Tiny Core Linux
Tiny Core Base => TCB Tips & Tricks => Topic started by: Looper on March 14, 2017, 08:56:51 AM
-
how can i install and configuration Swan in Tinycore 7.x
??
-
swan, openswan, freeswan, strongswan?
-
swan, openswan, freeswan, strongswan?
No matter, any tool for setup ipsec
-
the strongswan source looks to have the standard configure script and Makefile setup.
You can see the extension making section of the wiki and analagous build scripts/instructions under repo.tinycorelinux.net/7.x/x86/tcz/src for guidance.
-
Have you had any luck getting strongSwan to work?
I have compiled the strongSwan source and made an extension from it and it all loads properly. However, when I try and run "ipsec start", I get an error back saying that the following modules are not found in modules.dep ( ah4, esp4, ipcomp, sfrm4_tunnel, sfrm_user ). Interestingly, strongSwan.org specifically calls out these modules as required on their website.
I am using Tinycore 8.1.1.1 with the default kernel 4.8.17. I have tried to manually load the modules, but they are not present on the system.
Any help would be appreciated.
Thanks
-
All that you listed is built-in to the kernel. (typo on the sfrm, that's xfrm)
-
Yes, you are correct on the typo.
However, I don't believe that these modules are built in. These modules don't show up via lsmod, modules.dep or anywhere in the system.
One thing that I realize that I forgot to mention is that I am using the "CorePure64-8.1.1.iso" not the the 32bit version.
Maybe these are included in the 32bit versions? Unfortunately, for my requirements, I am not able to use 32bit.
Thanks
-
see:
http://tinycorelinux.net/8.x/x86_64/release/src/kernel/config-4.8.17-tinycore64
..for example: CONFIG_INET_AH=y
CONFIG_INET_ESP=y
CONFIG_INET_IPCOMP=y
-
I see the file that you referenced and it appears that the modules should be there. However this is what I see when I try to start up strongswan:
Starting strongSwan 5.6.0 IPsec [starter]...
modprobe: module ah4 not found in modules.dep
modprobe: module esp4 not found in modules.dep
modprobe: module ipcomp not found in modules.dep
modprobe: module xfrm4_tunnel not found in modules.dep
modprobe: module xfrm_user not found in modules.dep
This tells me that strongSwan is not able to find these modules.
Any thoughts?
-
It can't find them as modules, because they are built in. Please ask on their forum, this is a deficiency in their starting script/program.
-
At this point, I am attempting to recompile a custom kernel with these modules set to loadable modules rather than built in. I am also reaching out to strongSwan.org to see if they have any suggestions.
Thanks to those that have helped thus far.