• Overview
• Module Description
• Setup
  • Setup Requirements
  • Beginning with haveged
• Usage
  • Use a higher threshold of available entropy
• Reference
  • Facts
    • Fact: haveged_startup_provider
    • Fact: haveged__rhgd_enabled
• Development

Install and manage the HAVEGE daemon, haveged.

By default, the module will configure, but not enable haveged if rngd is running on the target system. While there is generally no harm in running two entropy generators, it is not necessary and adds to the overall system load.

If you want to force haveged to run, set haveged::service::force_if_rngd_running: true in Hiera.

Only systemd-based systems are supported at this time.

The HAVEGE daemon provides a random number generator based on the HAVEGE (HArdware Volatile Entropy Gathering and Expansion) algorithm. This module provides a way of installing and setting up the daemon in your environment.

The haveged package is part of the EPEL yum repository, so this repository must be enabled on Enterprise Linux to be able to install the package.

Declare the haveged class to run the haveged daemon with the default parameters.

include 'haveged'

This installs the haveged package and starts the service using default parameters.

See the following sections for a detailed description of the available configuration options.

---
haveged::write_wakeup_threshold: 2048

See REFERENCE.md for additional API documentation.

This module provides the following facts.

The startup system used on the node. The implementation uses the process name of PID 1 to resolve the fact. The value is either systemd or init.

Returns true or false depending on whether or not rngd is enabled on the target system.

Feel free to send pull requests for new features and other operating systems.