Bug 12900 - Drop rng-tools, should they be no longer needed
Summary: Drop rng-tools, should they be no longer needed
Alias: None
Product: IPFire
Classification: Unclassified
Component: --- (show other bugs)
Version: 2
Hardware: unspecified Unspecified
: Will affect all users Aesthetic Issue
Assignee: Peter Müller
QA Contact:
Depends on:
Reported: 2022-07-12 10:37 UTC by Peter Müller
Modified: 2023-03-25 22:30 UTC (History)
4 users (show)

See Also:

Content of /etc/init.d/rngd (1.07 KB, text/plain)
2022-07-14 20:59 UTC, Paul Simmons
Content of /etc/udev/rules.d/99-TrueRNGpro.rules (529 bytes, text/plain)
2022-07-14 21:03 UTC, Paul Simmons

Note You need to log in before you can comment on or make changes to this bug.
Description Peter Müller 2022-07-12 10:37:18 UTC
This is a meta/reminder/discussion ticket for the removal of rng-tools and surrounding components, which, due to the kernel entropy change discussed in #12893, may or may not be no longer needed.
Comment 1 Michael Tremer 2022-07-12 10:38:05 UTC
There is a button at the bottom right of the page to clone tickets. That's useful because it pre-fills some fields.
Comment 2 Peter Müller 2022-07-12 10:40:17 UTC
(In reply to Michael Tremer from comment #1)
> There is a button at the bottom right of the page to clone tickets. That's
> useful because it pre-fills some fields.

Oh, I missed this. Thanks - will keep it in mind for the next time.
Comment 3 Paul Simmons 2022-07-14 20:59:15 UTC
Created attachment 1067 [details]
Content of /etc/init.d/rngd
Comment 4 Paul Simmons 2022-07-14 21:03:49 UTC
Created attachment 1068 [details]
Content of /etc/udev/rules.d/99-TrueRNGpro.rules
Comment 5 Paul Simmons 2022-07-14 21:05:53 UTC
I have attached the contents of my current configuration files for rngd.
Comment 6 Michael Tremer 2022-07-20 15:13:25 UTC
Is there no proper kernel driver available for this device at all?
Comment 7 Paul Simmons 2022-07-21 02:14:17 UTC

No, it's designed to be accessed as a TTY device with >3.2 Mbps output.
Comment 8 Adolf Belka 2022-09-29 07:54:49 UTC
An alternative is to change rng-tools from a core program to an addon.

That way it is still available for those who have a hardware generator and require it but is not installed in the IPFire machines that don't need it.
Comment 9 Paul Simmons 2023-01-09 20:04:18 UTC
"An alternative is to change rng-tools from a core program to an addon."

May I ask that this be added to TTD?  Doing so would allow closure of #11546.

Also, there is a bug fix release available:

Thank you!
Comment 10 Paul Simmons 2023-01-25 04:00:33 UTC
I am very pleased that the rng-tools discussion made it to the Monthly Teleconference.

There is yet another bug fix / feature release available (6.16).

The aforementioned (related) bug, #11546, has an attachment, text for a two line change to services.cgi, that may prove helpful, even if rng-tools is moved to addon status and the changes no longer apply.

Thank you!
Comment 11 Adolf Belka 2023-01-25 21:24:26 UTC
Searching on rng-tools after the changes to the entropy pool in kernel 5.6 onwards I have found that the kernel will still take information from rng-tools but only after the kernel has completed gatheri9ng the required entropy itself. It will then combine the HWRNG data in an XOR with the entropy that the kernel has already gathered to the required level.

Therefore using an HWRNG does not give you the required entropoy quicker or to a higher level than the kernel does itself. It will in fact be to the same level and later than the entropy obtained by the kernel itself.

It seems to me that the only reason to use a HWRNG now is if you don't trust the entropy gathered by the kernel and want to combine entropy from an HWRNG with the entropy from the kernel to dilute the entropoy from the kernel with that of the HWRNG.

So rng-tools could be kept as an addon but the benefit of using that for combining the HWRNG entropy with that of the kernel seems to be a bit unclear.
Comment 12 Paul Simmons 2023-01-27 05:17:20 UTC
"rng-tools could be kept as an addon"

Please, make it so.
Comment 15 Adolf Belka 2023-03-21 22:20:39 UTC
Tested this out on my vm testbed with CU 174 Testing and can confirm that rng-tools is now an addon and that after installing it, it also shows up in the addon s service table.

This confirms that this bug has been fixed.
Comment 16 Paul Simmons 2023-03-25 22:30:43 UTC
Thank you, all!  I eagerly await the release of CU 174 (I have no spare hdwe to use for testing).