mbox series

[v2,0/2] sshd-regen-keys: Fix boot hang on low end hardware

Message ID 20211015080638.12765-1-florian.bezdeka@siemens.com
Headers show
Series sshd-regen-keys: Fix boot hang on low end hardware | expand

Message

Florian Bezdeka Oct. 14, 2021, 11:06 p.m. UTC 
Hi,

when booting a Debian 11 based ISAR image with sshd-regen-keys 
enabled on low end systems it could happen that the first boot 
took too long so that the configured timeout for serial console 
systemd units was hit.

It turned out that running sshd-regen-keys in parallel to
systemd-random-seed is not the best idea. Patch one fixes that by
moving the start of sshd-regen-keys after the point in time where 
systemd-random-seed completed.

Patch two fixes two warnings that were discovered on Debian 11. I
tested that with Debian 10 as well. Worked as expected.

Best regards,
Florian

---
Changes since v1:
 - Rebased on current next

Florian Bezdeka (2):
  sshd-regen-keys: Start key generation after entropy seed
  sshd-regen-keys: Fix some systemd obsolete warnings about using syslog

 .../sshd-regen-keys/files/sshd-regen-keys.service              | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

Comments

Anton Mikanovich Oct. 22, 2021, 5:59 a.m. UTC | #1 
On 15.10.21 11:06, Florian Bezdeka wrote:
> Hi,
>
> when booting a Debian 11 based ISAR image with sshd-regen-keys
> enabled on low end systems it could happen that the first boot
> took too long so that the configured timeout for serial console
> systemd units was hit.
>
> It turned out that running sshd-regen-keys in parallel to
> systemd-random-seed is not the best idea. Patch one fixes that by
> moving the start of sshd-regen-keys after the point in time where
> systemd-random-seed completed.
>
> Patch two fixes two warnings that were discovered on Debian 11. I
> tested that with Debian 10 as well. Worked as expected.
>
> Best regards,
> Florian
>
Applied to next, thanks.