From jira at ovirt-jira.atlassian.net Wed Nov 15 13:38:42 2017 Content-Type: multipart/mixed; boundary="===============5039396010852814198==" MIME-Version: 1.0 From: Barak Korren (oVirt JIRA) To: infra at ovirt.org Subject: [JIRA] (OVIRT-1763) Increase entropy for hosts Date: Wed, 15 Nov 2017 13:38:13 +0000 Message-ID: In-Reply-To: JIRA.33295.1510744867000@Atlassian.JIRA --===============5039396010852814198== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable This is a multi-part message in MIME format... ------------=3D_1510753093-27974-399 Content-Type: text/plain; charset=3DUTF-8 Content-Transfer-Encoding: 7bit [ https://ovirt-jira.atlassian.net/browse/OVIRT-1763?page=3Dcom.atlassi= an.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=3D35= 343#comment-35343 ] = Barak Korren commented on OVIRT-1763: ------------------------------------- {quote} How? We have virtio-rng. What else would you like to add? rngd? {quote} If Lago provides virtio-rng, then it should be sufficient (And haveged shou= ld not be needed), but do we have everything configured correctly so that v= irtio-rng shows up as {{/dev/random}} in the VMs? Also maybe the physical hosts themselves are running out of entropy, [~eder= evea] do we have haveged installed on them? I seem to remember we had Puppe= t installing it everywhere. > Increase entropy for hosts > -------------------------- > > Key: OVIRT-1763 > URL: https://ovirt-jira.atlassian.net/browse/OVIRT-1763 > Project: oVirt - virtualization made easy > Issue Type: Bug > Reporter: Dafna Ron > Assignee: infra > > we had a failure in ost that was really hard to debug: http://jenkins.ovi= rt.org/job/ovirt-master_change-queue-tester/3795/ > There are no failures in the logs and the test itself was terminated by a= timeout. > It took the vms a long time to download packages and install and didi see= ms to think that this is due to limited entropy on the physical host. = > we need to review this issue and increase the entropy on the hosts. = -- This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100071) ------------=3D_1510753093-27974-399 Content-Type: text/html; charset=3D"UTF-8" Content-Disposition: inline Content-Transfer-Encoding: 7bit 
[ https://ovirt-jira.atlassian.net/browse/OVIRT-1763?page=3Dcom.atlass=
ian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=
=3D35343#comment-35343 ]

Barak Korren commented on OVIRT-1763:

{quote} How? We have virtio-rng. What else would you like to add? rngd? = {quote}

If Lago provides virtio-rng, then it should be sufficient (And haveged s= hould not be needed), but do we have everything configured correctly so tha= t virtio-rng shows up as {{/dev/random}} in the VMs?

Also maybe the physical hosts themselves are running out of entropy, [~e= derevea] do we have haveged installed on them? I seem to remember we had Pu= ppet installing it everywhere.

Increase entropy for hosts

     Key: OVIRT-1763
     URL: https://ovirt-jira.atlassian.net/browse/OVIRT-1763
 Project: oVirt - virtualization made easy
         Issue Type: Bug
Reporter: Dafna Ron
Assignee: infra

we had a failure in ost that was really hard to debug: http://jenki= ns.ovirt.org/job/ovirt-master_change-queue-tester/3795/ There are no fa= ilures in the logs and the test itself was terminated by a timeout. It took= the vms a long time to download packages and install and didi seems to thi= nk that this is due to limited entropy on the physical host. we need to rev= iew this issue and increase the entropy on the hosts.

— This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#1000= 71)

3D"" ------------=3D_1510753093-27974-399-- --===============5039396010852814198== Content-Type: multipart/alternative MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="attachment.bin" VGhpcyBpcyBhIG11bHRpLXBhcnQgbWVzc2FnZSBpbiBNSU1FIGZvcm1hdC4uLgoKLS0tLS0tLS0t LS0tPV8xNTEwNzUzMDkzLTI3OTc0LTM5OQpDb250ZW50LVR5cGU6IHRleHQvcGxhaW47IGNoYXJz ZXQ9VVRGLTgKQ29udGVudC1UcmFuc2Zlci1FbmNvZGluZzogN2JpdAoKCiAgICBbIGh0dHBzOi8v b3ZpcnQtamlyYS5hdGxhc3NpYW4ubmV0L2Jyb3dzZS9PVklSVC0xNzYzP3BhZ2U9Y29tLmF0bGFz c2lhbi5qaXJhLnBsdWdpbi5zeXN0ZW0uaXNzdWV0YWJwYW5lbHM6Y29tbWVudC10YWJwYW5lbCZm b2N1c2VkQ29tbWVudElkPTM1MzQzI2NvbW1lbnQtMzUzNDMgXSAKCkJhcmFrIEtvcnJlbiBjb21t ZW50ZWQgb24gT1ZJUlQtMTc2MzoKLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LQoKe3F1b3RlfQpIb3c/IFdlIGhhdmUgdmlydGlvLXJuZy4gV2hhdCBlbHNlIHdvdWxkIHlvdSBs aWtlIHRvIGFkZD8gcm5nZD8Ke3F1b3RlfQoKSWYgTGFnbyBwcm92aWRlcyB2aXJ0aW8tcm5nLCB0 aGVuIGl0IHNob3VsZCBiZSBzdWZmaWNpZW50IChBbmQgaGF2ZWdlZCBzaG91bGQgbm90IGJlIG5l ZWRlZCksIGJ1dCBkbyB3ZSBoYXZlIGV2ZXJ5dGhpbmcgY29uZmlndXJlZCBjb3JyZWN0bHkgc28g dGhhdCB2aXJ0aW8tcm5nIHNob3dzIHVwIGFzIHt7L2Rldi9yYW5kb219fSBpbiB0aGUgVk1zPwoK QWxzbyBtYXliZSB0aGUgcGh5c2ljYWwgaG9zdHMgdGhlbXNlbHZlcyBhcmUgcnVubmluZyBvdXQg b2YgZW50cm9weSwgW35lZGVyZXZlYV0gZG8gd2UgaGF2ZSBoYXZlZ2VkIGluc3RhbGxlZCBvbiB0 aGVtPyBJIHNlZW0gdG8gcmVtZW1iZXIgd2UgaGFkIFB1cHBldCBpbnN0YWxsaW5nIGl0IGV2ZXJ5 d2hlcmUuCgo+IEluY3JlYXNlIGVudHJvcHkgZm9yIGhvc3RzCj4gLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0KPgo+ICAgICAgICAgICAgICAgICBLZXk6IE9WSVJULTE3NjMKPiAgICAgICAgICAg ICAgICAgVVJMOiBodHRwczovL292aXJ0LWppcmEuYXRsYXNzaWFuLm5ldC9icm93c2UvT1ZJUlQt MTc2Mwo+ICAgICAgICAgICAgIFByb2plY3Q6IG9WaXJ0IC0gdmlydHVhbGl6YXRpb24gbWFkZSBl YXN5Cj4gICAgICAgICAgSXNzdWUgVHlwZTogQnVnCj4gICAgICAgICAgICBSZXBvcnRlcjogRGFm bmEgUm9uCj4gICAgICAgICAgICBBc3NpZ25lZTogaW5mcmEKPgo+IHdlIGhhZCBhIGZhaWx1cmUg aW4gb3N0IHRoYXQgd2FzIHJlYWxseSBoYXJkIHRvIGRlYnVnOiBodHRwOi8vamVua2lucy5vdmly dC5vcmcvam9iL292aXJ0LW1hc3Rlcl9jaGFuZ2UtcXVldWUtdGVzdGVyLzM3OTUvCj4gVGhlcmUg YXJlIG5vIGZhaWx1cmVzIGluIHRoZSBsb2dzIGFuZCB0aGUgdGVzdCBpdHNlbGYgd2FzIHRlcm1p bmF0ZWQgYnkgYSB0aW1lb3V0Lgo+IEl0IHRvb2sgdGhlIHZtcyBhIGxvbmcgdGltZSB0byBkb3du bG9hZCBwYWNrYWdlcyBhbmQgaW5zdGFsbCBhbmQgZGlkaSBzZWVtcyB0byB0aGluayB0aGF0IHRo aXMgaXMgZHVlIHRvIGxpbWl0ZWQgZW50cm9weSBvbiB0aGUgcGh5c2ljYWwgaG9zdC4gCj4gd2Ug bmVlZCB0byByZXZpZXcgdGhpcyBpc3N1ZSBhbmQgaW5jcmVhc2UgdGhlIGVudHJvcHkgb24gdGhl IGhvc3RzLiAKCgoKLS0KVGhpcyBtZXNzYWdlIHdhcyBzZW50IGJ5IEF0bGFzc2lhbiBKaXJhCih2 MTAwMS4wLjAtU05BUFNIT1QjMTAwMDcxKQoKLS0tLS0tLS0tLS0tPV8xNTEwNzUzMDkzLTI3OTc0 LTM5OQpDb250ZW50LVR5cGU6IHRleHQvaHRtbDsgY2hhcnNldD0iVVRGLTgiCkNvbnRlbnQtRGlz cG9zaXRpb246IGlubGluZQpDb250ZW50LVRyYW5zZmVyLUVuY29kaW5nOiA3Yml0Cgo8aHRtbD48 Ym9keT4KPHByZT5bIGh0dHBzOi8vb3ZpcnQtamlyYS5hdGxhc3NpYW4ubmV0L2Jyb3dzZS9PVklS VC0xNzYzP3BhZ2U9Y29tLmF0bGFzc2lhbi5qaXJhLnBsdWdpbi5zeXN0ZW0uaXNzdWV0YWJwYW5l bHM6Y29tbWVudC10YWJwYW5lbCZhbXA7Zm9jdXNlZENvbW1lbnRJZD0zNTM0MyNjb21tZW50LTM1 MzQzIF08L3ByZT4KPGgzPkJhcmFrIEtvcnJlbiBjb21tZW50ZWQgb24gT1ZJUlQtMTc2Mzo8L2gz Pgo8cD57cXVvdGV9IEhvdz8gV2UgaGF2ZSB2aXJ0aW8tcm5nLiBXaGF0IGVsc2Ugd291bGQgeW91 IGxpa2UgdG8gYWRkPyBybmdkPyB7cXVvdGV9PC9wPgo8cD5JZiBMYWdvIHByb3ZpZGVzIHZpcnRp by1ybmcsIHRoZW4gaXQgc2hvdWxkIGJlIHN1ZmZpY2llbnQgKEFuZCBoYXZlZ2VkIHNob3VsZCBu b3QgYmUgbmVlZGVkKSwgYnV0IGRvIHdlIGhhdmUgZXZlcnl0aGluZyBjb25maWd1cmVkIGNvcnJl Y3RseSBzbyB0aGF0IHZpcnRpby1ybmcgc2hvd3MgdXAgYXMge3svZGV2L3JhbmRvbX19IGluIHRo ZSBWTXM/PC9wPgo8cD5BbHNvIG1heWJlIHRoZSBwaHlzaWNhbCBob3N0cyB0aGVtc2VsdmVzIGFy ZSBydW5uaW5nIG91dCBvZiBlbnRyb3B5LCBbfmVkZXJldmVhXSBkbyB3ZSBoYXZlIGhhdmVnZWQg aW5zdGFsbGVkIG9uIHRoZW0/IEkgc2VlbSB0byByZW1lbWJlciB3ZSBoYWQgUHVwcGV0IGluc3Rh bGxpbmcgaXQgZXZlcnl3aGVyZS48L3A+CjxibG9ja3F1b3RlPjxoMz5JbmNyZWFzZSBlbnRyb3B5 IGZvciBob3N0czwvaDM+CjxwcmU+ICAgICBLZXk6IE9WSVJULTE3NjMKICAgICBVUkw6IGh0dHBz Oi8vb3ZpcnQtamlyYS5hdGxhc3NpYW4ubmV0L2Jyb3dzZS9PVklSVC0xNzYzCiBQcm9qZWN0OiBv VmlydCAtIHZpcnR1YWxpemF0aW9uIG1hZGUgZWFzeQogICAgICAgICBJc3N1ZSBUeXBlOiBCdWcK UmVwb3J0ZXI6IERhZm5hIFJvbgpBc3NpZ25lZTogaW5mcmE8L3ByZT4KPHA+d2UgaGFkIGEgZmFp bHVyZSBpbiBvc3QgdGhhdCB3YXMgcmVhbGx5IGhhcmQgdG8gZGVidWc6IDxhIGhyZWY9Imh0dHA6 Ly9qZW5raW5zLm92aXJ0Lm9yZy9qb2Ivb3ZpcnQtbWFzdGVyX2NoYW5nZS1xdWV1ZS10ZXN0ZXIv Mzc5NS8iPmh0dHA6Ly9qZW5raW5zLm92aXJ0Lm9yZy9qb2Ivb3ZpcnQtbWFzdGVyX2NoYW5nZS1x dWV1ZS10ZXN0ZXIvMzc5NS88L2E+IFRoZXJlIGFyZSBubyBmYWlsdXJlcyBpbiB0aGUgbG9ncyBh bmQgdGhlIHRlc3QgaXRzZWxmIHdhcyB0ZXJtaW5hdGVkIGJ5IGEgdGltZW91dC4gSXQgdG9vayB0 aGUgdm1zIGEgbG9uZyB0aW1lIHRvIGRvd25sb2FkIHBhY2thZ2VzIGFuZCBpbnN0YWxsIGFuZCBk aWRpIHNlZW1zIHRvIHRoaW5rIHRoYXQgdGhpcyBpcyBkdWUgdG8gbGltaXRlZCBlbnRyb3B5IG9u IHRoZSBwaHlzaWNhbCBob3N0LiB3ZSBuZWVkIHRvIHJldmlldyB0aGlzIGlzc3VlIGFuZCBpbmNy ZWFzZSB0aGUgZW50cm9weSBvbiB0aGUgaG9zdHMuPC9wPjwvYmxvY2txdW90ZT4KPHA+Jm1kYXNo OyBUaGlzIG1lc3NhZ2Ugd2FzIHNlbnQgYnkgQXRsYXNzaWFuIEppcmEgKHYxMDAxLjAuMC1TTkFQ U0hPVCMxMDAwNzEpPC9wPgoKPGltZyBzcmM9Imh0dHBzOi8vdTQwNDM0MDIuY3Quc2VuZGdyaWQu bmV0L3dmL29wZW4/dXBuPWk1VE1XR1Y5OWFtSmJOeEpwU3AyLTJCQ21wWUx5ellTM3IxUTkzOVQy c2d6MmQ0RTRSMmk5V0Y2TW14LTJCVnB2Zjd6VFpGVjZDSFBxODE3cC0yRnhzdHhCOEczalE0RFEw bktodjI0MWhOeC0yQkFSTFBoN0VDTGxEd3k2ajdDUzJ6VWQzZng0Z1FpcjRlRGdNV0tkRjkzSXdZ U04tMkZHSnpWb2JZQklqbWlmTXVnZDd1d0pCdUx5b3BmeXJQLTJGa3dJWEEtMkJzVTJhQ0owa0di ZURvby0yQmpUSy0yQlRzdVF2UlprWU91U3dlZ3h2bmtNQjM0WjlJR1UtM0QiIGFsdD0iIiB3aWR0 aD0iMSIgaGVpZ2h0PSIxIiBib3JkZXI9IjAiIHN0eWxlPSJoZWlnaHQ6MXB4ICFpbXBvcnRhbnQ7 d2lkdGg6MXB4ICFpbXBvcnRhbnQ7Ym9yZGVyLXdpZHRoOjAgIWltcG9ydGFudDttYXJnaW4tdG9w OjAgIWltcG9ydGFudDttYXJnaW4tYm90dG9tOjAgIWltcG9ydGFudDttYXJnaW4tcmlnaHQ6MCAh aW1wb3J0YW50O21hcmdpbi1sZWZ0OjAgIWltcG9ydGFudDtwYWRkaW5nLXRvcDowICFpbXBvcnRh bnQ7cGFkZGluZy1ib3R0b206MCAhaW1wb3J0YW50O3BhZGRpbmctcmlnaHQ6MCAhaW1wb3J0YW50 O3BhZGRpbmctbGVmdDowICFpbXBvcnRhbnQ7Ii8+CjwvYm9keT48L2h0bWw+CgotLS0tLS0tLS0t LS09XzE1MTA3NTMwOTMtMjc5NzQtMzk5LS0K --===============5039396010852814198==--