[Swan] libreswan version 4.9: ipsec.service: Start operation timed out. Terminating.
Paul Wouters
paul at nohats.ca
Tue Dec 20 04:15:46 EET 2022
please do, if you create a PR then you get the proper credit for the fix when we merge it
Sent using a virtual keyboard on a phone
> On Dec 19, 2022, at 13:51, antonio <asilva at wirelessmundi.com> wrote:
>
> Hi Paul,
>
> The debian rule was not building the unit file, applying the following changes solves the issue:
>
>
> diff --git a/packaging/debian/rules b/packaging/debian/rules
> index 7b6a790cb7..522e902d91 100755
> --- a/packaging/debian/rules
> +++ b/packaging/debian/rules
> @@ -27,6 +27,7 @@ override_dh_auto_build:
> LIBEXECDIR=/usr/libexec/ipsec \
> MANDIR=/usr/share/man \
> USE_LDAP=true \
> + INITSYSTEM=systemd \
> $(ENABLE_LIBCAP_NG) \
> $(ENABLE_SELINUX)
>
> @@ -39,6 +40,7 @@ override_dh_auto_install-arch:
> LIBEXECDIR=/usr/libexec/ipsec \
> MANDIR=/usr/share/man \
> USE_LDAP=true \
> + INITSYSTEM=systemd \
> $(ENABLE_LIBCAP_NG) \
> $(ENABLE_SELINUX) \
> DESTDIR=$(CURDIR)/debian/libreswan
>
>
> The package now contains the unit file:
>
> dpkg -c libreswan_4.9-1_amd64.deb | grep service
> -rw-r--r-- root/root 1531 2022-10-13 01:00 ./lib/systemd/system/ipsec.service
>
>
> I install the package and it work as expected, I can start/stop/restart/enable/disable ipsec service without any issue.
>
> Do you want me to create e pull request in github?
>
>
> —
> Saludos / Regards / Cumprimentos
> António Silva
>
>> On 8 Nov 2022, at 12:58, Paul Wouters <paul at nohats.ca> wrote:
>>
>>> On Tue, 8 Nov 2022, antonio wrote:
>>>
>>> The issue is with systemd service apparently, I started with init.d/ipsec and is ok.
>>> The generated package for version 4.9 doesn’t include a unit file.
>>> dpkg -c binaries/libreswan_4.9-1_amd64.deb | grep systemd
>>> drwxr-xr-x root/root 0 2022-10-13 01:00 ./lib/systemd/
>>> drwxr-xr-x root/root 0 2022-10-13 01:00 ./lib/systemd/system-preset/
>>> -rw-r--r-- root/root 145 2022-10-13 01:00 ./lib/systemd/system-preset/90-libreswan.preset
>>
>>> It was removed in commit: https://github.com/libreswan/libreswan/commit/20fe3adb398eaafb8dc62df06cf32461aaa817d7
>>> On my server i had copy ipsec.service into /etc/systemd/system/ipsec.service, and when updated to 4.9 it wasn’t removed.
>>
>> It sounds like we might need to add another build dependency for systemd
>> that is different from dh-systemd ?
>>
>> Any debian user that knows the answer?
>>
>> Paul
>>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.libreswan.org/pipermail/swan/attachments/20221219/d05b3e3e/attachment-0001.htm>
More information about the Swan
mailing list