mirror of
https://github.com/systemd/systemd
synced 2024-07-21 10:17:21 +00:00
921fc451cb
This renames systemd-boot-system-token.service to
systemd-boot-random-seed.service and conditions it less strictly.
Previously, the job of the service was to write a "system token" EFI
variable if it was missing. It called "bootctl --graceful random-seed"
for that. With this change we condition it more liberally: instead of
calling it only when the "system token" EFI variable isn't set, we call
it whenever a boot loader interface compatible boot loader is used. This
means, previously it was invoked on the first boot only: now it is
invoked at every boot.
This doesn#t change the command that is invoked. That's because
previously already the "bootctl --graceful random-seed" did two things:
set the system token if not set yet *and* refresh the random seed in the
ESP. Previousy we put the focus on the former, now we shift the focus to
the latter.
With this simple change we can replace the logic
f913c784ad added, but from a service that
can run much later and doesn't keep the ESP pinned.
35 lines
1.1 KiB
SYSTEMD
35 lines
1.1 KiB
SYSTEMD
# SPDX-License-Identifier: LGPL-2.1-or-later
|
|
#
|
|
# This file is part of systemd.
|
|
#
|
|
# systemd is free software; you can redistribute it and/or modify it
|
|
# under the terms of the GNU Lesser General Public License as published by
|
|
# the Free Software Foundation; either version 2.1 of the License, or
|
|
# (at your option) any later version.
|
|
|
|
[Unit]
|
|
Description=Load/Save OS Random Seed
|
|
Documentation=man:systemd-random-seed.service(8) man:random(4)
|
|
|
|
DefaultDependencies=no
|
|
RequiresMountsFor={{RANDOM_SEED}}
|
|
Conflicts=shutdown.target
|
|
After=systemd-remount-fs.service
|
|
Before=first-boot-complete.target shutdown.target
|
|
Wants=first-boot-complete.target
|
|
|
|
ConditionVirtualization=!container
|
|
ConditionPathExists=!/etc/initrd-release
|
|
|
|
[Service]
|
|
Type=oneshot
|
|
RemainAfterExit=yes
|
|
ExecStart={{ROOTLIBEXECDIR}}/systemd-random-seed load
|
|
ExecStop={{ROOTLIBEXECDIR}}/systemd-random-seed save
|
|
|
|
# This service waits until the kernel's entropy pool is initialized, and may be
|
|
# used as ordering barrier for service that require an initialized entropy
|
|
# pool. Since initialization can take a while on entropy-starved systems, let's
|
|
# increase the timeout substantially here.
|
|
TimeoutSec=10min
|