Re: Seeding the Linux RNG at first boot

2017-12-11 Thread Leo Famulari
On Mon, Dec 11, 2017 at 10:16:42AM +0100, Ludovic Courtès wrote: > Leo Famulari skribis: > > At the same time we handle the random seed, we could also try reading > > from /dev/hwrng and, if the read is successful, copy some bytes into > > /dev/urandom. We'd have to try

Re: Seeding the Linux RNG at first boot

2017-12-11 Thread Ludovic Courtès
Leo Famulari skribis: > On Thu, Dec 07, 2017 at 10:07:38PM +0100, Ludovic Courtès wrote: >> Leo Famulari skribis: >> > On the guest side, we would extend urandom-seed-service to also draw on >> > /dev/hwrng, which is where virtio-rng-pci makes the data

Re: Seeding the Linux RNG at first boot

2017-12-07 Thread Leo Famulari
On Thu, Dec 07, 2017 at 10:07:38PM +0100, Ludovic Courtès wrote: > Leo Famulari skribis: > > On the guest side, we would extend urandom-seed-service to also draw on > > /dev/hwrng, which is where virtio-rng-pci makes the data from the host > > available. > > Maybe

Re: Seeding the Linux RNG at first boot

2017-12-07 Thread Ludovic Courtès
Leo Famulari skribis: > On Wed, Dec 06, 2017 at 12:11:36AM +0100, Marius Bakke wrote: >> FWIW if you control the hypervisor, you can send something along the >> lines of: >> >> qemu -device virtio-rng-pci,bus=pci.0,addr=0x1e,max-bytes=1024,period=1000 >> >> to feed the

Seeding the Linux RNG at first boot

2017-12-06 Thread Leo Famulari
On Wed, Dec 06, 2017 at 12:11:36AM +0100, Marius Bakke wrote: > FWIW if you control the hypervisor, you can send something along the > lines of: > > qemu -device virtio-rng-pci,bus=pci.0,addr=0x1e,max-bytes=1024,period=1000 > > to feed the guest with entropy from the host through virtio, up to