logo
Free, unlimited AI code reviews that run on commit
git-lrc git-lrc GitHub Install Now We'd appreciate a star git-lrc - Free, unlimited AI code reviews that run on commit | Product Hunt git-lrc - Free, unlimited AI code reviews that run on commit | Product Hunt

ipsec__stackmanager - internal script to bring up kernel components for Libreswan

Author

PaulWouters
           placeholder to suppress warning

libreswan                                          03/31/2024                                   _STACKMANAGER(8)

Description

ipsec_stackmanager is called from within the init sub-system (systemd, upstart, sysv initscripts) to
       bring up the Libreswan kernel component as configured via the protostack= option in the ipsec.conf
       configuration file.

       This involves loading and optionally unloading of the required kernel modules. Because the Linux kernel
       cannot autodetect most crypto related drivers on-demand, _stackmanager handles loading the modules for
       the specific IPsec stack.

       When the --xfrm option is given to the start command, the XFRM stack is loaded regardless of the
       existence or contents of the ipsec.conf file. This is used for docker tests where the host system, which
       might not have libreswan installed, needs to run _stackmanager from the source tree to load the modules
       on the host so the modules are available inside the containers.

History

       This script was introduced in Libreswan. On the older Openswan systems, this functionality was split over
       various script files such as ipsec _startnetkey, ipsec _startklips, ipsec _realsetup and ipsec setup. Man
       page written for the Libreswan project <https://libreswan.org/> by Paul Wouters.

Name

       ipsec__stackmanager - internal script to bring up kernel components for Libreswan

See Also

ip(8), ipsec_tncfg(8), ipsec.conf(5), ipsec_addconn(8), pluto(8)

Synopsis

ipsec_stackmanagerstart [--xfrm]

       ipsec_stackmanagerstop

See Also