ipsec and zfs on FreeBSD 8.1 -- kernel problem
rsmith at xs4all.nl
Tue Aug 3 17:38:21 UTC 2010
On Tue, Aug 03, 2010 at 08:40:52AM -0700, Joshua Coats wrote:
> I've been experimenting with a FreeBSD 8.1 build, booting with a root in
> zfs, but I've found a problem with the kernel: using the generic kernel
> works fine, but this particular server needs ipsec enabled, and the
> kernel I built with ipsec support for some reason can't mount the zfs
> partitions, despite loading what I believe are the necessary kernel
> modules (zfs.ko, opensolaris.ko) at startup.
I'm assuming you're booting from a UFS /boot? Otherwise you'd need to build
the required modules into the kernel.
Maybe you need to build/install a zfs-enabled bootloader? I see some code in
/usr/src/sys/boot/i386/zfsboot/ and /usr/src/sys/boot/i386/zfsloader/, but I'm
not a ZFS user.
> Does special zfs support need to be built into the kernel? The only
> modifications from the generic kernel for the ipsec kernel I'm using
> options IPSEC
> options IPSEC_FILTERTUNNEL
> device crypto
> This specific kernel config worked fine on FreeBSD 7.3, so I'm at a
When building a custom kernel, _always_ start from a GENERIC kernel from the
release you're using. There have been changes between 7.3 and 8.1 that you are
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914 B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Size: 196 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-questions/attachments/20100803/9575f98b/attachment.pgp
More information about the freebsd-questions