Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.kernel > #66541

Re: Dropping haveged from the installer

From Ben Hutchings <ben@decadent.org.uk>
Newsgroups linux.debian.maint.boot, linux.debian.kernel
Subject Re: Dropping haveged from the installer
Date 2020-03-15 20:20 +0100
Message-ID <zKGXL-3hm-3@gated-at.bofh.it> (permalink)
References <yZVkl-4lK-3@gated-at.bofh.it> <yZXFv-5Gd-7@gated-at.bofh.it> <z0GVX-ww-5@gated-at.bofh.it> <zK9fr-7Z2-1@gated-at.bofh.it>
Organization linux.* mail to news gateway

Cross-posted to 2 groups.

Show all headers | View raw


[Multipart message — attachments visible in raw view] - view raw

On Sat, 2020-03-14 at 08:13 +0100, Cyril Brulebois wrote:
[...]
> Anyway, to get the ball rolling, I've performed some tests to see how it
> would go. I've tried dropping haveged-udeb from pkg-lists and that seems
> to be working fine: there are no obvious delays with either the
> all-HTTPS scenario or the encrypted LVM one. I'm seeing the “random:
> crng init done” message after 23 or 52 seconds respectively, likely when
> the first entropy-needing operations are happening. Can you confirm this
> is the expected behaviour?
[...]

Yes, that's what I would expect.

However: I've just run a test where the initramfs script reads one byte
of /dev/random then reports the time and relevant log messages.  On
5.5, with random.trust_cpu=N, it still hangs for many minutes. 
Eventually I stopped waiting and pressed keys, and that un-stuck it. 
So I think the in-kernel entropy generator might not be reliable (yet).

Ben.

-- 
Ben Hutchings
Humour is the best antidote to reality.


Back to linux.debian.kernel | Previous | NextPrevious in thread | Next in thread | Find similar | Unroll thread


Thread

Dropping haveged from the installer Ben Hutchings <ben@decadent.org.uk> - 2019-11-07 20:10 +0100
  Re: Dropping haveged from the installer Cyril Brulebois <kibi@debian.org> - 2019-11-07 22:40 +0100
    Re: Dropping haveged from the installer Ben Hutchings <ben@decadent.org.uk> - 2019-11-09 23:00 +0100
      Re: Dropping haveged from the installer Cyril Brulebois <kibi@debian.org> - 2020-03-14 08:20 +0100
        Re: Dropping haveged from the installer Ben Hutchings <ben@decadent.org.uk> - 2020-03-15 20:20 +0100
          Re: Dropping haveged from the installer Cyril Brulebois <kibi@debian.org> - 2020-03-16 04:40 +0100

csiph-web