Description of problem: Latest Fedora rng-tools (rng-tools-6.3-1) just does not work on VMware VM. rngd after a while quietly exits with the following error (no matter if new JITTER rng is enabled or not): Jul 23 17:18:56 fedwdns rngd[789]: No entropy sources working, exiting rngd Jul 23 17:18:56 fedwdns rngd[789]: Initalizing available sources Jul 23 17:18:56 fedwdns rngd[789]: I is 1 Jul 23 17:18:56 fedwdns rngd[789]: I is 2 .... Version-Release number of selected component (if applicable): rng-tools-6.3-1 The CPU and Hypervisor does support rdrand cat /proc/cpuinfo | grep rdrand flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush dts mmx fxsr sse sse2 ss syscall nx rdtscp lm constant_tsc arch_perfmon pebs bts nopl xtopology tsc_reliable nonstop_tsc cpuid pni pclmulqdq ssse3 cx16 pcid sse4_1 sse4_2 x2apic popcnt tsc_deadline_timer aes xsave avx f16c rdrand hypervisor lahf_lm cpuid_fault pti ibrs ibpb stibp fsgsbase tsc_adjust smep arat arch_capabilities How reproducible: Easy ... Steps to Reproduce: 1. rngtest -c 1000 </dev/random Additional info: Reverting back to rng-tools-6.1-4 fixes the problem for me. The bug is particularly bad because rngd just quietly stop working ... Best regards, Bratislav ILIC
run rngd -d -f > /tmp/out.txt 2>&1 and attach the output here please
Created attachment 1470302 [details] Output from rngd -d -f > /tmp/out.txt 2>&1 Output from rngd -l is: Entropy sources that are available but disabled 4: NIST Network Entropy Beacon Available and enabled entropy sources: 2: Intel RDRAND Instruction RNG 5: JITTER Entropy generator
ah, yeah, had an off by one error in the gather loop. 6.3.1 fixes it, its available in rawhide if you want to get it right now. i'll update f28 today.
rng-tools-6.3.1-1.fc28 has been submitted as an update to Fedora 28. https://bodhi.fedoraproject.org/updates/FEDORA-2018-813330bc95
rng-tools-6.3.1-1.fc28 has been pushed to the Fedora 28 testing repository. If problems still persist, please make note of it in this bug report. See https://fedoraproject.org/wiki/QA:Updates_Testing for instructions on how to install test updates. You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2018-813330bc95
It starts now but it is very much slower than previous version 6.1: rng-tools.x86_64 6.1-4.fc28 time rngtest -c 1000 </dev/random rngtest 6 Copyright (c) 2004 by Henrique de Moraes Holschuh This is free software; see the source for copying conditions. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. rngtest: starting FIPS tests... rngtest: bits received from input: 20000032 rngtest: FIPS 140-2 successes: 1000 rngtest: FIPS 140-2 failures: 0 rngtest: FIPS 140-2(2001-10-10) Monobit: 0 rngtest: FIPS 140-2(2001-10-10) Poker: 0 rngtest: FIPS 140-2(2001-10-10) Runs: 0 rngtest: FIPS 140-2(2001-10-10) Long run: 0 rngtest: FIPS 140-2(2001-10-10) Continuous run: 0 rngtest: input channel speed: (min=382.718; avg=641.634; max=1175.378)Kibits/s rngtest: FIPS tests speed: (min=89.128; avg=125.026; max=163.021)Mibits/s rngtest: Program run time: 30592942 microseconds real 0m30.596s user 0m0.174s sys 0m1.047s rng-tools.x86_64 6.3.1-1.fc28 time rngtest -c 1000 </dev/random rngtest 6 Copyright (c) 2004 by Henrique de Moraes Holschuh This is free software; see the source for copying conditions. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. rngtest: starting FIPS tests... rngtest: bits received from input: 20000032 rngtest: FIPS 140-2 successes: 999 rngtest: FIPS 140-2 failures: 1 rngtest: FIPS 140-2(2001-10-10) Monobit: 1 rngtest: FIPS 140-2(2001-10-10) Poker: 0 rngtest: FIPS 140-2(2001-10-10) Runs: 0 rngtest: FIPS 140-2(2001-10-10) Long run: 0 rngtest: FIPS 140-2(2001-10-10) Continuous run: 0 rngtest: input channel speed: (min=13.511; avg=74.506; max=15378.937)Kibits/s rngtest: FIPS tests speed: (min=78.492; avg=124.191; max=163.021)Mibits/s rngtest: Program run time: 262295805 microseconds real 4m22.298s user 0m0.190s sys 0m1.029s
rng-tools-6.3.1-1.fc28 has been pushed to the Fedora 28 stable repository. If problems still persist, please make note of it in this bug report.