live35 ptscloses 11/9/2026, 10:07:33 PM

The 30-second handshake

A fresh VM pauses exactly ~30s on every first HTTPS call after boot. The same image on bigger hardware is instant.

The scene

Reported: new edge-07 (smallest flavor, minimal image): for the first minutes after boot, every outbound TLS call shows time_appconnect: 30.2s. On edge-01: 0.08s.

$ cat /proc/sys/kernel/random/entropy_avail
12
$ uname -r
4.19.0
$ time head -c 32 /dev/random > /dev/null
real    0m31.4s

Java service. java.security has securerandom.source=file:/dev/random, hand-edited "for extra security" years ago.
The flavor exposes no virtio-rng device. No haveged/rng-tools installed.

The scene

Diagnoses — hidden until the incident closes