diff options
author | Daniel Frank <git@danielfrank.net> | 2019-10-18 00:53:48 +0200 |
---|---|---|
committer | Daniel Frank <git@danielfrank.net> | 2020-02-08 12:26:09 +0100 |
commit | 1ac86e14c746140a7fa9a6e81a3471739655366b (patch) | |
tree | 65961a8b52a0794cac6d51696deb1de7b4fd0138 /nixos/modules/config | |
parent | 2de41ccab3e13f7c8b218a6149bb41473ff78fe6 (diff) |
swap: depend on rngd if enabled and randomEncryption is configured to
avoid entropy starvation during boot
Diffstat (limited to 'nixos/modules/config')
-rw-r--r-- | nixos/modules/config/swap.nix | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/nixos/modules/config/swap.nix b/nixos/modules/config/swap.nix index d0fc0d4a3ea4..adb4e2294213 100644 --- a/nixos/modules/config/swap.nix +++ b/nixos/modules/config/swap.nix @@ -185,6 +185,8 @@ in { description = "Initialisation of swap device ${sw.device}"; wantedBy = [ "${realDevice'}.swap" ]; before = [ "${realDevice'}.swap" ]; + # If swap is encrypted, depending on rngd resolves a possible entropy starvation during boot + after = mkIf (config.security.rngd.enable && sw.randomEncryption.enable) [ "rngd.service" ]; path = [ pkgs.utillinux ] ++ optional sw.randomEncryption.enable pkgs.cryptsetup; script = |