Differences between version 15 and predecessor to the previous major change of IPSecInstallation.
Other diffs: Previous Revision, Previous Author, or view the Annotated Edit History
Newer page: | version 15 | Last edited on Wednesday, April 23, 2003 1:48:17 pm | by CraigBox | Revert |
Older page: | version 11 | Last edited on Wednesday, April 23, 2003 10:44:52 am | by PerryLorier | Revert |
@@ -17,17 +17,14 @@
Step 2: Preparing FreeS/WAN sources
cd /usr/src/
tar xzf ~/download/freeswan-1.99.tar.gz
-Step 3: Start making
FreeS/WAN
+Step 3: Rebuild the kernel and make
FreeS/WAN %%%
+Note that this step installs the IPSec binaries in /usr/local/lib/ipsec. The "ipsec" command itself is put in /usr/local/sbin. If you later find you can't find "ipsec", check your path.
cd /usr/src/freeswan-1.99/
make oldgo[1]
-Step 4: Rebuild the kernel
- cd /usr/src/freeswan-1.99/
- make kinstall[2]
-
-Step 5
: Finishing touches
+Step 4: Finishing touches
<install your kernel>
<reboot>
----
Congratulations! You now have an IPSec enabled kernel in the directory where your newly compiled kernel normally lives (/usr/src/linux/arch/i386/boot/bzImage for me). You are probably going to want to copy it somewhere and either restart or rerun lilo and restart, depending on your preferences.
@@ -36,16 +33,23 @@
----
!Or, if you're running Debian:
-apt-get install kernel-source (or acquire the newest kernel source as you see fit)
-apt-get install kernel-patch-freeswan
+
apt-get install kernel-source (or acquire the newest kernel source as you see fit)
+ apt-get install kernel-patch-freeswan
-export PATCH_THE_KERNEL=YES
-cd /usr/src/kernel-source-whatever
-make-kpkg --config=menuconfig --revision=whatever kernel_image
+
export PATCH_THE_KERNEL=YES
+ cd /usr/src/kernel-source-whatever
+ make-kpkg --config=menuconfig --revision=whatever kernel_image
When make-kpkg runs, if PATCH_THE_KERNEL is set YES then it will unpatch (clean) and patch the kernel with the contents of /usr/src/kernel-patches/ that are correct for your architecture. The --config=menuconfig step is designed to let you configure all the flash new options that FreeS/WAN provides.
----
-[1]
: oldgo
is the target for compiling statically against the
kernel source
. The alternative (for a module) is oldmod
.
-[2
]: kinstall
is the target for installing
statically against the kernel source. The alternative (for
a module) is minstall
. Note that this step seems to attempt to auto-install
the new kernel if you
are running lilo.. I don
't so it didn't do anything but beware
.
+!Or, if you're running Gentoo
:
+
+If you already are using gentoo-sources, simply ensure that IPSec
is enabled in your
kernel config
. Then:
+ emerge -u freeswan
+
+You are now the proud owner of an IPSec enabled machine
.
+
+----
+[1
]: oldgo
is the target for compiling
statically against the kernel source. Alternatives are `menugo' and `xgo' to get
a normal kernel config menu up respectively
. For
the menus, IPSec related options
are under `Networking Options
'. Always save the config when you leave, whether or not you have changed anything!