Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: NixOS/nixpkgs
base: 159760a95538
Choose a base ref
...
head repository: NixOS/nixpkgs
compare: 26c98e742f22
Choose a head ref
  • 2 commits
  • 2 files changed
  • 2 contributors

Commits on Sep 10, 2020

  1. nixos/modules/security/rngd: Disable by default

    `rngd` seems to be the root cause for slow boot issues, and its functionality is
    redundant since kernel v3.17 (2014), which introduced a `krngd` task (in kernel
    space) that takes care of pulling in data from hardware RNGs:
    
    > commit be4000bc4644d027c519b6361f5ae3bbfc52c347
    > Author: Torsten Duwe <duwe@lst.de>
    > Date:   Sat Jun 14 23:46:03 2014 -0400
    >
    >     hwrng: create filler thread
    >
    >     This can be viewed as the in-kernel equivalent of hwrngd;
    >     like FUSE it is a good thing to have a mechanism in user land,
    >     but for some reasons (simplicity, secrecy, integrity, speed)
    >     it may be better to have it in kernel space.
    >
    >     This patch creates a thread once a hwrng registers, and uses
    >     the previously established add_hwgenerator_randomness() to feed
    >     its data to the input pool as long as needed. A derating factor
    >     is used to bias the entropy estimation and to disable this
    >     mechanism entirely when set to zero.
    
    Closes: #96067
    (cherry picked from commit e64d3f6)
    nbraud authored and worldofpeace committed Sep 10, 2020
    Copy the full SHA
    fc5f50a View commit details
    Browse the repository at this point in the history
  2. rl-2009: document rngd

    (cherry picked from commit ca674c1)
    worldofpeace committed Sep 10, 2020
    Copy the full SHA
    26c98e7 View commit details
    Browse the repository at this point in the history