extra/haveged to 1.9.2-1

extra/haveged/PKGBUILD

@@ -1,5 +1,6 @@
 # $Id$
-# Maintainer:  Bartłomiej Piotrowski <bpiotrowski@archlinux.org>
+# Maintainer:  Christian Hesse <mail@eworm.de>
+# Contributor: Bartłomiej Piotrowski <bpiotrowski@archlinux.org>
 # Contributor: kfgz <kfgz at interia dot pl>
 # Contributor: pootzko <pootzko at gmail dot com>
 
@@ -7,30 +8,32 @@
 #  - patch from Alpine Linux to fix cache detection issues on ARM
 
 pkgname=haveged
-pkgver=1.9.1
-pkgrel=4.1
+pkgver=1.9.2
+pkgrel=1
 pkgdesc='Entropy harvesting daemon using CPU timings'
-arch=('i686' 'x86_64')
-url='http://www.issihosts.com/haveged'
+arch=('x86_64')
+url='https://github.com/jirka-h/haveged'
 license=('GPL')
 depends=('glibc')
-validpgpkeys=('4CFBA9F06A360837CE23919DA24EDC651E265688') # Gary Wuertz <gary@issiweb.com>
-source=("$url/$pkgname-$pkgver.tar.gz"
-        "$pkgname-$pkgver.tar.gz.sig::$url/verify/$pkgname-$pkgver.sig"
+validpgpkeys=('8F6B7293B03E5AC5762B65CE2E2F252B05CCA168') # Jirka Hladky <hladky.jiri@gmail.com>
+source=("$pkgname-$pkgver.tar.gz::https://github.com/jirka-h/$pkgname/archive/$pkgver.tar.gz"
+        "https://github.com/jirka-h/$pkgname/releases/download/$pkgver/$pkgname-$pkgver.tar.gz.asc"
         'haveged.service'
         'fix-cpu-cache-size-detection.patch')
-sha256sums=('9c2363ed9542a6784ff08e247182137e71f2ddb79e8e6c1ac4ad50d21ced3715'
+sha256sums=('d5b625b9d867965da1d28335d3c214b99a0e85f994ad291909fba51589c9af54'
             'SKIP'
-            '43540fbff57c5106e4283dd7b331499648e38ba15e84898ef5e0a53cccc0200b'
+            '7cb5d21d075650ad8f08f0ba958cc1bc39b5ff67ef484d9fce365febcaecb05c'
             '5aecfd72a1dbb9cc9b32d5677917d8a59dba7a2e021e31dee95f3f5b9e7ecf28')
 
 prepare() {
   cd $pkgname-$pkgver
+
   patch -p1 -i ../fix-cpu-cache-size-detection.patch
 }
 
 build() {
   cd $pkgname-$pkgver
+
   ./configure \
       --prefix=/usr \
       --bindir=/usr/bin \
@@ -39,6 +42,9 @@ build() {
 }
 
 package() {
-  make -C $pkgname-$pkgver DESTDIR="$pkgdir" install
-  install -Dm644 haveged.service "$pkgdir"/usr/lib/systemd/system/haveged.service
+  cd $pkgname-$pkgver
+
+  make DESTDIR="$pkgdir" install
+
+  install -D -m0644 "${srcdir}"/haveged.service "$pkgdir"/usr/lib/systemd/system/haveged.service
 }

extra/haveged/haveged.service

@@ -1,13 +1,21 @@
 [Unit]
 Description=Entropy Harvesting Daemon
 Documentation=man:haveged(8)
+DefaultDependencies=no
+ConditionVirtualization=!container
+After=systemd-random-seed.service
+Before=sysinit.target shutdown.target
 
 [Service]
 ExecStart=/usr/bin/haveged -F -w 1024 -v 1
 SuccessExitStatus=143
+CapabilityBoundingSet=CAP_SYS_ADMIN
+NoNewPrivileges=on
+PrivateDevices=on
+PrivateNetwork=on
+PrivateTmp=on
 ProtectSystem=full
 ProtectHome=on
-PrivateNetwork=on
 
 [Install]
 WantedBy=multi-user.target