Re: [DNG] Systemd depends on random numbers in order to work properly

2019-07-09 Thread Didier Kryn

Le 09/07/2019 à 21:34, J. Fahrner via Dng a écrit :

Am 2019-07-09 21:07, schrieb Tomasz Torcz:

So why do they need new UUID's at every boot?


  Not every boot. Every service start:
https://github.com/systemd/systemd/commit/4b58153dd22172d817055d2a09a0cdf3f4bd9db3 



Are they crazy? 



    They probably did that because it was fun and they just didn't 
expect it to have a cost. Now they won't undo it because it would mean 
to ack their error, which would open the door for acking more errors.


        Didier


___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng


Re: [DNG] Systemd depends on random numbers in order to work properly

2019-07-09 Thread Steve Litt
On Tue, 09 Jul 2019 21:34:12 +0200
"J. Fahrner via Dng"  wrote:

> Am 2019-07-09 21:07, schrieb Tomasz Torcz:
> >> So why do they need new UUID's at every boot?  
> > 
> >   Not every boot. Every service start:
> > https://github.com/systemd/systemd/commit/4b58153dd22172d817055d2a09a0cdf3f4bd9db3
> >   
> 
> Are they crazy?

Martin, close your ears for a second.

J. Fahrner,

Followthemoney!

SteveT

Steve Litt 
July 2019 featured book: Troubleshooting Techniques
 of the Successful Technologist
http://www.troubleshooters.com/techniques
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng


Re: [DNG] Systemd depends on random numbers in order to work properly

2019-07-09 Thread J. Fahrner via Dng

Am 2019-07-09 21:07, schrieb Tomasz Torcz:

So why do they need new UUID's at every boot?


  Not every boot. Every service start:
https://github.com/systemd/systemd/commit/4b58153dd22172d817055d2a09a0cdf3f4bd9db3


Are they crazy?
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng


Re: [DNG] Systemd depends on random numbers in order to work properly

2019-07-09 Thread Martin Steigerwald
Tomasz Torcz - 09.07.19, 21:07:
> On Tue, Jul 09, 2019 at 02:58:37PM -0400, Hendrik Boom wrote:
> > > > What need could there possibly be for randomness at boot time?
> > > > What *use* could there even be, never mind need?
> > > 
> > > From what I gathered they need some basic randomness for UUID
> > > generation for all units and for some hashmap implementation. But
> > > as far as I got, they would not even need random values with
> > > cryptographic quality. But when using /dev/urandom they still
> > > drain the entropy pool for more important applications of
> > > randomness (like generating SSH keys).> 
> > So why do they need new UUID's at every boot?
> 
>   Not every boot. Every service start:
> https://github.com/systemd/systemd/commit/4b58153dd22172d817055d2a09a0
> cdf3f4bd9db3

Now *who* does need that?

Well…

Thank you for digging that out.

Seems Systemd developers pile complexity over complexity over complexity 
just to even add more complexity.

-- 
Martin


___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng


Re: [DNG] Systemd depends on random numbers in order to work properly

2019-07-09 Thread Tomasz Torcz
On Tue, Jul 09, 2019 at 02:58:37PM -0400, Hendrik Boom wrote:
> > > What need could there possibly be for randomness at boot time?
> > > What *use* could there even be, never mind need?
> > 
> > From what I gathered they need some basic randomness for UUID generation 
> > for all units and for some hashmap implementation. But as far as I got, 
> > they would not even need random values with cryptographic quality. But 
> > when using /dev/urandom they still drain the entropy pool for more 
> > important applications of randomness (like generating SSH keys).
> 
> So why do they need new UUID's at every boot?

  Not every boot. Every service start:
https://github.com/systemd/systemd/commit/4b58153dd22172d817055d2a09a0cdf3f4bd9db3

-- 
Tomasz Torcz "God, root, what's the difference?"
xmpp: zdzich...@chrome.pl "God is more forgiving."

___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng


Re: [DNG] Systemd depends on random numbers in order to work properly

2019-07-09 Thread Hendrik Boom
On Tue, Jul 09, 2019 at 04:31:21PM +0200, Martin Steigerwald wrote:
> Hendrik Boom - 09.07.19, 14:26:
> > On Tue, Jul 09, 2019 at 07:07:20AM -0400, Steve Litt wrote:
> > > On Tue, 09 Jul 2019 10:54:46 +0200
> > > 
> > > Martin Steigerwald  wrote:
> > > > Martin Steigerwald - 08.07.19, 17:35:
> > > > > Just another reason I am happy to use sysvinit on my systems.
> > > > > 
> > > > > unblock: systemd/241-4
> > > > > https://bugs.debian.org/929215
> > > > > 
> > > > > Booting system should not depend on random numbers to be
> > > > > available
> > > > > in a large enough quantity.
> > > > > 
> > > > > Granted there is a processor bug involved… but why rely on the
> > > > > random number generator of CPUs anyway?
> > > > 
> > > > https://www.debian.org/releases/buster/amd64/release-notes/ch-info
> > > > rmation.en.html#entropy-starvation> 
> > > The preceding article mentions using haveged, which many consider
> > > insecure. So for those times when *I* use systemd, I've created a
> > > superior solution...
> > > 
> > > I loosely attach my mouse to my stationary bike in such a way that
> > > the mouse's LED shines on the stationary bike's belt, building up
> > > entropy. Within 10 seconds boot begins!
> > > 
> > > I've mentioned many times that although systemd holds out the
> > > promise
> > > of fast boot, it takes someone with my skills to bring that fast
> > > boot
> > > to fruition.
> > 
> > What need could there possibly be for randomness at boot time?
> > What *use* could there even be, never mind need?
> 
> From what I gathered they need some basic randomness for UUID generation 
> for all units and for some hashmap implementation. But as far as I got, 
> they would not even need random values with cryptographic quality. But 
> when using /dev/urandom they still drain the entropy pool for more 
> important applications of randomness (like generating SSH keys).

So why do they need new UUID's at every boot?

-- hendrik
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng


Re: [DNG] Systemd depends on random numbers in order to work properly

2019-07-09 Thread golinux

On 2019-07-09 09:31, Martin Steigerwald wrote:

Steve Litt - 09.07.19, 13:07:

On Tue, 09 Jul 2019 10:54:46 +0200

Martin Steigerwald  wrote:
> Martin Steigerwald - 08.07.19, 17:35:
> > Just another reason I am happy to use sysvinit on my systems.
> >
> > unblock: systemd/241-4
> > https://bugs.debian.org/929215
> >
> > Booting system should not depend on random numbers to be available
> > in a large enough quantity.
> >
> > Granted there is a processor bug involved… but why rely on the
> > random number generator of CPUs anyway?
>
> https://www.debian.org/releases/buster/amd64/release-notes/ch-inform
> ation.en.html#entropy-starvation
The preceding article mentions using haveged, which many consider
insecure. So for those times when *I* use systemd, I've created a
superior solution...

I loosely attach my mouse to my stationary bike in such a way that the
mouse's LED shines on the stationary bike's belt, building up
entropy. Within 10 seconds boot begins!

I've mentioned many times that although systemd holds out the promise
of fast boot, it takes someone with my skills to bring that fast boot
to fruition.


Haha!

You mean that, do you?

Or was that a joke?


Welcome to Steve Litt's world.  An oldie but goodie:

http://troubleshooters.com/linux/systemd/bikebrakes.htm

___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng


Re: [DNG] Systemd depends on random numbers in order to work properly

2019-07-09 Thread Martin Steigerwald
Steve Litt - 09.07.19, 13:07:
> On Tue, 09 Jul 2019 10:54:46 +0200
> 
> Martin Steigerwald  wrote:
> > Martin Steigerwald - 08.07.19, 17:35:
> > > Just another reason I am happy to use sysvinit on my systems.
> > > 
> > > unblock: systemd/241-4
> > > https://bugs.debian.org/929215
> > > 
> > > Booting system should not depend on random numbers to be available
> > > in a large enough quantity.
> > > 
> > > Granted there is a processor bug involved… but why rely on the
> > > random number generator of CPUs anyway?
> > 
> > https://www.debian.org/releases/buster/amd64/release-notes/ch-inform
> > ation.en.html#entropy-starvation
> The preceding article mentions using haveged, which many consider
> insecure. So for those times when *I* use systemd, I've created a
> superior solution...
> 
> I loosely attach my mouse to my stationary bike in such a way that the
> mouse's LED shines on the stationary bike's belt, building up
> entropy. Within 10 seconds boot begins!
> 
> I've mentioned many times that although systemd holds out the promise
> of fast boot, it takes someone with my skills to bring that fast boot
> to fruition.

Haha!

You mean that, do you?

Or was that a joke?

-- 
Martin


___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng


Re: [DNG] Systemd depends on random numbers in order to work properly

2019-07-09 Thread Martin Steigerwald
Hendrik Boom - 09.07.19, 14:26:
> On Tue, Jul 09, 2019 at 07:07:20AM -0400, Steve Litt wrote:
> > On Tue, 09 Jul 2019 10:54:46 +0200
> > 
> > Martin Steigerwald  wrote:
> > > Martin Steigerwald - 08.07.19, 17:35:
> > > > Just another reason I am happy to use sysvinit on my systems.
> > > > 
> > > > unblock: systemd/241-4
> > > > https://bugs.debian.org/929215
> > > > 
> > > > Booting system should not depend on random numbers to be
> > > > available
> > > > in a large enough quantity.
> > > > 
> > > > Granted there is a processor bug involved… but why rely on the
> > > > random number generator of CPUs anyway?
> > > 
> > > https://www.debian.org/releases/buster/amd64/release-notes/ch-info
> > > rmation.en.html#entropy-starvation> 
> > The preceding article mentions using haveged, which many consider
> > insecure. So for those times when *I* use systemd, I've created a
> > superior solution...
> > 
> > I loosely attach my mouse to my stationary bike in such a way that
> > the mouse's LED shines on the stationary bike's belt, building up
> > entropy. Within 10 seconds boot begins!
> > 
> > I've mentioned many times that although systemd holds out the
> > promise
> > of fast boot, it takes someone with my skills to bring that fast
> > boot
> > to fruition.
> 
> What need could there possibly be for randomness at boot time?
> What *use* could there even be, never mind need?

From what I gathered they need some basic randomness for UUID generation 
for all units and for some hashmap implementation. But as far as I got, 
they would not even need random values with cryptographic quality. But 
when using /dev/urandom they still drain the entropy pool for more 
important applications of randomness (like generating SSH keys).

-- 
Martin


___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng


Re: [DNG] Systemd depends on random numbers in order to work properly

2019-07-09 Thread Martin Steigerwald
fsmithred via Dng - 09.07.19, 12:49:
> On 7/9/19 5:07 AM, Martin Steigerwald wrote:
> > Martin Steigerwald - 09.07.19, 10:54:
> >> Just *booting* the system should not depend on enough entropy being
> >> available. Starting services that need entropy may be delayed, but
> >> just booting should not depend on entropy being available.
> > 
> > This is enlightening:
> > 
> > Openssh taking minutes to become available, booting takes half an
> > hour ... because your server waits for a few bytes of randomness
> > 
> > https://daniel-lange.com/archives/152-hello-buster.html
> > 
> > According Daniel Systemd developers are basically getting it wrong
> > to
> > the maximum extent possible.
> 
> Live-isos with openssh-server hang on boot while waiting for enough
> entropy to make new host keys. I get this with sysvinit (in Devuan). I
> made a live-config script to start haveged before openssh-server
> starts to fix it.

I may run into this once I upgrade my cloud-init VM images for the Linux 
trainings I hold.

So yes, it is not just something with Systemd, but still I believe 
Systemd has no business to drain the entropy pool that early during boot 
time. Especially given the challenge of having enough entropy during 
boot anyway.

I am not sure whether Devuan Beowulf will have any sort of release 
notes, but if, it may be helpful to mention that. Otherwise we can also 
point to Debian release notes and say that for services, and just for 
services, what is written there still applies.

Thanks,
-- 
Martin


___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng


Re: [DNG] Runit service depend another script not daemon

2019-07-09 Thread Dmitry Bogatov

[2019-07-06 08:49] Martin Steigerwald
> That said, I agree it would be good to find a way to inject runit
> symlinks into packages, cause I believe it to be unlikely that many
> Debian package maintainers would include runit support. However that
> said, I would.

True: most maintainers will not add runit support for their packages on
their own, since they are not interested and there is nothing in Debian
Policy to force them to do so.

But there is TC decision, that maintainers /should/
accept reasonable contributions that add support for alternative init
system. Given patience, they do.

Side note: in Policy sysvinit is still main init system, initscripts are
still (hopefully, forever) mandatory.

So inclusion of runit support is matter of manpower and patches. If
somebody is interested to help, nice places to start:

 + Bugs, user-tagged with `runscript' for `ru...@packages.debian.org'
   user[1]
 + runit bugs, and #930758 in particular: on testing in virtual machine
 + My work on testing of runscript upgrade via Docker:
   - https://salsa.debian.org/kaction/daemons
   - https://salsa.debian.org/kaction/acpid

I am sorry to say, but it is unlikely that runit support (service
directories) could be made in generic way, automatically, for following
reasons:

 - sometimes you need more, then just execute daemon: you need to setup
   directories, files, permissions, etc. See patch in #930113

 - different daemons have different procedures to inhibit detaching from
   tty.

 - different daemons have different procedures to force logging on stdout.

Idea of converter/interpreter for systemd unit files is floating around,
but nobody produced anything usable so far.

 [1] 
https://bugs.debian.org/cgi-bin/pkgreport.cgi?which=tag===runscript=ru...@packages.debian.org=no


-- 
Note, that I send and fetch email in batch, once in a few days.
Please, mention in body of your reply when you add or remove recepients.
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng


Re: [DNG] Systemd depends on random numbers in order to work properly

2019-07-09 Thread Hendrik Boom
On Tue, Jul 09, 2019 at 07:07:20AM -0400, Steve Litt wrote:
> On Tue, 09 Jul 2019 10:54:46 +0200
> Martin Steigerwald  wrote:
> 
> > Martin Steigerwald - 08.07.19, 17:35:
> > > Just another reason I am happy to use sysvinit on my systems.
> > > 
> > > unblock: systemd/241-4
> > > https://bugs.debian.org/929215
> > > 
> > > Booting system should not depend on random numbers to be available
> > > in a large enough quantity.
> > > 
> > > Granted there is a processor bug involved… but why rely on the
> > > random number generator of CPUs anyway?  
> > 
> > https://www.debian.org/releases/buster/amd64/release-notes/ch-information.en.html#entropy-starvation
> 
> The preceding article mentions using haveged, which many consider
> insecure. So for those times when *I* use systemd, I've created a
> superior solution...
> 
> I loosely attach my mouse to my stationary bike in such a way that the
> mouse's LED shines on the stationary bike's belt, building up entropy.
> Within 10 seconds boot begins!
> 
> I've mentioned many times that although systemd holds out the promise
> of fast boot, it takes someone with my skills to bring that fast boot
> to fruition.

What need could there possibly be for randomness at boot time?
What *use* could there even be, never mind need?

-- hendrik
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng


Re: [DNG] Firefox-esr freezes ASCII

2019-07-09 Thread Arnt Karlsen
On Tue, 9 Jul 2019 06:24:56 -0400, fsmithred wrote in message 
<72121d31-c37a-3b43-1ebb-0cb264310...@gmail.com>:

> On 7/9/19 4:34 AM, Edward Bartolo via Dng wrote:
> > For the information of everyone:
> > 
> > I would like to inform all those concerned that firefox-esr is
> > causing ASCII to freeze. Getting access to a terminal is almost
> > impossible. Yesterday, I had to power off the machine. I did not
> > investigate why the issue is happening as the system became
> > extremely unresponsive. Recalling when I used MS Windows
> > 95/98/Millenium, this is worse than those.
> >   
> 
> 
> I get the same in jessie. It starts when memory use gets to around
> 75% or more. It hasn't happened to me in ascii, but the box that has
> ascii also has 8G ram.
> 
> Recently, I read something that said firefox will require 2-3G of
> memory in the near future. We can look forward to more of this
> happening.
> 
> What I do when it starts to slow down is ctrl-alt-F2, log in and
> start killing programs. Thunderbird is usually on that kill list,
> because it takes a lot of ram, too. If I wait too long to do that, it
> freezes. At some point, even sysrq keys won't work.


..I run all my browsers "nice -n 17 " or lower pri and kill 
'em when they get sluggish, buys me time to do manual kills
on e.g. htop, in bad cases I ssh in to kill. 

..also possible to deny them cpu and memory and automate 
killing them as they try outgrow their resource quota, 
but "nice -n 17 " has worked ok for me this far.


-- 
..med vennlig hilsen = with Kind Regards from Arnt Karlsen
...with a number of polar bear hunters in his ancestry...
  Scenarios always come in sets of three: 
  best case, worst case, and just in case.
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng


Re: [DNG] Firefox-esr freezes ASCII

2019-07-09 Thread Dimitris via Dng
you should also check if firefox is running something malicious from
visited sites, like a cryptominer script.
use ublock origin, noscript extensions to see differences in firefox
behavior too..
maybe even run firefox with firejail, or try a new profile...
---
i also use icecat occasionally, as it keeps js very limited, if not
disabled at all.. better browsing experience, when websites don't break :)




signature.asc
Description: OpenPGP digital signature
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng


[DNG] Firefox-esr freezes ASCII

2019-07-09 Thread Edward Bartolo via Dng
To pay my bills online I use Chromium as I have no other choice.
Websites are becoming dictators as to which browser one uses.

To do normal browsing, I am using Waterfox which is Firefox without
the late many 'cool' additions.

This experience is making me nostalgic of the times when I was using
Debian Sarge and Debian Etch!
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng


Re: [DNG] Systemd depends on random numbers in order to work properly

2019-07-09 Thread Steve Litt
On Tue, 09 Jul 2019 10:54:46 +0200
Martin Steigerwald  wrote:

> Martin Steigerwald - 08.07.19, 17:35:
> > Just another reason I am happy to use sysvinit on my systems.
> > 
> > unblock: systemd/241-4
> > https://bugs.debian.org/929215
> > 
> > Booting system should not depend on random numbers to be available
> > in a large enough quantity.
> > 
> > Granted there is a processor bug involved… but why rely on the
> > random number generator of CPUs anyway?  
> 
> https://www.debian.org/releases/buster/amd64/release-notes/ch-information.en.html#entropy-starvation

The preceding article mentions using haveged, which many consider
insecure. So for those times when *I* use systemd, I've created a
superior solution...

I loosely attach my mouse to my stationary bike in such a way that the
mouse's LED shines on the stationary bike's belt, building up entropy.
Within 10 seconds boot begins!

I've mentioned many times that although systemd holds out the promise
of fast boot, it takes someone with my skills to bring that fast boot
to fruition.

SteveT

Steve Litt 
July 2019 featured book: Troubleshooting Techniques
 of the Successful Technologist
http://www.troubleshooters.com/techniques
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng


Re: [DNG] Firefox-esr freezes ASCII

2019-07-09 Thread Steve Litt
On Tue, 9 Jul 2019 10:34:34 +0200
Edward Bartolo via Dng  wrote:


> Please note, this post is not intended as a complaint against the
> Devuan distribution. Firefox is not written by Devuan. My post should
> be viewed as an advice to anyone still using firefox who would not
> like to get their OS crashing.

What browser do you use instead, Edward. All browsers suck, and I'm
still looking for a good one.

 
SteveT

Steve Litt 
July 2019 featured book: Troubleshooting Techniques
 of the Successful Technologist
http://www.troubleshooters.com/techniques
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng


Re: [DNG] Systemd depends on random numbers in order to work properly

2019-07-09 Thread fsmithred via Dng

On 7/9/19 5:07 AM, Martin Steigerwald wrote:

Martin Steigerwald - 09.07.19, 10:54:


Just *booting* the system should not depend on enough entropy being
available. Starting services that need entropy may be delayed, but
just booting should not depend on entropy being available.


This is enlightening:

Openssh taking minutes to become available, booting takes half an hour
... because your server waits for a few bytes of randomness

https://daniel-lange.com/archives/152-hello-buster.html

According Daniel Systemd developers are basically getting it wrong to
the maximum extent possible.



Live-isos with openssh-server hang on boot while waiting for enough 
entropy to make new host keys. I get this with sysvinit (in Devuan). I 
made a live-config script to start haveged before openssh-server starts to 
fix it.


fsmithred

___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng


Re: [DNG] Firefox-esr freezes ASCII

2019-07-09 Thread fsmithred via Dng

On 7/9/19 4:34 AM, Edward Bartolo via Dng wrote:

For the information of everyone:

I would like to inform all those concerned that firefox-esr is causing
ASCII to freeze. Getting access to a terminal is almost impossible.
Yesterday, I had to power off the machine. I did not investigate why
the issue is happening as the system became extremely unresponsive.
Recalling when I used MS Windows 95/98/Millenium, this is worse than
those.




I get the same in jessie. It starts when memory use gets to around 75% or 
more. It hasn't happened to me in ascii, but the box that has ascii also 
has 8G ram.


Recently, I read something that said firefox will require 2-3G of memory 
in the near future. We can look forward to more of this happening.


What I do when it starts to slow down is ctrl-alt-F2, log in and start 
killing programs. Thunderbird is usually on that kill list, because it 
takes a lot of ram, too. If I wait too long to do that, it freezes. At 
some point, even sysrq keys won't work.


fsmithred


___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng


Re: [DNG] Systemd depends on random numbers in order to work properly

2019-07-09 Thread Martin Steigerwald
Martin Steigerwald - 09.07.19, 11:07:
> Martin Steigerwald - 09.07.19, 10:54:
> > Martin Steigerwald - 08.07.19, 17:35:
> > > Just another reason I am happy to use sysvinit on my systems.
> > > 
> > > unblock: systemd/241-4
> > > https://bugs.debian.org/929215
> > > 
> > > Booting system should not depend on random numbers to be available
> > > in
> > > a large enough quantity.
> > > 
> > > Granted there is a processor bug involved… but why rely on the
> > > random
> > > number generator of CPUs anyway?
> > 
> > https://www.debian.org/releases/buster/amd64/release-notes/ch-inform
> > at ion.en.html#entropy-starvation
> > 
> > is just so seriously broken I do not have any words for it.
> > 
> > Just *booting* the system should not depend on enough entropy being
> > available. Starting services that need entropy may be delayed, but
> > just booting should not depend on entropy being available.
> 
> This is enlightening:
> 
> Openssh taking minutes to become available, booting takes half an hour
> ... because your server waits for a few bytes of randomness
> 
> https://daniel-lange.com/archives/152-hello-buster.html
> 
> According Daniel Systemd developers are basically getting it wrong to
> the maximum extent possible.

I probably better stop here, but Debian kernel developers activated 
trusting RDRAND CPU randomness despite the warning of Theodore T'so, the 
maintainer of the entropy gatherer in Linux.

In above blog post:

"Update: Since Linux kernel build 4.19.20-1 CONFIG_RANDOM_TRUST_CPU has 
been enabled by default in Debian."

This means the default kernel may have become less secure, but it can be 
disabled without recompiling the kernel. From linux-image-4.19.0-5-amd64 
changelog:

linux (4.19.20-1) unstable; urgency=medium
[…]
  * random: Enable RANDOM_TRUST_CPU. This can be reverted using the 
kernel parameter: random.trust_cpu=off
[…]

Actually doing just that now for my Devuan based servers.

Ciao,
-- 
Martin


___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng


Re: [DNG] Systemd depends on random numbers in order to work properly

2019-07-09 Thread Martin Steigerwald
Martin Steigerwald - 09.07.19, 10:54:
> Martin Steigerwald - 08.07.19, 17:35:
> > Just another reason I am happy to use sysvinit on my systems.
> > 
> > unblock: systemd/241-4
> > https://bugs.debian.org/929215
> > 
> > Booting system should not depend on random numbers to be available
> > in
> > a large enough quantity.
> > 
> > Granted there is a processor bug involved… but why rely on the
> > random
> > number generator of CPUs anyway?
> 
> https://www.debian.org/releases/buster/amd64/release-notes/ch-informat
> ion.en.html#entropy-starvation
> 
> is just so seriously broken I do not have any words for it.
> 
> Just *booting* the system should not depend on enough entropy being
> available. Starting services that need entropy may be delayed, but
> just booting should not depend on entropy being available.

This is enlightening:

Openssh taking minutes to become available, booting takes half an hour 
... because your server waits for a few bytes of randomness

https://daniel-lange.com/archives/152-hello-buster.html

According Daniel Systemd developers are basically getting it wrong to 
the maximum extent possible.

-- 
Martin


___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng


Re: [DNG] Systemd depends on random numbers in order to work properly

2019-07-09 Thread Martin Steigerwald
Martin Steigerwald - 08.07.19, 17:35:
> Just another reason I am happy to use sysvinit on my systems.
> 
> unblock: systemd/241-4
> https://bugs.debian.org/929215
> 
> Booting system should not depend on random numbers to be available in
> a large enough quantity.
> 
> Granted there is a processor bug involved… but why rely on the random
> number generator of CPUs anyway?

https://www.debian.org/releases/buster/amd64/release-notes/ch-information.en.html#entropy-starvation

is just so seriously broken I do not have any words for it.

Just *booting* the system should not depend on enough entropy being 
available. Starting services that need entropy may be delayed, but just 
booting should not depend on entropy being available.

Ciao,
-- 
Martin


___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng


Re: [DNG] Ascii netinstall problems

2019-07-09 Thread m_maass
Hi Aitor,

you was right, the url was wrong, packages-> deb, jessie-> ascii, and
now everything works.

Thank You


On 8/7/19 17:41, m_maass wrote:

> Dear Friends,
>
> i want to install ascii with
>
> packages.devuan.org/devuan/dists/jessie/main/installer-amd64/current/images/netboot/netboot.tar.gz

___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng


[DNG] Firefox-esr freezes ASCII

2019-07-09 Thread Edward Bartolo via Dng
For the information of everyone:

I would like to inform all those concerned that firefox-esr is causing
ASCII to freeze. Getting access to a terminal is almost impossible.
Yesterday, I had to power off the machine. I did not investigate why
the issue is happening as the system became extremely unresponsive.
Recalling when I used MS Windows 95/98/Millenium, this is worse than
those.

Please note, this post is not intended as a complaint against the
Devuan distribution. Firefox is not written by Devuan. My post should
be viewed as an advice to anyone still using firefox who would not
like to get their OS crashing.
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng