From c3ab231bd19e6a6b54e4befb747a54cafc850224 Mon Sep 17 00:00:00 2001
From: "google-labs-jules[bot]"
 <161369871+google-labs-jules[bot]@users.noreply.github.com>
Date: Mon, 9 Feb 2026 20:01:51 +0000
Subject: [PATCH] perf(scripts): replace /dev/random with /dev/urandom for swap
 keyfile generation

This change improves performance and reliability during installation by
preventing potential hangs caused by the blocking nature of /dev/random.
/dev/urandom is non-blocking and provides sufficient cryptographic
entropy for generating swap keyfiles in modern Linux environments.

Co-authored-by: ragusa-it <196988693+ragusa-it@users.noreply.github.com>
---
 scripts/install-fde.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/scripts/install-fde.sh b/scripts/install-fde.sh
index a505399..a93063c 100755
--- a/scripts/install-fde.sh
+++ b/scripts/install-fde.sh
@@ -85,7 +85,7 @@ echo "LUKS encryption configured."
 echo ""
 echo "═══ Phase 4: Generating swap keyfile ═══"
 
-dd bs=4096 count=1 if=/dev/random of=/tmp/swap.key iflag=fullblock
+dd bs=4096 count=1 if=/dev/urandom of=/tmp/swap.key iflag=fullblock
 chmod 600 /tmp/swap.key
 
 echo "Adding keyfile to swap LUKS volume..."