Skip to content

Commit e275494

Browse files
committed
Introduce v1.1 of scs-0101.
Signed-off-by: Matthias Büchse <matthias.buechse@alasca.cloud>
1 parent b756926 commit e275494

2 files changed

Lines changed: 8 additions & 26 deletions

File tree

Standards/scs-0101-v1-entropy.md

Lines changed: 6 additions & 25 deletions
Original file line numberDiff line numberDiff line change
@@ -15,6 +15,8 @@ description: |
1515

1616
## Introduction
1717

18+
This is v1.1 of the standard. See section on version history for details.
19+
1820
### Entropy in information technology
1921

2022
Entropy is a concept that is widely used in the scope of information
@@ -94,36 +96,15 @@ will be available in virtual instances.
9496

9597
## Entropy in SCS clouds
9698

97-
### Flavors
98-
99-
The following optional flavor extra_specs are relevant in case an
100-
external HRNG is to be used:
101-
102-
```console
103-
hw_rng:allowed=True
104-
hw_rng:rate_bytes - The allowed amount of bytes for the the guest
105-
to read from the host's entropy per period.
106-
hw_rng:rate_period - Sets the duration of a read period in seconds.
107-
```
108-
109-
### Images
110-
11199
It is recommended to use images having a kernel (patch level) version 5.18
112100
or up. This condition is already satisfied by every mandatory image defined
113101
in the [Image Metadata Standard](https://github.com/SovereignCloudStack/standards/blob/main/Standards/scs-0102-v1-image-metadata.md).
114102

115-
An image may activate the attribute `hw_rng_model: virtio` so
116-
that an external HRNG can be used.
117-
118-
The daemon `rngd` may be installed (usually from `rng-tools`
119-
or `rng-utils`).
120-
121-
The user may choose to use the `virtio-rng` device via `rngd`.
122-
123-
### Compute nodes
124-
125103
Compute nodes must use CPUs that offer instructions for accessing
126104
entropy (such as RDSEED or RDRAND on x86_64 or RNDR on arm64), and
127105
these instructions may not be filtered by the hypervisor.
128106

129-
Compute nodes may provide a HRNG via `rngd`.
107+
## Version history
108+
109+
As of version 1.1, the method of injecting entropy into a VM using a
110+
virtualized HRNG together with `rngd` is no longer recommended.

Tests/scs-compatible-iaas.yaml

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -301,7 +301,8 @@ modules:
301301
- scs-0100-syntax-check
302302
- scs-0100-semantics-check
303303
- id: scs-0101-v1
304-
name: Entropy v1
304+
# leap from v1 to v1.1 in place because it's a very minor relaxation; all essential testcases are kept
305+
name: Entropy v1.1
305306
url: https://docs.scs.community/standards/scs-0101-v1-entropy
306307
targets:
307308
main:

0 commit comments

Comments
 (0)