rng-tools/rngd-wake-threshold.service

[Unit]
Description=Hardware RNG Entropy Gatherer Wake threshold service
ConditionVirtualization=!container
Before=rngd.service

[Service]
CapabilityBoundingSet=CAP_SYS_ADMIN
AmbientCapabilities=CAP_SYS_ADMIN
Type=oneshot
RemainAfterExit=yes
ExecStart=/bin/sh -c "PSIZE=$(cat /proc/sys/kernel/random/poolsize); let THRESH=$PSIZE*3/4; echo $THRESH>/proc/sys/kernel/random/write_wakeup_threshold; udevadm trigger --sysname-match=hw_random --settle"

[Install]
WantedBy=sysinit.target
Allow rngd to run as non-privledged user Resolves: rhbz#1965318 Signed-off-by: Vladis Dronov <vdronov@redhat.com> 2021-05-27 15:16:17 +00:00			`[Unit]`
			`Description=Hardware RNG Entropy Gatherer Wake threshold service`
Fix a lock up in a container due to udevadm call Adjust rngd-wake-threshold.service and post section so udevadm is not run in a container. Resolves: rhbz#1975588 Signed-off-by: Vladis Dronov <vdronov@redhat.com> 2021-07-22 12:36:36 +00:00			`ConditionVirtualization=!container`
Allow rngd to run as non-privledged user Resolves: rhbz#1965318 Signed-off-by: Vladis Dronov <vdronov@redhat.com> 2021-05-27 15:16:17 +00:00			`Before=rngd.service`

			`[Service]`
			`CapabilityBoundingSet=CAP_SYS_ADMIN`
			`AmbientCapabilities=CAP_SYS_ADMIN`
			`Type=oneshot`
			`RemainAfterExit=yes`
Fix /dev/hwrng permissions issue Resolves: rhbz#1965318 Signed-off-by: Vladis Dronov <vdronov@redhat.com> 2021-05-27 17:45:48 +00:00			`ExecStart=/bin/sh -c "PSIZE=$(cat /proc/sys/kernel/random/poolsize); let THRESH=$PSIZE*3/4; echo $THRESH>/proc/sys/kernel/random/write_wakeup_threshold; udevadm trigger --sysname-match=hw_random --settle"`
Allow rngd to run as non-privledged user Resolves: rhbz#1965318 Signed-off-by: Vladis Dronov <vdronov@redhat.com> 2021-05-27 15:16:17 +00:00
			`[Install]`
			`WantedBy=sysinit.target`