| Commit message (Collapse) | Author | Age | Files | Lines |
| |
|
|
|
|
|
|
|
|
|
|
|
|
| |
The RNG can't actually be seeded from a shell script, due to the
reliance on ioctls. For this reason, the seedrng project provides a
basic script meant to be copy and pasted into projects like void-runit
and tweaked as needed: <https://git.zx2c4.com/seedrng/about/>.
This commit imports it into void-runit and wires up the init scripts to
call it. This also is a significant improvement over the current init
script, which fails to remove seed files that have already been used, or
to ratchet them forward.
|
|
|
|
|
|
|
|
|
| |
Regenerating the stored seed was an attempt to prevent hard shutdowns
from leading to seed reuse.
Unfortunately, this practice depletes any entropy that was added by
the seed.
Furthermore on newer kernels which do not credit entropy added from
userspace, the operation is often an uninitialized read of urandom.
|
| |
|
| |
|
| |
|
|
|
|
|
|
| |
This breaks in certain combinations of echo command and standard
library, notably musl and bash builtin echo,
or coreutils echo + musl.
|
|
|
|
|
| |
This is what the random(4) manual page recommends, and hopefully should improve
entropy reading from /dev/{u,}random.
|
| |
|
| |
|
| |
|
| |
|
| |
|
|
|
|
| |
@chneukirchen.
|
|
- /etc/runit/functions: contains common functions to be used in core-services.
- /etc/runit/core-services: directory containing one-time tasks run in stage 1.
- Added LXC container detection to disable some core services.
This accidentally also fixes the issue of unicode not working in the active
TTY from stage 1.
|