@@ -15,6 +15,8 @@ description: |
1515
1616## Introduction
1717
18+ This is v1.1 of the standard. See section on version history for details.
19+
1820### Entropy in information technology
1921
2022Entropy is a concept that is widely used in the scope of information
@@ -94,36 +96,15 @@ will be available in virtual instances.
9496
9597## Entropy in SCS clouds
9698
97- ### Flavors
98-
99- The following optional flavor extra_specs are relevant in case an
100- external HRNG is to be used:
101-
102- ``` console
103- hw_rng:allowed=True
104- hw_rng:rate_bytes - The allowed amount of bytes for the the guest
105- to read from the host's entropy per period.
106- hw_rng:rate_period - Sets the duration of a read period in seconds.
107- ```
108-
109- ### Images
110-
11199It is recommended to use images having a kernel (patch level) version 5.18
112100or up. This condition is already satisfied by every mandatory image defined
113101in the [ Image Metadata Standard] ( https://github.com/SovereignCloudStack/standards/blob/main/Standards/scs-0102-v1-image-metadata.md ) .
114102
115- An image may activate the attribute ` hw_rng_model: virtio ` so
116- that an external HRNG can be used.
117-
118- The daemon ` rngd ` may be installed (usually from ` rng-tools `
119- or ` rng-utils ` ).
120-
121- The user may choose to use the ` virtio-rng ` device via ` rngd ` .
122-
123- ### Compute nodes
124-
125103Compute nodes must use CPUs that offer instructions for accessing
126104entropy (such as RDSEED or RDRAND on x86_64 or RNDR on arm64), and
127105these instructions may not be filtered by the hypervisor.
128106
129- Compute nodes may provide a HRNG via ` rngd ` .
107+ ## Version history
108+
109+ As of version 1.1, the method of injecting entropy into a VM using a
110+ virtualized HRNG together with ` rngd ` is no longer recommended.
0 commit comments