From 677c9e95b331290fe09aa78ddd8fd6896dfce94d Mon Sep 17 00:00:00 2001 From: Guilhem Moulin Date: Sat, 4 Jan 2014 21:03:08 +0100 Subject: Install haveged. To avoid low-entropy conditions, see http://www.issihosts.com/haveged/ --- roles/common/tasks/haveged.yml | 5 +++++ roles/common/tasks/main.yml | 1 + 2 files changed, 6 insertions(+) create mode 100644 roles/common/tasks/haveged.yml diff --git a/roles/common/tasks/haveged.yml b/roles/common/tasks/haveged.yml new file mode 100644 index 0000000..3f03a28 --- /dev/null +++ b/roles/common/tasks/haveged.yml @@ -0,0 +1,5 @@ +- name: Install haveged + apt: pkg=haveged + +- name: Start haveged + service: name=haveged state=started diff --git a/roles/common/tasks/main.yml b/roles/common/tasks/main.yml index 8fbeb0c..55feff8 100644 --- a/roles/common/tasks/main.yml +++ b/roles/common/tasks/main.yml @@ -8,6 +8,7 @@ - include: clamav.yml tags=clamav - include: fail2ban.yml tags=fail2ban - include: smart.yml tags=smartmontools,smart +- include: haveged.yml tags=haveged,entropy - include: ipsec.yml tags=strongswan,ipsec - include: logging.yml tags=logging - include: ntp.yml tags=ntp -- cgit v1.2.3