#!/usr/bin/env bash
# 004-purge-haveged - Remove entropy daemon (~8MB)
# Kernel 6.12 collects enough entropy on its own; haveged is redundant.
set -euo pipefail

export DEBIAN_FRONTEND=noninteractive

case "${1:-}" in
  up)   systemctl disable --now haveged.service 2>/dev/null || true
        apt-get purge -y haveged >/dev/null
        apt-get autoremove --purge -y >/dev/null
        echo "    haveged stopped + package purged" ;;
  status)
        if dpkg-query -W -f='${db:Status-Abbrev}' haveged 2>/dev/null | grep -q '^ii'; then
          echo "DRIFT haveged is installed"
          exit 1
        fi
        echo "OK haveged not installed" ;;
  down) apt-get update -qq
        apt-get install -y haveged >/dev/null
        systemctl enable --now haveged.service
        echo "    haveged reinstalled + restarted" ;;
esac