project-config/nodepool/elements/initialize-urandom/README.rst
James E. Blair 6020537b2c Nodepool elements: Add a script to initialize urandom
In our Xenial images, we see unbound take a while to start because
it uses openssl which uses the getrandom call which can block during
early boot if the nonblocking random number generator is not yet
initialized.

This script uses haveged to quickly initialize the generator.

This commit only includes the script, a later commit will add the
rest of the necessary install steps to the element.

Change-Id: I09d18a0bad6c380fd149660ebfdaf6c12730dc74
2016-08-17 15:22:26 -07:00

3 lines
96 B
ReStructuredText

This uses haveged to quickly initialize the nonblocking kernel random
number generator at boot.