Re: Dropping haveged from the installer

From	Cyril Brulebois <kibi@debian.org>
Newsgroups	linux.debian.maint.boot, linux.debian.kernel
Subject	Re: Dropping haveged from the installer
Date	2020-03-16 04:40 +0100
Message-ID	<zKOLE-82L-5@gated-at.bofh.it> (permalink)
References	<yZVkl-4lK-3@gated-at.bofh.it> <yZXFv-5Gd-7@gated-at.bofh.it> <z0GVX-ww-5@gated-at.bofh.it> <zK9fr-7Z2-1@gated-at.bofh.it> <zKGXL-3hm-3@gated-at.bofh.it>
Organization	Debian

Cross-posted to 2 groups.

Show all headers | View raw

[Multipart message — attachments visible in raw view] - view raw

Ben Hutchings <ben@decadent.org.uk> (2020-03-15):
> On Sat, 2020-03-14 at 08:13 +0100, Cyril Brulebois wrote:
> [...]
> > Anyway, to get the ball rolling, I've performed some tests to see
> > how it would go. I've tried dropping haveged-udeb from pkg-lists and
> > that seems to be working fine: there are no obvious delays with
> > either the all-HTTPS scenario or the encrypted LVM one. I'm seeing
> > the “random: crng init done” message after 23 or 52 seconds
> > respectively, likely when the first entropy-needing operations are
> > happening. Can you confirm this is the expected behaviour?
> [...]
> 
> Yes, that's what I would expect.
> 
> However: I've just run a test where the initramfs script reads one
> byte of /dev/random then reports the time and relevant log messages.
> On 5.5, with random.trust_cpu=N, it still hangs for many minutes.
> Eventually I stopped waiting and pressed keys, and that un-stuck it.
> So I think the in-kernel entropy generator might not be reliable
> (yet).

OK, I'll postpone the change then, and keep haveged-udeb for now. Feel
free to let us/me know when you think this is reliable enough for us to
implement the suggested change.

Thanks!


Cheers,
-- 
Cyril Brulebois (kibi@debian.org)            <https://debamax.com/>
D-I release manager -- Release team member -- Freelance Consultant

Back to linux.debian.kernel | Previous | Next — Previous in thread | Find similar | Unroll thread

Thread

Dropping haveged from the installer Ben Hutchings <ben@decadent.org.uk> - 2019-11-07 20:10 +0100
  Re: Dropping haveged from the installer Cyril Brulebois <kibi@debian.org> - 2019-11-07 22:40 +0100
    Re: Dropping haveged from the installer Ben Hutchings <ben@decadent.org.uk> - 2019-11-09 23:00 +0100
      Re: Dropping haveged from the installer Cyril Brulebois <kibi@debian.org> - 2020-03-14 08:20 +0100
        Re: Dropping haveged from the installer Ben Hutchings <ben@decadent.org.uk> - 2020-03-15 20:20 +0100
          Re: Dropping haveged from the installer Cyril Brulebois <kibi@debian.org> - 2020-03-16 04:40 +0100

csiph-web