From 09b67e49bf871fd1988d1d567626a4382ebc2fb0 Mon Sep 17 00:00:00 2001 From: Jason Wessel Date: Wed, 5 Sep 2018 15:44:45 -0700 Subject: openvswitch: Turn off ssl integration by default The openssl library is an optional component for the openvswitch. The problem with it enabled by default is that it will consume system entropy to try to initialize the openssl library even though we are not using it by default. With the 4.16 kernel and up there is not always enough entropy available at the early boot time which can cause a lengthy stall, while waiting to initialize the openvswitch. If ssl is needed, it can of course be turned on with the package config option "ssl". Signed-off-by: Jason Wessel Signed-off-by: Bruce Ashfield --- recipes-networking/openvswitch/openvswitch_git.bb | 1 + 1 file changed, 1 insertion(+) diff --git a/recipes-networking/openvswitch/openvswitch_git.bb b/recipes-networking/openvswitch/openvswitch_git.bb index 4a6002a9..4cd82d77 100644 --- a/recipes-networking/openvswitch/openvswitch_git.bb +++ b/recipes-networking/openvswitch/openvswitch_git.bb @@ -40,6 +40,7 @@ DPDK_INSTALL_DIR ?= "/opt/dpdk" PACKAGECONFIG ?= "libcap-ng" PACKAGECONFIG[dpdk] = "--with-dpdk=${STAGING_DIR_TARGET}${DPDK_INSTALL_DIR}/share/${TARGET_ARCH}-native-linuxapp-gcc,,dpdk,dpdk" PACKAGECONFIG[libcap-ng] = "--enable-libcapng,--disable-libcapng,libcap-ng," +PACKAGECONFIG[ssl] = ",--disable-ssl,openssl," # Don't compile kernel modules by default since it heavily depends on # kernel version. Use the in-kernel module for now. -- cgit v1.2.3-54-g00ecf