WARNING - OLD ARCHIVES

This is an archived copy of the Xen.org mailing list, which we have preserved to ensure that existing links to archives are not broken. The live archive, which contains the latest emails, can be found at http://lists.xen.org/
   
 
 
Xen 
 
Home Products Support Community News
 
   
 

xen-devel

Re: [Xen-users] Re: [Xen-devel] dom0 and domU /dev/urandom generating to

To: XEN Devel - listmembers <xen-devel@xxxxxxxxxxxxxxxxxxx>, XEN User - listmembers <xen-users@xxxxxxxxxxxxxxxxxxx>
Subject: Re: [Xen-users] Re: [Xen-devel] dom0 and domU /dev/urandom generating too less entropy
From: Stephan Seitz <s.seitz@xxxxxxxxxxxx>
Date: Thu, 11 Oct 2007 18:10:56 +0200
Delivery-date: Thu, 11 Oct 2007 09:12:11 -0700
Envelope-to: www-data@xxxxxxxxxxxxxxxxxx
In-reply-to: <470E411D.6030207@xxxxxxxxxxxx>
List-help: <mailto:xen-devel-request@lists.xensource.com?subject=help>
List-id: Xen developer discussion <xen-devel.lists.xensource.com>
List-post: <mailto:xen-devel@lists.xensource.com>
List-subscribe: <http://lists.xensource.com/cgi-bin/mailman/listinfo/xen-devel>, <mailto:xen-devel-request@lists.xensource.com?subject=subscribe>
List-unsubscribe: <http://lists.xensource.com/cgi-bin/mailman/listinfo/xen-devel>, <mailto:xen-devel-request@lists.xensource.com?subject=unsubscribe>
Organization: netz-haut e.K.
References: <C3338EE1.EB45%Keir.Fraser@xxxxxxxxxxxx> <470E0CA4.4000909@xxxxxxxxxxxx> <470E411D.6030207@xxxxxxxxxxxx>
Sender: xen-devel-bounces@xxxxxxxxxxxxxxxxxxx
User-agent: Thunderbird 2.0.0.4 (X11/20070604)
> Robbie Dinn wrote:
>> Keir Fraser wrote:

Thanks for your suggestions Keir and Robbie,

but it looks like /dev/urandom is used by sshd, but somewhere inside of sshd 
the stream is checked against a minimum
entropy. I don't think this is a an issue by getting blocked via /dev/random.

I'll try the userspace rngd, but - as you said - this shouldn't be the 
preferred method of getting more entropy into
the system.

Another thing i'll try (later at night, as the domU's are productive) is, to 
configure the domU's using the same pCPU's
targetting that the pCPU's cache is filled only sub-optimal and the latency is 
higher ... (maybe ;) )

I'll report here later.

Greetings

Stephan




-- 
Stephan Seitz
Senior System Administrator

*netz-haut* e.K.
multimediale kommunikation

zweierweg 22
97074 würzburg

fon: +49 931 2876247
fax: +49 931 2876248

web: www.netz-haut.de <http://www.netz-haut.de/>

registriergericht: amtsgericht würzburg, hra 5054

Attachment: s.seitz.vcf
Description: Vcard

Attachment: signature.asc
Description: OpenPGP digital signature

_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-devel