#!/bin/bash

# make sure that the option is not configured through boot parameter
file="/boot/grub2/grubenv"
if grep -q '^.*random\.trust_cpu=.*'  "$file" ; then
	sed -i 's/\(^.*\)random.trust_cpu=[^[:space:]]*\(.*\)/\1 \2/'  "$file"
fi

if grep -Pq "^[^#]*CONFIG_RANDOM_TRUST_CPU" /boot/config-`uname -r`; then
    sed -Ei 's/^([^#]*)CONFIG_RANDOM_TRUST_CPU=.(.*)/\1CONFIG_RANDOM_TRUST_CPU=y\2/' /boot/config-`uname -r`
else
    echo "CONFIG_RANDOM_TRUST_CPU=y" >> /boot/config-`uname -r`
fi