blob: e79c9af94f50bdadb58c48e61445bb6c10c086ca [file] [log] [blame]
Jan Kundrát2bfe9ee2019-12-04 13:42:07 +01001From afb5af76c137c71bfdb94d47bd5e33dba54147f7 Mon Sep 17 00:00:00 2001
2From: =?UTF-8?q?Jan=20Kundr=C3=A1t?= <jan.kundrat@cesnet.cz>
3Date: Wed, 4 Dec 2019 09:18:36 +0100
4Subject: [PATCH] Entropy seed for CzechLight
5
6Everything changed in sytemd v243 which gained a native service which is
7nowadays capable of crediting the seed with sufficient entropy. However,
8everything is still wrapped behind a random env variable (to guard
9against people cloning images) and runs rather late in the boot. The
10docs still suggest to run something custom "from the boot loader" on
11embedded systems with no HW random generator (hi ClearFog).
12
13So, given that we're using the pre-init shell script for seeding the
14random generator from disk, we only need this one for systemd to *save*
15the seed for the next boot.
16
17See-also: https://gerrit.cesnet.cz/c/CzechLight/br2-external/+/1548
18---
19 meson.build | 2 +-
20 1 file changed, 1 insertion(+), 1 deletion(-)
21
Jan Kundrát6b05a1d2019-03-06 17:01:28 +010022diff --git a/meson.build b/meson.build
Jan Kundrát2bfe9ee2019-12-04 13:42:07 +010023index e5ceb1e169..ff3af58b8f 100644
Jan Kundrát6b05a1d2019-03-06 17:01:28 +010024--- a/meson.build
25+++ b/meson.build
Jan Kundrát2bfe9ee2019-12-04 13:42:07 +010026@@ -155,7 +155,7 @@ bootlibdir = join_paths(prefixdir, 'lib/systemd/boot/efi')
Jan Kundrát6b05a1d2019-03-06 17:01:28 +010027 testsdir = join_paths(prefixdir, 'lib/systemd/tests')
28 systemdstatedir = join_paths(localstatedir, 'lib/systemd')
29 catalogstatedir = join_paths(systemdstatedir, 'catalog')
30-randomseeddir = join_paths(localstatedir, 'lib/systemd')
31+randomseeddir = '/cfg/random-seed'
32 profiledir = join_paths(rootlibexecdir, 'portable', 'profile')
Jan Kundrát2bfe9ee2019-12-04 13:42:07 +010033 ntpservicelistdir = join_paths(rootprefixdir, 'lib/systemd/ntp-units.d')
Jan Kundrát6b05a1d2019-03-06 17:01:28 +010034
Jan Kundrát2bfe9ee2019-12-04 13:42:07 +010035--
362.21.0
37