Merge pull request #808 from hashicorp/b-seed-rand

Seed the servers random number generator

nomad/server.go

@@ -247,6 +247,11 @@ func NewServer(config *Config) (*Server, error) {
 	// Emit metrics
 	go s.heartbeatStats()
 
+	// Seed the global random.
+	if err := seedRandom(); err != nil {
+		return nil, err
+	}
+
 	// Done
 	return s, nil
 }

nomad/util.go

@@ -2,6 +2,8 @@ package nomad
 
 import (
 	"fmt"
+	"math"
+	"math/big"
 	"math/rand"
 	"net"
 	"os"
@@ -10,6 +12,8 @@ import (
 	"strconv"
 	"time"
 
+	crand "crypto/rand"
+
 	"github.com/hashicorp/serf/serf"
 )
 
@@ -127,3 +131,14 @@ func rateScaledInterval(rate float64, min time.Duration, n int) time.Duration {
 	}
 	return interval
 }
+
+// seedRandom seeds the global random variable using a cryptographically random
+// seed. It returns an error if determing the random seed fails.
+func seedRandom() error {
+	n, err := crand.Int(crand.Reader, big.NewInt(math.MaxInt64))
+	if err != nil {
+		return err
+	}
+	rand.Seed(n.Int64())
+	return nil
+}