[Sysadmins] OpenVZ и Openswan IPsec

[Led]

Friday, 01 August 2008 19:36:35 Slava Dubrovskiy написав:
> Здравствуйте
>
> Подскажите, возможно ли внутри контейнера использовать Openswan IPsec ?
> Если да, то подскажите как.
> Получаю вот такое:
>
> instantpay ipsec_setup: Starting Openswan IPsec 2.4.6...
> instantpay ipsec_setup: insmod
> /lib/modules/2.6.18-53.1.6.el5.028stab053.6/kernel/net/key/af_key.ko
> instantpay ipsec_setup: FATAL: Error inserting af_key
> (/lib/modules/2.6.18-53.1.6.el5.028stab053.6/kernel/net/key/af_key.ko):
> Operation not permitted
> instantpay ipsec_setup: Broken 2.6 kernel without kallsyms, skipping
> calcgoo (Fedora rpm?)
> instantpay ipsec_setup: insmod
> /lib/modules/2.6.18-53.1.6.el5.028stab053.6/kernel/drivers/crypto/padlock.k
>o instantpay ipsec_setup: FATAL: Error inserting padlock
> (/lib/modules/2.6.18-53.1.6.el5.028stab053.6/kernel/drivers/crypto/padlock.
>ko):
>
> Operation not permitted
> instantpay ipsec_setup: FATAL: Module ipsec not found.
> instantpay ipsec_setup: kernel appears to lack IPsec support (neither
> CONFIG_KLIPS or CONFIG_NET_KEY are set)

Ядро патченное Openswan'овским natt-патчем?

-- 
Led