From: Kashyap Chamarthy <kchamart@redhat.com> To: qemu-devel@nongnu.org Cc: amit@kernel.org, armbru@redhat.com, rjones@redhat.com, berrange@redhat.com, Kashyap Chamarthy <kchamart@redhat.com> Subject: [Qemu-devel] [PATCH] VirtIO-RNG: Update default entropy source to `/dev/urandom` Date: Fri, 3 May 2019 17:46:12 +0200 [thread overview] Message-ID: <20190503154613.4192-1-kchamart@redhat.com> (raw) When QEMU exposes a VirtIO-RNG device to the guest, that device needs a source of entropy, and that source needs to be "non-blocking", like `/dev/urandom`. However, currently QEMU defaults to the problematic `/dev/random`, which is "blocking" (as in, it waits until sufficient entropy is available). So change the entropy source to the recommended `/dev/urandom`. Related discussion in these[1][2] past threads. [1] https://lists.nongnu.org/archive/html/qemu-devel/2018-06/msg08335.html -- "RNG: Any reason QEMU doesn't default to `/dev/urandom`?" [2] https://lists.nongnu.org/archive/html/qemu-devel/2018-09/msg02724.html -- "[RFC] Virtio RNG: Consider changing the default entropy source to /dev/urandom" Signed-off-by: Kashyap Chamarthy <kchamart@redhat.com> --- backends/rng-random.c | 2 +- qemu-options.hx | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/backends/rng-random.c b/backends/rng-random.c index e2a49b0571d79eab335d5a74841d92c50a727b6a..eff36ef14084bccaad1eabe952e2cf6ffa9a2529 100644 --- a/backends/rng-random.c +++ b/backends/rng-random.c @@ -112,7 +112,7 @@ static void rng_random_init(Object *obj) rng_random_set_filename, NULL); - s->filename = g_strdup("/dev/random"); + s->filename = g_strdup("/dev/urandom"); s->fd = -1; } diff --git a/qemu-options.hx b/qemu-options.hx index 51802cbb266a208d70989c4f0ab3317a76edc1ea..a525609149e4d0e4bb60959f029a1a16eb36900d 100644 --- a/qemu-options.hx +++ b/qemu-options.hx @@ -4276,7 +4276,7 @@ Creates a random number generator backend which obtains entropy from a device on the host. The @option{id} parameter is a unique ID that will be used to reference this entropy backend from the @option{virtio-rng} device. The @option{filename} parameter specifies which file to obtain -entropy from and if omitted defaults to @option{/dev/random}. +entropy from and if omitted defaults to @option{/dev/urandom}. @item -object rng-egd,id=@var{id},chardev=@var{chardevid} -- 2.17.2
WARNING: multiple messages have this Message-ID (diff)
From: Kashyap Chamarthy <kchamart@redhat.com> To: qemu-devel@nongnu.org Cc: rjones@redhat.com, Kashyap Chamarthy <kchamart@redhat.com>, armbru@redhat.com, amit@kernel.org Subject: [Qemu-devel] [PATCH] VirtIO-RNG: Update default entropy source to `/dev/urandom` Date: Fri, 3 May 2019 17:46:12 +0200 [thread overview] Message-ID: <20190503154613.4192-1-kchamart@redhat.com> (raw) Message-ID: <20190503154612.ppgvvV44VeNnObTv63NyNWDHEsUe9L1dR8wMjU2FLGw@z> (raw) When QEMU exposes a VirtIO-RNG device to the guest, that device needs a source of entropy, and that source needs to be "non-blocking", like `/dev/urandom`. However, currently QEMU defaults to the problematic `/dev/random`, which is "blocking" (as in, it waits until sufficient entropy is available). So change the entropy source to the recommended `/dev/urandom`. Related discussion in these[1][2] past threads. [1] https://lists.nongnu.org/archive/html/qemu-devel/2018-06/msg08335.html -- "RNG: Any reason QEMU doesn't default to `/dev/urandom`?" [2] https://lists.nongnu.org/archive/html/qemu-devel/2018-09/msg02724.html -- "[RFC] Virtio RNG: Consider changing the default entropy source to /dev/urandom" Signed-off-by: Kashyap Chamarthy <kchamart@redhat.com> --- backends/rng-random.c | 2 +- qemu-options.hx | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/backends/rng-random.c b/backends/rng-random.c index e2a49b0571d79eab335d5a74841d92c50a727b6a..eff36ef14084bccaad1eabe952e2cf6ffa9a2529 100644 --- a/backends/rng-random.c +++ b/backends/rng-random.c @@ -112,7 +112,7 @@ static void rng_random_init(Object *obj) rng_random_set_filename, NULL); - s->filename = g_strdup("/dev/random"); + s->filename = g_strdup("/dev/urandom"); s->fd = -1; } diff --git a/qemu-options.hx b/qemu-options.hx index 51802cbb266a208d70989c4f0ab3317a76edc1ea..a525609149e4d0e4bb60959f029a1a16eb36900d 100644 --- a/qemu-options.hx +++ b/qemu-options.hx @@ -4276,7 +4276,7 @@ Creates a random number generator backend which obtains entropy from a device on the host. The @option{id} parameter is a unique ID that will be used to reference this entropy backend from the @option{virtio-rng} device. The @option{filename} parameter specifies which file to obtain -entropy from and if omitted defaults to @option{/dev/random}. +entropy from and if omitted defaults to @option{/dev/urandom}. @item -object rng-egd,id=@var{id},chardev=@var{chardevid} -- 2.17.2
next reply other threads:[~2019-05-03 15:46 UTC|newest] Thread overview: 15+ messages / expand[flat|nested] mbox.gz Atom feed top 2019-05-03 15:46 Kashyap Chamarthy [this message] 2019-05-03 15:46 ` [Qemu-devel] [PATCH] VirtIO-RNG: Update default entropy source to `/dev/urandom` Kashyap Chamarthy 2019-05-03 15:46 ` Kashyap Chamarthy 2019-05-03 15:46 ` Kashyap Chamarthy 2019-05-03 15:49 ` Daniel P. Berrangé 2019-05-03 15:49 ` Daniel P. Berrangé 2019-05-03 20:47 ` Kashyap Chamarthy 2019-05-03 20:47 ` Kashyap Chamarthy 2019-05-07 9:43 ` Daniel P. Berrangé 2019-05-03 16:11 ` Richard W.M. Jones 2019-05-03 16:11 ` Richard W.M. Jones 2019-05-07 15:20 ` Richard Henderson 2019-05-09 13:53 ` Stefan Hajnoczi 2019-05-09 14:54 ` Daniel P. Berrangé 2019-05-09 15:59 ` Kashyap Chamarthy
Reply instructions: You may reply publicly to this message via plain-text email using any one of the following methods: * Save the following mbox file, import it into your mail client, and reply-to-all from there: mbox Avoid top-posting and favor interleaved quoting: https://en.wikipedia.org/wiki/Posting_style#Interleaved_style * Reply using the --to, --cc, and --in-reply-to switches of git-send-email(1): git send-email \ --in-reply-to=20190503154613.4192-1-kchamart@redhat.com \ --to=kchamart@redhat.com \ --cc=amit@kernel.org \ --cc=armbru@redhat.com \ --cc=berrange@redhat.com \ --cc=qemu-devel@nongnu.org \ --cc=rjones@redhat.com \ /path/to/YOUR_REPLY https://kernel.org/pub/software/scm/git/docs/git-send-email.html * If your mail client supports setting the In-Reply-To header via mailto: links, try the mailto: linkBe sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions for how to clone and mirror all data and code used for this inbox; as well as URLs for NNTP newsgroup(s).