-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Markus,
On 5/18/19 17:39, i...@flyingfischer.ch wrote: > apt-get install haveged update-rc.d haveged defaults > > This increases the system entropy for random generation and reduces > boot time for Tomcat considerably. I'm a -1 on this solution because it takes a reliable source of entropy and converts it into an unreliable source of entropy. There is a reason that *NIX* systems usually have both /dev/random (a good, secure source of randomness) and /dev/urandom (a *fast* source of randomness which is reasonably good). When there are reasons to use /dev/random -- such as generating a new long-lived encryption key like PGP, RSA, ECC, etc. -- it's important that these kinds of "artificial" sources of randomness aren't used. That's why we don't use /dev/urandom for those purposes. But haveged basically turns /dev/random into /dev/urandom and therefore programs have no choice. It's better to leave hadeged out of the mix and choose the right source of randomness for your application. - -chris > Am 18.05.19 um 22:18 schrieb Rainer Jung: >> Most likely it hangs waiting for enough entropy for random >> number generator seeding. >> >> Try whether the problem goes away if you add >> >> -Djava.security.egd=file:/dev/urandom >> >> to you process flags. If you are using older Java than Java 8 >> (not possible for Tomcat 9 but just in case you also have older >> software stacks running), then it would be >> >> -Djava.security.egd=file:/dev/./urandom >> >> The cryptic /./ is not a typo, you would need it for Java before >> Java 8. >> >> If this doesn't help, then you should try capturing a few stack >> dumps (thread dumps) during the long startup time. People here >> can help interpret them. >> >> Regards, >> >> Rainer >> >> Am 18.05.2019 um 21:55 schrieb Jerry Malcolm: >>> This is a weird one. It started a few months ago. I have TC >>> 9 running on Windows Server 16. After I reboot the entire >>> server, Tomcat takes forever on startup. It normally starts in >>> about 30 seconds. But after a server reboot it takes up to 15 >>> minutes... chugging along at a snail's pace starting up all of >>> the apps on all of the virtual hosts. It always finally gets >>> there with everything successfully running. Other servers on >>> the same box (Apache, JAMES, ISC BIND, MySQL) don't have any >>> problem starting up. CPU, Disk, Memory, etc. usages are barely >>> showing on the performance graphs. There's nothing in the >>> Catalina log or system.err other than showing a couple of >>> minute gap in the time stamp between each app as it starts up. >>> If I need to reboot again later, it boots again in about 30 sec >>> as expected. >>> >>> First question... any ideas off the top of your head that might >>> be causing this? >>> >>> Second question... is there any other logging I can turn on >>> that might explain what TC is blocking on? >>> >>> Thanks. >>> >>> Jerry >> >> --------------------------------------------------------------------- >> >> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org >> For additional commands, e-mail: users-h...@tomcat.apache.org >> > > > --------------------------------------------------------------------- > > To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org > For additional commands, e-mail: users-h...@tomcat.apache.org > -----BEGIN PGP SIGNATURE----- Comment: Using GnuPG with Thunderbird - https://www.enigmail.net/ iQIzBAEBCAAdFiEEMmKgYcQvxMe7tcJcHPApP6U8pFgFAlzi20oACgkQHPApP6U8 pFiWDQ//fJVpQ6A21DUN4OEXIWQ3Fx8x/EA0t9jgxggHkHIEREvEvLU8ZcO+XVZG u9msAYJQWvpwmb3ohbU8UdE7z6Rez+tFEyxpkRsZZPRZF83UC4RCrFEg3p9pZMNs lBPwfVHri414iOb6BfAj5E7vixT7chq1UxP9/rvxC0Zs8OL/rdc4iAhG/ofpCzus Lgjnxc/3DhagztTphpr+53KsLh/ibxDnrFqVZxrh7gV/RQRtSxr9OWs/Ie9Nj2gQ JCtOvp0YyJofe9c/Pb/WYBmmmlBt1fGm95bP1h/ahBh3kFCDt+rtKZkbbI2oh8+J 1xLpkWzWVdogQxbVfDgm9mkHRSV0XwB9gMzGvcdaeuziAf7zDZdrgYJpyeS4u9Ty ksmU7eDsefiqTEV/Vd6oQAmWQac02lK/gX3ExarSe4+8XRt6vIu/CAjbC2Fu4OBF +tujXyZgQwaFNvFVd4l6qKJaZ1zFyRk8E2XU/TZqlRvC9xIKN5NVm3ztHn/0ytt3 4eIYNn6vsX8QjYDipJbQ7YbpdJMnaFGyMZTm6CyjUPs5YPIIPHaA6sCO325O8IbX cFz+WSXpVA0LVhgxjh+1gpcoQmqMS2lroPqRV7BcgSjN90tupod+N++jtCcTVy6X 7tQ8JVIAMlU4d0W3hbAGOmpxTPVRdi88LnH00WQhKlkGZy/SLvw= =N2E6 -----END PGP SIGNATURE----- --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
