1*4882a593Smuzhiyun[Unit] 2*4882a593Smuzhiyun# inspiration from upstream init.d/service.fedora 3*4882a593SmuzhiyunDescription=Entropy Daemon based on the HAVEGE algorithm 4*4882a593SmuzhiyunDocumentation=man:haveged(8) http://www.issihosts.com/haveged/ 5*4882a593SmuzhiyunDefaultDependencies=no 6*4882a593Smuzhiyun# This would wait for filesystems, but we only need /dev/random, which 7*4882a593Smuzhiyun# is certainly available after systemd initialised 8*4882a593Smuzhiyun# After=systemd-tmpfiles-setup-dev.service 9*4882a593SmuzhiyunBefore=sysinit.target shutdown.target systemd-journald.service 10*4882a593Smuzhiyun 11*4882a593Smuzhiyun[Service] 12*4882a593SmuzhiyunExecStart=/usr/sbin/haveged -w 1024 -v 1 --Foreground 13*4882a593SmuzhiyunRestart=always 14*4882a593SmuzhiyunSuccessExitStatus=137 143 15*4882a593Smuzhiyun 16*4882a593Smuzhiyun# Only simple isolation methods that don't pull in dependencies 17*4882a593SmuzhiyunCapabilityBoundingSet=CAP_SYS_ADMIN 18*4882a593SmuzhiyunSecureBits=noroot-locked 19*4882a593SmuzhiyunProtectSystem=full 20*4882a593Smuzhiyun 21*4882a593Smuzhiyun[Install] 22*4882a593SmuzhiyunWantedBy=sysinit.target 23