* [Sysadmins] OpenVZ и Openswan IPsec
@ 2008-08-01 16:36 Slava Dubrovskiy
2008-08-01 18:25 ` Led
0 siblings, 1 reply; 4+ messages in thread
From: Slava Dubrovskiy @ 2008-08-01 16:36 UTC (permalink / raw)
To: Sysadmins
[-- Attachment #1: Type: text/plain, Size: 1095 bytes --]
Здравствуйте
Подскажите, возможно ли внутри контейнера использовать Openswan IPsec ?
Если да, то подскажите как.
Получаю вот такое:
instantpay ipsec_setup: Starting Openswan IPsec 2.4.6...
instantpay ipsec_setup: insmod
/lib/modules/2.6.18-53.1.6.el5.028stab053.6/kernel/net/key/af_key.ko
instantpay ipsec_setup: FATAL: Error inserting af_key
(/lib/modules/2.6.18-53.1.6.el5.028stab053.6/kernel/net/key/af_key.ko):
Operation not permitted
instantpay ipsec_setup: Broken 2.6 kernel without kallsyms, skipping
calcgoo (Fedora rpm?)
instantpay ipsec_setup: insmod
/lib/modules/2.6.18-53.1.6.el5.028stab053.6/kernel/drivers/crypto/padlock.ko
instantpay ipsec_setup: FATAL: Error inserting padlock
(/lib/modules/2.6.18-53.1.6.el5.028stab053.6/kernel/drivers/crypto/padlock.ko):
Operation not permitted
instantpay ipsec_setup: FATAL: Module ipsec not found.
instantpay ipsec_setup: kernel appears to lack IPsec support (neither
CONFIG_KLIPS or CONFIG_NET_KEY are set)
--
WBR,
Dubrovskiy Vyacheslav
[-- Attachment #2: S/MIME Cryptographic Signature --]
[-- Type: application/x-pkcs7-signature, Size: 3262 bytes --]
^ permalink raw reply [flat|nested] 4+ messages in thread
* Re: [Sysadmins] OpenVZ и Openswan IPsec
2008-08-01 16:36 [Sysadmins] OpenVZ и Openswan IPsec Slava Dubrovskiy
@ 2008-08-01 18:25 ` Led
2008-08-01 18:33 ` Slava Dubrovskiy
0 siblings, 1 reply; 4+ messages in thread
From: Led @ 2008-08-01 18:25 UTC (permalink / raw)
To: ALT Linux sysadmin discuss
Friday, 01 August 2008 19:36:35 Slava Dubrovskiy написав:
> Здравствуйте
>
> Подскажите, возможно ли внутри контейнера использовать Openswan IPsec ?
> Если да, то подскажите как.
> Получаю вот такое:
>
> instantpay ipsec_setup: Starting Openswan IPsec 2.4.6...
> instantpay ipsec_setup: insmod
> /lib/modules/2.6.18-53.1.6.el5.028stab053.6/kernel/net/key/af_key.ko
> instantpay ipsec_setup: FATAL: Error inserting af_key
> (/lib/modules/2.6.18-53.1.6.el5.028stab053.6/kernel/net/key/af_key.ko):
> Operation not permitted
> instantpay ipsec_setup: Broken 2.6 kernel without kallsyms, skipping
> calcgoo (Fedora rpm?)
> instantpay ipsec_setup: insmod
> /lib/modules/2.6.18-53.1.6.el5.028stab053.6/kernel/drivers/crypto/padlock.k
>o instantpay ipsec_setup: FATAL: Error inserting padlock
> (/lib/modules/2.6.18-53.1.6.el5.028stab053.6/kernel/drivers/crypto/padlock.
>ko):
>
> Operation not permitted
> instantpay ipsec_setup: FATAL: Module ipsec not found.
> instantpay ipsec_setup: kernel appears to lack IPsec support (neither
> CONFIG_KLIPS or CONFIG_NET_KEY are set)
Ядро патченное Openswan'овским natt-патчем?
--
Led
^ permalink raw reply [flat|nested] 4+ messages in thread
* Re: [Sysadmins] OpenVZ и Openswan IPsec
2008-08-01 18:25 ` Led
@ 2008-08-01 18:33 ` Slava Dubrovskiy
2008-08-01 19:11 ` Led
0 siblings, 1 reply; 4+ messages in thread
From: Slava Dubrovskiy @ 2008-08-01 18:33 UTC (permalink / raw)
To: ledest, ALT Linux sysadmin discuss
[-- Attachment #1: Type: text/plain, Size: 520 bytes --]
Led пишет:
>> Подскажите, возможно ли внутри контейнера использовать Openswan IPsec ?
>> Если да, то подскажите как.
>>
> Ядро патченное Openswan'овским natt-патчем?
>
Да нет скорее всего. Стандартное с сайта OpenVZ
Без этого патча не будет работать? Никогда не сталкивался раньше с Openswan
--
WBR,
Dubrovskiy Vyacheslav
[-- Attachment #2: S/MIME Cryptographic Signature --]
[-- Type: application/x-pkcs7-signature, Size: 3262 bytes --]
^ permalink raw reply [flat|nested] 4+ messages in thread
* Re: [Sysadmins] OpenVZ и Openswan IPsec
2008-08-01 18:33 ` Slava Dubrovskiy
@ 2008-08-01 19:11 ` Led
0 siblings, 0 replies; 4+ messages in thread
From: Led @ 2008-08-01 19:11 UTC (permalink / raw)
To: ALT Linux sysadmin discuss
Friday, 01 August 2008 21:33:11 Slava Dubrovskiy написав:
> Led пишет:
> >> Подскажите, возможно ли внутри контейнера использовать Openswan IPsec ?
> >> Если да, то подскажите как.
> >
> > Ядро патченное Openswan'овским natt-патчем?
>
> Да нет скорее всего. Стандартное с сайта OpenVZ
> Без этого патча не будет работать? Никогда не сталкивался раньше с Openswan
С патчем работает, без оного "историй успеха" не слышал (это не значит, что их
нет).
--
Led
^ permalink raw reply [flat|nested] 4+ messages in thread
end of thread, other threads:[~2008-08-01 19:11 UTC | newest]
Thread overview: 4+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2008-08-01 16:36 [Sysadmins] OpenVZ и Openswan IPsec Slava Dubrovskiy
2008-08-01 18:25 ` Led
2008-08-01 18:33 ` Slava Dubrovskiy
2008-08-01 19:11 ` Led
ALT Linux sysadmins discussion
This inbox may be cloned and mirrored by anyone:
git clone --mirror http://lore.altlinux.org/sysadmins/0 sysadmins/git/0.git
# If you have public-inbox 1.1+ installed, you may
# initialize and index your mirror using the following commands:
public-inbox-init -V2 sysadmins sysadmins/ http://lore.altlinux.org/sysadmins \
sysadmins@lists.altlinux.org sysadmins@lists.altlinux.ru sysadmins@lists.altlinux.com
public-inbox-index sysadmins
Example config snippet for mirrors.
Newsgroup available over NNTP:
nntp://lore.altlinux.org/org.altlinux.lists.sysadmins
AGPL code for this site: git clone https://public-inbox.org/public-inbox.git