Hacker News new | ask | show | jobs
by web007 4103 days ago
Entropy in VMs is hard to get, it's nice to see an "easy" way to access better system-level entropy. There are also a few utils that let you distribute entropy amongst your VMs[1], but getting everything directly from the system feels better from a security perspective.

I've been forced to use rng-tools and / or rng-usleep to get enough randomness in some Ubuntu VMs in the past. It's maddening to see SSL slowdowns for no good reason, and to have to trace it back to a blocking call to /dev/random for 8 lousy bytes.

[1] http://www.vanheusden.com/Linux/#security

1 comments

Over at Greenhost we use entropybroker from vanheusden to spread entropy to our VM´s. https://greenhost.net/2015/03/16/spreading-chaos-and-entropy...
this looks good comparing to the virtio-rng approach