Haveged is broken no idea for how long ago it broke?

[robin0800]

haveged.service has this line in it

“ConditionKernelVersion=<5.6” this stops any kernel > 5.6 being used.

Have raised an issue at

Haveged wont run with newer kernels

[bogdancovaciu]

You don’t need it with kernels above 5.4 > 5.6, as is stated on their github:

IMPORTANT UPDATE

Starting from Linux kernel v5.4, the HAVEGED inspired algorithm has been included in the Linux kernel (see the LKML article and the Linux Kernel commit). Additionally, since v5.6, as soon as the CRNG (the Linux cryptographic-strength random number generator) gets ready, /dev/random does not block on reads anymore (see this commit).

And also:
With this commit, the overall entropy pool size has been reduced to 256 instead of 4096 like it was before:

cat /proc/sys/kernel/random/poolsize
256

and

cat /proc/sys/kernel/random/entropy_avail
256

Plus, for better understanding:

Low entropy on my system

This happened because of changes in Linux 5.18 to RNG’s crypto and backports to older LTS Kernels. Basically the entropy_avail number is now meaningless. But I don’t have any real inside in how it’s now working. The changes can be found here. https://kernelnewbies.org/Linux_5.18#Security If you search with “linux 5.18 entropy_avail” you might find more information on the internet.

[robin0800]

@bogdancovaciu

cat /proc/sys/kernel/random/entropy_avail

Unfortunately haveged is required by manjaro-tools.git
I wonder if this should be removed @philm

[Yochanan]

Please create an issue.

EDIT: There’s already an existing issue.

haveged should probably be an optional dependency like it is for pacman.

[robin0800]

Done, but the same point was raised 5 months ago.
Not much point to make it optional as systemd stops it starting if your are running a kernel that is newer than 5.6.

[freggel.doe]

@robin0800

Not much point to make it optional as systemd stops it starting if your are running a kernel that is newer than 5.6.

On the other hand: not much point in requiring the installation of a package if it’s not needed (on systems using kernels > 5.6)…