From c2edd1ce9ccc9d7aa695129ae33c82073661f36d Mon Sep 17 00:00:00 2001 From: Vladis Dronov Date: Thu, 19 Jun 2025 22:45:34 +0200 Subject: [PATCH] Disable jitter entropy source by default Almost all modern CPUs have a hardware randomness source in some form. Most of virtual machines have /dev/hwrng provided by a virtual host. The jitter entropy source is just eating CPU cycles in such cases, so disable it by default. It can be enabled explicitly for the older hardware without hardware entropy (like the Athlon FX CPU). Resolves: RHEL-91119 Signed-off-by: Vladis Dronov --- rng-tools.spec | 5 ++++- rngd.sysconfig | 2 +- 2 files changed, 5 insertions(+), 2 deletions(-) diff --git a/rng-tools.spec b/rng-tools.spec index 284aac7..b0ed921 100644 --- a/rng-tools.spec +++ b/rng-tools.spec @@ -12,7 +12,7 @@ Summary: Random number generator related utilities Name: rng-tools Version: 6.17 -Release: 1%{?dist} +Release: 2%{?dist} License: GPL-2.0-or-later URL: https://github.com/nhorman/rng-tools Source0: %{url}/archive/v%{version}/%{name}-%{version}.tar.gz @@ -104,6 +104,9 @@ install -D %{SOURCE2} -m0644 %{buildroot}%{_sysconfdir}/sysconfig/rngd %config(noreplace) %attr(0644,root,root) %{_sysconfdir}/sysconfig/rngd %changelog +* Thu Jun 26 2025 Vladis Dronov - 6.17-2 +- Disable jitter entropy source by default (RHEL-91119) + * Fri Oct 25 2024 Vladis Dronov - 6.17-1 - Add Intel CET IBT instrumentation to assembly code - Update to the upstream v6.17 @ ac43f912 (RHEL-64951) diff --git a/rngd.sysconfig b/rngd.sysconfig index 17f63ee..d640847 100644 --- a/rngd.sysconfig +++ b/rngd.sysconfig @@ -1,3 +1,3 @@ # Optional arguments passed to rngd. See rngd(8) and # https://bugzilla.redhat.com/show_bug.cgi?id=1252175#c21 -RNGD_ARGS="--fill-watermark=0 -x pkcs11 -x nist -x qrypt -x namedpipe -D daemon:daemon" +RNGD_ARGS="--fill-watermark=0 -x pkcs11 -x nist -x qrypt -x namedpipe -x jitter -D daemon:daemon"