canonical / canonical/cloud-init

Stop seeding /dev/urandom on hyper-v

Open
#5,222 0 comments 0 reactions 0 assignees View on GitHub
bug
Dominant language
Python
Stars
3.8k
Forks
1.1k
Avg merge
2d 23h
Merged PRs (30d)
18

Description

# Bug report

On Azure [cc_seed_random seeds entropy automatically](https://github.com/canonical/cloud-init/blob/main/cloudinit/config/cc_seed_random.py#L76).

On Linux kernel version 6.9 and later, the [OEM0 ACPI table will be zeroed out](https://github.com/torvalds/linux/commit/f2580a907e5c0e8fc9354fd095b011301c64f949) and will therefore provide no value to Hyper-V instances using cc_seed_random module. This table is already used to provide entropy to the kernel via `EFI_RNG_PROTOCOL` with UEFI (Gen 2 VMs), and will now be used to by both Gen 1 and Gen 2 VMs as an entropy source.

At some point in the future, we should eliminate [use of this](https://github.com/canonical/cloud-init/blob/acc68de059c15c5eaefbb353cfbf7e0bf1524edc/cloudinit/sources/DataSourceAzure.py#L95).

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.