From 87044318e9acb741e1b74767f30cc4ae802ed398 Mon Sep 17 00:00:00 2001 From: "Jason A. Donenfeld" Date: Fri, 25 Mar 2022 21:37:44 -0600 Subject: Use seedrng for seeding the random number generator The RNG can't actually be seeded from a shell script, due to the reliance on ioctls. For this reason, the seedrng project provides a basic script meant to be copy and pasted into projects like void-runit and tweaked as needed: . This commit imports it into void-runit and wires up the init scripts to call it. This also is a significant improvement over the current init script, which fails to remove seed files that have already been used, or to ratchet them forward. --- 3 | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) (limited to '3') diff --git a/3 b/3 index 4a4781e..726d26a 100755 --- a/3 +++ b/3 @@ -15,8 +15,7 @@ sv exit /var/service/* [ -x /etc/rc.shutdown ] && /etc/rc.shutdown if [ -z "$VIRTUALIZATION" ]; then - msg "Saving random seed..." - ( umask 077; bytes=$(cat /proc/sys/kernel/random/poolsize) || bytes=512; dd if=/dev/urandom of=/var/lib/random-seed count=1 bs=$bytes >/dev/null 2>&1 ) + seedrng fi if [ -z "$VIRTUALIZATION" -a -n "$HARDWARECLOCK" ]; then -- cgit 1.4.1