Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.maint.boot > #63006

Re: Dropping haveged from the installer

From Cyril Brulebois <kibi@debian.org>
Newsgroups linux.debian.maint.boot, linux.debian.kernel
Subject Re: Dropping haveged from the installer
Date 2020-03-14 08:20 +0100
Message-ID <zK9fr-7Z2-1@gated-at.bofh.it> (permalink)
References <yZVkl-4lK-3@gated-at.bofh.it> <yZXFv-5Gd-7@gated-at.bofh.it> <z0GVX-ww-5@gated-at.bofh.it>
Organization Debian

Cross-posted to 2 groups.

Show all headers | View raw


[Multipart message — attachments visible in raw view] - view raw

Hey,

Ben Hutchings <ben@decadent.org.uk> (2019-11-09):
> > Ben Hutchings <ben@decadent.org.uk> (2019-11-07):
> > > Linux 5.4 introduces an in-kernel jitter-entropy implementation
> > > for systems without a usable hardware RNG, which should remove the
> > > need for haveged.
> > > 
> > > We could possibly cherry-pick that change on to 5.3, to avoid the
> > > need for further changes to haveged packaging.
> > 
> > Oh, great.
> > 
> > Feel free to either follow-up on this bug report once you have
> > backported it to 5.3, or alternatively once 5.4 trunk has reached
> > experimental, so that the switch away from haveged can be tested.
> 
> This is included in 5.3.9-1, which is currently building.

I know it's been available for a while, but merging this right before
D-I Bullseye Alpha 2 feels a little wrong.

Anyway, to get the ball rolling, I've performed some tests to see how it
would go. I've tried dropping haveged-udeb from pkg-lists and that seems
to be working fine: there are no obvious delays with either the
all-HTTPS scenario or the encrypted LVM one. I'm seeing the “random:
crng init done” message after 23 or 52 seconds respectively, likely when
the first entropy-needing operations are happening. Can you confirm this
is the expected behaviour?

Next, I might try disabling the fc-cache trick at build time to see if
the kernel-level mechanism makes that a moot point as well (I would
assume it does, but I'd like to double check: this is happening rather
early in the boot sequence).

  https://debamax.com/blog/2018/05/25/debugging-black-screen-in-debian-installer/
  https://salsa.debian.org/installer-team/debian-installer/commit/59e1a9af0ce29da7afb55aecce6d54094c3f214f


Cheers,
-- 
Cyril Brulebois (kibi@debian.org)            <https://debamax.com/>
D-I release manager -- Release team member -- Freelance Consultant

Back to linux.debian.maint.boot | Previous | NextPrevious in thread | Next in thread | Find similar | Unroll thread


Thread

Dropping haveged from the installer Ben Hutchings <ben@decadent.org.uk> - 2019-11-07 20:10 +0100
  Re: Dropping haveged from the installer Cyril Brulebois <kibi@debian.org> - 2019-11-07 22:40 +0100
    Re: Dropping haveged from the installer Ben Hutchings <ben@decadent.org.uk> - 2019-11-09 23:00 +0100
      Re: Dropping haveged from the installer "Rick Thomas" <rick.thomas@pobox.com> - 2020-02-09 10:30 +0100
      Re: Dropping haveged from the installer Cyril Brulebois <kibi@debian.org> - 2020-03-14 08:20 +0100
        Re: Dropping haveged from the installer Ben Hutchings <ben@decadent.org.uk> - 2020-03-15 20:20 +0100
          Re: Dropping haveged from the installer Cyril Brulebois <kibi@debian.org> - 2020-03-16 04:40 +0100

csiph-web