mirror of
https://gitlab.alpinelinux.org/alpine/aports.git
synced 2025-04-21 06:36:45 +02:00
Upgrade to 6.16. Create rngd user & group and change init.d script to tell rngd to drop privileges and switch to running as this user/group after initialisation. Add README.Alpine pointing out recent kernel changes make rngd redundant.
81 lines
1.8 KiB
Bash
81 lines
1.8 KiB
Bash
# Configuration for /etc/init.d/rngd
|
|
|
|
# Space-delimited list of entropy sources to enable.
|
|
# No need to include any source that is enabled by default.
|
|
#
|
|
# Choose from list:
|
|
# tpm: Is deprecated, will be removed in future version.
|
|
#
|
|
INCLUDE_ENTROPY_SOURCES=""
|
|
|
|
# Space-delimited list of entropy sources to disable.
|
|
# Useful for disabling certain entropy sources even when supported on system.
|
|
#
|
|
EXCLUDE_ENTROPY_SOURCES=""
|
|
|
|
|
|
# Number of entropy bits to support, 1 <= n <= 8.
|
|
#
|
|
#ENTROPY_COUNT=8
|
|
|
|
# Time in seconds to periodically add fresh entropy to kernel entropy pool.
|
|
#
|
|
#FORCE_RESEED=300
|
|
|
|
# Device used for random number input.
|
|
#
|
|
#HWRNG_DEVICE="/dev/hwrng"
|
|
|
|
# Kernel device used for random number output.
|
|
#
|
|
#RANDOM_DEVICE="/dev/random"
|
|
|
|
# Number of bytes written to random-device at a time.
|
|
#
|
|
#STEP=64
|
|
|
|
# Do not stop feeding entropy to random device until at least this
|
|
# many bits of entropy are available in pool. Value can be
|
|
# 0 <= n <= `sysctl kernel.random.poolsize` but is usually 75% of pool size.
|
|
#
|
|
#WATERMARK=192
|
|
|
|
|
|
# Entropy source specific options:
|
|
#
|
|
#
|
|
# darn options:
|
|
# use_aes:(BOOLEAN)
|
|
#
|
|
#DARN_OPTIONS="use_aes:1"
|
|
#
|
|
#
|
|
# jitter options:
|
|
# buffer_size:(INTEGER)
|
|
# force_soft_timer:(BOOLEAN)
|
|
# refill_thresh:(INTEGER)
|
|
# retry_count:(INTEGER)
|
|
# retry_delay:(INTEGER)
|
|
# thread_count:(INTEGER)
|
|
# use_aes:(BOOLEAN)
|
|
#
|
|
#JITTER_OPTIONS="buffer_size:16535 force_soft_timer:0 refill_thresh:16535"
|
|
#JITTER_OPTIONS="${JITTER_OPTIONS} retry_count:1 retry_delay:-1"
|
|
#JITTER_OPTIONS="${JITTER_OPTIONS} thread_count:4 timeout:5 use_aes:1"
|
|
#
|
|
#
|
|
# rdrand options:
|
|
# use_aes:(BOOLEAN)
|
|
#
|
|
#RDRAND_OPTIONS="use_aes:0"
|
|
#
|
|
#
|
|
# rndr options:
|
|
# use_aes:(BOOLEAN)
|
|
#
|
|
#RNDR_OPTIONS="use_aes:0"
|
|
|
|
|
|
# Any extra arguments for rngd
|
|
#
|
|
EXTRA_ARGS="-q"
|