[Swan] libreswan version 4.9: ipsec.service: Start operation timed out. Terminating.

[antonio]

Hi Paul,

The debian rule was not building the unit file, applying the following changes solves the issue:


diff --git a/packaging/debian/rules b/packaging/debian/rules
index 7b6a790cb7..522e902d91 100755
--- a/packaging/debian/rules
+++ b/packaging/debian/rules
@@ -27,6 +27,7 @@ override_dh_auto_build:
                LIBEXECDIR=/usr/libexec/ipsec \
                MANDIR=/usr/share/man \
                USE_LDAP=true \
+               INITSYSTEM=systemd \
                $(ENABLE_LIBCAP_NG) \
                $(ENABLE_SELINUX)
 
@@ -39,6 +40,7 @@ override_dh_auto_install-arch:
                LIBEXECDIR=/usr/libexec/ipsec \
                MANDIR=/usr/share/man \
                USE_LDAP=true \
+               INITSYSTEM=systemd \
                $(ENABLE_LIBCAP_NG) \
                $(ENABLE_SELINUX) \
                DESTDIR=$(CURDIR)/debian/libreswan


The package now contains the unit file:

dpkg -c libreswan_4.9-1_amd64.deb  | grep service
-rw-r--r-- root/root      1531 2022-10-13 01:00 ./lib/systemd/system/ipsec.service


I install the package and it work as expected, I can start/stop/restart/enable/disable ipsec service without any issue. 

Do you want me to create e pull request in github?


—
Saludos / Regards / Cumprimentos
António Silva

> On 8 Nov 2022, at 12:58, Paul Wouters <paul at nohats.ca> wrote:
> 
> On Tue, 8 Nov 2022, antonio wrote:
> 
>> The issue is with systemd service apparently, I started with init.d/ipsec and is ok.
>> The generated package for version 4.9 doesn’t include a unit file. 
>> dpkg -c binaries/libreswan_4.9-1_amd64.deb | grep systemd
>> drwxr-xr-x root/root         0 2022-10-13 01:00 ./lib/systemd/
>> drwxr-xr-x root/root         0 2022-10-13 01:00 ./lib/systemd/system-preset/
>> -rw-r--r-- root/root       145 2022-10-13 01:00 ./lib/systemd/system-preset/90-libreswan.preset
> 
>> It was removed in commit: https://github.com/libreswan/libreswan/commit/20fe3adb398eaafb8dc62df06cf32461aaa817d7
>> On my server i had copy  ipsec.service into /etc/systemd/system/ipsec.service, and when updated to 4.9 it wasn’t removed. 
> 
> It sounds like we might need to add another build dependency for systemd
> that is different from dh-systemd ?
> 
> Any debian user that knows the answer?
> 
> Paul
> 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.libreswan.org/pipermail/swan/attachments/20221219/b8228908/attachment.htm>