Haveged is or is not recomended?

wdcbb · 2019-12-29 01:14:20

I am on: Devuan
Linux 4cpu 4.9.0-11-amd64 #1 SMP Debian 4.9.189-3+deb9u2 (2019-11-11) x86_64 GNU/Linux
I thought I read somewhere that haveged was no longer needed because that function was in the kernel now.

wdcbb · 2019-12-30 00:50:14

Posted this to freenode #devuan:
I thought haveged was installed by default with the system (ASCII 2.1) but I was wrong.
It seems to me that it should be, but maybe there is a reason that it is not. I have looked
around a little and I have not found any guidance. Should I install it? This is on a
personal computer. If there are some parameters or considerations – what are they?
I am new to chat so please excuse my startup clumseyness.

Someone named debdog sent me to https://issihosts.com/haveged/
Then I looked at https://unix.stackexchange.com/question … py-quality
Then I did this in /proc/sys/kernel/random

# for fname in $(ls) do print $($fname) = $(cat $fname) done

boot_id = a0317a59-6850-4792-988c-edccc4257942
entropy_avail = 3512
poolsize = 4096
read_wakeup_threshold = 64
urandom_min_reseed_secs = 60
uuid = aca2695e-d69a-4fbf-99fd-ed2b3401f7f1
write_wakeup_threshold = 1024

Then ran it again
# for fname in $(ls)^Jdo^Jprint $fname = $(cat $fname) ^Jdone
boot_id = a0317a59-6850-4792-988c-edccc4257942
entropy_avail = 3269
poolsize = 4096
read_wakeup_threshold = 64
urandom_min_reseed_secs = 60
uuid = e632e645-8255-4c09-a558-4943102393f4
write_wakeup_threshold = 1024

Then read the man page for uuid. Now I know how much I dont know (again).
I hope this saves someone some time.
PRNG = pseudo random number generator.

Head_on_a_Stick · 2019-12-30 11:46:58

Your entropy_avail looks fine, only worry once it gets bellow ~1000.

And anyway haveged only provides a pseudorandom output, get a hardware random number generator if you're serious about this stuff.

HevyDevy · 2019-12-30 13:08:08

Im not sure on this as im running refracta linux beowulf and i think it is part of of refracta.

as head on a stick mentions use rng-tools if you are a crypto enthusiast, its in the repos.

https://packages.debian.org/buster/rng-tools

https://pkginfo.devuan.org/stage/ascii/ … 5_5-1.html

fsmithred · 2019-12-30 14:43:29

I added haveged to Refracta isos so that it wouldn't take five minutes to boot while new ssh host keys were being made. The live iso makes new keys on every boot so we all don't have the same host keys. I didn't think it was needed for an installed system, but I could be wrong.

Head_on_a_Stick · 2019-12-30 16:41:30

fsmithred wrote:

I didn't think it was needed for an installed system

I think there was a kernel regression a while ago that haveged could work around but I'm pretty sure it's fixed by now.

The officially official Devuan Forum!

#1 2019-12-29 01:14:20

Haveged is or is not recomended?

#2 2019-12-30 00:50:14

Re: Haveged is or is not recomended?

#3 2019-12-30 11:46:58

Re: Haveged is or is not recomended?

#4 2019-12-30 13:08:08

Re: Haveged is or is not recomended?

#5 2019-12-30 14:43:29

Re: Haveged is or is not recomended?

#6 2019-12-30 16:41:30

Re: Haveged is or is not recomended?

Board footer