Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat(entropy): Remove entropy check and MINIMUM option and just seed urandom #2

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

RossRichardson
Copy link

Starting October 3, 2022, Lambda will roll out an update to the underlying Linux kernel, patching it to 4.14.285. This update includes a change to how entropy collection is implemented, resulting in /proc/sys/kernel/random/entropy_avail reporting 256 instead of higher values.

This can impact libraries like Bless so by October 3, 2022 we will need to;

  • Update ENTROPY_MINIMUM_BITS_DEFAULT in the bless_config.py file to 256.
  • If using Bless options, also update entropy_minimum_bits to 256.

Approach:
Add in more entropy to dev/urandom using the RANDOM_SEED_BYTES_OPTION and ignore the available entropy all together. Remove the ENTROPY_MINIMUM_BITS_DEFAULT option and change the entropy check to a seed_entropy method.

@RossRichardson RossRichardson self-assigned this Sep 9, 2022
@RossRichardson RossRichardson changed the title feat(entropy): Remove entropy check and just add it feat(entropy): Remove entropy check and MINIMUM option and just seed urandom Sep 9, 2022
@RossRichardson RossRichardson requested a review from b333z September 9, 2022 05:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants