Vary long start about tomcat HOT 13 CLOSED

What about changing catalina.sh to use /dev/urandom via a java property. -Djava.security.egd=file:/dev/./urandom

from tomcat.

from tomcat.

It is a virtual machine. How can I increase entropy?

from tomcat.

from tomcat.

Here's a related issue in the VirtualBox issue tracker that has a couple other suggestions on how to get more entropy into the VM: https://www.virtualbox.org/ticket/11297

from tomcat.

Thank you for the answers.
As I understand, low entropy is a problem for all VMs.

from tomcat.

@dpwspoon That's a reasonable workaround for development purposes.

from tomcat.

What about for production? I'm not a cryptology expert but the following posts seem to make it seem like urandom is secure. post1 and post2

from tomcat.

I'm bumping into this tonight — startups that take 5-10 minutes. Has anyone ever figured out a real solution to this for production systems?

from tomcat.

I would infer from the linked post and article that switching to /dev/urandom would be fine.

from tomcat.

That is correct

from tomcat.

FYI, for a while Docker has had a trivial way to make this switch that doesn't involve any changes to Tomcat or a system property — docker run --device /dev/urandom:/dev/random ...

from tomcat.

Sounds like this is pretty well understood and solved now. 👍

(Might be worth adding something to the image documentation, if it's still a recurring problem. 😄)

from tomcat.