diff options
| author | Jason A. Donenfeld <Jason@zx2c4.com> | 2022-03-25 21:37:44 -0600 |
|---|---|---|
| committer | Michael Aldridge <aldridge.mac@gmail.com> | 2022-03-25 23:24:11 -0500 |
| commit | 87044318e9acb741e1b74767f30cc4ae802ed398 (patch) | |
| tree | 2f7f25ce34df3ad1ecc6763bedd1a7eb8e654a16 /rc.conf | |
| parent | 5b18be19e3faa8eb396c0608906fbf0d755a4491 (diff) | |
| download | runit-void-87044318e9acb741e1b74767f30cc4ae802ed398.tar.gz runit-void-87044318e9acb741e1b74767f30cc4ae802ed398.tar.xz runit-void-87044318e9acb741e1b74767f30cc4ae802ed398.zip | |
Use seedrng for seeding the random number generator
The RNG can't actually be seeded from a shell script, due to the reliance on ioctls. For this reason, the seedrng project provides a basic script meant to be copy and pasted into projects like void-runit and tweaked as needed: <https://git.zx2c4.com/seedrng/about/>. This commit imports it into void-runit and wires up the init scripts to call it. This also is a significant improvement over the current init script, which fails to remove seed files that have already been used, or to ratchet them forward.
Diffstat (limited to 'rc.conf')
| -rw-r--r-- | rc.conf | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/rc.conf b/rc.conf index 2c4cf64..aa3da51 100644 --- a/rc.conf +++ b/rc.conf @@ -40,3 +40,8 @@ # legacy: mount cgroup v1 /sys/fs/cgroup # unified: mount cgroup v2 under /sys/fs/cgroup #CGROUP_MODE=hybrid + +# Set this to true only if you do not want seed files to actually credit the +# RNG, for example if you plan to replicate this file system image and do not +# have the wherewithal to first delete the contents of /var/lib/seedrng. +#SEEDRNG_SKIP_CREDIT=false |