From 03ac49f64ed396bb2b62194e138f9ad4d3a94242 Mon Sep 17 00:00:00 2001 From: Kristian Klausen Date: Fri, 5 Feb 2021 11:08:54 +0100 Subject: [PATCH] Remove haveged haveged was added 8 years ago[1] to increase entropy and presumably to prevent entropy starvation. A few things has changed since, most notable: * the kernel actively tries to add entropy (jitter entropy)[2][3][4][5] * /dev/random no longer blocks after CRNG initialization[6][7] [1] d7e790d ("Initialize pacman keyring on bootup") [2] https://github.com/torvalds/linux/commit/3f2dc2798b81531fd93a3b9b7c39da47ec689e55 [3] https://github.com/torvalds/linux/commit/50ee7529ec4500c88f8664560770a7a1b65db72b [4] https://lore.kernel.org/lkml/alpine.DEB.2.21.1909290010500.2636@nanos.tec.linutronix.de/T/ [5] https://lwn.net/Articles/800509/ [6] https://github.com/torvalds/linux/commit/30c08efec8884fb106b8e57094baa51bb4c44e32 [7] https://lwn.net/Articles/808575/ Fix #98 --- configs/releng/airootfs/etc/systemd/system/pacman-init.service | 2 -- configs/releng/packages.x86_64 | 1 - 2 files changed, 3 deletions(-) diff --git a/configs/releng/airootfs/etc/systemd/system/pacman-init.service b/configs/releng/airootfs/etc/systemd/system/pacman-init.service index 3adec4c..b442641 100644 --- a/configs/releng/airootfs/etc/systemd/system/pacman-init.service +++ b/configs/releng/airootfs/etc/systemd/system/pacman-init.service @@ -3,8 +3,6 @@ [Unit] Description=Initializes Pacman keyring -Wants=haveged.service -After=haveged.service Requires=etc-pacman.d-gnupg.mount After=etc-pacman.d-gnupg.mount diff --git a/configs/releng/packages.x86_64 b/configs/releng/packages.x86_64 index 4539067..d20a223 100644 --- a/configs/releng/packages.x86_64 +++ b/configs/releng/packages.x86_64 @@ -33,7 +33,6 @@ gpart gpm gptfdisk grml-zsh-config -haveged hdparm intel-ucode ipw2100-fw