From: nicoo <nicoo@realraum.at>
Date: Fri, 8 Jun 2018 17:06:28 +0000 (+0200)
Subject: vm/host: Install haveged on VM hosts
X-Git-Url: https://git.realraum.at/?p=noc.git;a=commitdiff_plain;h=2956b37bcd3031d4b52230fc5c4004600552b2b7

vm/host: Install haveged on VM hosts
---

diff --git a/ansible/roles/vm/host/handlers/main.yml b/ansible/roles/vm/host/handlers/main.yml
index 158f4dc..f6b5f80 100644
--- a/ansible/roles/vm/host/handlers/main.yml
+++ b/ansible/roles/vm/host/handlers/main.yml
@@ -3,3 +3,8 @@
   service:
     name: openbsd-inetd
     state: restarted
+
+- name: restart haveged
+  service:
+    name: haveged
+    state: restarted
diff --git a/ansible/roles/vm/host/tasks/main.yml b/ansible/roles/vm/host/tasks/main.yml
index 248f855..a7b018c 100644
--- a/ansible/roles/vm/host/tasks/main.yml
+++ b/ansible/roles/vm/host/tasks/main.yml
@@ -1,5 +1,5 @@
 ---
-- name: install tftpd and python-libvirt
+- name: install dependencies
   apt:
     name:
       - atftpd
@@ -7,8 +7,16 @@
       - qemu-kvm
       - libvirt-bin
       - python-libvirt
+      - haveged
     state: present
 
+- name: configure haveged
+  lineinfile:
+    regexp: "^#?DAEMON_ARGS"
+    line: 'DAEMON_ARGS="-w 3072"'
+    path: /etc/default/haveged
+  notify: restart haveged
+
 - name: configure tftpd via inetd
   lineinfile:
     regexp: "^#?({{ vm_host.network.ip }}:)?tftp"