From 0ffa7466787a8177e46e7389c26fad227435b10b Mon Sep 17 00:00:00 2001 From: HW42 Date: Wed, 1 Jul 2015 19:41:07 +0200 Subject: [PATCH] qubes-random-seed: feed kernel rng with randomness from dom0 --- vm-systemd/qubes-random-seed.service | 10 ++++++++++ vm-systemd/qubes-random-seed.sh | 7 +++++++ 2 files changed, 17 insertions(+) create mode 100644 vm-systemd/qubes-random-seed.service create mode 100755 vm-systemd/qubes-random-seed.sh diff --git a/vm-systemd/qubes-random-seed.service b/vm-systemd/qubes-random-seed.service new file mode 100644 index 0000000..6db49b0 --- /dev/null +++ b/vm-systemd/qubes-random-seed.service @@ -0,0 +1,10 @@ +[Unit] +Description=Qubes Random Seed +DefaultDependencies=no +RequiresMountsFor=/proc/xen/ +After=qubes-db.service + +[Service] +Type=oneshot +RemainAfterExit=yes +ExecStart=/usr/lib/qubes/init/qubes-random-seed.sh diff --git a/vm-systemd/qubes-random-seed.sh b/vm-systemd/qubes-random-seed.sh new file mode 100755 index 0000000..78fddca --- /dev/null +++ b/vm-systemd/qubes-random-seed.sh @@ -0,0 +1,7 @@ +#!/bin/bash + +set -e +set -o pipefail + +qubesdb-read /qubes-random-seed | base64 -d > /dev/urandom +qubesdb-rm /qubes-random-seed