Xen users - Sep 2012 - Sharing entropy across VMs

Short question: is it possible to share entropy across all VMs and how
can this be done?

I found http://vanheusden.com/entropybroker/ which seems to offer a way,
but I cannot get it to work, syslog tells me "stack smashing
detected".
So if there are ways people are currently using I''d be interested to
hear them. Currently I find that even generating a gpg key on a PV VM
takes ages and I don''t want to compromise the security by using
workarounds.

-- 
Thank you,
Mark van Dijk.                ,---------------------------------
-----------------------------''         Wed Sep 05 10:48 UTC 2012
Today is Pungenday, the 29th day of Bureaucracy in the YOLD 3178

Hi Mark,

On Wed, Sep 05, 2012 at 12:53:08PM +0200, Mark van Dijk
wrote:
> Short question: is it possible to share entropy across all VMs and how
> can this be done?
I have been doing it with an Entropy Key:

http://www.entropykey.co.uk/

They have packaged software for Debian and Ubuntu which includes a
daemon called ekeyd. ekeyd would usually be configured to stuff the
entropy it gets from the key into the kernel's entropy pool, but you
can configure it instead to serve the entropy out using the EGD
protocol.

They also have a modified EGD client called ekeyd-egd-linux which
talks to ekeyd over the network and stuffs that entropy into the
local kernel entropy pool.

So, ekeyd-egd-linux on each client machine, talking to ekeyd on one
or more hosts with entropy keys.

It's a pity that there seems no way within Xen to get the entropy
from the dom0 kernel into each domU. KVM has this feature doesn't
it? That would save me having to run an ekeyd-egd-linux on each
domU.

Cheers,
Andy

-- 
> The optimum programming team size is 1.
Has Jurassic Park taught us nothing?
 — pfilandr

_______________________________________________
Xen-users mailing list
Xen-users@lists.xen.org
http://lists.xen.org/xen-users