Mandos-Client Halts at Boot for 180 Sec

Jesse Norell jesse at kci.net
Fri Jun 5 16:56:50 CEST 2020


Hello Vigneshwaran,

  I don't know that it is your problem, but you can have similar delays
in booting due to the ipv6 configuration.  See

https://mail.recompile.se/pipermail/mandos-dev/2019-December/000438.html

https://mail.recompile.se/pipermail/mandos-dev/2020-January/000446.html


Jesse

On Fri, 2020-06-05 at 19:43 +0530, Vigneshwaran K wrote:
> Hi Dick,
> 
> I forgot to mention another informations, 
> 
> - The difference between after boot time (GUI) and  "Jan 04 05:18:35
> debian kernel: random: crng init done" is 20sec
> - When i reset the hwclock time to  Jan 1, 1970 (Reference) it boot
> fast but decryption of key using OpenPGP fails. 
> 
> Thanks & Regards,
> Vigneshwaran K
> 
> 
> On Fri, Jun 5, 2020 at 7:28 PM Vigneshwaran K <
> vigneshwaran.k at vortexindia.co.in> wrote:
> > Hi Dick,
> > 
> > For my case the subtraction of time is 1 sec from this "journalctl
> > | grep crng" command output.
> > 
> > FYR,
> > Jan 04 05:18:34 debian kernel: random: get_random_bytes called from
> > start_kernel+0x81/0x45f with crng_init=0
> > Jan 04 05:18:35 debian kernel: random: crng init done
> > 
> > Is there any RC for this issue?. I literally spent the whole week
> > debugging this issue but nothing helps. 
> > 
> > Thanks & Regards,
> > Vigneshwaran K
> > 
> > 
> > On Fri, Jun 5, 2020 at 6:27 PM Dick Middleton <dick at fouter.net>
> > wrote:
> > > On 2020-06-05 13:39, Vigneshwaran K wrote:
> > > > Hi,
> > > > 
> > > > We are using a mandos client to unlock the crypt disk at boot
> > > stage in that we are facing
> > > > an issue.  For this issue we need your help for further
> > > debugging and resolution.
> > > > *
> > > > *
> > > > *The issue is:* It halts exactly at *"Initializing GPGME"*  for
> > > 3 minutes and then
> > > > continues booting.
> > > > 
> > > > *PS: *If any key press action happens within the specified time
> > > it boots immediately.
> > > 
> > > Maybe this the same issue as I had with low entropy?
> > > 
> > > You can get a good idea of how long the wait for entropy is by
> > > doing:
> > > 
> > >  journalctl | grep crng
> > > 
> > > when you'll get something like this for each boot:
> > > 
> > > Feb 13 12:01:19 penguin kernel: random: get_random_u64 called
> > > from
> > > __kmem_cache_create+0x3e/0x520 with crng_init=0
> > > Feb 13 12:01:26 penguin kernel: random: crng init done
> > > 
> > > Subtract the times and ...
> > > 
> > > If that is the answer then there are entropy generator programs
> > > or hardware devices you
> > > can use.
> > > 
> > > I hope that helps
> > > 
> > > Dick
> > > _______________________________________________
> > > Mandos-Dev mailing list
> > > Mandos-Dev at recompile.se
> > > https://mail.recompile.se/cgi-bin/mailman/listinfo/mandos-dev
> 
> _______________________________________________
> Mandos-Dev mailing list
> Mandos-Dev at recompile.se
> https://mail.recompile.se/cgi-bin/mailman/listinfo/mandos-dev
-- 
Jesse Norell
Kentec Communications, Inc.
970-522-8107  -  www.kci.net



More information about the Mandos-Dev mailing list