summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
-rw-r--r--.gitignore1
-rw-r--r--manifests/init.pp51
-rw-r--r--templates/rng-tools.erb19
3 files changed, 71 insertions, 0 deletions
diff --git a/.gitignore b/.gitignore
new file mode 100644
index 0000000..1377554
--- /dev/null
+++ b/.gitignore
@@ -0,0 +1 @@
+*.swp
diff --git a/manifests/init.pp b/manifests/init.pp
new file mode 100644
index 0000000..e6494e9
--- /dev/null
+++ b/manifests/init.pp
@@ -0,0 +1,51 @@
+# This module is distributed under the GNU Affero General Public License:
+#
+# rng-tools module for puppet
+# Copyright (C) 2009 Sarava Group
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU Affero General Public License as
+# published by the Free Software Foundation, either version 3 of the
+# License, or any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU Affero General Public License for more details.
+#
+# You should have received a copy of the GNU Affero General Public License
+# along with this program. If not, see <http://www.gnu.org/licenses/>.
+
+class rng_tools {
+
+ # Warning: do not set device do /dev/urandom, see
+ # http://bugs.gentoo.org/292239
+ case $rng_tools_device {
+ '': { $rng_tools_device = '/dev/hwrng' }
+ }
+
+ case $rng_tools_options {
+ '': { $rng_tools_options = '' }
+ }
+
+ # The needed packages
+ package { [ "rng-tools", "israndom" ]:
+ ensure => installed,
+ }
+
+ file { "/etc/default/rng-tools":
+ ensure => present,
+ owner => root,
+ group => root,
+ mode => 0644,
+ notify => Service["rng-tools"],
+ content => template('rng_tools/default/rng-tools.erb'),
+ }
+
+ service { "rng-tools":
+ enable => true,
+ ensure => running,
+ hasrestart => true,
+ require => [ File["/etc/default/rng-tools"], Package["rng-tools"] ],
+ }
+}
diff --git a/templates/rng-tools.erb b/templates/rng-tools.erb
new file mode 100644
index 0000000..fa0a8d7
--- /dev/null
+++ b/templates/rng-tools.erb
@@ -0,0 +1,19 @@
+# Configuration for the rng-tools initscript
+# $Id: rng-tools.default,v 1.1.2.5 2008-06-10 19:51:37 hmh Exp $
+
+# This is a POSIX shell fragment
+
+# Set to the input source for random data, leave undefined
+# for the initscript to attempt auto-detection. Set to /dev/null
+# for the viapadlock driver.
+#HRNGDEVICE=/dev/hwrng
+#HRNGDEVICE=/dev/null
+HRNGDEVICE=<%= rng_tools_device %>
+
+# Additional options to send to rngd. See the rngd(8) manpage for
+# more information. Do not specify -r/--rng-device here, use
+# HRNGDEVICE for that instead.
+#RNGDOPTIONS="--hrng=intelfwh --fill-watermark=90% --feed-interval=1"
+#RNGDOPTIONS="--hrng=viakernel --fill-watermark=90% --feed-interval=1"
+#RNGDOPTIONS="--hrng=viapadlock --fill-watermark=90% --feed-interval=1"
+RNGDOPTIONS="<%= rng_tools_options %>"