[Swan-dev] pointlessly building the KLIPS kernel module on the KVMs

[Paul Wouters]

> On Sep 3, 2019, at 14:18, Andrew Cagney <andrew.cagney at gmail.com> wrote:
> 
> 
> Paul wrote (but it got bounced):
> 
> On Fri, 16 Aug 2019, Andrew Cagney wrote:
> 
> > Given the code is isolated and (hopeful) treated read-only - itt
> > should still build on old systems.  However, I struggle to see a
> > reason for building it for Fedora 30, and would again like to disable
> > it.
> 
> I'm okay with that.
> 
> > (this shouldn't be confused with the klips userland code which can
> > continue to build).
> 
> For now that's good. Once we release 3.30, provided it has KLIPS and
> XFRMi support (KLIPS for linux < 4.x) then in 3.31 we will completely
> remove KLIPS. That gives us one release that supports both, that people
> can use for testing/migration.
> 
> Paul
> 
> Perhaps we should create a klips git repo (cloned from libreswan then pared down to just the klips kernel module), perhaps.

That will just end up with us supporting it and we would still need userland support in pluto so it would still have to be partially in the core libreswan repo. So I’m not in favour of this :)

Paul