Difference between revisions of "Haveged"

From ArchWiki
Jump to: navigation, search
m (Fix section header level. See Help:Style.)
(avoid duplication)
(2 intermediate revisions by 2 users not shown)
Line 11: Line 11:
  
 
==Installation==
 
==Installation==
Install the package as usually with pacman:
 
# pacman -Sy haveged
 
  
==systemd==
+
Install the {{pkg|haveged}} package from the [[official repositories]].
To start the service once, run:
+
# systemctl start haveged.service
+
  
You'll probably want it to run everytime your server boots up, so run:
+
==Service==
# systemctl enable haveged.service
+
  
==SysV init system==
+
The package provides {{ic|haveged.service}}, see [[systemd]] for details.
Run it once:
+
# /etc/rc.d/haveged start
+
 
+
To start the daemon every time you boot up, add
+
haveged
+
to your daemons array in [[rc.conf]].
+

Revision as of 06:16, 26 October 2012

The haveged project is an attempt to provide an easy-to-use, unpredictable random number generator based upon an adaptation of the HAVEGE algorithm. Haveged was created to remedy low-entropy conditions in the Linux random device that can occur under some workloads, especially on headless servers.[1]

List available entropy

If you're not sure, whether you need haveged, run:

# cat /proc/sys/kernel/random/entropy_avail

This command shows you how much entropy your server has collected. If it is rather low (<1000), you should probably install haveged. Otherwise cryptographic applications will block until there is enough entropy available, which eg. could result in slow wlan speed, if your server is a Software Access Point.

You should use this command again to verify how much haveged boosted your entropy pool after the installation.

Installation

Install the haveged package from the official repositories.

Service

The package provides haveged.service, see systemd for details.