From 9308f02b9b2f2de3ca53436814d4891e76014942 Mon Sep 17 00:00:00 2001
From: Christian Pointner <equinox@spreadspace.org>
Date: Tue, 2 Jul 2019 03:16:18 +0200
Subject: make entropy daemon configurable

---
 roles/base/tasks/main.yml | 40 +++++++++++++++++++++++++++++++++++++++-
 1 file changed, 39 insertions(+), 1 deletion(-)

(limited to 'roles/base/tasks')

diff --git a/roles/base/tasks/main.yml b/roles/base/tasks/main.yml
index e631d0d4..e82ccfad 100644
--- a/roles/base/tasks/main.yml
+++ b/roles/base/tasks/main.yml
@@ -1,4 +1,12 @@
 ---
+- name: load distrubtion specific variables
+  include_vars: "{{ item }}"
+  with_first_found:
+    - files:
+        - "{{ ansible_distribution_release }}.yml"
+        - "{{ ansible_distribution }}.yml"
+      skip: true
+
 - name: disable recommends and suggests
   copy:
     src: 02no-recommends
@@ -19,7 +27,6 @@
     - tcpdump
     - iptraf-ng
     - unp
-    - haveged
     - dbus
     - libpam-systemd
     - aptitude
@@ -30,6 +37,37 @@
     - nano
     state: present
 
+
+- name: install rngd
+  when: base_entropy_generator == 'rngd'
+  block:
+  - name: install rngd
+    apt:
+      name: "{{ base_rngd_package_name }}"
+      state: present
+
+  - name: make sure haveged is removed/purged
+    apt:
+      name: haveged
+      state: absent
+      purge: yes
+
+
+- name: install haveged
+  when: base_entropy_generator != 'rngd'
+  block:
+  - name: install haveged
+    apt:
+      name: haveged
+      state: present
+
+  - name: make sure rngd is removed/purged
+    apt:
+      name: "{{ base_rngd_package_name }}"
+      state: absent
+      purge: yes
+
+
 - name: Remove startup message from screen
   lineinfile:
     regexp: "^startup_message"
-- 
cgit v1.2.3