On Wed, May 11, 2016 at 12:04 PM, Kristian Freed <[email protected]> wrote: > I've been troubleshooting very slow startup of Java appliactions under > Kubernetes on GKE and traced it down to the initialization of the > SecureRandom implementation SHA1PRNG. The implementation reads a seed value > from /dev/random and then uses the SHA algorithm to produce pseudo random > values from that. While the size of the seed should be very small, it > appears to have to wait for a very long time (minutes!) before it gets > initialized.
This issue is inherent to virtualized environments and there are some solutions, but I don't know to which extend GCE/GKE implement them (see 'virtio RNG'). You may want to a privileged container running haveged (http://www.issihosts.com/haveged) to increase the entropy. -- Giovanni -- You received this message because you are subscribed to the Google Groups "Containers at Google" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. Visit this group at https://groups.google.com/group/google-containers. For more options, visit https://groups.google.com/d/optout.
