Bug#912087: openssh-server: Slow startup after the upgrade to 7.9p1

Path	csiph.com!aioe.org!bofh.it!news.nic.it!robomod
From	"Theodore Y. Ts'o" <tytso@mit.edu>
Newsgroups	linux.debian.bugs.dist, linux.kernel
Subject	Bug#912087: openssh-server: Slow startup after the upgrade to 7.9p1
Date	Wed, 31 Oct 2018 23:50:01 +0100
Message-ID	<wP7tf-103-5@gated-at.bofh.it> (permalink)
References	<wOomu-7SK-15@gated-at.bofh.it> <wOq4V-u7-1@gated-at.bofh.it> <wOD29-8ce-1@gated-at.bofh.it> <wOH5M-24D-15@gated-at.bofh.it> <wOJhg-3j9-19@gated-at.bofh.it> <wOXke-3om-13@gated-at.bofh.it> <wNLXP-1Xv-1@gated-at.bofh.it> <wOXke-3om-13@gated-at.bofh.it>
X-Original-To	Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
X-Mailbox-Line	From debian-bugs-dist-request@lists.debian.org Wed Oct 31 22:45:09 2018
Old-Return-Path	<debbugs@buxtehude.debian.org>
X-Spam-Flag	NO
X-Spam-Score	-3.751
Reply-To	"Theodore Y. Ts'o" <tytso@mit.edu>, 912087@bugs.debian.org
Resent-To	debian-bugs-dist@lists.debian.org
Resent-Cc	Debian OpenSSL Team <pkg-openssl-devel@lists.alioth.debian.org>
X-Debian-Pr-Message	followup 912087
X-Debian-Pr-Package	openssl
X-Debian-Pr-Source	openssl
X-Spam-Bayes	score:0.0000 Tokens: new, 0; hammy, 150; neutral, 62; spammy, 0. spammytokens: hammytokens:0.000-+--Hu:1.10.1, 0.000-+--HUA:1.10.1, 0.000-+--Hu:2018-07-13, 0.000-+--HUA:2018-07-13, 0.000-+--siewior
Dkim-Signature	v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=thunk.org; s=ef5046eb; h=In-Reply-To:Content-Type:MIME-Version:References:Message-ID: Subject:Cc:To:From:Date:Sender:Reply-To:Content-Transfer-Encoding:Content-ID: Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc :Resent-Message-ID:List-Id:List-Help:List-Unsubscribe:List-Subscribe: List-Post:List-Owner:List-Archive; bh=+L2vOxHMyCcInmLMMJQ8mkFn7YFTt/HYm447/fVC1R0=; b=s3nqPXcOPvr392mSFqhmsmlVeQ 9Xx4YhyAQdMEf6m//qSx/LEW5Wj1xT7ElL4bXrABz2KULjVI49W7QsKS6Cnj8X0fU17MLI4emiAKX aBrVh+nvyHKQ6rBnNIBHgIX6MrbflJvMaxmr44QgTekyv0UX3os6t5U3VpF3mQKluSgY=;
MIME-Version	1.0
Content-Type	text/plain; charset=us-ascii
Content-Disposition	inline
User-Agent	Mutt/1.10.1 (2018-07-13)
X-Sa-Exim-Connect-IP	<locally generated>
X-Sa-Exim-Mail-From	tytso@thunk.org
X-Sa-Exim-Scanned	No (on imap.thunk.org); SAEximRunCond expanded to false
X-Crossassassin-Score	2
X-Debian-Message	from BTS
X-Mailing-List	<debian-bugs-dist@lists.debian.org> archive/latest/1495300
List-ID	<debian-bugs-dist.lists.debian.org>
List-URL	<https://lists.debian.org/debian-bugs-dist/>
Approved	robomod@news.nic.it
Lines	16
Organization	linux.* mail to news gateway
Sender	robomod@news.nic.it
X-Original-Cc	Kurt Roeckx <kurt@roeckx.be>, 912087@bugs.debian.org, "Package Development List for OpenSSL packages." <pkg-openssl-devel@alioth-lists.debian.net>, linux-kernel@vger.kernel.org, Bernhard Übelacker <bernhardu@mailbox.org>, pkg-systemd-maintainers@lists.alioth.debian.org, debian-ssh@lists.debian.org, 912087-submitter@bugs.debian.org
X-Original-Date	Wed, 31 Oct 2018 18:41:06 -0400
X-Original-Message-ID	<20181031224106.GD6236@thunk.org>
X-Original-References	<20181029223334.GH10011@roeckx.be> <20181030001807.7wailpm37mlinsli@breakpoint.cc> <20181030141544.GE15839@thunk.org> <20181030183723.GI10011@roeckx.be> <20181030205136.GB6236@thunk.org> <6BBD7CF1-696B-4B5E-ABD8-A30C2F15E5C5@breakpoint.cc> <154070458824.7875.5742628083142648872.reportbug@mitsos> <6BBD7CF1-696B-4B5E-ABD8-A30C2F15E5C5@breakpoint.cc>
Xref	csiph.com linux.debian.bugs.dist:925431 linux.kernel:1743337

Cross-posted to 2 groups.

Show key headers only | View raw

On Wed, Oct 31, 2018 at 11:21:59AM +0000, Sebastian Andrzej Siewior wrote:
> On October 30, 2018 8:51:36 PM UTC, "Theodore Y. Ts'o" <tytso@mit.edu> wrote:
> >
> >So it's complicated.  It's not a binary trusted/untrusted sort of
> >thing.  
> 
> What about RNDRESEEDCRNG? Would it be reasonable to issue it after writing the seed as part of the boot process?

No, that's for debugging purposes only.

When there is sufficient entropy added (either through a hw_random
subsystem, or because RDRAND is trusted, or the RNDADDENTORPY ioctl),
the crng is automatically reseeded by credit_entropy_bits().  So it's
not needed to use RNDRESEEDCRNG.

					- Ted

Thread

Bug#912087: openssh-server: Slow startup after the upgrade to 7.9p1 Sebastian Andrzej Siewior <sebastian@breakpoint.cc> - 2018-10-30 01:30 +0100
  Bug#912087: openssh-server: Slow startup after the upgrade to 7.9p1 "Theodore Y. Ts'o" <tytso@mit.edu> - 2018-10-30 15:20 +0100
    Bug#912087: openssh-server: Slow startup after the upgrade to 7.9p1 Kurt Roeckx <kurt@roeckx.be> - 2018-10-30 19:40 +0100
      Bug#912087: openssh-server: Slow startup after the upgrade to 7.9p1 "Theodore Y. Ts'o" <tytso@mit.edu> - 2018-10-30 22:00 +0100
        Bug#912087: openssh-server: Slow startup after the upgrade to 7.9p1 Sebastian Andrzej Siewior <sebastian@breakpoint.cc> - 2018-10-31 13:00 +0100
          Bug#912087: openssh-server: Slow startup after the upgrade to 7.9p1 "Theodore Y. Ts'o" <tytso@mit.edu> - 2018-10-31 23:50 +0100
            Bug#912087: openssh-server: Slow startup after the upgrade to 7.9p1 Sebastian Andrzej Siewior <sebastian@breakpoint.cc> - 2018-11-01 23:30 +0100
              Bug#912087: openssh-server: Slow startup after the upgrade to 7.9p1 "Theodore Y. Ts'o" <tytso@mit.edu> - 2018-11-02 01:00 +0100
                Bug#912087: openssh-server: Slow startup after the upgrade to 7.9p1 Kurt Roeckx <kurt@roeckx.be> - 2018-11-02 01:30 +0100
                Bug#912087: openssh-server: Slow startup after the upgrade to 7.9p1 "Theodore Y. Ts'o" <tytso@mit.edu> - 2018-11-02 03:20 +0100
                Bug#912087: openssh-server: Slow startup after the upgrade to 7.9p1 Sebastian Andrzej Siewior <sebastian@breakpoint.cc> - 2018-11-04 01:30 +0100

csiph-web