[10:22] <xnox> do builds use http://wiki.qemu.org/Features-Done/VirtIORNG ?
[10:23] <xnox> last time libgnupg-perl was built in quantal in 8 minutes, now it is stuck in gpg key generation for the test-suite. I wonder if i should pregenerate a test key for it.
[10:25] <wgrant> xnox: virtio-rng is not enabled on the scalingstacks. The compute hosts don't have hardware RNGs and guaranteeing QoS would be complicated. Packages should use /dev/urandom for test keys (but gpg --gen-key cannot be convinced to do that directly, unfortunately).
[10:28] <xnox> wgrant, are they new enough intel cpus with intel cpu rng available at all? I did fix rng-tools ages ago to enable that.
[10:28] <xnox> if the build times out, i'll ship a pregenerated key i guess.
[10:38] <wgrant> xnox: RDRAND is new in Ivy Bridge, (ie. Xeon E.* v2). Most of the Intel compute nodes are Westmere-EP, with a handful of Ivy Bridge-EP and a couple of Haswell-EP, plus a smattering of Opterons. So maybe 10% of the x86 compute nodes have a hardware RNG.
[10:38] <wgrant> (ignoring TPM1.2, but, well, lol)
[10:38] <xnox> i'm yet to manage to get TPM1.2 to work....
[10:38] <xnox> i keep hearing that it's like all cool and dandy and available....
[10:39]  * xnox ponders if entropy keys should be plugged into all compute nodes and how much that would cost.....
[10:39] <wgrant> Cool, dandy, available and slow.
[10:42] <xnox> wgrant, http://altusmetrum.org/ChaosKey/ http://shop.gag.com/random.html
[10:42] <xnox> is $30 a pop expensive?
[10:42] <wgrant> Not dreadfully.
[10:43] <wgrant> But I'd really prefer that someone took a hammer to GnuPG upstream.
[10:43] <xnox> i trust bdale more than GnuPG upstream.....
[10:54] <xnox> wgrant, please kill https://launchpad.net/ubuntu/+source/libgnupg-perl/0.19-1ubuntu1/+build/10713491
[10:54] <xnox> wait, these are not good old days, i can do that myself.
[10:59] <wgrant> Yup :)
[11:00] <xnox> man.... can't wait for the UDS
[11:03] <cjwatson> Do we need to bring camouflage?