yellow team mailing list archive

[Benji York <benji.york@xxxxxxxxxxxxx>]

On Wed, Mar 21, 2012 at 12:05 AM, Gary Poster <gary.poster@xxxxxxxxxxxxx> wrote:
> Here's strace starting with the hang, that eventually is not a hang:

Using -t (or even better, -tt) will prefix each line with the time.

> Maybe the randomness is exhausted?

That was my first thought.  It is bad form to use /dev/random for
non-cryptographic entropy needs since it blocks; /dev/urandom should be
used instead since when it runs out of entropy it just generates
slightly less random numbers than it otherwise would.

Since we have to map the file anyway, we can try mapping /dev/random to
/dev/urandom.  If that works, we can set up the containers so their
/dev/random is really /dev/urandom and hope no one ever tries to
generate keys on them.
-- 
Benji York