]> git.ipfire.org Git - thirdparty/systemd.git/blame - units/systemd-boot-system-token.service
boot: implement kernel EFI RNG seed protocol with proper hashing
[thirdparty/systemd.git] / units / systemd-boot-system-token.service
CommitLineData
db9ecf05 1# SPDX-License-Identifier: LGPL-2.1-or-later
d985064a
LP
2#
3# This file is part of systemd.
4#
5# systemd is free software; you can redistribute it and/or modify it
6# under the terms of the GNU Lesser General Public License as published by
7# the Free Software Foundation; either version 2.1 of the License, or
8# (at your option) any later version.
9
10[Unit]
11Description=Store a System Token in an EFI Variable
12Documentation=man:systemd-boot-system-token.service(8)
9810e419 13
d985064a 14DefaultDependencies=no
d985064a 15After=local-fs.target systemd-random-seed.service
7c0e2b55
ZJS
16Conflicts=shutdown.target initrd-switch-root.target
17Before=shutdown.target initrd-switch-root.target
d985064a
LP
18
19# Don't run this in a VM environment, because there EFI variables are not
20# actually stored in NVRAM, independent of regular storage.
21ConditionVirtualization=no
22
23# Only run this if the boot loader can support random seed initialization.
24ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f
25
26# Only run this if there is no system token defined yet, or …
27ConditionPathExists=|!/sys/firmware/efi/efivars/LoaderSystemToken-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f
28
d985064a
LP
29[Service]
30Type=oneshot
31RemainAfterExit=yes
cdc6804b 32ExecStart=bootctl random-seed --graceful