On Sunday 24 Jul 2011 19:37:25 you wrote:
On 24 July 2011 18:34, Olipro <olipro@8.c.9.b.0.7.4.0.1.0.0.2.ip6.arpa> wrote:
On Sunday 24 Jul 2011 17:41:25 Cristian Rodríguez wrote:
El 24/07/11 10:19, Olipro escribió:
something that I think is just insane,
Yes, it is insane, point your guns to kernel developers ;)
This haveged daemon is an userspace workaround, that provides strong, high quality entropy (passes all FIPS tests) but it is not a long term solution.
If you want a permanent solution, get one of this http://www.entropykey.co.uk/
Is this the mailing list for SuSE or random advertisements of RNG hardware? (pun intended)
It brings a smile seeing a USB key described as a "permanent solution" though!
The complaint in Bug#675841, was about the Release Notes, with changes undocumented due to the low level of detail provided, https://bugzilla.novell.com/show_bug.cgi?id=675841. The Changelog for haveged item "- avoid unnecessary services. bnc#675841" appears misleading.
However http://www.issihosts.com/haveged/ suggests "haveged" isn't just a few kb, it talks about a "collects entropy harvests in a 8MB buffer which is read byte by byte", though I guess that can be paged out if you don't really need the daemon.
Another option might be to enable the daemon, on machines where entropy available becomes low and only slowly replaced. Run it on a machine, that can become entropy starved, say overnight without active UI. The daemon suspends itself on the random device waiting for a write_low_watemark event. So perhaps a stub, could do the same and intelligently enable the daemon if it appears necessary?
Rob
I believe the daemon only consumes memory when entropy gets low... it then proceeds to replenish the kernel and goes back to sleep... At least that's why a cursory google search has led me to believe; if this isn't so then surely this could be easily achieved with a small modification. -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-factory+help@opensuse.org