[Pkg-swan-devel] Bug#846026: strongswan: FTBFS if there is not enough entropy

[Santiago Vila]

retitle 846026 strongswan: FTBFS if there is not enough entropy
severity 846026 normal
thanks

On Mon, 28 Nov 2016, Yves-Alexis Perez wrote:

> it might be lack of entropy

That's the best theory so far, yes.

Several weeks ago I decided to add this line

/dev/urandom    /dev/random     none    rw,bind         0       0

to /etc/schroot/default/fstab, to cope with packages which seem to need
a lot of entropy.

Today I built this package 100 times and it failed none.

The problem here is that we don't have an "entropy" package to be
added to build-depends to ensure that there is enough entropy
available, and I'm not really supposed to have a /dev/random device
which is really /dev/urandom.

Some crypto-related packages solved this problem by using pregenerated
keys. Example:

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=834683

I'm not sure you would want to do that, but in either case,
I'm downgrading this bug to normal and removing it from my list of
"FTBFS-randomly" bugs. I assume lack of entropy is the reason.

Thanks.