key generation in a script or non interactive mode?

Peter Pentchev roam at ringlet.net
Fri Jul 11 12:38:59 CEST 2008


On Thu, Jul 10, 2008 at 08:25:55PM -0400, David Shaw wrote:
> On Jul 10, 2008, at 5:41 PM, Afzal, Naeem M wrote:
> 
> >
> > Ok, I was able to resolve this issue. I have to set HOME=/root  
> > inside the shell to get it going. Now I have new problem, script  
> > runs ok from within this chroot fs, but when keys generation process  
> > just hangs with statement:
> >
> > "Not enough random bytes available. Please do some other work.... 
> > (Need 284 more bytes)"
> >
> >
> > How can I force it to complete it?
> 
> Your entropy source dried up.  Normally I'd suggest wiggling the mouse  
> or poking at the keyboard to make some more entropy, but if you're  
> running completely unattended that may be hard (you may not even have  
> a mouse on that box).

I usually do something like "find / -print0 | xargs -0 cksum", but that,
of course, assumes that the kernel will gather entropy from the disk.

> There is a good article on entropy gathering on Linux (I'm assuming  
> you are running Linux here) at http://lwn.net/Articles/283103/

Aye, this is a good article indeed, worth reading by both sysadmins and
everyone else who is interested in randomness :)

G'luck,
Peter

-- 
Peter Pentchev	roam at ringlet.net    roam at cnsys.bg    roam at FreeBSD.org
PGP key:	http://people.FreeBSD.org/~roam/roam.key.asc
Key fingerprint	FDBA FD79 C26F 3C51 C95E  DF9E ED18 B68D 1619 4553
When you are not looking at it, this sentence is in Spanish.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 195 bytes
Desc: not available
URL: </pipermail/attachments/20080711/9f3a34bc/attachment.pgp>


More information about the Gnupg-users mailing list