El 11/11/24 a las 13:08, Cyril Brulebois escribió:
Package: haveged-udeb
Version: 1.9.19-2
Severity: serious
Tags: d-i
Justification: makes the package useless, arguably critical
X-Debbugs-Cc: debian-b...@lists.debian.org
Hi,
haveged doesn't start at all in d-i, and that's not an apparmor issue
(#1087318):
haveged: command socket is listening at fd 3
haveged: Couldn't create named semaphore haveged_sem error: No such file
or directory
While haveged is supposed to be less critical than it used to be at the
time it was added to the installer, I don't remember seeing a study
making it clear it can be removed. At this point of the release cycle,
I'd rather see haveged fixed anyway.
Hi.
I started to use haveged for my archive rebuilds because the
build-time tests of several cryptography-related packages
used to fail.
(If you are curious, see #834683, #841208, #850269 or #850299).
The changes in Linux 5.4 are said to make haveged unnecessary,
so I removed it from my autobuilding setup in 2023-11.
Since then, I've built the whole of bullseye, bookworm, trixie
and sid several times, using the kernel in bookworm, and I have
not experienced any of those problems again.
So I believe it's generally safe to stop using haveged at this point
(if you are using a recent enough kernel).
(Not an "official study", but maybe it might help).
Thanks.