summaryrefslogtreecommitdiff
path: root/units/systemd-random-seed.service.in
Commit message (Collapse)AuthorAgeFilesLines
* units: skip some units in the initrdZbigniew Jędrzejewski-Szmek2021-05-221-0/+1
| | | | | | | | | | | | | | | | | I'm working on building initramfs images directly from normal packages, and it doesn't make sense for those units to be started. Pristine system rpms need to behave correctly as much as possible also in the initrd, and those units are enabled by the rpms. There usually isn't enough time for the timer to actually fire, but starting it gives a line on the console and generally looks confusing and sloppy. Flushing the journal means that its actually lost, since the real /var is not available yet. Another approach would be not enable those units, but right now they are statically enabled, and changing that would be more work, and doesn't really seem necessary, since the condition checks are very quick. Checking for /etc/initrd-release is the standard condition that the initrd units use, so let's do the same here.
* meson: use jinja2 for unit templatesZbigniew Jędrzejewski-Szmek2021-05-191-3/+3
| | | | | | | | | We don't need two (and half) templating systems anymore, yay! I'm keeping the changes minimal, to make the diff manageable. Some enhancements due to a better templating system might be possible in the future. For handling of '## ' — see the next commit.
* license: LGPL-2.1+ -> LGPL-2.1-or-laterYu Watanabe2020-11-091-1/+1
|
* units: order systemd-random-seed.service before first-boot-complete.targetHarald Seiler2020-10-191-1/+2
| | | | | | Ensure that systemd-random-seed.service has completed before marking a first boot as completed to guarantee that a saved seed will only be used after it has been initialized at least once.
* tree-wide: s/time-out/timeout/gZbigniew Jędrzejewski-Szmek2020-05-261-1/+1
| | | | See 3f9a0a522f2029e9295ea5e9984259022be88413 for justification.
* unit: drop Before=sysinit.target from systemd-random-seed.serviceYu Watanabe2019-08-051-1/+1
| | | | | | | | | | | | | Follow-up for 26ded55709947d936634f1de0f43dcf88f594621. The commit says, > Note that with this change sysinit.target (and thus early boot) is NOT systematically delayed until the entropy pool is initialized, But the dependency was not dropped. This was found by David Seifert (@SoapGentoo).
* random-seed: rework systemd-random-seed.service substantiallyLennart Poettering2019-07-251-1/+6
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This makes two major changes to the way systemd-random-seed operates: 1. We now optionally credit entropy if this is configured (via an env var). Previously we never would do that, with this change we still don't by default, but it's possible to enable this if people acknowledge that they shouldn't replicate an image with a contained random seed to multiple systems. Note that in this patch crediting entropy is a boolean thing (unlike in previous attempts such as #1062), where only a relative amount of bits was credited. The simpler scheme implemented here should be OK though as the random seeds saved to disk are now written only with data from the kernel's entropy pool retrieved after the pool is fully initialized. Specifically: 2. This makes systemd-random-seed.service a synchronization point for kernel entropy pool initialization. It was already used like this, for example by systemd-cryptsetup-generator's /dev/urandom passphrase handling, with this change it explicitly operates like that (at least systems which provide getrandom(), where we can support this). This means services that rely on an initialized random pool should now place After=systemd-random-seed.service and everything should be fine. Note that with this change sysinit.target (and thus early boot) is NOT systematically delayed until the entropy pool is initialized, i.e. regular services need to add explicit ordering deps on this service if they require an initialized random pool. Fixes: #4271 Replaces: #10621 #4513
* Add SPDX license headers to unit filesZbigniew Jędrzejewski-Szmek2017-11-191-0/+2
|
* units: do not start load-random-seed in containers (#3941)Zbigniew Jędrzejewski-Szmek2016-08-131-0/+1
| | | | | Random numbers are provided by the host kernel, we don't need to do anything. https://bugzilla.redhat.com/show_bug.cgi?id=1329124
* units: specify timeouts for more oneshot servicesZbigniew Jędrzejewski-Szmek2015-04-281-0/+1
| | | | | | | | | Even trivial service occasionally get stuck, for example when there's a problem with the journal. There's nothing more annoying that looking at the cylon eye for a job with an infinite timeout. Use standard 90s for jobs that do some work, and 30s for those which should be almost instantenous.
* readahead: wipe out readaheadDaniel Buch2014-09-251-1/+1
|
* Fix obsolete references to systemd-random-seed-load.serviceEelco Dolstra2013-09-231-1/+1
| | | | | This service was merged with systemd-random-seed-save.service in c35b956d34bbb8bb208e49e45de2c103ca11911c.
* units: rework systemd-random-seed-{load,save}.service to be a single serviceLennart Poettering2013-05-151-0/+21
That way ordering it with MountsRequiredFor= works properly, as this no longer results in mount units start requests to be added to the shutdown transaction that conflict with stop requests for the same unit.