[libvirt] RFC: virtio-rng and /dev/urandom
crobinso at redhat.com
Fri Apr 15 10:41:34 UTC 2016
Libvirt currently rejects using host /dev/urandom as an input source for a
virtio-rng device. The only accepted sources are /dev/random and /dev/hwrng.
This is the result of discussions on qemu-devel around when the feature was
first added (2013). Examples:
libvirt's rejection of /dev/urandom has generated some complaints from users:
* cited: http://www.2uo.de/myths-about-urandom/
I think it's worth having another discussion about this, at least with a
recent argument in one place so we can put it to bed. I'm CCing a bunch of
people. I think the questions are:
1) is the original recommendation to never use virtio-rng+/dev/urandom correct?
2) regardless of #1, should we continue to reject that config in libvirt?
More information about the libvir-list