Re: port-xen/40739: no entropy device sourcese on 5.0_RC2 XEN3PAE_DOMU

["Tracy J. Di Marco White" <gendalia%iastate.edu@localhost>]

The following reply was made to PR port-xen/40739; it has been noted by GNATS.

From: "Tracy J. Di Marco White" <gendalia%iastate.edu@localhost>
To: Manuel Bouyer <bouyer%antioche.eu.org@localhost>
Cc: gnats-bugs%NetBSD.org@localhost, port-xen-maintainer%NetBSD.org@localhost,
        gnats-admin%NetBSD.org@localhost, netbsd-bugs%NetBSD.org@localhost
Subject: Re: port-xen/40739: no entropy device sourcese on 5.0_RC2 XEN3PAE_DOMU 
Date: Wed, 25 Feb 2009 13:37:25 CST

 In message <20090225192033.GA353%antioche.eu.org@localhost>, Manuel Bouyer 
writes:
 }On Tue, Feb 24, 2009 at 04:02:42PM -0600, Tracy J. Di Marco White wrote:
 }> 
 }> In message <20090224214003.3D27163C1C0%www.NetBSD.org@localhost>, Manuel 
Bouyer writes:
 }> } > % rndctl -ls
 }> } > Source          Bits    Type    Flags
 }> } >            4346 bits mixed into pool
 }> } >               0 bits currently stored in pool (max 4096)
 }> } >               0 bits of entropy discarded due to full pool
 }> } >            4346 hard-random bits generated
 }> } >          210118 pseudo-random bits generated
 }> } 
 }> } the problem in the case of a Xen domU is that there's no good source
 }> } of entropy. On native systems we use the hard disk as a source
 }> } of entropoy; but on a domU it's disabled because others domU could 
interfere
 }> } with it.
 }> } rndctl should show xennets as a possible source of entropy, but it has
 }> } to be enabled manually.
 }> 
 }> How would I enable it manually?
 }
 }'rndctl -l' should list it; you should be able to enable it with
 }'rndctl -c'
 
 'rndctl -l' doesn't list any devices, as shown above.
 
 Tracy J. Di Marco White
 Information Technology Services
 Iowa State University