diff --git a/Makefile b/Makefile index 76e3bc1..53c872c 100644 --- a/Makefile +++ b/Makefile @@ -287,11 +287,6 @@ else install -m 0644 misc/py2/qubesxdg.py* $(DESTDIR)/$(PYTHON2_SITELIB)/ endif -ifneq (,$(filter xenial stretch, $(shell lsb_release -cs))) - mkdir -p $(DESTDIR)/etc/systemd/system/ - install -m 0644 vm-systemd/haveged.service $(DESTDIR)/etc/systemd/system/ -endif - install -d $(DESTDIR)/mnt/removable install -D -m 0644 misc/xorg-preload-apps.conf $(DESTDIR)/etc/X11/xorg-preload-apps.conf @@ -318,5 +313,7 @@ install-deb: install-common install-systemd install-systemd-dropins install -d $(DESTDIR)/etc/needrestart/conf.d install -D -m 0644 misc/50_qubes.conf $(DESTDIR)/etc/needrestart/conf.d/50_qubes.conf + mkdir -p $(DESTDIR)/etc/systemd/system/ + install -m 0644 vm-systemd/haveged.service $(DESTDIR)/etc/systemd/system/ install-vm: install-rh install-common diff --git a/debian/qubes-core-agent.install b/debian/qubes-core-agent.install index 7967db1..b4a6e01 100644 --- a/debian/qubes-core-agent.install +++ b/debian/qubes-core-agent.install @@ -43,6 +43,7 @@ etc/sudoers.d/qubes etc/sudoers.d/umask etc/sysctl.d/20_tcp_timestamps.conf etc/sysctl.d/80-qubes.conf +etc/systemd/system/haveged.service etc/tinyproxy/tinyproxy-updates.conf etc/tinyproxy/updates-blacklist etc/udev/rules.d/50-qubes-misc.rules diff --git a/vm-systemd/haveged.service b/vm-systemd/haveged.service index e0b8fc6..6dea9b4 100644 --- a/vm-systemd/haveged.service +++ b/vm-systemd/haveged.service @@ -1,22 +1,5 @@ -[Unit] -Description=Entropy daemon using the HAVEGE algorithm -Documentation=man:haveged(8) http://www.issihosts.com/haveged/ -DefaultDependencies=no -ConditionVirtualization=!container -After=apparmor.service systemd-random-seed.service systemd-tmpfiles-setup.service - -[Service] -EnvironmentFile=/etc/default/haveged -ExecStart=/usr/sbin/haveged --Foreground --verbose=1 $DAEMON_ARGS -SuccessExitStatus=143 -SecureBits=noroot-locked -NoNewPrivileges=yes -CapabilityBoundingSet=CAP_SYS_ADMIN -PrivateTmp=yes -PrivateDevices=yes -PrivateNetwork=yes -ProtectSystem=full -ProtectHome=yes +.include /lib/systemd/system/haveged.service [Install] +WantedBy= WantedBy=multi-user.target