commit f155ae804a185c3c7b3ab4b0de2fe8af89e5327e · pyrox.dev/nixpkgs

+4 -7
nixos/modules/services/security/haveged.nix
···

       4
       4
        
         pkgs,

     

       5
       5
        
         ...

     

       6
       6
        
       }:

     

       7
       7
       -
       

     

       8
       8
       -
       with lib;

     

       9
       9
       -
       

     

       10
       7
        
       let

     

       11
       8
        
         cfg = config.services.haveged;

     

       12
       9
        
       

     
···

       20
       17
        
       

     

       21
       18
        
           services.haveged = {

     

       22
       19
        
       

     

       23
       23
       -
             enable = mkEnableOption ''

     

       20
       20
       +
             enable = lib.mkEnableOption ''

     

       24
       21
        
               haveged entropy daemon, which refills /dev/random when low.

     

       25
       22
        
               NOTE: does nothing on kernels newer than 5.6

     

       26
       23
        
             '';

     

       27
       24
        
             # source for the note https://github.com/jirka-h/haveged/issues/57

     

       28
       25
        
       

     

       29
       29
       -
             refill_threshold = mkOption {

     

       30
       30
       -
               type = types.int;

     

       26
       26
       +
             refill_threshold = lib.mkOption {

     

       27
       27
       +
               type = lib.types.int;

     

       31
       28
        
               default = 1024;

     

       32
       29
        
               description = ''

     

       33
       30
        
                 The number of bits of available entropy beneath which

     
···

       39
       36
        
       

     

       40
       37
        
         };

     

       41
       38
        
       

     

       42
       42
       -
         config = mkIf cfg.enable {

     

       39
       39
       +
         config = lib.mkIf cfg.enable {

     

       43
       40
        
       

     

       44
       41
        
           # https://github.com/jirka-h/haveged/blob/a4b69d65a8dfc5a9f52ff8505c7f58dcf8b9234f/contrib/Fedora/haveged.service

     

       45
       42
        
           systemd.services.haveged = {