Re: fix for no ssh

From	Reco <recoverym4n@enotuniq.net>
Newsgroups	linux.debian.user
Subject	Re: fix for no ssh
Date	2019-07-11 17:20 +0200
Message-ID	<yiJ1v-7BU-5@gated-at.bofh.it> (permalink)
References	(5 earlier) <yijgJ-87J-3@gated-at.bofh.it> <yikwa-A3-5@gated-at.bofh.it> <yiG3E-5MG-3@gated-at.bofh.it> <yiI5r-70X-7@gated-at.bofh.it> <yiIRQ-7ye-11@gated-at.bofh.it>
Organization	linux.* mail to news gateway

Show all headers | View raw

	Hi.

On Thu, Jul 11, 2019 at 03:00:57PM +0000, Andy Smith wrote:
> On Thu, Jul 11, 2019 at 05:12:03PM +0300, Reco wrote:
> > On Thu, Jul 11, 2019 at 12:03:53PM +0000, Andy Smith wrote:
> > > I think the wiki article at
> > > https://wiki.debian.org/BoottimeEntropyStarvation really shows that
> > > currently there is no such consensus available, as every solution
> > > listed (except buying extra entropy hardware)
> > 
> > That one is bad too.
> > Hardware random generator is not used by kernel directly, it requires
> > userspace program (such as hwrngd).
> > So, even if you put it into initrd alongside with the needed kernel
> > modules, there's still a noticeable delay between 'kernel rng is needed'
> > and 'sufficient entropy is available'.
> 
> With no modifications and RDRAND instruction disabled,

RDRAND is an exception to this as kernel does use it directly if
allowed. Devices that I wrote about are exposed to userspace via
/dev/hwrng character device.

For instance, this Exynos ARM SOC comes with HWRNG, but:

[    0.000000] random: get_random_bytes called from start_kernel+0x9c/0x528 with crng_init=0
[    0.772543] random: fast init done
[    9.006398] random: lvm: uninitialized urandom read (4 bytes read)
[   10.206032] random: lvm: uninitialized urandom read (4 bytes read)
[   10.363308] random: lvm: uninitialized urandom read (4 bytes read)
[   10.439771] random: lvm: uninitialized urandom read (2 bytes read)
[   12.322888] random: lvmconfig: uninitialized urandom read (4 bytes read)
[   12.861180] random: systemd: uninitialized urandom read (16 bytes read)
[   12.878890] random: systemd: uninitialized urandom read (16 bytes read)
[   14.126267] random: crng init done
[   14.714783] exynos-trng 10830600.rng: Exynos True Random Number Generator.

Note that the kernel needs entropy from the beginning, but gets the
possibility to use HWRNG on 14th second of uptime.

Reco

Thread

fix for no ssh Gene Heskett <gheskett@shentel.net> - 2019-07-07 16:30 +0200
  Re: fix for no ssh Tixy <tixy@yxit.co.uk> - 2019-07-07 16:50 +0200
    Re: fix for no ssh Andrei POPESCU <andreimpopescu@gmail.com> - 2019-07-07 18:50 +0200
      Re: fix for no ssh Nicholas Geovanis <nickgeovanis@gmail.com> - 2019-07-07 19:50 +0200
        Re: fix for no ssh Andrei POPESCU <andreimpopescu@gmail.com> - 2019-07-08 09:00 +0200
          Re: fix for no ssh Curt <curty@free.fr> - 2019-07-08 11:10 +0200
            Re: fix for no ssh Andrei POPESCU <andreimpopescu@gmail.com> - 2019-07-08 12:20 +0200
              Re: fix for no ssh Curt <curty@free.fr> - 2019-07-08 13:00 +0200
              Re: fix for no ssh Curt <curty@free.fr> - 2019-07-08 16:50 +0200
                Re: fix for no ssh Greg Wooledge <wooledg@eeg.ccf.org> - 2019-07-08 17:40 +0200
                Re: fix for no ssh Curt <curty@free.fr> - 2019-07-08 18:20 +0200
                Re: fix for no ssh Andy Smith <andy@strugglers.net> - 2019-07-08 18:50 +0200
                Re: fix for no ssh Curt <curty@free.fr> - 2019-07-09 10:20 +0200
                Re: fix for no ssh Andy Smith <andy@strugglers.net> - 2019-07-10 10:20 +0200
                Re: fix for no ssh Curt <curty@free.fr> - 2019-07-10 11:30 +0200
                Re: fix for no ssh Andy Smith <andy@strugglers.net> - 2019-07-10 13:50 +0200
                Re: fix for no ssh Reco <recoverym4n@enotuniq.net> - 2019-07-10 14:30 +0200
                Re: fix for no ssh Greg Wooledge <wooledg@eeg.ccf.org> - 2019-07-10 15:10 +0200
                Re: fix for no ssh Curt <curty@free.fr> - 2019-07-10 16:10 +0200
                Re: fix for no ssh Andy Smith <andy@strugglers.net> - 2019-07-11 14:10 +0200
                Re: fix for no ssh Reco <recoverym4n@enotuniq.net> - 2019-07-11 16:20 +0200
                Re: fix for no ssh Andy Smith <andy@strugglers.net> - 2019-07-11 17:10 +0200
                Re: fix for no ssh Reco <recoverym4n@enotuniq.net> - 2019-07-11 17:20 +0200
                Re: fix for no ssh Curt <curty@free.fr> - 2019-07-10 16:00 +0200
                Re: fix for no ssh David Wright <deblis@lionunicorn.co.uk> - 2019-07-10 21:20 +0200
                Re: fix for no ssh Andrei POPESCU <andreimpopescu@gmail.com> - 2019-07-10 21:30 +0200
                [OT] Trustfulness. Was: Re: fix for no ssh "Thomas Schmitt" <scdbackup@gmx.net> - 2019-07-08 18:00 +0200
                Re: [OT] Trustfulness. Was: Re: fix for no ssh Reco <recoverym4n@enotuniq.net> - 2019-07-08 18:10 +0200
                Re: fix for no ssh Andy Smith <andy@strugglers.net> - 2019-07-08 18:10 +0200
          Re: fix for no ssh Henrique de Moraes Holschuh <hmh@debian.org> - 2019-07-09 01:30 +0200
      Re: fix for no ssh Curt <curty@free.fr> - 2019-07-08 10:50 +0200
        Re: fix for no ssh Andrei POPESCU <andreimpopescu@gmail.com> - 2019-07-08 11:00 +0200
          Re: fix for no ssh Curt <curty@free.fr> - 2019-07-08 11:20 +0200
            Re: fix for no ssh Andrei POPESCU <andreimpopescu@gmail.com> - 2019-07-08 11:30 +0200
              Re: fix for no ssh Curt <curty@free.fr> - 2019-07-08 11:50 +0200
                Re: fix for no ssh Andrei POPESCU <andreimpopescu@gmail.com> - 2019-07-08 12:00 +0200
                Re: fix for no ssh Curt <curty@free.fr> - 2019-07-08 12:30 +0200
                Re: fix for no ssh Andrei POPESCU <andreimpopescu@gmail.com> - 2019-07-08 18:30 +0200
                Re: fix for no ssh Curt <curty@free.fr> - 2019-07-08 19:50 +0200
                Re: fix for no ssh Andy Smith <andy@strugglers.net> - 2019-07-08 20:20 +0200
                Re: fix for no ssh Gene Heskett <gheskett@shentel.net> - 2019-07-08 21:00 +0200
                Re: fix for no ssh Andy Smith <andy@strugglers.net> - 2019-07-08 22:50 +0200
                Fwd: fix for no ssh Nicholas Geovanis <nickgeovanis@gmail.com> - 2019-07-08 23:50 +0200
                Re: Fwd: fix for no ssh Andy Smith <andy@strugglers.net> - 2019-07-09 00:40 +0200
                Re: fix for no ssh John Hasler <jhasler@newsguy.com> - 2019-07-09 01:20 +0200
                Re: fix for no ssh Nicholas Geovanis <nickgeovanis@gmail.com> - 2019-07-09 01:30 +0200
                Re: fix for no ssh Andrei POPESCU <andreimpopescu@gmail.com> - 2019-07-09 09:50 +0200
                Re: fix for no ssh Andrei POPESCU <andreimpopescu@gmail.com> - 2019-07-08 23:00 +0200
                Re: fix for no ssh Andrei POPESCU <andreimpopescu@gmail.com> - 2019-07-08 23:00 +0200
                Re: fix for no ssh Curt <curty@free.fr> - 2019-07-10 09:50 +0200
                Re: fix for no ssh Andrei POPESCU <andreimpopescu@gmail.com> - 2019-07-10 21:40 +0200
                Re: fix for no ssh David Wright <deblis@lionunicorn.co.uk> - 2019-07-09 01:30 +0200
                Re: fix for no ssh Andrei POPESCU <andreimpopescu@gmail.com> - 2019-07-09 10:00 +0200
                Re: fix for no ssh David Wright <deblis@lionunicorn.co.uk> - 2019-07-10 01:20 +0200
                Re: fix for no ssh Andrei POPESCU <andreimpopescu@gmail.com> - 2019-07-10 05:40 +0200
    Re: fix for no ssh Gene Heskett <gheskett@shentel.net> - 2019-07-07 22:50 +0200

csiph-web