Bug 2181543

Summary:	[RHEL8] dracut should update rngd initramfs service file
Product:	Red Hat Enterprise Linux 8	Reporter:	Vladis Dronov <vdronov>
Component:	dracut	Assignee:	Pavel Valena <pvalena>
Status:	CLOSED ERRATA	QA Contact:	Frantisek Sumsal <fsumsal>
Severity:	medium	Docs Contact:
Priority:	unspecified
Version:	8.8	CC:	dtardon, fsumsal, pvalena
Target Milestone:	rc	Keywords:	Triaged
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:	dracut-049-227.git20230725.el8	Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2023-11-14 15:47:29 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Vladis Dronov 2023-03-24 13:26:46 UTC

dracut should update rngd initramfs service file with the latest rng-tools updates including a FIPS one:

/usr/lib/dracut/modules.d/06rngd/rngd.service

$ rpm -qf /usr/lib/dracut/modules.d/06rngd/rngd.service 
dracut-057-3.fc36.x86_64

please see details in: bz2154804#c8

the new file content should be:

[Unit]
Description=Hardware RNG Entropy Gatherer Daemon
DefaultDependencies=no
Before=systemd-udevd.service
ConditionVirtualization=!container
ConditionKernelCommandLine=!fips=1

[Service]
Type=simple
ExecStart=/usr/sbin/rngd -f --fill-watermark=0 -x pkcs11 -x nist -x qrypt

Comment 1 Vladis Dronov 2023-03-24 13:31:17 UTC

this pack of dracut bzs:
fedora: https://bugzilla.redhat.com/show_bug.cgi?id=2181540
rhel9: https://bugzilla.redhat.com/show_bug.cgi?id=2181541
rhel8: https://bugzilla.redhat.com/show_bug.cgi?id=2181543

Comment 2 David Tardon 2023-05-17 08:12:36 UTC

https://bugzilla.redhat.com/show_bug.cgi?id=2181541#c2

Comment 3 Vladis Dronov 2023-05-17 11:03:39 UTC

https://bugzilla.redhat.com/show_bug.cgi?id=2181541#c3

Comment 4 Pavel Valena 2023-07-24 10:34:23 UTC

Testd & created PR: https://github.com/redhat-plumbers/dracut-rhel8/pull/28

Comment 8 errata-xmlrpc 2023-11-14 15:47:29 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (dracut bug fix and enhancement update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2023:7087