Bug#942890: openssh-server: daemon slow to start

[Julien-Benjamin <julienbenjamin@protonmail.com>]

Package: openssh-server
Version: 1:7.9p1-10+deb10u1
Severity: normal

Dear Maintainer,

After a fresh installation of Debian Buster stable on a HP Proliant Microserver Gen8,
I found out that the ssh daemon was slow to start after a (re)boot.

It manifests by the fact that the connection is refused by the server.

I could take several minutes for the daemon to start and that I can connect to the server.

Actually, it is always the slowest process to start ; when using systemd-analyze
blame to monitor it, I discovered it was taken at least 60s.

I think it might be a problem with minimal entropy needed; indeed, when I connect a keyboard to
the machine and typing random characters without login in, the daemon would start after 10-20
characters typed.

For the record, the OS is installed on an SSD.

Regards,

JB


-- System Information:
Debian Release: 10.1
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 4.19.0-6-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=en_US:en (charmap=UTF-8)
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages openssh-server depends on:
ii  adduser                3.118
ii  debconf [debconf-2.0]  1.5.71
ii  dpkg                   1.19.7
ii  libaudit1              1:2.8.4-3
ii  libc6                  2.28-10
ii  libcom-err2            1.44.5-1+deb10u2
ii  libgssapi-krb5-2       1.17-3
ii  libkrb5-3              1.17-3
ii  libpam-modules         1.3.1-5
ii  libpam-runtime         1.3.1-5
ii  libpam0g               1.3.1-5
ii  libselinux1            2.8-1+b1
ii  libssl1.1              1.1.1d-0+deb10u2
ii  libsystemd0            241-7~deb10u1
ii  libwrap0               7.6.q-28
ii  lsb-base               10.2019051400
ii  openssh-client         1:7.9p1-10+deb10u1
ii  openssh-sftp-server    1:7.9p1-10+deb10u1
ii  procps                 2:3.3.15-2
ii  ucf                    3.0038+nmu1
ii  zlib1g                 1:1.2.11.dfsg-1

Versions of packages openssh-server recommends:
ii  libpam-systemd [logind]  241-7~deb10u1
ii  ncurses-term             6.1+20181013-2+deb10u1
ii  xauth                    1:1.0.10-1

Versions of packages openssh-server suggests:
pn  molly-guard   <none>
pn  monkeysphere  <none>
pn  rssh          <none>
pn  ssh-askpass   <none>
pn  ufw           <none>

-- debconf information excluded