From: Marco Vedovati [mailto:mvedovati@suse.com] [snip] In my view, given the ephemeral aspect of containers, /dev/urandom should be fine most of the time. As an option, user should be left the possibility to select /dev/random if that is needed for his specific application.
From a read around, I agree with the sentiment, that /dev/urandom is . I'm not sure how that ties in with QEMU/KVM though - if we direct QEMU to use the host /dev/urandom, does that mean that the guest /dev/random is really using the host /dev/urandom - so any strong /dev/random guarantees inside the guest are now a lie... I don't know how the virtio rng and qemu hang together etc.
BTW, it may be worth investigating on what is the state of the art solution chosen in virtualization systems with a high VM count.
+1 I doubt we are the first people to run into this scenario.
Marco
Graham --------------------------------------------------------------------- Intel Corporation (UK) Limited Registered No. 1134945 (England) Registered Office: Pipers Way, Swindon SN3 1RJ VAT No: 860 2173 47 This e-mail and any attachments may contain confidential material for the sole use of the intended recipient(s). Any review or distribution by others is strictly prohibited. If you are not the intended recipient, please contact the sender and delete all copies.