d872a9dbba
Drop default dependencies, haveged needs nothing but local sockets and /dev/random. The service file now mostly matches the upstream Fedora file, except a lot of isolation options have been dropped. The benefit for a completely controlled system is small, and those option would pull in dependencies, delaying entropy being filled up. Signed-off-by: Norbert Lange <nolange79@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
23 lines
714 B
Desktop File
23 lines
714 B
Desktop File
[Unit]
|
|
# inspiration from upstream init.d/service.fedora
|
|
Description=Entropy Daemon based on the HAVEGE algorithm
|
|
Documentation=man:haveged(8) http://www.issihosts.com/haveged/
|
|
DefaultDependencies=no
|
|
# This would wait for filesystems, but we only need /dev/random, which
|
|
# is certainly available after systemd initialised
|
|
# After=systemd-tmpfiles-setup-dev.service
|
|
Before=sysinit.target shutdown.target systemd-journald.service
|
|
|
|
[Service]
|
|
ExecStart=/usr/sbin/haveged -w 1024 -v 1 --Foreground
|
|
Restart=always
|
|
SuccessExitStatus=137 143
|
|
|
|
# Only simple isolation methods that don't pull in dependencies
|
|
CapabilityBoundingSet=CAP_SYS_ADMIN
|
|
SecureBits=noroot-locked
|
|
ProtectSystem=full
|
|
|
|
[Install]
|
|
WantedBy=sysinit.target
|