Bug#927376: haveged: please ship haveged-udeb to help solve entropy starvation in debian-installer

[Cyril Brulebois]

Source: haveged
Version: 1.9.1-6
Severity: important
Tags: d-i patch

[ debian-boot@ and 923675@ x-d-cc'd ]

Hi haveged maintainers,

As time passes, we encounter more and more entropy starvation issues in
d-i; this includes UUID generation for fontconfig (#898468, worked
around by computing the cache at build time), HTTPS connections, SSH
keypair generations, but also wireless adapter initializations…

My starting point was:
  https://bugs.debian.org/923675

and I've investigated using a new haveged-udeb package. Even if it isn't
fully integrated into d-i yet, first tests look very good.

I've pushed a “buster” branch to the repository with the udeb addition
(and also the Vcs-* update cherry-picked from the master branch because
not having uptodate headers is very annoying), and I've subscribed to
this package to keep an eye on it. Direct links to commits:
  
https://salsa.debian.org/debian/haveged/commit/448ed064ed2c54951e9878c9111e1d5bb0538fa8
  
https://salsa.debian.org/debian/haveged/commit/c208e76fb05117df918f416cb74ae70e08ad006c
  
https://salsa.debian.org/debian/haveged/commit/40e3d2a960c2ef4b65bd081d22e43921aa20c521

Any objections to my uploading an updated haveged package to unstable,
from this buster branch?


Cheers,
-- 
Cyril Brulebois (k...@debian.org)
D-I release manager -- Release team member -- Freelance Consultant

Bug#923675: Bug#927111: unblock: wpa/2:2.7+git20190128+0c1e29f-4

[Cyril Brulebois]

Niels Thykier  (2019-04-18):
> Cyril Brulebois:
> > I think it'd be nice to have some tests on a real wireless adapter,
> > which I'll try to get to in the next days, because of the amount of
> > patching involved. That shouldn't stop you from letting the package
> > reach testing first though.

As noted on #debian-devel when discussing this a bit with Andrej: I've
had issues passing an USB adapter through kvm but tests on bare metal
look good with this new wpa package. I didn't perform a full install
though as I wanted to retain my main system. ;)

Getting slightly off-topic but still relevant to other areas that want
to see work done before the buster release: Both tests in VM and on bare
metal made me confirm what I thought could be possible → we're also
affected by entropy starvation (#923675) in the wireless stack.


Cheers,
-- 
Cyril Brulebois (k...@debian.org)
D-I release manager -- Release team member -- Freelance Consultant


signature.asc
Description: PGP signature

Bug#768573: marked as done (more documentation in the UI needed & install Synaptic)

[Debian Bug Tracking System]

Your message dated Fri, 19 Apr 2019 01:51:07 +
with message-id 

and subject line not relevant
has caused the Debian Bug report #768573,
regarding more documentation in the UI needed & install Synaptic
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
768573: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=768573
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: installation-reports

Boot method: CD 
Image 
version:cdimage.debian.org/cdimage/jessie_di_beta_2/i386/iso-cd/debian-jessie-DI-b2-i386-xfce-CD-1.iso
Date: 2014-10-03 18:55

Machine: E2160@3Ghz@AsusP5QldPro,2GB@800Mhz, GT440, SSDNow 120GB 
Processor:E2160@3Ghz
Memory:2GB@800Mhz
Partitions: /dev/sda1  ext4 22216 26400560  79053868  26% /


Output of lspci -knn (or lspci -nn):00:00.0 Host bridge [0600]: Intel 
Corporation 4 Series Chipset DRAM Controller [8086:2e20] (rev 03)
00:01.0 PCI bridge [0604]: Intel Corporation 4 Series Chipset PCI Express Root 
Port [8086:2e21] (rev 03)
00:1a.0 USB controller [0c03]: Intel Corporation 82801JI (ICH10 Family) USB 
UHCI Controller #4 [8086:3a37]
00:1a.1 USB controller [0c03]: Intel Corporation 82801JI (ICH10 Family) USB 
UHCI Controller #5 [8086:3a38]
00:1a.2 USB controller [0c03]: Intel Corporation 82801JI (ICH10 Family) USB 
UHCI Controller #6 [8086:3a39]
00:1a.7 USB controller [0c03]: Intel Corporation 82801JI (ICH10 Family) USB2 
EHCI Controller #2 [8086:3a3c]
00:1b.0 Audio device [0403]: Intel Corporation 82801JI (ICH10 Family) HD Audio 
Controller [8086:3a3e]
00:1c.0 PCI bridge [0604]: Intel Corporation 82801JI (ICH10 Family) PCI Express 
Root Port 1 [8086:3a40]
00:1c.5 PCI bridge [0604]: Intel Corporation 82801JI (ICH10 Family) PCI Express 
Root Port 6 [8086:3a4a]
00:1d.0 USB controller [0c03]: Intel Corporation 82801JI (ICH10 Family) USB 
UHCI Controller #1 [8086:3a34]
00:1d.1 USB controller [0c03]: Intel Corporation 82801JI (ICH10 Family) USB 
UHCI Controller #2 [8086:3a35]
00:1d.2 USB controller [0c03]: Intel Corporation 82801JI (ICH10 Family) USB 
UHCI Controller #3 [8086:3a36]
00:1d.7 USB controller [0c03]: Intel Corporation 82801JI (ICH10 Family) USB2 
EHCI Controller #1 [8086:3a3a]
00:1e.0 PCI bridge [0604]: Intel Corporation 82801 PCI Bridge [8086:244e] (rev 
90)
00:1f.0 ISA bridge [0601]: Intel Corporation 82801JIB (ICH10) LPC Interface 
Controller [8086:3a18]
00:1f.2 SATA controller [0106]: Intel Corporation 82801JI (ICH10 Family) SATA 
AHCI Controller [8086:3a22]
00:1f.3 SMBus [0c05]: Intel Corporation 82801JI (ICH10 Family) SMBus Controller 
[8086:3a30]
01:00.0 VGA compatible controller [0300]: NVIDIA Corporation GF108 [GeForce GT 
440] [10de:0de0] (rev a1)
01:00.1 Audio device [0403]: NVIDIA Corporation GF108 High Definition Audio 
Controller [10de:0bea] (rev a1)
02:00.0 Ethernet controller [0200]: Qualcomm Atheros AR8121/AR8113/AR8114 
Gigabit or Fast Ethernet [1969:1026] (rev b0)


Base System Installation Checklist:
[O] = OK, [E] = Error (please elaborate below), [ ] = didn't try it

Initial boot:   [O]
Detect network card:[O]
Configure network:  [O]
Detect CD:  [O]
Load installer modules: [O]
Detect hard drives: [O]
Partition hard drives:  [O]
Install base system:[O]
Clock/timezone setup:   [O]
User/password setup:[O]
Install tasks:  [O]
Install boot loader:[O]
Overall install:[O]

Comments:

Tell users that if enabling network update it might take _several hours_ to 
download updated packages, so it is preferred to have Disable Network Update 
selected. Then installation is fast and take 10 minutes or so, because it fetch 
packages from CD.

Explain what is installed when selecting  Debian Desktop and Linux System tools.

Have Synaptic automatically installed, if only Xfce desktop is selected.
--- End Message ---
--- Begin Message ---
not relevant--- End Message ---

Bug#904795: marked as done (No kernel in the Debian buster installer)

[Debian Bug Tracking System]

Your message dated Fri, 19 Apr 2019 01:57:20 +
with message-id 

and subject line fixed
has caused the Debian Bug report #904795,
regarding No kernel in the Debian buster installer
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
904795: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=904795
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: debian-installer
Version: 20180610

When I make a installer cd with simplecdd with the --dist buster flag,
there is no kernel available in the installer. With --dist sid there is
kernel available, but steam and wine-staging fails to install due to
dependency problems, so I want try with --dist buster.

Here is the picture of the installer:
http://s000.tinyupload.com/?file_id=02467361958696419153
--- End Message ---
--- Begin Message ---
fixed--- End Message ---