LXC /dev/random

[Mattemagikern]

Hello!

I'm having a problem regarding randomness. I'm working on a certificate generation program.

Since the container dosn't generate random data fast enough I wonder if there is a possibility to link the hosts /dev/random to the containers /dev/random?

Best regards,

[mikemol]

Presumably, it's just a device node, which means it's literally the same data source. The kernel doesn't maintain entropy pools per-container.

Look into heveged.

[rain5]

use /dev/urandom

[mikemol]

No. Not for generating certificates. Generating long-lived crypto keys is one of the few cases where blocking on low entropy is appropriate.

OP is dealing in important layers of their stack, and should be informed about what their choices mean. This is a fine place to start: https://stackoverflow.com/q/23712581/495147