I’ve been curious about using hardware true random number generators in my VM clusters. This got me wondering about the VM’s /dev/random source… If I setup a hardware TRNG on the host, would the VM’s also benefit from it?
Xen VMs would not be able to benefit from it. I don’t know about KVM.
Would you be able to elaborate on why not? I know Xen and KVM differ, but this is not a topic I have seen discussed at all before, so any insight would be helpful and appreciated! :)
Because we don’t have a paravirtualized interface to export the randomness to the guest. It would be a nice small little project to do that though.
Ah, ok. I’m an admin, not a programmer, so I am not sure what would be needed. Given how popular VMs are now, I can imagine it would be a nice feature to have. If it’s a “small” project, then all the better! :)
I would second that, wish I had the knowledge to do it, but I can see a lot of useful applications, never worry about having enough entropy for various encryption engines, scientific projects, etc.
Eskimo North Linux Friendly Internet Access, Shell Accounts, and Hosting.
Knowledgeable human assistance, not telephone trees or script readers.
See our web site: http://www.eskimo.com/ (206) 812-0051 or (800) 246-6874.
I guess it’s done in userspace already.
generators but this would be
There is such a thing, see https://fedoraproject.org/wiki/Features/Virtio_RNG
Ok, that is _awesome_! I hope it gets into RHEL 7. Thank you kindly for the link!