diff --git a/nodepool/elements/infra-package-needs/install.d/10-packages b/nodepool/elements/infra-package-needs/install.d/10-packages
new file mode 100755
index 0000000000..170325cb97
--- /dev/null
+++ b/nodepool/elements/infra-package-needs/install.d/10-packages
@@ -0,0 +1,25 @@
+#!/bin/bash
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+# implied.
+#
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+# dib-lint: disable=setu setpipefail
+if [ ${DIB_DEBUG_TRACE:-0} -gt 0 ]; then
+    set -x
+fi
+set -e
+
+if [ "$DISTRO_NAME" == "centos" ]; then
+    yum -y install --enablerepo=epel haveged
+fi
diff --git a/nodepool/elements/infra-package-needs/package-installs.yaml b/nodepool/elements/infra-package-needs/package-installs.yaml
index b4a690ca94..b20d16ad90 100644
--- a/nodepool/elements/infra-package-needs/package-installs.yaml
+++ b/nodepool/elements/infra-package-needs/package-installs.yaml
@@ -21,3 +21,4 @@ puppet:
 wget:
 iputils-ping:
 dnsutils:
+haveged:
diff --git a/nodepool/elements/infra-package-needs/pkg-map b/nodepool/elements/infra-package-needs/pkg-map
index 397464033b..ee542c88be 100644
--- a/nodepool/elements/infra-package-needs/pkg-map
+++ b/nodepool/elements/infra-package-needs/pkg-map
@@ -1,7 +1,8 @@
 {
   "distro": {
     "fedora": {
-      "python3-dev": "python3-devel"
+      "python3-dev": "python3-devel",
+      "haveged": "haveged"
     },
     "gentoo": {
       "build-essential": "",
@@ -22,7 +23,8 @@
       "ntp": "ntp ntp-perl",
       "python-dev": "python-devel",
       "python3-dev": "",
-      "uuid-runtime": ""
+      "uuid-runtime": "",
+      "haveged": ""
     },
     "suse": {
       "dnsutils": "bind-utils",