Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.debian.maint.boot > #63006
| From | Cyril Brulebois <kibi@debian.org> |
|---|---|
| Newsgroups | linux.debian.maint.boot, linux.debian.kernel |
| Subject | Re: Dropping haveged from the installer |
| Date | 2020-03-14 08:20 +0100 |
| Message-ID | <zK9fr-7Z2-1@gated-at.bofh.it> (permalink) |
| References | <yZVkl-4lK-3@gated-at.bofh.it> <yZXFv-5Gd-7@gated-at.bofh.it> <z0GVX-ww-5@gated-at.bofh.it> |
| Organization | Debian |
Cross-posted to 2 groups.
[Multipart message — attachments visible in raw view] - view raw
Hey, Ben Hutchings <ben@decadent.org.uk> (2019-11-09): > > Ben Hutchings <ben@decadent.org.uk> (2019-11-07): > > > Linux 5.4 introduces an in-kernel jitter-entropy implementation > > > for systems without a usable hardware RNG, which should remove the > > > need for haveged. > > > > > > We could possibly cherry-pick that change on to 5.3, to avoid the > > > need for further changes to haveged packaging. > > > > Oh, great. > > > > Feel free to either follow-up on this bug report once you have > > backported it to 5.3, or alternatively once 5.4 trunk has reached > > experimental, so that the switch away from haveged can be tested. > > This is included in 5.3.9-1, which is currently building. I know it's been available for a while, but merging this right before D-I Bullseye Alpha 2 feels a little wrong. Anyway, to get the ball rolling, I've performed some tests to see how it would go. I've tried dropping haveged-udeb from pkg-lists and that seems to be working fine: there are no obvious delays with either the all-HTTPS scenario or the encrypted LVM one. I'm seeing the “random: crng init done” message after 23 or 52 seconds respectively, likely when the first entropy-needing operations are happening. Can you confirm this is the expected behaviour? Next, I might try disabling the fc-cache trick at build time to see if the kernel-level mechanism makes that a moot point as well (I would assume it does, but I'd like to double check: this is happening rather early in the boot sequence). https://debamax.com/blog/2018/05/25/debugging-black-screen-in-debian-installer/ https://salsa.debian.org/installer-team/debian-installer/commit/59e1a9af0ce29da7afb55aecce6d54094c3f214f Cheers, -- Cyril Brulebois (kibi@debian.org) <https://debamax.com/> D-I release manager -- Release team member -- Freelance Consultant
Back to linux.debian.maint.boot | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread
Dropping haveged from the installer Ben Hutchings <ben@decadent.org.uk> - 2019-11-07 20:10 +0100
Re: Dropping haveged from the installer Cyril Brulebois <kibi@debian.org> - 2019-11-07 22:40 +0100
Re: Dropping haveged from the installer Ben Hutchings <ben@decadent.org.uk> - 2019-11-09 23:00 +0100
Re: Dropping haveged from the installer "Rick Thomas" <rick.thomas@pobox.com> - 2020-02-09 10:30 +0100
Re: Dropping haveged from the installer Cyril Brulebois <kibi@debian.org> - 2020-03-14 08:20 +0100
Re: Dropping haveged from the installer Ben Hutchings <ben@decadent.org.uk> - 2020-03-15 20:20 +0100
Re: Dropping haveged from the installer Cyril Brulebois <kibi@debian.org> - 2020-03-16 04:40 +0100
csiph-web