piCore11 ssh delays

[Paul_123]

So the issue is that the current version of openssl/ssh require random to finish init before it will allow connections.   This could also be causing problems with any openssl program.

Options:
1) Use rng-tools to allow use of the rpi hardware entropy generations.   This program is has quite a few dependencies.
2) Use haveged.  Please dont start a crypto battle here.   haveged has no additional dependencies.

I've sent up the haveged extension.....once installed, just insert /usr/local/sbin/haveged at the beginning of /opt/bootlocal.sh

I'll update rng-tools, but there are more dependencies for me to chase first.

[Juanito]

Hmm - I'd guess there's more than one problem here..

Using the same sd card and the same wired network connection, but swapping between an RPi3 and RPi4 I see the following:

Rpi3 - accepts an incoming ssh connection immediately after boot
Rpi4 - takes literally 5mins to accept an incoming ssh connection after boot

[Paul_123]

Headless boards have very little sources of kernel entropy.....  I think it just depends what the kernel is using on each board.  My rpi4 on its own took almost 200seconds to init.  Adding haveged it inits and allows connections immediately.

Look at dmesg......when does random finish init?   You should be able to connect as soon as it finishes.

[Juanito]

I get something similar:

Code: [Select]

$ dmesg | grep random
[    0.000000] random: get_random_bytes called from start_kernel+0x90/0x4c0 with crng_init=0
[    1.020436] random: fast init done
[    1.837899] random: mkswap: uninitialized urandom read (16 bytes read)
[  200.971891] random: crng init done

[Juanito]

..and RPi3:

Code: [Select]

$ dmesg | grep random
[    0.000000] random: get_random_bytes called from start_kernel+0x8c/0x498 with crng_init=0
[    1.828375] random: fast init done
[    2.296416] random: mkswap: uninitialized urandom read (16 bytes read)
[   33.558590] random: crng init done

[RockJamm]

I am also experiencing the slow availability of SSH on RPi4 but not on RPi3.

I've had a go at installing haveged as follows:

tce-load -wi haveged.tcz

and I'm getting 404 not found