News for hackers. Stuff that matters.
Re:Duplicate SSH Keys Everywhere by jquast on Tuesday February 17, 2015 @07:17PM (#9066168)
This is particularly problematic for virtual machines, which are starved of entropy (no sensors, audio device, etc.).

I have VM images begin without ssh host keys and have a service dependency on haveged: http://www.issihosts.com/haveged/ and http://security.stackexchange.com/questions/34523/is-it-appr...

Re:Duplicate SSH Keys Everywhere by atoponce on Tuesday February 17, 2015 @07:28PM (#9066208)
For Qemu 1.3 and later, there is VirtIORand where you can have VMs attach to a HWRNG on the hypervisor, then food that into the kernel CSPRNG. This should be imaged by default, so on first boot, each VM has enough entropy for key generation.
Re:Duplicate SSH Keys Everywhere by rlpb on Wednesday February 18, 2015 @08:37AM (#9068391)
On Ubuntu, pollinate solves this problem: http://blog.dustinkirkland.com/2014/02/random-seeds-in-ubunt...