[Unit]
# inspiration from upstream init.d/service.fedora
Description=Entropy Daemon based on the HAVEGE algorithm
Documentation=man:haveged(8) http://www.issihosts.com/haveged/
DefaultDependencies=no
# This would wait for filesystems, but we only need /dev/random, which
# is certainly available after systemd initialised
# After=systemd-tmpfiles-setup-dev.service
Before=sysinit.target shutdown.target systemd-journald.service

[Service]
ExecStart=/usr/sbin/haveged -w 1024 -v 1 --Foreground
Restart=always
SuccessExitStatus=137 143

# Only simple isolation methods that don't pull in dependencies
CapabilityBoundingSet=CAP_SYS_ADMIN
SecureBits=noroot-locked
ProtectSystem=full

[Install]
WantedBy=sysinit.target