.go
@@ -0,0 +1,25 @@
+//go:build tinygo.wasm
+
+package unix
+
+import "unsafe"
+
+type GetRandomFlag uintptr
+
+const (
+	GRND_NONBLOCK GetRandomFlag = 0x0001
+	GRND_RANDOM   GetRandomFlag = 0x0002
+)
+
+func GetRandom(p []byte, flags GetRandomFlag) (n int, err error) {
+	if len(p) == 0 {
+		return 0, nil
+	}
+	libc_arc4random_buf(unsafe.Pointer(&p[0]), uint(len(p)))
+	return len(p), nil
+}
+
+// void arc4random_buf(void *buf, size_t buflen);
+//
+//export arc4random_buf
+func libc_arc4random_buf(buf unsafe.Pointer, buflen uint)