Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.bugs.dist > #925634

Bug#912087: openssh-server: Slow startup after the upgrade to 7.9p1

From Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
Newsgroups linux.debian.bugs.dist, linux.kernel
Subject Bug#912087: openssh-server: Slow startup after the upgrade to 7.9p1
Date 2018-11-01 23:30 +0100
Message-ID <wPtDs-5Qa-25@gated-at.bofh.it> (permalink)
References (4 earlier) <wOJhg-3j9-19@gated-at.bofh.it> <wOXke-3om-13@gated-at.bofh.it> <wP7tf-103-5@gated-at.bofh.it> <wNLXP-1Xv-1@gated-at.bofh.it> <wP7tf-103-5@gated-at.bofh.it>
Organization linux.* mail to news gateway

Cross-posted to 2 groups.

Show all headers | View raw


On 2018-10-31 18:41:06 [-0400], Theodore Y. Ts'o wrote:
> On Wed, Oct 31, 2018 at 11:21:59AM +0000, Sebastian Andrzej Siewior wrote:
> > On October 30, 2018 8:51:36 PM UTC, "Theodore Y. Ts'o" <tytso@mit.edu> wrote:
> > >
> > >So it's complicated.  It's not a binary trusted/untrusted sort of
> > >thing.  
> > 
> > What about RNDRESEEDCRNG? Would it be reasonable to issue it after writing the seed as part of the boot process?
> 
> No, that's for debugging purposes only.

Okay. I'm asking because it has been added to the kernel, marked stable
and the man page has not been updated. So it did not look like a
debugging interface :)

> When there is sufficient entropy added (either through a hw_random
> subsystem, or because RDRAND is trusted, or the RNDADDENTORPY ioctl),
> the crng is automatically reseeded by credit_entropy_bits().  So it's
> not needed to use RNDRESEEDCRNG.

Okay. So you wrote what can be done for a system with HW-RNG/kvm. On
bare metal with nothing fancy I have:
[    3.544985] systemd[1]: systemd 239 running in system mode. (+PAM…
[   10.363377] r8169 0000:05:00.0 eth0: link up
[   41.966375] random: crng init done

which means I have to wait about half a minute until I can ssh into. And
there is no way to speed it up?
You did not oppose RNDADDTOENTCNT/RNDADDENTROPY but you wanted to make
it configureable and not default, correct?

> 
> 					- Ted

Sebastian

Back to linux.debian.bugs.dist | Previous | NextPrevious in thread | Next in thread | Find similar | Unroll thread


Thread

Bug#912087: openssh-server: Slow startup after the upgrade to 7.9p1 jim_p <pitsiorisj@gmail.com> - 2018-10-28 06:40 +0100
  Bug#912087: openssh-server: Slow startup after the upgrade to 7.9p1 Bernhard Übelacker <bernhardu@mailbox.org> - 2018-10-28 11:50 +0100
    Bug#912087: openssh-server: Slow startup after the upgrade to 7.9p1 Colin Watson <cjwatson@debian.org> - 2018-10-28 19:50 +0100
      Bug#912087: openssh-server: Slow startup after the upgrade to 7.9p1 Bernhard Übelacker <bernhardu@mailbox.org> - 2018-10-29 01:00 +0100
        Bug#912087: openssh-server: Slow startup after the upgrade to 7.9p1 Colin Watson <cjwatson@debian.org> - 2018-10-29 01:40 +0100
          Bug#912087: [Pkg-openssl-devel] Bug#912087: openssh-server: Slow startup after the upgrade to 7.9p1 Kurt Roeckx <kurt@roeckx.be> - 2018-10-29 08:40 +0100
            Bug#912087: [Pkg-openssl-devel] Bug#912087: openssh-server: Slow startup after the upgrade to 7.9p1 Kurt Roeckx <kurt@roeckx.be> - 2018-10-29 18:30 +0100
              Bug#912087: [Pkg-openssl-devel] Bug#912087: Bug#912087: openssh-server: Slow startup after the upgrade to 7.9p1 Sebastian Andrzej Siewior <sebastian@breakpoint.cc> - 2018-10-29 22:10 +0100
                Bug#912087: [Pkg-openssl-devel] Bug#912087: Bug#912087: openssh-server: Slow startup after the upgrade to 7.9p1 Kurt Roeckx <kurt@roeckx.be> - 2018-10-29 23:40 +0100
                Bug#912087: openssh-server: Slow startup after the upgrade to 7.9p1 Sebastian Andrzej Siewior <sebastian@breakpoint.cc> - 2018-10-30 01:30 +0100
                Bug#912087: openssh-server: Slow startup after the upgrade to 7.9p1 Michael Biebl <biebl@debian.org> - 2018-10-30 03:40 +0100
                Bug#912087: openssh-server: Slow startup after the upgrade to 7.9p1 "Theodore Y. Ts'o" <tytso@mit.edu> - 2018-10-30 15:20 +0100
                Bug#912087: openssh-server: Slow startup after the upgrade to 7.9p1 Kurt Roeckx <kurt@roeckx.be> - 2018-10-30 19:40 +0100
                Bug#912087: openssh-server: Slow startup after the upgrade to 7.9p1 "Theodore Y. Ts'o" <tytso@mit.edu> - 2018-10-30 22:00 +0100
                Bug#912087: openssh-server: Slow startup after the upgrade to 7.9p1 Sebastian Andrzej Siewior <sebastian@breakpoint.cc> - 2018-10-31 13:00 +0100
                Bug#912087: openssh-server: Slow startup after the upgrade to 7.9p1 "Theodore Y. Ts'o" <tytso@mit.edu> - 2018-10-31 23:50 +0100
                Bug#912087: openssh-server: Slow startup after the upgrade to 7.9p1 Sebastian Andrzej Siewior <sebastian@breakpoint.cc> - 2018-11-01 23:30 +0100
                Bug#912087: openssh-server: Slow startup after the upgrade to 7.9p1 "Theodore Y. Ts'o" <tytso@mit.edu> - 2018-11-02 01:00 +0100
                Bug#912087: openssh-server: Slow startup after the upgrade to 7.9p1 Kurt Roeckx <kurt@roeckx.be> - 2018-11-02 01:30 +0100
                Bug#912087: openssh-server: Slow startup after the upgrade to 7.9p1 "Theodore Y. Ts'o" <tytso@mit.edu> - 2018-11-02 03:20 +0100
                Bug#912087: openssh-server: Slow startup after the upgrade to 7.9p1 Sebastian Andrzej Siewior <sebastian@breakpoint.cc> - 2018-11-04 01:30 +0100
  Bug#912087: openssh-server: Slow startup after the upgrade to 7.9p1 jim_p <pitsiorisj@gmail.com> - 2018-10-29 06:30 +0100
  Bug#912087: [Pkg-openssl-devel] Bug#912087: openssh-server: Slow startup after the upgrade to 7.9p1 Kurt Roeckx <kurt@roeckx.be> - 2018-10-29 22:00 +0100
  Bug#912087: openssh-server: Slow startup after the upgrade to 7.9p1 Olaf van der Spek <olafvdspek@gmail.com> - 2018-11-18 10:50 +0100

csiph-web