Comments

29 Comments

This update has been unpushed.

the selinux part has issues, the update was unpushed. see: https://bugzilla.redhat.com/show_bug.cgi?id=2058914

This update has been unpushed.

bojan, decathorpe, thanks for the info, the update was unpushed. indeed, the selinux part has issues. a note: https://bugzilla.redhat.com/show_bug.cgi?id=2058914

mattf, thanks for the info, the update was unpushed. indeed, the selinux part has issues.

This update has been unpushed.

unfortunately a formal downgrade ("dnf distro-sync") is needed. in reality the latest ones are the higher versions, according to upstream commits.

thanks bojan, for confirmation, yes, unfortunately a formal downgrade is needed. in reality the latest ones are the higher versions, according to upstream commits.

ng-tools-6.13.git.d207e0b6-1.fc34 and jitterentropy-3.0.2.git.d18d5863-1.fc34 was revoked from the updates-testing repo, rng-tools-6.13-2.git.d207e0b6.fc34 and jitterentropy-3.0.2-2.git.409828cf.fc34 are the highest versions.

ng-tools-6.13.git.d207e0b6-1.fc34 and jitterentropy-3.0.2.git.d18d5863-1.fc34 was revoked from the updates-testing repo, rng-tools-6.13-2.git.d207e0b6.fc34 and jitterentropy-3.0.2-2.git.409828cf.fc34 are the highest versions.

i know the package versioning is a failure here. luckily amount of changes is not that big and upstreams are going to release new versions relatively soon.

This update has been unpushed.

jitterentropy-3 has issues on certain (one core, coarse hw/system timer) hardware. unfortunately, i'm going to to revoke this update and rebuild rng-tools against an older lib until the issue is solved in the lib. alternatively, if you see rngd consuming 100% of cpu the workaround is not to use jitter entropy source in rngd (add -x jitter to a commad line).

This update has been unpushed.

jitterentropy-3 has issues on certain (one core, coarse hw/system timer) hardware. unfortunately, i'm going to to revoke this update and rebuild rng-tools against an older lib until the issue is solved in the lib. alretnatively, if you see rngd consuming 100% of cpu the workaround is not to use jitter entropy source in rngd (add -x jitter to a commad line).

jitterentropy-3 has issues on certain (one core, coarse hw/system timer) hardware. unfortunately, i do not see an option to revoke this update from rawhide. if you see rngd consuming 100% of cpu the workaround is not to use jitter entropy source in rngd (add -x jitter to a commad line) or not to use rawhide repos.

hello, Morris, thank a ton for this report. unforturunately, i cannot reproduce this yet on a system as close your yours as i was able to find (VM as single-core Core2Duo). would you mind opening a bug in the bugzilla: https://bugzilla.redhat.com/enter_bug.cgi?classification=Fedora for Fedora34? Or if you do not want to create an account there we can continue here (but it is not possible to attach files, afaik).

could you please run as root:

$ strace -fvxt -o rngd.log rngd -f -d

let it hit the issue and then allow it to run for, say, 2 minutes? and then upload the resulting rngd.log somewhere? could you also upload output of lscpu and dmidecode for this system, please?

@mattf indeed, this is the point of updates-testing repo. i needed jitterentropy-3.0.2-1.fc34 in a build-root so i can build rng-tools against newer libjitterentropy.so.3. and jitterentropy-3.0.2-1.fc34 has got to testing while it was 3am here.

anyway, i've just built rng-tools-6.13-2.fc34 against newer libjitterentropy.so.3. could you please check again after this bodhi update gets to testing and possibly provide another thumbs up/down? please, note, the updates packages can be not yet available on your fedora download mirror.

btw, let me note, with the introduction of jitter-rng in the kernel as of v5.4-rc1 by 50ee7529ec45 ("random: try to actively add entropy rather than passively wait for it") we generally have enough entropy in all cases and do not need rngd to run in userspace anymore. Thus Fedora and RHEL have removed rng-tools from the installed-by-default standard and minimal package sets.