Bug ID 615308: vcmp guest took extra long to generate keys on first boot

Last Modified: Nov 07, 2022

Bug Tracker

Affected Product:  See more info
BIG-IP TMOS(all modules)

Known Affected Versions:
12.1.0, 12.1.0 HF1, 12.1.0 HF2, 12.1.1, 12.1.1 HF1, 12.1.1 HF2, 12.1.2, 12.1.2 HF1, 12.1.2 HF2, 12.1.3, 12.1.3.1, 12.1.3.2, 12.1.3.3, 12.1.3.4, 12.1.3.5, 12.1.3.6, 12.1.3.7, 12.1.4, 12.1.4.1, 12.1.5, 12.1.5.1, 12.1.5.2, 12.1.5.3, 12.1.6

Opened: Sep 08, 2016
Severity: 3-Major

Symptoms

The first boot of a vcmp guest took 50 minutes to generate ephemeral keys rather than the normal 10 seconds. The key generation occurs at boot up before ssh access exists. Once the key generation completes the guest continues with normal boot. The /var/log/boot.log records the duration of the key generation time as below. Sep 19 12:36:33 localhost info plymouthd: Entropy generation started successfulll y. Sep 19 12:36:33 localhost info plymouthd: Generating /var/dnscached/config/rndc.. key ( 12:35:35 ) ... Sep 19 12:36:33 localhost info plymouthd: Done ( 12:35:35 ) Sep 19 12:36:33 localhost info plymouthd: Generating ephemeral 1024 keys. ( 12:33 5:35 ) ... Sep 19 12:36:33 localhost info plymouthd: Done ( 12:35:46 ) Sep 19 12:36:33 localhost info plymouthd: Generating ephemeral keys. ( 12:35:46 ) ... Sep 19 12:36:33 localhost info plymouthd: Done ( 12:35:49 )

Impact

Delay on the first boot of guest after vdisk creation.

Conditions

Rare. Seen a few times out of hundreds of thousands of bootups.

Workaround

None.

Fix Information

None

Behavior Change