[PATCH 2/2] Require min entropy for 'part --encrypted' devices (#1162695)

Vratislav Podzimek vpodzime at redhat.com
Thu Nov 13 07:03:19 UTC 2014


On Wed, 2014-11-12 at 14:30 -0500, Samantha N. Bueno wrote:
> On Wed, Nov 12, 2014 at 02:42:43PM +0100, Vratislav Podzimek wrote:
> > We require minimum amount of random data entropy when doing encrypted autopart
> > so this makes the 'part --encrypted' command work the same.
> 
> I think this looks ok. I tested this with Jan's provided ks file in the
> bug; for whatever reason, with the %pre block, the amount of entropy
> keeps getting reset after reaching ~24%. Without the %pre block, this
> works perfectly fine though. I'm not really sure why that might be, or
> if you want to consider that a bug.
That seems like some process being run periodically which eats entropy
because of kernel's randomization used when placing new stuff somewhere
in memory. I'll have a closer look at the %pre section and our code
handling it, maybe there's something stupid.

-- 
Vratislav Podzimek

Anaconda Rider | Red Hat, Inc. | Brno - Czech Republic



More information about the anaconda-patches mailing list