View Code? Open in Web Editor
NEW
Allow low entropy machines (eg Virtual Machines) to collect data from another host with high entropy (eg a real computer) via SSH, then stir it in to the kernel's random pool using rngd
License: Other
entropyservice's People
entropyservice's Issues
Ideally entropyservice should be an install-and-forget thing.
Currently if the SSH connection drops for whatever reason, you have to manually re-establish it.
Ideally I'd like to write some scripts to manage it via the OS's daemon manager and start it on boot with:
Upstart (on Ubuntu)
SysV init script + start-stop-daemon (on other Debian-like distros)
SysV init script + daemon (on CentOS/RedHat-like distros)
The install script could potentially configure this automatically, too. (Should this bit be optional?)
On startup the client should check that file at the the FIFO path really is a FIFO.
If it isn't, the client drains entropy endlessly from server until the client runs out of disk space.
Thanks to jzaw for reporting this.
In step 4 of the readme it gives a useradd command
un: useradd -m -s /bin/false myrng
but then a few lines down instructs not to use the default shell specified in the command given:
-s /bin/sh: default shell (do not use /bin/false or /bin/nologin: it will not work)
I am not sure which is the correct option.