Skip to content

Commit

Permalink
Apply suggestions from code review
Browse files Browse the repository at this point in the history
Co-authored-by: Matthias Büchse <[email protected]>
Signed-off-by: Martin Morgenstern <[email protected]>
  • Loading branch information
martinmo and mbuechse committed Sep 5, 2024
1 parent a131728 commit a6ddbf3
Show file tree
Hide file tree
Showing 2 changed files with 2 additions and 14 deletions.
12 changes: 2 additions & 10 deletions Standards/scs-0101-w1-entropy-implementation-testing.md
Original file line number Diff line number Diff line change
Expand Up @@ -10,16 +10,8 @@ supplements:
## Implementation notes

We presume that almost nothing has to be done (or indeed can be done), as
long as the CPUs and VM images are reasonably recent.
The already mentioned failure testing and entropy count is available
on modern linux kernels (especially on 5.18 or higher),
but if older kernels are made available, the CSP needs to provide entropy
by offering CPU instructions that provide entropy without being filtered by the hypervisor.
All newer CPUs offer instructions for this kind of use-case (e.g. Intel introduced RDRAND
in 2014 in their Broadwell architecture) and the expectation is,
that most CSPs don't use older processors.

Most times, only the flavor and image attributes required by the standard have to be set:
long as the CPUs and VM images are reasonably recent; only the flavor and
image attributes required by the standard have to be set:

- flavor: `hw_rng:allowed=True` ,
- image: `hw_rng_model: virtio` .
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -7,10 +7,6 @@ supplements:
- scs-0102-v1-image-metadata.md
---

## Introduction

The standard defines a set of metadata properties for public images, that need to be set in order
to have an SCS-compliant IaaS setup.

## Implementation notes

Expand Down

0 comments on commit a6ddbf3

Please sign in to comment.