Differences between version 15 and revision by previous author of IPSecInstallation.
Other diffs: Previous Major Revision, Previous Revision, or view the Annotated Edit History
| Newer page: | version 15 | Last edited on Wednesday, April 23, 2003 1:48:17 pm | by CraigBox | Revert |
| Older page: | version 12 | Last edited on Wednesday, April 23, 2003 11:08:34 am | by JeeKay | Revert |
@@ -17,18 +17,14 @@
Step 2: Preparing FreeS/WAN sources
cd /usr/src/
tar xzf ~/download/freeswan-1.99.tar.gz
-Step 3: Start making
FreeS/WAN %%%
+Step 3: Rebuild the kernel and make
FreeS/WAN %%%
Note that this step installs the IPSec binaries in /usr/local/lib/ipsec. The "ipsec" command itself is put in /usr/local/sbin. If you later find you can't find "ipsec", check your path.
cd /usr/src/freeswan-1.99/
make oldgo[1]
-Step 4: Rebuild the kernel
- cd /usr/src/freeswan-1.99/
- make kinstall[2]
-
-Step 5
: Finishing touches
+Step 4: Finishing touches
<install your kernel>
<reboot>
----
Congratulations! You now have an IPSec enabled kernel in the directory where your newly compiled kernel normally lives (/usr/src/linux/arch/i386/boot/bzImage for me). You are probably going to want to copy it somewhere and either restart or rerun lilo and restart, depending on your preferences.
@@ -37,16 +33,23 @@
----
!Or, if you're running Debian:
-apt-get install kernel-source (or acquire the newest kernel source as you see fit)
-apt-get install kernel-patch-freeswan
+
apt-get install kernel-source (or acquire the newest kernel source as you see fit)
+ apt-get install kernel-patch-freeswan
-export PATCH_THE_KERNEL=YES
-cd /usr/src/kernel-source-whatever
-make-kpkg --config=menuconfig --revision=whatever kernel_image
+
export PATCH_THE_KERNEL=YES
+ cd /usr/src/kernel-source-whatever
+ make-kpkg --config=menuconfig --revision=whatever kernel_image
When make-kpkg runs, if PATCH_THE_KERNEL is set YES then it will unpatch (clean) and patch the kernel with the contents of /usr/src/kernel-patches/ that are correct for your architecture. The --config=menuconfig step is designed to let you configure all the flash new options that FreeS/WAN provides.
+
+----
+!Or, if you're running Gentoo:
+
+If you already are using gentoo-sources, simply ensure that IPSec is enabled in your kernel config. Then:
+ emerge -u freeswan
+
+You are now the proud owner of an IPSec enabled machine.
----
[1]: oldgo is the target for compiling statically against the kernel source. Alternatives are `menugo' and `xgo' to get a normal kernel config menu up respectively. For the menus, IPSec related options are under `Networking Options'. Always save the config when you leave, whether or not you have changed anything!
-[2]: kinstall is the target for installing statically against the kernel source. The alternative (for a module) is minstall. Note that this step seems to attempt to auto-install the new kernel if you are running lilo.. I don't so it didn't do anything but beware.
