Seed math/rand on start

Author: liggitt

cmd/dockerregistry/main.go

@@ -3,10 +3,12 @@ package main
 import (
 	"flag"
 	"fmt"
+	"math/rand"
 	"net/http"
 	_ "net/http/pprof"
 	"os"
 	"runtime"
+	"time"
 
 	log "github.com/Sirupsen/logrus"
 	"k8s.io/kubernetes/pkg/util/logs"
@@ -28,6 +30,7 @@ func main() {
 	defer serviceability.Profile(os.Getenv("OPENSHIFT_PROFILE")).Stop()
 	startProfiler()
 
+	rand.Seed(time.Now().UTC().UnixNano())
 	runtime.GOMAXPROCS(runtime.NumCPU())
 	flag.Parse()
 

cmd/gitserver/gitserver.go

@@ -1,9 +1,11 @@
 package main
 
 import (
+	"math/rand"
 	"os"
 	"path/filepath"
 	"runtime"
+	"time"
 
 	"k8s.io/kubernetes/pkg/util/logs"
 
@@ -22,6 +24,7 @@ func main() {
 	defer serviceability.BehaviorOnPanic(os.Getenv("OPENSHIFT_ON_PANIC"))()
 	defer serviceability.Profile(os.Getenv("OPENSHIFT_PROFILE")).Stop()
 
+	rand.Seed(time.Now().UTC().UnixNano())
 	if len(os.Getenv("GOMAXPROCS")) == 0 {
 		runtime.GOMAXPROCS(runtime.NumCPU())
 	}

cmd/oc/oc.go

@@ -1,9 +1,11 @@
 package main
 
 import (
+	"math/rand"
 	"os"
 	"path/filepath"
 	"runtime"
+	"time"
 
 	"k8s.io/kubernetes/pkg/util/logs"
 
@@ -24,6 +26,7 @@ func main() {
 	defer serviceability.BehaviorOnPanic(os.Getenv("OPENSHIFT_ON_PANIC"))()
 	defer serviceability.Profile(os.Getenv("OPENSHIFT_PROFILE")).Stop()
 
+	rand.Seed(time.Now().UTC().UnixNano())
 	if len(os.Getenv("GOMAXPROCS")) == 0 {
 		runtime.GOMAXPROCS(runtime.NumCPU())
 	}

cmd/openshift/openshift.go

@@ -1,9 +1,11 @@
 package main
 
 import (
+	"math/rand"
 	"os"
 	"path/filepath"
 	"runtime"
+	"time"
 
 	"k8s.io/kubernetes/pkg/util/logs"
 
@@ -24,6 +26,7 @@ func main() {
 	defer serviceability.BehaviorOnPanic(os.Getenv("OPENSHIFT_ON_PANIC"))()
 	defer serviceability.Profile(os.Getenv("OPENSHIFT_PROFILE")).Stop()
 
+	rand.Seed(time.Now().UTC().UnixNano())
 	if len(os.Getenv("GOMAXPROCS")) == 0 {
 		runtime.GOMAXPROCS(runtime.NumCPU())
 	}

pkg/cmd/admin/router/router.go

@@ -8,6 +8,7 @@ import (
 	"path"
 	"strconv"
 	"strings"
+	"time"
 
 	"github.com/golang/glog"
 	"github.com/spf13/cobra"
@@ -846,6 +847,7 @@ func generateRoleBindingName(name string) string {
 
 // generateStatsPassword creates a random password.
 func generateStatsPassword() string {
+	rand := rand.New(rand.NewSource(time.Now().UTC().UnixNano()))
 	allowableChars := []rune("abcdefghijlkmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890")
 	allowableCharLength := len(allowableChars)
 	password := []string{}

pkg/cmd/server/crypto/crypto.go

@@ -256,7 +256,8 @@ type RandomSerialGenerator struct {
 }
 
 func (s *RandomSerialGenerator) Next(template *x509.Certificate) (int64, error) {
-	return mathrand.Int63(), nil
+	r := mathrand.New(mathrand.NewSource(time.Now().UTC().UnixNano()))
+	return r.Int63(), nil
 }
 
 // EnsureCA returns a CA, whether it was created (as opposed to pre-existing), and any error

pkg/sdn/plugin/sdn-cni-plugin/openshift-sdn.go

@@ -7,10 +7,12 @@ import (
 	"encoding/json"
 	"fmt"
 	"io/ioutil"
+	"math/rand"
 	"net"
 	"net/http"
 	"os"
 	"strings"
+	"time"
 
 	"github.com/openshift/origin/pkg/sdn/plugin/cniserver"
 
@@ -111,6 +113,7 @@ func (p *cniPlugin) CmdDel(args *skel.CmdArgs) error {
 }
 
 func main() {
+	rand.Seed(time.Now().UTC().UnixNano())
 	p := NewCNIPlugin(cniserver.CNIServerSocketPath)
 	skel.PluginMain(p.skelCmdAdd, p.CmdDel, version.Legacy)
 }