#36380 - service urandom-seed takes too long on boot

Package	Source(s)		Maintainer(s)
guix		PTS Buildd Popcon

Message #14 received at 36380@debbugs.gnu.org (full text, mbox, reply):

Received: (at 36380) by debbugs.gnu.org; 26 Jun 2019 15:47:33 +0000
From debbugs-submit-bounces@debbugs.gnu.org Wed Jun 26 11:47:33 2019
Received: from localhost ([127.0.0.1]:36884 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces@debbugs.gnu.org>)
	id 1hgA8y-0000pM-Ov
	for submit@debbugs.gnu.org; Wed, 26 Jun 2019 11:47:33 -0400
Received: from out3-smtp.messagingengine.com ([66.111.4.27]:52825)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <leo@famulari.name>) id 1hgA8x-0000jn-9h
 for 36380@debbugs.gnu.org; Wed, 26 Jun 2019 11:47:31 -0400
Received: from compute4.internal (compute4.nyi.internal [10.202.2.44])
 by mailout.nyi.internal (Postfix) with ESMTP id 7BDAA21CDD;
 Wed, 26 Jun 2019 11:47:25 -0400 (EDT)
Received: from mailfrontend1 ([10.202.2.162])
 by compute4.internal (MEProxy); Wed, 26 Jun 2019 11:47:25 -0400
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=famulari.name;
 h=date:from:to:cc:subject:message-id:references:mime-version
 :content-type:in-reply-to; s=mesmtp; bh=/gSm24GvDJLq7i9JCeas5k8f
 91/CQmnK2ATkBobdxQg=; b=aJAgEaPd+Z8M9PivAx6KBEEhCsCc7yAuCqm/J1W9
 ZKUbae1FIa2VWB6eLDgS61Q9OAdEN4ialMNDzCfk2DKw6Ee88zYO+uO6DGjofb7k
 BAXU3ZWj8jQUUSuqLSDsXd8XZj80+cdRlPfHIi5bNl9aojGh3WFIx5YEPGL3s643
 iAU=
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=
 messagingengine.com; h=cc:content-type:date:from:in-reply-to
 :message-id:mime-version:references:subject:to:x-me-proxy
 :x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s=fm3; bh=/gSm24
 GvDJLq7i9JCeas5k8f91/CQmnK2ATkBobdxQg=; b=zlljgMRSWjuann4xJ9Y6ll
 il/a2gjIw0k5Y7fn0H7Z+TfNKz7FDmQ4egwYBlQE98Pnb3FlZdeSmzQWBwJhdBpc
 6PKH9RbPSdo+0ktWkahCd8kUyCLIxcNGR6GHangi7Eijep+l2jy/R57372LeIN4S
 tFfyrNTDB8UH7/EC8iPwlLa2O5Q/oMUlcg4ToM7AH2NczT92KN448f4FtdYiJLVL
 e3GesXWvzXexHnrc6uyOOLjKoEoEk5y8jA9N4jnhf044PduUzoRhh/RhsN/HEk+T
 +a11exh1L8cdGCbtL+HNH4068PPWWIzYbMRJCWwBqVEVM5xz1sMxmm64wiuGh8fw
 ==
X-ME-Sender: <xms:i5MTXf9PxYa1yHqdmLoMiNGxqB7tZq3Rc3iJ_XSyTBc_u-iVFah1bA>
X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeduvddrudeigdelhecutefuodetggdotefrodftvf
 curfhrohhfihhlvgemucfhrghsthforghilhdpqfgfvfdpuffrtefokffrpgfnqfghnecu
 uegrihhlohhuthemuceftddtnecunecujfgurhepfffhvffukfhfgggtuggjfgesghdtre
 ertderjeenucfhrhhomhepnfgvohcuhfgrmhhulhgrrhhiuceolhgvohesfhgrmhhulhgr
 rhhirdhnrghmvgeqnecuffhomhgrihhnpehgnhhurdhorhhgnecukfhppeejiedruddvge
 drudefkedrieefnecurfgrrhgrmhepmhgrihhlfhhrohhmpehlvghosehfrghmuhhlrghr
 ihdrnhgrmhgvnecuvehluhhsthgvrhfuihiivgeptd
X-ME-Proxy: <xmx:i5MTXf8eGyqbO5rleX9vNeGjW86PwFBtpXbtFbyF8rt6reohHHQzFw>
 <xmx:i5MTXYA5JMLq-dRMdqRXleHfWtZy82hw3fs8wf-LA8UqVUCYg07zrw>
 <xmx:i5MTXfyEFEaDZ7jegotJw6CDraKjyM1I8i1vr1WCj6oan7VnkwjJAQ>
 <xmx:jZMTXbLOnr7djBmdJUx27Zeq9ezys_IRTvRSXj2SKvIp1IN7WVuieg>
Received: from localhost (c-76-124-138-63.hsd1.pa.comcast.net [76.124.138.63])
 by mail.messagingengine.com (Postfix) with ESMTPA id 3A2D880066;
 Wed, 26 Jun 2019 11:47:23 -0400 (EDT)
Date: Wed, 26 Jun 2019 11:47:21 -0400
From: Leo Famulari <leo@famulari.name>
To: Robert Vollmert <rob@vllmrt.net>
Subject: Re: bug#36380: service urandom-seed takes too long on boot
Message-ID: <20190626154721.GA2999@jasmine.lan>
References: <F88CEF04-9BFA-4886-8A2D-AD84AE278D07@vllmrt.net>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha256;
 protocol="application/pgp-signature"; boundary="M9NhX3UHpAaciwkO"
Content-Disposition: inline
In-Reply-To: <F88CEF04-9BFA-4886-8A2D-AD84AE278D07@vllmrt.net>
User-Agent: Mutt/1.12.0 (2019-05-25)
X-Spam-Score: -0.7 (/)
X-Debbugs-Envelope-To: 36380
Cc: 36380@debbugs.gnu.org
X-BeenThere: debbugs-submit@debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request@debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit@debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request@debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request@debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces@debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces@debbugs.gnu.org>
X-Spam-Score: -1.7 (-)

[Message part 1 (text/plain, inline)]

On Tue, Jun 25, 2019 at 08:12:28PM +0200, Robert Vollmert wrote:
> On my VPS, booting takes forever (long enough that for a long
> time I thought the install had failed). I just rebooted again,
> and it took over 7 minutes, see attached screenshot.

Yikes, that's way too long. Can you say what VPS it is?

> I would suggest skipping the seeding from /dev/hwrng by default
> if /var/lib/random-seed is available. I’m assuming here that my
> problem is not too rare — if it is, an option to disable the
> seeding from /dev/hwrng seems like a good idea.

Originally I added the HWRNG read specifically the for VM / VPS use case
[0], where the first boot environment is relatively deterministic. I
agree it's superfluous if the random-seed file is handled properly but
it's nice to unconditionally have this other entropy source that avoids
the pitfalls of file-based entropy seeding.

Ideally the hypervisor would seed the guest's HWRNG interface with the
host's /dev/urandom, which would avoid significant delays. It seems they
are using some other more limited resource instead.

Does anyone else have an opinion or experience with this issue? It would
be great to know how widespread it is.

[0]
https://git.savannah.gnu.org/cgit/guix.git/commit/?id=9a56cf2b5b4970843c215091ea9823a67e077310
https://lists.gnu.org/archive/html/guix-devel/2017-12/msg00096.html

[signature.asc (application/pgp-signature, inline)]

Display info messages

Send a report that this bug log contains spam.

debbugs.gnu.org maintainers <help-debbugs@gnu.org>. Last modified: Sun Sep 7 09:37:52 2025; Machine Name: wallace-server

GNU bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

#36380 service urandom-seed takes too long on boot