3 ms·
This is particularly problematic for virtual machines, which are starved of entropy (no sensors, audio device, etc.). I have VM images begin without ssh host k
by jquast 12y ago
This is particularly problematic for virtual machines, which are starved of entropy (no sensors, audio device, etc.).
I have VM images begin without ssh host keys and have a service dependency on haveged: http://www.issihosts.com/haveged/ http://www.issihosts.com/haveged/ and http://security.stackexchange.com/questions/34523/is-it-appropriate-to-use-haveged-as-a-source-of-entropy-on-virtual-machines http://security.stackexchange.com/questions/34523/is-it-appr...
- atoponce 12y agoFor Qemu 1.3 and later, there is VirtIORand where you can have VMs attach to a HWRNG on the hypervisor, then food that into the kernel CSPRNG. This should be imaged by default, so on first boot, each VM has enough entropy for key generation.
- rlpb 12y agoOn Ubuntu, pollinate solves this problem: http://blog.dustinkirkland.com/2014/02/random-seeds-in-ubuntu-1404-lts-cloud.html http://blog.dustinkirkland.com/2014/02/random-seeds-in-ubunt...