diff options
| author | Jason A. Donenfeld <Jason@zx2c4.com> | 2022-03-25 21:37:44 -0600 |
|---|---|---|
| committer | Michael Aldridge <aldridge.mac@gmail.com> | 2022-03-25 23:24:11 -0500 |
| commit | 87044318e9acb741e1b74767f30cc4ae802ed398 (patch) | |
| tree | 2f7f25ce34df3ad1ecc6763bedd1a7eb8e654a16 /core-services | |
| parent | 5b18be19e3faa8eb396c0608906fbf0d755a4491 (diff) | |
| download | runit-void-87044318e9acb741e1b74767f30cc4ae802ed398.tar.gz runit-void-87044318e9acb741e1b74767f30cc4ae802ed398.tar.xz runit-void-87044318e9acb741e1b74767f30cc4ae802ed398.zip | |
Use seedrng for seeding the random number generator
The RNG can't actually be seeded from a shell script, due to the reliance on ioctls. For this reason, the seedrng project provides a basic script meant to be copy and pasted into projects like void-runit and tweaked as needed: <https://git.zx2c4.com/seedrng/about/>. This commit imports it into void-runit and wires up the init scripts to call it. This also is a significant improvement over the current init script, which fails to remove seed files that have already been used, or to ratchet them forward.
Diffstat (limited to 'core-services')
| -rw-r--r-- | core-services/05-misc.sh | 3 |
1 files changed, 1 insertions, 2 deletions
diff --git a/core-services/05-misc.sh b/core-services/05-misc.sh index 0f3d28c..3468e9c 100644 --- a/core-services/05-misc.sh +++ b/core-services/05-misc.sh @@ -4,8 +4,7 @@ install -m0664 -o root -g utmp /dev/null /run/utmp halt -B # for wtmp if [ -z "$VIRTUALIZATION" ]; then - msg "Initializing random seed..." - cp /var/lib/random-seed /dev/urandom >/dev/null 2>&1 || true + seedrng || true fi msg "Setting up loopback interface..." |