Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: NixOS/nixpkgs
base: 50feed19a620
Choose a base ref
...
head repository: NixOS/nixpkgs
compare: f7a6a1a18392
Choose a head ref
  • 3 commits
  • 2 files changed
  • 2 contributors

Commits on Sep 10, 2020

  1. nixos/modules/security/rngd: Disable by default 

    `rngd` seems to be the root cause for slow boot issues, and its functionality is
redundant since kernel v3.17 (2014), which introduced a `krngd` task (in kernel
space) that takes care of pulling in data from hardware RNGs:

> commit be4000bc4644d027c519b6361f5ae3bbfc52c347
> Author: Torsten Duwe <duwe@lst.de>
> Date:   Sat Jun 14 23:46:03 2014 -0400
>
>     hwrng: create filler thread
>
>     This can be viewed as the in-kernel equivalent of hwrngd;
>     like FUSE it is a good thing to have a mechanism in user land,
>     but for some reasons (simplicity, secrecy, integrity, speed)
>     it may be better to have it in kernel space.
>
>     This patch creates a thread once a hwrng registers, and uses
>     the previously established add_hwgenerator_randomness() to feed
>     its data to the input pool as long as needed. A derating factor
>     is used to bias the entropy estimation and to disable this
>     mechanism entirely when set to zero.

Closes: #96067
    @nbraud @worldofpeace
    nbraud authored and worldofpeace committed Sep 10, 2020
    Copy the full SHA
    e64d3f6 View commit details
    Browse the repository at this point in the history

  2. rl-2009: document rngd

    @worldofpeace
    worldofpeace committed Sep 10, 2020
    Copy the full SHA
    ca674c1 View commit details
    Browse the repository at this point in the history

  3. Merge pull request #96092 from nbraud/security/rngd 

    nixos/modules/security/rngd: Disable by default
    @worldofpeace
    worldofpeace committed Sep 10, 2020
    Copy the full SHA
    f7a6a1a View commit details
    Browse the repository at this point in the history