From: Mark H Weaver <mhw@netris.org>
To: "Ludovic Courtès" <ludo@gnu.org>
Cc: 31268@debbugs.gnu.org, "George myglc2 Clemmer" <myglc2@gmail.com>,
"Clément Lassieur" <clement@lassieur.org>
Subject: bug#31268: 'guix system vm-image' hangs
Date: Tue, 22 May 2018 18:55:50 -0400 [thread overview]
Message-ID: <8736yj711l.fsf@netris.org> (raw)
In-Reply-To: <87h8mz4q2g.fsf@gnu.org> ("Ludovic \=\?utf-8\?Q\?Court\=C3\=A8s\=22'\?\= \=\?utf-8\?Q\?s\?\= message of "Tue, 22 May 2018 18:23:35 +0200")
Hi Ludovic,
ludo@gnu.org (Ludovic Courtès) writes:
> I was looking at the wrong code: we’re using libuuid from util-linux,
> which in turn uses getrandom(2). Since it doesn’t pass the
> GRND_NONBLOCK flag, it ends up blocking forever because too little
> entropy is available in the VM.
>
> The following patches work around that:
>
> 1. Parted now explicitly uses getrandom(2) with GRND_NONBLOCK instead
> of libuuid’s ‘uuid_generate’, which is good enough for this
> purpose. I’ll submit it upstream.
>
> 2. e2fsprogs is changed to use a libuuid that passes GRND_NONBLOCK.
> It does the job, but it’s quite inelegant.
I'm uncomfortable with this approach. I think that it's proper for uuid
generation to block if there's not enough entropy.
> Another approach I looked at was to seed the VM’s PRNG from /dev/hwrng,
> which I thought was connected to the host via ‘virtio-rng-pci’, but I
> get ENODEV while trying to read from /dev/hwrng in the guest like this:
I much prefer this approach, where we seed the VM's PRNG from another
source.
> From 8aa37a4124db90a9991485477d1af85677c7fa1b Mon Sep 17 00:00:00 2001
> From: =?UTF-8?q?Ludovic=20Court=C3=A8s?= <ludo@gnu.org>
> Date: Tue, 22 May 2018 17:36:35 +0200
> Subject: [PATCH 2/3] vm: Use a deterministic file system UUID in shared-store
> VMs.
>
> * gnu/system/vm.scm (system-qemu-image/shared-store): Pass
> #:file-system-uuid to 'qemu-image'.
> ---
> gnu/system/vm.scm | 8 ++++++++
> 1 file changed, 8 insertions(+)
>
> diff --git a/gnu/system/vm.scm b/gnu/system/vm.scm
> index 09a11af86..b6561dfc7 100644
> --- a/gnu/system/vm.scm
> +++ b/gnu/system/vm.scm
> @@ -752,6 +752,13 @@ with the host.
> When FULL-BOOT? is true, return an image that does a complete boot sequence,
> bootloaded included; thus, make a disk image that contains everything the
> bootloader refers to: OS kernel, initrd, bootloader data, etc."
> + (define root-uuid
> + ;; Use a fixed UUID so that 'mke2fs' doesn't wait for strong randomness
> + ;; while generating a UUID. See <https://bugs.gnu.org/31268>.
> + ;; XXX: Actually it doesn't help since 'mke2fs' calls 'uuid_generate'
> + ;; anyway.
How about fixing mke2fs so that if you specify a fixed UUID, it won't
try to generate a random one? Would that be sufficient?
Thanks,
Mark
next prev parent reply other threads:[~2018-05-22 22:58 UTC|newest]
Thread overview: 17+ messages / expand[flat|nested] mbox.gz Atom feed top
2018-04-26 1:39 'guix system vm-image' hangs George myglc2 Clemmer
2018-04-26 3:37 ` Eric Bavier
2018-04-26 4:07 ` George myglc2 Clemmer
2018-04-26 14:09 ` bug#31268: " Ludovic Courtès
2018-04-30 8:23 ` Mark H Weaver
2018-04-30 8:23 ` Mark H Weaver
2018-04-30 14:18 ` Ludovic Courtès
2018-04-30 16:36 ` Mark H Weaver
2018-05-18 14:22 ` Clément Lassieur
2018-05-18 16:39 ` Ludovic Courtès
2018-05-18 22:03 ` Clément Lassieur
2018-05-18 22:13 ` Ludovic Courtès
2018-05-22 16:23 ` Ludovic Courtès
2018-05-22 18:45 ` Efraim Flashner
2018-05-22 22:55 ` Mark H Weaver [this message]
2018-05-23 7:27 ` Ludovic Courtès
2018-05-23 8:23 ` Ludovic Courtès
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=8736yj711l.fsf@netris.org \
--to=mhw@netris.org \
--cc=31268@debbugs.gnu.org \
--cc=clement@lassieur.org \
--cc=ludo@gnu.org \
--cc=myglc2@gmail.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
Code repositories for project(s) associated with this external index
https://git.savannah.gnu.org/cgit/guix.git
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.