Please enable aes-ni

[ayufan]

Please enable CONFIG_CRYPTO_AES_NI_INTEL and CONFIG_CRYPTO_AES_X86_64 for X86_64 kernels.

[moul]

Hi @ayufan

Added with #260, we will release new kernels at the beginning of the next week

[FlorianHeigl]

Hi,

I've installed my whole environment as of last week.
There is no aes-ni module in the kernel.

root@ref-one-master:~# modprobe aesni-intel
modprobe: FATAL: Module aesni-intel not found.
root@ref-one-master:~# uname -a
Linux ref-one-master 4.5.1-std-1 #1 SMP Mon Apr 18 19:58:58 UTC 2016 x86_64 GNU/Linux
root@ref-one-master:~# cat /etc/debian_version 
8.5

[moul]

Can you switch your bootscript to the latest std one ?

[FlorianHeigl]

Hi,

I had not modified it, so it was at the default, called "stable/latest"
I've changed it to "x86_64 4.5.7 std #2" and am testing.

[FlorianHeigl]

That one seems fine:

System information as of: Sat Jul  2 13:22:50 UTC 2016

System load:    0.25        Int IP Address: 10.1.72.79 
Memory usage:   1.1%        Pub IP Address: 163.172.152.236
Usage on /: 5%      Swap usage: 0.0%
Local Users:    0       Processes:  108
Image build:    2016-04-06  System uptime:  0 min
Disk nbd0:  l_ssd 50G

Documentation:  https://scaleway.com/docs
Community:  https://community.scaleway.com
Image source:   https://github.com/scaleway/image-debian

Last login: Sat Jul  2 13:22:32 2016 from 83.171.172.92
root@tn1-one-host1:~# find /lib | grep aes
/lib/modules/4.5.7-std-2/kernel/arch/x86/crypto/camellia-aesni-avx2.ko
/lib/modules/4.5.7-std-2/kernel/arch/x86/crypto/camellia-aesni-avx-x86_64.ko
/lib/modules/4.5.7-std-2/kernel/arch/x86/crypto/aes-x86_64.ko
/lib/modules/4.5.7-std-2/kernel/arch/x86/crypto/aesni-intel.ko```

I suppose there's a reason you didn't backport it to the 4.5.1 kernel release (remember that is the default)
That means by default there's no aes-ni for anyone, meaning performance is worse and your power bill is higher :)
(I'm unwinding my lab over the next days, so no impact for me, don't worry)