From nobody Thu May 16 17:25:19 2024 X-Original-To: dev-commits-src-all@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4VgH6S0ns9z5LZts; Thu, 16 May 2024 17:25:20 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4VgH6S0D64z4QFf; Thu, 16 May 2024 17:25:20 +0000 (UTC) (envelope-from git@FreeBSD.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1715880320; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=lWbV0UcM6mBBrMqJs4uEviuQoOkC0WvurOvoDz+gpK8=; b=R7h4OM16Yjg5T6EpBWwf4NTSV4QIPGmafkS6jRbIlrwZYYIaFS+N3o6A0qE6gDXOOYlUSQ TYe7sKMT3E0m1xzkOpE0kvqjeUveLxvIE9My4bArdjpJ3USOsEFHUi3DfYcl3DFZGBUP6Z kTpEN2WyWJ3nYOrKxIB0xJXV7AdhgHlw3HicPZLYWYIqI6bkP+A7+JHf0WelOo5qw7VJbF +gnmJcSXBpl7350c8Afid7B/72BS3h5L9xINDf4GY+Sj17J16/LopHpjVSsIurKXuiKvj8 AEhGCq/d0JxMHCdBzzYxph6OnVAcC8OXgfAeBjnP9VduAGoE6xpDUWCuj2Ix3w== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1715880320; a=rsa-sha256; cv=none; b=Oie03dEcgNpn2XkLMBM5oYisKUrzGLMShrKSoAaMx0zie48KvciFZQ3Fb/dCFBH+Qxbnb9 tumdpyjw9FDEavhJ0AJHCaUJtWn0nfx/bIMHbS188MCqxURUdaRg//pLelAiPkhLEXQxvu KGO/0kw0N+63WS7xIh6qy7Cc2XDqw69CcU1lw1hvzHo4rr48q+7n7zpxAUJ/ujDakG331X Dlw3RnJM8vZGtVzv5KAYtJ3qZdaxjw/vH26iNd6IuxD3wF+S17BRETYgDAQWNXVHhLL9lr 7yN2W2nEJEanSk/9Y79882RLkqa/L4ApN+3V9Vh6/33Jm+5k1XqEohxBZYCmYQ== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1715880320; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=lWbV0UcM6mBBrMqJs4uEviuQoOkC0WvurOvoDz+gpK8=; b=Mp8NAOm0WGSSmh0rDCeAcC0ZWEDkcqicV3sgR9bXj83yFkB7mMSMil2EeUib0/dBJ7lyeE uKymwh1M2OjNDuMJKQw4I9/rrnm8gagSfWjcVgCYzwAwMrcOCy5QIKTJUjNwWeuGVPRp1E /pLqeK1D67Bv3CTRaeVY+iDmpymQ5MOVwKf43XywIUL3HvLN2YK19pvNYB/5G/Ee9HG5rw /jMl8is5fwolcbSPR0i+fKbACuL/hN0trngJrTuUr7ksYewaQPHYn0enT0BL6MHV3gNTz4 u7kU+EQ/Ermlj5lrrCb4cgsWb/Vrjo3TAnoPB2e1EClI34kreROyEleSBlQdUw== Received: from gitrepo.freebsd.org (gitrepo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:5]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4VgH6R6xGVz17Jt; Thu, 16 May 2024 17:25:19 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from gitrepo.freebsd.org ([127.0.1.44]) by gitrepo.freebsd.org (8.17.1/8.17.1) with ESMTP id 44GHPJIs053329; Thu, 16 May 2024 17:25:19 GMT (envelope-from git@gitrepo.freebsd.org) Received: (from git@localhost) by gitrepo.freebsd.org (8.17.1/8.17.1/Submit) id 44GHPJQP053326; Thu, 16 May 2024 17:25:19 GMT (envelope-from git) Date: Thu, 16 May 2024 17:25:19 GMT Message-Id: <202405161725.44GHPJQP053326@gitrepo.freebsd.org> To: src-committers@FreeBSD.org, dev-commits-src-all@FreeBSD.org, dev-commits-src-branches@FreeBSD.org From: Mitchell Horne Subject: git: 8930e7d8ea4d - releng/14.1 - save-entropy: Add manual page List-Id: Commit messages for all branches of the src repository List-Archive: https://lists.freebsd.org/archives/dev-commits-src-all List-Help: List-Post: List-Subscribe: List-Unsubscribe: X-BeenThere: dev-commits-src-all@freebsd.org Sender: owner-dev-commits-src-all@FreeBSD.org MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit X-Git-Committer: mhorne X-Git-Repository: src X-Git-Refname: refs/heads/releng/14.1 X-Git-Reftype: branch X-Git-Commit: 8930e7d8ea4dc0ec34c6d2f7db5a7c7746997b8f Auto-Submitted: auto-generated The branch releng/14.1 has been updated by mhorne: URL: https://cgit.FreeBSD.org/src/commit/?id=8930e7d8ea4dc0ec34c6d2f7db5a7c7746997b8f commit 8930e7d8ea4dc0ec34c6d2f7db5a7c7746997b8f Author: Fernando Apesteguía AuthorDate: 2023-09-07 08:28:43 +0000 Commit: Mitchell Horne CommitDate: 2024-05-16 17:24:30 +0000 save-entropy: Add manual page Succinct manual page for save-entropy(8). PR: 223998 Reported by: AJ Jordan Reviewed by: carlavilla@, delphij@, lwhsu@, pauamma_gundo.com Approved by: delphi, lwhsu (src) Differential Revision: https://reviews.freebsd.org/D41768 (cherry picked from commit 8dc9b10e388da19d63b3dd718a8243e8e969091d) (cherry picked from commit 227f81c8bd0f60176519276839b24b468afce0bc) Approved by: re (cperciva) --- libexec/save-entropy/Makefile | 1 + libexec/save-entropy/save-entropy.8 | 97 +++++++++++++++++++++++++++++++++++++ 2 files changed, 98 insertions(+) diff --git a/libexec/save-entropy/Makefile b/libexec/save-entropy/Makefile index 1c7eabf36c7f..0c541606411f 100644 --- a/libexec/save-entropy/Makefile +++ b/libexec/save-entropy/Makefile @@ -1,4 +1,5 @@ SCRIPTS= save-entropy.sh +MAN= save-entropy.8 .include diff --git a/libexec/save-entropy/save-entropy.8 b/libexec/save-entropy/save-entropy.8 new file mode 100644 index 000000000000..f7a93c8866fc --- /dev/null +++ b/libexec/save-entropy/save-entropy.8 @@ -0,0 +1,97 @@ +.\" +.\" SPDX-License-Identifier: BSD-2-Clause +.\" +.\" Copyright (c) 2023 Fernando Apesteguia +.\" +.\" Redistribution and use in source and binary forms, with or without +.\" modification, are permitted provided that the following conditions +.\" are met: +.\" 1. Redistributions of source code must retain the above copyright +.\" notice, this list of conditions and the following disclaimer. +.\" 2. Redistributions in binary form must reproduce the above copyright +.\" notice, this list of conditions and the following disclaimer in the +.\" documentation and/or other materials provided with the distribution. +.\" +.\" THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND +.\" ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE +.\" IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE +.\" ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE +.\" FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL +.\" DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS +.\" OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) +.\" HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT +.\" LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY +.\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF +.\" SUCH DAMAGE. +.\" +.Dd September 18, 2023 +.Dt SAVE-ENTROPY 8 +.Os +.Sh NAME +.Nm save-entropy +.Nd Save bits of entropy to feed /dev/random at startup +.Sh SYNOPSIS +.Nm save-entropy +.Sh DESCRIPTION +The +.Nm +command is used to save entropy data from +.Pa /dev/random +to files in a specified output location. +The files saved are used at startup to provide additional entropy for +.Pa /dev/random . +The output file will be different in every invocation until the maximum number +of different files is reached. +(See +.Em entropy_save_num +for details). +By default this script is invoked via +.Xr cron 8 +every eleven minutes approximately. +.Pp +This command does nothing if executed inside a +.Xr jail 8 . +.Pp +Three variables in +.Pa /etc/rc.conf +regulate the behavior of the script: +.Bl -tag -width Ds +.It Va entropy_dir +Specify the directory for saved entropy files. +Defaults to +.Pa /var/db/entropy . +If set to "NO" it disables caching entropy via +.Xr cron 8 . +This setting is shared with +.Pa /etc/rc.d/random . +.It Va entropy_save_sz +Size of the entropy cache files. +Defaults to 4096. +.It Va entropy_save_num +Number of entropy cache files to save. +Defaults to 8. +.El +.Sh FILES +.Bl -tag -width Ds +.It Pa /etc/rc.conf +.El +.Sh EXIT STATUS +.Ex -std +Errors will be recorded in the system log. +.Sh SEE ALSO +.Xr syslog 3 , +.Xr random 4 , +.Xr rc.conf 5 , +.Xr cron 8 +.Sh HISTORY +The +.Nm +command first appeared in +.Fx 5.0 . +.Sh AUTHORS +The +.Nm +command was originally written by +.An Doug Barton . +This manual page was written by +.An Fernando Apesteguia .