Bug 2181541

Summary:	[RHEL9] dracut should update rngd initramfs service file
Product:	Red Hat Enterprise Linux 9	Reporter:	Vladis Dronov <vdronov>
Component:	dracut	Assignee:	Pavel Valena <pvalena>
Status:	CLOSED ERRATA	QA Contact:	Frantisek Sumsal <fsumsal>
Severity:	medium	Docs Contact:
Priority:	unspecified
Version:	9.2	CC:	dtardon, fsumsal, pvalena
Target Milestone:	rc	Keywords:	Triaged
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:	dracut-057-38.git20230725.el9	Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2023-11-07 08:54:58 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Vladis Dronov 2023-03-24 13:25:07 UTC

dracut should update rngd initramfs service file with the latest rng-tools updates including a FIPS one:

/usr/lib/dracut/modules.d/06rngd/rngd.service

$ rpm -qf /usr/lib/dracut/modules.d/06rngd/rngd.service 
dracut-057-3.fc36.x86_64

please see details in: bz2154804#c8

the new file content should be:

[Unit]
Description=Hardware RNG Entropy Gatherer Daemon
DefaultDependencies=no
Before=systemd-udevd.service
ConditionVirtualization=!container
ConditionKernelCommandLine=!fips=1

[Service]
Type=simple
ExecStart=/usr/sbin/rngd -f --fill-watermark=0 -x pkcs11 -x nist -x qrypt

Comment 1 Vladis Dronov 2023-03-24 13:31:09 UTC

this pack of dracut bzs:
fedora: https://bugzilla.redhat.com/show_bug.cgi?id=2181540
rhel9: https://bugzilla.redhat.com/show_bug.cgi?id=2181541
rhel8: https://bugzilla.redhat.com/show_bug.cgi?id=2181543

Comment 2 David Tardon 2023-05-17 08:11:41 UTC

No. A unit file should only be duplicated in dracut if there's no other way. We want less divergence from the real system, not more. There's nothing initrd-specific in the unit file you propose, hence it should just be copied from the system.

Comment 3 Vladis Dronov 2023-05-17 11:01:58 UTC

i was not sure if there's some specific requirements/restrictions for unit files for initrd/dracut. 
if there's none, then great, please, copy it from the system.

Comment 4 Pavel Valena 2023-07-19 08:41:28 UTC

Setting ITM 26 as agreed with QE.

Comment 5 Pavel Valena 2023-07-24 10:28:31 UTC

Testd & created PR: https://github.com/redhat-plumbers/dracut-rhel9/pull/64

Comment 9 errata-xmlrpc 2023-11-07 08:54:58 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (dracut bug fix and enhancement update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2023:6654