Skip to content

Commit

Permalink
qemu-guest: remove security.rngd setting
Browse files Browse the repository at this point in the history
Since release 20.09 `rngd.enable` defaults to false, so this setting is redundant.

Also fix the `qemu-quest` section of the manual that incorrectly claimed
that `rngd` was enabled.
  • Loading branch information
erikarvstedt authored and teto committed Jan 27, 2021
1 parent 71e4716 commit 0b5fd3b
Show file tree
Hide file tree
Showing 2 changed files with 3 additions and 6 deletions.
5 changes: 2 additions & 3 deletions nixos/doc/manual/configuration/profiles/qemu-guest.xml
Original file line number Diff line number Diff line change
Expand Up @@ -11,8 +11,7 @@
</para>

<para>
It makes virtio modules available on the initrd, sets the system time from
the hardware clock to work around a bug in qemu-kvm, and
<link linkend="opt-security.rngd.enable">enables rngd</link>.
It makes virtio modules available on the initrd and sets the system time from
the hardware clock to work around a bug in qemu-kvm.
</para>
</section>
4 changes: 1 addition & 3 deletions nixos/modules/profiles/qemu-guest.nix
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
# Common configuration for virtual machines running under QEMU (using
# virtio).

{ lib, ... }:
{ ... }:

{
boot.initrd.availableKernelModules = [ "virtio_net" "virtio_pci" "virtio_mmio" "virtio_blk" "virtio_scsi" "9p" "9pnet_virtio" ];
Expand All @@ -14,6 +14,4 @@
# to the *boot time* of the host).
hwclock -s
'';

security.rngd.enable = lib.mkDefault false;
}

0 comments on commit 0b5fd3b

Please sign in to comment.