haveged

Table of Contents

1. Overview
2. Module Description - What does the module do?
3. Setup - The basics of getting started with haveged
   • What haveged affects
   • Setup requirements
   • Beginning with haveged
4. Usage - Configuration options and additional functionality
5. Reference - An under-the-hood peek at what the module is doing and how
6. Limitations - OS compatibility, etc.
7. Development - Guide for contributing to the module

Overview

Install and manage the haveged daemon.

Module Description

The haveged daemon provides a random number generator based on the HAVEGE (HArdware Volatile Entropy Gathering and Expansion) algorithm. This module provides a way of installing and setting up the daemon in your environment.

Setup

What haveged affects

• package/service/configuration files for the haveged daemon

Setup Requirements

The haveged module requires the Puppetlabs modules stdlib.

Beginning with haveged

Declare the haveged class to install and run the haveged daemon with the default parameters.

class { 'haveged': }

This installs the haveged package and starts the service.

See the next sections for a detailed description of the available configuration options.

Usage

Use a higher threshold of available entropy

class { 'haveged':
  write_wakeup_threshold => '2048',
}

Reference

Classes

Public Classes

• haveged: The basic setup of the haveged daemon.

Private Classes

• haveged::config: Configures the haveged daemon by updating the run time parameters for the daemon.
• haveged::package: Installs the package.
• haveged::params: Manages the parameters
• haveged::service: Manages the haveged daemon.

Class: haveged

Main class, includes all other classes.

Parameters (all optional)

• buffer_size: Configure the collection buffer size. The value must be a string with a numeric value. It is interpreted as size in KB. Default: '128'

• data_cache_size: Set the data cache size. The value must be string with a numeric value. It is interpreted as size in KB. The default is '16' or as determined by the CPUID.

• instruction_cache_size: Set the instruction cache size. The value must be string with a numeric value. It is interpreted as size in KB. The default is '16'* or as determined by the CPUID.

• write_wakeup_threshold: Configure the threshold of available entropy. The daemon tries to keep the amount of available entropy below this amount of bits. The value must be string with a numeric value. Default: '1024'

• service_name: The name of the service to manage. Normally provided by the haveged::params class.

• service_enable: Whether the haveged service should be enabled to start at boot. Valued options: 'true', 'false'. Default: 'true'

• service_ensure: Whether the haveged service should be running. Valid options: 'stopped', 'false', 'running', 'true'. Default: 'running'

• package_name: The name of the package to manage. Normally provided by the haveged::params class.

• package_ensure: The state of the haveged package. Valid options: 'present', 'installed', 'absent', 'purged', 'held', 'latest' or a specific package version number. Default: 'present'

Limitations

The haveged package has been developed and tested on Debian 7 (Wheezy). More supported operating systems are planned in future releases.

Development

Feel free to send pull requests for new features and other operating systems.