yahoo-eng-team team mailing list archive

["Dr. David Alan Gilbert" <dgilbert@xxxxxxxxxx>]

Public bug reported:

What do we want: Entropy!
When do we want it: By default!

Nova don't add a RNG to the guests by default; this seems a serious
problem - the guests should get a good entropy source to ensure that
everything during boot gets randomised, and also you sometimes get hangs
where guests are starved of entropy (there are some newer guest kernels
that seem more prone to this, but still it's a more general problem).

Old arguments for why we didn't have a virtio-rng by default:
   a) We were using hosts /dev/random and it could block - we moved to urandom and that problem doesn't exist any more
   b) We didn't have windows drivers? We do now

(IMHO this is fairly important - we really should have the RNG)

** Affects: nova
     Importance: Medium
     Assignee: Kashyap Chamarthy (kashyapc)
         Status: Triaged


** Tags: libvirt

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Compute (nova).
https://bugs.launchpad.net/bugs/1789868

Title:
  RFE: Add a virtio-rng device to Nova instances by default

Status in OpenStack Compute (nova):
  Triaged

Bug description:
  What do we want: Entropy!
  When do we want it: By default!

  Nova don't add a RNG to the guests by default; this seems a serious
  problem - the guests should get a good entropy source to ensure that
  everything during boot gets randomised, and also you sometimes get
  hangs where guests are starved of entropy (there are some newer guest
  kernels that seem more prone to this, but still it's a more general
  problem).

  Old arguments for why we didn't have a virtio-rng by default:
     a) We were using hosts /dev/random and it could block - we moved to urandom and that problem doesn't exist any more
     b) We didn't have windows drivers? We do now

  (IMHO this is fairly important - we really should have the RNG)

To manage notifications about this bug go to:
https://bugs.launchpad.net/nova/+bug/1789868/+subscriptions