svn commit: r365449 - head/sbin/rcorder

[Ronald Klop]

Van: John Baldwin <jhb at FreeBSD.org>
Datum: vrijdag, 18 september 2020 00:50
Aan: "Olivier Cochard-Labbé" <olivier at freebsd.org>
CC: "Andrey V. Elsukov" <ae at freebsd.org>, src-committers <src-committers at freebsd.org>, svn-src-all <svn-src-all at freebsd.org>, svn-src-head <svn-src-head at freebsd.org>
Onderwerp: Re: svn commit: r365449 - head/sbin/rcorder
> 
> On 9/17/20 3:44 PM, Olivier Cochard-Labbé wrote:
> > On Thu, Sep 17, 2020 at 10:21 PM John Baldwin <jhb at freebsd.org> wrote:
> >> I think long term we want OCF's notions of sessions to be a bit more
> >> fluid such that "client" sessions for things like GELI and IPSec can
> >> be backed by one or more "driver" sessions (including "driver" sessions
> >> coming and going as devices come and go).  That's a fair bit more work
> >> however.
> >>
> >>
> > And why not simply add 'kld' into the REQUIRE part of /etc/rc.d/ipsec ?
> > But this will fix only IPsec: What about other crypto consumers ?
> 
> The problem is that kld_list can be used to load all sorts of modules.
> Perhaps some of them need to be loaded after the network is configured,
> for example, but ipsec is probably before NETWORKING, so moving kld
> earlier would break those modules.  The problem with 'kld' is that it is
> super generic so there isn't a "right" place to put it.
> 
> I'm not sure of an easy solution.  In your case, if you put aesni_load=YES
> in loader.conf instead of putting aesni in kld_list you would be fine
> though.  I'm not sure it's really safe to assume that things loaded by
> kld_list are available for any boot-time services.
> 
> -- 
> John Baldwin
> _______________________________________________
> svn-src-all at freebsd.org mailing list
> https://lists.freebsd.org/mailman/listinfo/svn-src-all
> To unsubscribe, send any mail to "svn-src-all-unsubscribe at freebsd.org"
> 
> 
> 


Another solution could be to create a /etc/rc.d/aesni script which loads the aesni module and use that for dependencies instead of the generic kld_list.
Or a more generic /etc/rc.d/cryptostuff.

Regards,
Ronald.