Stenobird

Episode

678: Entropy Ain't Easy

Podcast
LINUX Unplugged
Published
Aug 2, 2026
Duration seconds
4540
Processing state
processed
Canonical source
https://linuxunplugged.com/678
Audio
https://dts.podtrac.com/redirect.mp3/mgln.ai/e/211/rss.art19.com/episodes/0fed78a9-9d6e-437c-825e-f1a8baea9b59.mp3
JSON
/v1/public/podcasts/linux-unplugged/episodes/678-entropy-ain-t-easy
Markdown
/podcast/linux-unplugged/678-entropy-ain-t-easy.md

Actions

  • POST https://stenobird.com/v1/public/podcasts/linux-unplugged/episodes/678-entropy-ain-t-easy/transcription-requests
    Idempotently request low-priority transcript generation for this episode.
  • GET https://stenobird.com/podcast/linux-unplugged/678-entropy-ain-t-easy.md
    Read the agent-friendly Markdown representation of this episode resource.

Summary

A deep dive into the recent influx of seven Linux kernel updates and the technical complexities of maintaining true randomness. The episode explores the historical vulnerabilities caused by insufficient entropy and the evolution of the Linux RNG API.

Topics

  • Linux Kernel
  • Entropy
  • Random Number Generation
  • LTS Kernels
  • Btrfs
  • Cryptography
  • Open Source
  • Cybersecurity

Highlights

  • Main idea: Seven Linux kernels were released simultaneously, offering various LTS options for long-term stability
  • Technical detail: The Linux kernel uses ChaCha20 to stretch initial entropy seeds into large, deterministic streams of pseudo-random bits
  • Failure mode: Insufficient entropy during early boot can lead to predictable keys, as seen in historical vulnerabilities like the Debian OpenSSL bug
  • Practical takeaway: Developers should rely on audited libraries and the 'get random' API to ensure they wait for sufficient entropy
  • Kernel update: Recent changes include the removal of legacy i486 support and significant code cleanup in the kernel tree

Chapters

  1. 6:00 The Kernel Influx: An analysis of the recent wave of kernel releases and their relevance for long-term support (LTS) in home labs.
  2. 11:00 Driver and Hardware Updates: Discussing NVIDIA driver backports, AMD ROCm regressions, and the removal of legacy architecture support.
  3. 17:00 Btrfs and Performance: Examining Btrfs large folio fixes and their impact on container startup and throughput performance.
  4. 22:00 Kernel Cleanup: A look at the removal of 14,000 lines of code and the dropping of i486 architecture support.
  5. 27:00 The Entropy Problem: A technical deep dive into how the Linux kernel manages randomness and the risks of predictable seeds.
  6. 32:00 RNG API Evolution: Tracing the transition from Urandom/Random to the modern 'get random' API to prevent entropy starvation.
  7. 59:00 Self-Hosted Picks: Reviewing modern self-hosted tools for travel planning and task management.