From owner-freebsd-hackers@FreeBSD.ORG Sat Jun 1 08:40:02 2013 Return-Path: Delivered-To: freebsd-hackers@freebsd.org Received: from mx1.freebsd.org (mx1.FreeBSD.org [8.8.178.115]) by hub.freebsd.org (Postfix) with ESMTP id 8EFB9123 for ; Sat, 1 Jun 2013 08:40:02 +0000 (UTC) (envelope-from wojtek@wojtek.tensor.gdynia.pl) Received: from wojtek.tensor.gdynia.pl (wojtek.tensor.gdynia.pl [188.252.31.196]) by mx1.freebsd.org (Postfix) with ESMTP id 174EE6C8 for ; Sat, 1 Jun 2013 08:40:01 +0000 (UTC) Received: from wojtek.tensor.gdynia.pl (localhost [127.0.0.1]) by wojtek.tensor.gdynia.pl (8.14.7/8.14.6) with ESMTP id r518doCV007159; Sat, 1 Jun 2013 10:39:50 +0200 (CEST) (envelope-from wojtek@wojtek.tensor.gdynia.pl) Received: from localhost (wojtek@localhost) by wojtek.tensor.gdynia.pl (8.14.6/8.14.6/Submit) with ESMTP id r518dmP4007156; Sat, 1 Jun 2013 10:39:49 +0200 (CEST) (envelope-from wojtek@wojtek.tensor.gdynia.pl) Date: Sat, 1 Jun 2013 10:39:48 +0200 (CEST) From: Wojciech Puchar To: Peter Jeremy Subject: Re: seeding randomness in zee cloud In-Reply-To: <20130601014540.GF79250@server.rulingia.com> Message-ID: References: <0BF6FBDD-47E8-44F1-BA71-A355EDCDEDB6@webweaving.org> <20130601014540.GF79250@server.rulingia.com> User-Agent: Alpine 2.00 (BSF 1167 2008-08-23) MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed X-Greylist: Sender passed SPF test, not delayed by milter-greylist-4.2.7 (wojtek.tensor.gdynia.pl [127.0.0.1]); Sat, 01 Jun 2013 10:39:50 +0200 (CEST) Cc: Dirk-Willem van Gulik , freebsd-hackers@freebsd.org X-BeenThere: freebsd-hackers@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: Technical Discussions relating to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 01 Jun 2013 08:40:02 -0000 >> Or is there a cleaner way to add a additional seed as a one-off with >> disturbing as little as possible (in the few seconds just after the >> network is brought up). > > If this needs to be done automatically, not really. If there's a > person available, you could use the "please type a screen full of > random junk" approach and feed both the inter-character timings (which > should be done automatically via IRQ harvesting) and junk into > /dev/random. > why just not put entropy files before installing from image?