Skip to content

Commit 897989c

Browse files
author
Christopher Frost
committed
Document the use of urandom
This commit updates documentation about the use and configuration of '/dev/urandom' after feedback recieved on GitHub. [#80431356]
1 parent 7be64de commit 897989c

File tree

1 file changed

+3
-3
lines changed

1 file changed

+3
-3
lines changed

docs/container-tomcat.md

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -61,8 +61,8 @@ To enable Redis-based session replication, simply bind a Redis service containin
6161
To enable GemFire-based session replication, simply bind a [GemFire service][] containing a name, label, or tag that has `session_replication` as a substring. GemFire services intended to be used for session replication will automatically have a tag of 'session_replication'.
6262

6363
## Managing Entropy
64-
Entropy from `/dev/random` is used heavily to create session ids, and on startup for initializing SecureRandom, which can then cause instances to fail to start in time (See the [Tomcat Wiki]). Also, the entropy is shared so it's possible for a single app to starve the DEA of entropy and cause apps in other containers that make use of entropy to be blocked.
65-
If this is an issue then configuring `/dev/urandom` as an alternative source of entropy should help. It is unlikely, but possible, that this may cause some security issues which should be taken in to account.
64+
Entropy from `/dev/random` is used heavily to create session ids, and on startup for initializing `SecureRandom`, which can then cause instances to fail to start in time (see the [Tomcat wiki]). Also, the entropy is shared so it's possible for a single app to starve the DEA of entropy and cause apps in other containers that make use of entropy to be blocked.
65+
If this is an issue then configuring `/dev/urandom` as an alternative source of entropy may help. It is unlikely, but possible, that this may cause some security issues which should be taken in to account.
6666

6767
Example in a manifest.yml
6868
```
@@ -80,5 +80,5 @@ Additional supporting functionality can be found in the [`java-buildpack-support
8080
[repositories]: extending-repositories.md
8181
[Spring profiles]:http://blog.springsource.com/2011/02/14/spring-3-1-m1-introducing-profile/
8282
[`SPRING_PROFILES_ACTIVE`]: http://docs.spring.io/spring/docs/4.0.0.RELEASE/javadoc-api/org/springframework/core/env/AbstractEnvironment.html#ACTIVE_PROFILES_PROPERTY_NAME
83-
[Tomcat Wiki]: http://wiki.apache.org/tomcat/HowTo/FasterStartUp
83+
[Tomcat wiki]: http://wiki.apache.org/tomcat/HowTo/FasterStartUp
8484
[version syntax]: extending-repositories.md#version-syntax-and-ordering

0 commit comments

Comments
 (0)