Bug 1391339

Summary: It cost almost 2 mins to save the GPG key in personal reference
Product: [Community] Bugzilla Reporter: Rony Gong 🔥 <qgong>
Component: Bugzilla GeneralAssignee: PnT DevOps Devs <hss-ied-bugs>
Status: CLOSED NOTABUG QA Contact: tools-bugs <tools-bugs>
Severity: medium Docs Contact:
Priority: unspecified    
Version: 5.0CC: huiwang, qgong
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2016-11-08 02:10:37 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:

Description Rony Gong 🔥 2016-11-03 07:02:12 UTC 
Description of problem:
It cost almost 2 mins to save the GPG key in personal reference.

Try to upload user's GPG key, save it. Then it need wait almost 2 mins to finish the saving.

Version-Release number of selected component (if applicable):
5.0.3-rh14

How reproducible:
100%

Steps to Reproduce:
1.
2.
3.

Actual results:


Expected results:


Additional info:
Comment 1 Jeff Fearn 🐞 2016-11-03 08:03:17 UTC 
It's validating your key, which means grabbing it from a keyserver and running some tests on it. The speed will depend on the latency from the host to the keyserver and the cpu power of the machine.

It seems considerably faster on the devel server and will probably be even faster on a US based server.
Comment 2 Jeff Fearn 🐞 2016-11-07 05:08:17 UTC 
qgong I notice the entropy daemon is disabled on the QE host, it should be being enabled by the ansible playbook.

[root@bz-web ~]# systemctl status haveged.service
● haveged.service - Entropy Daemon based on the HAVEGE algorithm
   Loaded: loaded (/usr/lib/systemd/system/haveged.service; disabled; vendor preset: disabled)
   Active: inactive (dead)
     Docs: man:haveged(8)
           http://www.issihosts.com/haveged/

Where as the beta server, and the devel servers, have:

[root@bug5rc01 mail]# systemctl status haveged.service 
● haveged.service - Entropy Daemon based on the HAVEGE algorithm
   Loaded: loaded (/usr/lib/systemd/system/haveged.service; enabled; vendor preset: disabled)
   Active: active (running) since Fri 2016-11-04 04:53:42 UTC; 3 days ago
...

If you do anything with encryption and have insufficient entropy it will block until enough entropy is accumulated. This is why the playbook starts and enables this service, so the server always has plenty of entropy.
Comment 3 Rony Gong 🔥 2016-11-08 01:50:02 UTC 
(In reply to Jeff Fearn from comment #2)
> qgong I notice the entropy daemon is disabled on the QE host, it should be
> being enabled by the ansible playbook.
> 
> [root@bz-web ~]# systemctl status haveged.service
> ● haveged.service - Entropy Daemon based on the HAVEGE algorithm
>    Loaded: loaded (/usr/lib/systemd/system/haveged.service; disabled; vendor
> preset: disabled)
>    Active: inactive (dead)
>      Docs: man:haveged(8)
>            http://www.issihosts.com/haveged/
> 
> Where as the beta server, and the devel servers, have:
> 
> [root@bug5rc01 mail]# systemctl status haveged.service 
> ● haveged.service - Entropy Daemon based on the HAVEGE algorithm
>    Loaded: loaded (/usr/lib/systemd/system/haveged.service; enabled; vendor
> preset: disabled)
>    Active: active (running) since Fri 2016-11-04 04:53:42 UTC; 3 days ago
> ...
> 
> If you do anything with encryption and have insufficient entropy it will
> block until enough entropy is accumulated. This is why the playbook starts
> and enables this service, so the server always has plenty of entropy.

After start this haveged.service, it could save GPG key quickly now. You could close this bug now.