V8.13.144.2025.10.16

Signed-off-by: Marc S. Weidner <msw@coresecret.dev>

config/hooks/live/0090_jitterentropy.chroot

@@ -14,17 +14,18 @@ set -Ceuo pipefail
 printf "\e[95m++++ ++++ ++++ ++++ ++++ ++++ ++ 🧪 '%s' starting ... \e[0m\n" "${0}"
 
 export DEBIAN_FRONTEND="noninteractive"
-apt-get install -y --no-install-recommends haveged
+apt-get install -y --no-install-recommends jitterentropy-rngd
 
 cd /root
-cat << 'EOF' >| /etc/default/haveged
-# Configuration file for haveged
 
-# Options to pass to haveged:
-DAEMON_ARGS="-w 2048 -v 1"
+mkdir -p /etc/systemd/system/jitterentropy-rngd.service.d
+
+cat << 'EOF' >> /etc/systemd/system/jitterentropy-rngd.service.d/override.conf
+[Service]
+ExecStart=
+ExecStart=/usr/sbin/jitterentropy-rngd --sp800-90b --osr=7
 EOF
 
-
 printf "\e[92m++++ ++++ ++++ ++++ ++++ ++++ ++ ✅ '%s' applied successfully. \e[0m\n" "${0}"
 
 exit 0

docs/CHANGELOG.md

@@ -14,7 +14,8 @@ include_toc: true
 
 ## V8.13.144.2025.10.16
 * **Bugfixes**: [99_local.hardened](../config/includes.chroot/etc/sysctl.d/99_local.hardened)
-* **Updated**:  [check_chrony.sh](../config/includes.chroot/root/.ciss/check_chrony.sh)  
+* **Updated**:  [check_chrony.sh](../config/includes.chroot/root/.ciss/check_chrony.sh)
+* **Changed**:  [0090_jitterentropy.chroot](../config/hooks/live/0090_jitterentropy.chroot)
 
 ## V8.13.142.2025.10.14
 * **Updated**: [9999-cdi-starter](../scripts/9999-cdi-starter)