From 9b73900ba6d4c4c3a43ce1746c16ddfddf8fb5bb Mon Sep 17 00:00:00 2001
From: Julio Montes <julio.montes@intel.com>
Date: Wed, 20 Mar 2019 09:00:23 -0600
Subject: [PATCH] katautils: mask systemd-random-seed

systemd-random-seed service fails if the rootfs is a read-only fs.
systemd-random-seed restores the random seed of the system at early
boot and saves it at shutdown, since kata containers are one boot machines
this service is not needed.

Signed-off-by: Julio Montes <julio.montes@intel.com>
---
 pkg/katautils/create.go | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/pkg/katautils/create.go b/pkg/katautils/create.go
index 5283b3123..63fab5c85 100644
--- a/pkg/katautils/create.go
+++ b/pkg/katautils/create.go
@@ -93,6 +93,11 @@ var noTraceKernelParam = []vc.Param{
 		Key:   "systemd.mask",
 		Value: "tmp.mount",
 	},
+	// No random seed
+	{
+		Key:   "systemd.mask",
+		Value: "systemd-random-seed.service",
+	},
 }
 
 func getKernelParams(needSystemd, trace bool) []vc.Param {