Skip to content

Commit a2989df

Browse files
authored
unixPB: Install rng-tools to fix low entropy (#3145)
1 parent 73c8e04 commit a2989df

File tree

5 files changed

+80
-0
lines changed

5 files changed

+80
-0
lines changed

ansible/playbooks/AdoptOpenJDK_Unix_Playbook/main.yml

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -141,3 +141,4 @@
141141
- role: logs
142142
position: "End"
143143
tags: always
144+
- rngd
Lines changed: 19 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,19 @@
1+
---
2+
- name: Install the rng-tools package (Fedora)
3+
package:
4+
name: rng-tools
5+
state: latest
6+
7+
- name: Update the rngd.service file (Fedora)
8+
ini_file:
9+
path: /usr/lib/systemd/system/rngd.service
10+
section: service
11+
option: ExecStart
12+
value: "/sbin/rngd -f -r /dev/urandom -o /dev/random"
13+
backup: yes
14+
15+
- name: Start and enable "rngd" service (Fedora)
16+
service:
17+
name: rngd
18+
state: started
19+
enabled: yes
Lines changed: 22 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,22 @@
1+
---
2+
################
3+
# rng daemon #
4+
################
5+
- name: Install rng-tools and start service
6+
tags: rngd
7+
block:
8+
- name: Install rng-tools and start rng-tools.service (Ubuntu)
9+
include_tasks: ubuntu.yml
10+
when:
11+
- ansible_distribution == "Ubuntu" and ansible_distribution_major_version < "21"
12+
13+
- name: Install rng-tools and start rngd (Fedora)
14+
include_tasks: fedora.yml
15+
when:
16+
- (ansible_distribution == "RedHat" and ansible_distribution_major_version <= "8") or
17+
(ansible_distribution == "CentOS" and ansible_distribution_major_version <= "8")
18+
19+
- name: Install rng-tools and start rng-tools.service (SLES)
20+
include_tasks: sles.yml
21+
when:
22+
- ansible_distribution == "SLES" and ansible_distribution_major_version <= "12"
Lines changed: 19 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,19 @@
1+
---
2+
- name: Install the rng-tools package (SLES)
3+
package:
4+
name: rng-tools
5+
state: latest
6+
7+
- name: Update the rng-tools.service file (SLES)
8+
ini_file:
9+
path: /usr/lib/systemd/system/rng-tools.service
10+
section: service
11+
option: ExecStart
12+
value: "usr/sbin/rngd -f -r /dev/urandom -o /dev/random"
13+
backup: yes
14+
15+
- name: Start and enable "rng-tools" service (SLES)
16+
service:
17+
name: rng-tools
18+
state: started
19+
enabled: yes
Lines changed: 19 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,19 @@
1+
---
2+
- name: Install the rng-tools package (Ubuntu)
3+
package:
4+
name: rng-tools
5+
state: latest
6+
7+
- name: Update the rng-tools defaults file (Ubuntu)
8+
lineinfile:
9+
dest: '/etc/default/rng-tools'
10+
regexp: '^HRNGDEVICE=/dev/urandom'
11+
mode: '0644'
12+
insertafter: '^#HRNGDEVICE=/dev/null'
13+
line: 'HRNGDEVICE=/dev/urandom'
14+
15+
- name: Start and enable "rngd" service (Ubuntu)
16+
systemd:
17+
name: rng-tools.service
18+
state: started
19+
enabled: yes

0 commit comments

Comments
 (0)