NetBSD Problem Report #59980

From www@netbsd.org  Sun Feb  8 04:22:11 2026
Return-Path: <www@netbsd.org>
Received: from mail.netbsd.org (mail.netbsd.org [199.233.217.200])
	(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
	 key-exchange X25519 server-signature RSA-PSS (2048 bits)
	 client-signature RSA-PSS (2048 bits))
	(Client CN "mail.netbsd.org", Issuer "R13" (verified OK))
	by mollari.NetBSD.org (Postfix) with ESMTPS id 16A141A923D
	for <gnats-bugs@gnats.NetBSD.org>; Sun,  8 Feb 2026 04:22:11 +0000 (UTC)
Message-Id: <20260208042209.E3DC61A923E@mollari.NetBSD.org>
Date: Sun,  8 Feb 2026 04:22:09 +0000 (UTC)
From: campbell+netbsd@mumble.net
Reply-To: campbell+netbsd@mumble.net
To: gnats-bugs@NetBSD.org
Subject: channel to pass entropy from host dom0 to guest domU
X-Send-Pr-Version: www-1.0
X-From4GNATS: "campbell+netbsd@mumble.net via gnats" <gnats-admin@NetBSD.org>

>Number:         59980
>Category:       port-xen
>Synopsis:       channel to pass entropy from host dom0 to guest domU
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    port-xen-maintainer
>State:          open
>Class:          change-request
>Submitter-Id:   net
>Arrival-Date:   Sun Feb 08 04:25:00 +0000 2026
>Originator:     Taylor R Campbell
>Release:        current, 11, 10, 9, ...
>Organization:
>Environment:
>Description:
On older or lower-end x86 machines without RDRAND/RDSEED, Xen guests need help from the host to get entropy.
>How-To-Repeat:
Boot a fresh domU guest on an older or lower-end x86 machine:

Waiting for entropy...[   2.8807908] entropy: pid 329 (dd) waiting for entropy(7)                                                                               

Whatever the domU kernel is actually using is not confidence-inspiring:
>Fix:
1. Something with xenstore?  (Not sure if this is secret, though.)
2. Something with virtio-rng?
3. Something with Xen pv channels, if they can be made to work?

Best approach I have for now is to copy & paste a sample from /dev/urandom on the dom0 into the domU over the Xen console, but this should be reliably automated.

Home	PR Database Search