Jan Kundrát | 2bfe9ee | 2019-12-04 13:42:07 +0100 | [diff] [blame] | 1 | From afb5af76c137c71bfdb94d47bd5e33dba54147f7 Mon Sep 17 00:00:00 2001 |
| 2 | From: =?UTF-8?q?Jan=20Kundr=C3=A1t?= <jan.kundrat@cesnet.cz> |
| 3 | Date: Wed, 4 Dec 2019 09:18:36 +0100 |
| 4 | Subject: [PATCH] Entropy seed for CzechLight |
| 5 | |
| 6 | Everything changed in sytemd v243 which gained a native service which is |
| 7 | nowadays capable of crediting the seed with sufficient entropy. However, |
| 8 | everything is still wrapped behind a random env variable (to guard |
| 9 | against people cloning images) and runs rather late in the boot. The |
| 10 | docs still suggest to run something custom "from the boot loader" on |
| 11 | embedded systems with no HW random generator (hi ClearFog). |
| 12 | |
| 13 | So, given that we're using the pre-init shell script for seeding the |
| 14 | random generator from disk, we only need this one for systemd to *save* |
| 15 | the seed for the next boot. |
| 16 | |
| 17 | See-also: https://gerrit.cesnet.cz/c/CzechLight/br2-external/+/1548 |
| 18 | --- |
| 19 | meson.build | 2 +- |
| 20 | 1 file changed, 1 insertion(+), 1 deletion(-) |
| 21 | |
Jan Kundrát | 6b05a1d | 2019-03-06 17:01:28 +0100 | [diff] [blame] | 22 | diff --git a/meson.build b/meson.build |
Jan Kundrát | 2bfe9ee | 2019-12-04 13:42:07 +0100 | [diff] [blame] | 23 | index e5ceb1e169..ff3af58b8f 100644 |
Jan Kundrát | 6b05a1d | 2019-03-06 17:01:28 +0100 | [diff] [blame] | 24 | --- a/meson.build |
| 25 | +++ b/meson.build |
Jan Kundrát | 2bfe9ee | 2019-12-04 13:42:07 +0100 | [diff] [blame] | 26 | @@ -155,7 +155,7 @@ bootlibdir = join_paths(prefixdir, 'lib/systemd/boot/efi') |
Václav Kubernát | 8cd6156 | 2021-12-08 13:27:31 +0100 | [diff] [blame] | 27 | testsdir = prefixdir / 'lib/systemd/tests' |
| 28 | systemdstatedir = localstatedir / 'lib/systemd' |
| 29 | catalogstatedir = systemdstatedir / 'catalog' |
| 30 | -randomseeddir = localstatedir / 'lib/systemd' |
Jan Kundrát | 6b05a1d | 2019-03-06 17:01:28 +0100 | [diff] [blame] | 31 | +randomseeddir = '/cfg/random-seed' |
Václav Kubernát | 8cd6156 | 2021-12-08 13:27:31 +0100 | [diff] [blame] | 32 | profiledir = rootlibexecdir / 'portable' / 'profile' |
| 33 | ntpservicelistdir = rootprefixdir / 'lib/systemd/ntp-units.d' |
Jan Kundrát | 6b05a1d | 2019-03-06 17:01:28 +0100 | [diff] [blame] | 34 | |
Jan Kundrát | 2bfe9ee | 2019-12-04 13:42:07 +0100 | [diff] [blame] | 35 | -- |
| 36 | 2.21.0 |
| 37 | |