Mandos-Client Halts at Boot for 180 Sec

[Vigneshwaran K]

Hi Dick,

I forgot to mention another informations,

- The difference between after boot time (GUI) and  "Jan 04 05:18:35 debian
kernel: random: crng init done" is 20sec
- When i reset the hwclock time to  Jan 1, 1970 (Reference) it boot fast
but decryption of key using OpenPGP fails.

Thanks & Regards,
Vigneshwaran K


On Fri, Jun 5, 2020 at 7:28 PM Vigneshwaran K <
vigneshwaran.k at vortexindia.co.in> wrote:

> Hi Dick,
>
> For my case the subtraction of time is 1 sec from this "*journalctl |
> grep crng*" command output.
>
> FYR,
> Jan 04 05:18:34 debian kernel: random: get_random_bytes called from
> start_kernel+0x81/0x45f with crng_init=0
> Jan 04 05:18:35 debian kernel: random: crng init done
>
> Is there any RC for this issue?. I literally spent the whole week
> debugging this issue but nothing helps.
>
> Thanks & Regards,
> Vigneshwaran K
>
>
> On Fri, Jun 5, 2020 at 6:27 PM Dick Middleton <dick at fouter.net> wrote:
>
>> On 2020-06-05 13:39, Vigneshwaran K wrote:
>> > Hi,
>> >
>> > We are using a mandos client to unlock the crypt disk at boot stage in
>> that we are facing
>> > an issue.  For this issue we need your help for further debugging and
>> resolution.
>> > *
>> > *
>> > *The issue is:* It halts exactly at *"Initializing GPGME"*  for 3
>> minutes and then
>> > continues booting.
>> >
>> > *PS: *If any key press action happens within the specified time it
>> boots immediately.
>>
>> Maybe this the same issue as I had with low entropy?
>>
>> You can get a good idea of how long the wait for entropy is by doing:
>>
>>  journalctl | grep crng
>>
>> when you'll get something like this for each boot:
>>
>> Feb 13 12:01:19 penguin kernel: random: get_random_u64 called from
>> __kmem_cache_create+0x3e/0x520 with crng_init=0
>> Feb 13 12:01:26 penguin kernel: random: crng init done
>>
>> Subtract the times and ...
>>
>> If that is the answer then there are entropy generator programs or
>> hardware devices you
>> can use.
>>
>> I hope that helps
>>
>> Dick
>> _______________________________________________
>> Mandos-Dev mailing list
>> Mandos-Dev at recompile.se
>> https://mail.recompile.se/cgi-bin/mailman/listinfo/mandos-dev
>>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.recompile.se/pipermail/mandos-dev/attachments/20200605/972073f6/attachment.htm>