Bug 1689933

Summary:	[RFE] Add a simple way to enable random number generator on all flavor/image
Product:	Red Hat OpenStack	Reporter:	Attila Fazekas <afazekas>
Component:	openstack-nova	Assignee:	OSP DFG:Compute <osp-dfg-compute>
Status:	CLOSED DUPLICATE	QA Contact:	OSP DFG:Compute <osp-dfg-compute>
Severity:	unspecified	Docs Contact:
Priority:	unspecified
Version:	15.0 (Stein)	CC:	dasmith, eglynn, jhakimra, kchamart, sbauza, sgordon, stephenfin, vromanso
Target Milestone:	---
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2019-03-22 15:21:12 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Attila Fazekas 2019-03-18 13:20:51 UTC

Virtual machines are very low on entropy and they block very easily even at boot time (deny user login for a while (can be minute)).

The current way to solve this is specifying the random number generator :
- at all images (user)
- at all flavors (admin)
- in all nova.conf (ospd/admin)

Expected solution:
Add an option to nova.conf which allows to globally use rnd generator
unless the user either at boot time or at image creation time explicitly disables it.

Comment 1 Stephen Finucane 2019-03-22 15:21:12 UTC

We're generally reluctant to add nova.conf driven configuration for things that affect instances since it can cause issues with migrations. I'm guessing turning on the RNG on by default would be a better approach. That's being tracked in another BZ so I'm going to close this as a duplicate and track the work there.

*** This bug has been marked as a duplicate of bug 1608760 ***