Home / server / Questions / 779733
Accepted
ConnorJC
Asked: 2016-05-30 16:46:05 +0800 CST

Increasing Entropy on CoreOS

  • 772

I'm trying out coreos on a kubernetes cluster. This setup includes a bind server serving DNSSEC responses. Because of the DNSSEC key management, the bind server uses up all the available entropy and hangs on startup, and takes hours to get enough entropy to sign a single zone.

What can I do to increase the entropy on the servers to prevent this from happening?

kubernetes coreos entropy-pool

1 Answers

  1. Best Answer

    You should install haveged in order to counter the lack of entropy sources in your specific setup.

    If you have restricted access, try something like this:

    https://github.com/harbur/docker-haveged

    In case you need an entropy gathering service on your docker host but don't want to / can't install locally an entropy gathering service.

    The service makes more sense on Cloud servers and more specifically on CoreOS servers where you cannot install locally services.

    • 5