mirror of
https://github.com/openvswitch/ovs
synced 2025-08-22 01:51:26 +00:00
e67f317ef1
Commit in the fixes tag added support for using custom ipsec.conf with
ovs-monitor-ipsec, but it didn't provide a way to use those options
via ovs-ctl. This makes it not possible to use these options from a
systemd unit, for example.
Fix that by adding --ovs-monitor-ipsec-options knob to ovs-ctl and
allowing OPTIONS to be passed via sysconfig.
Our Debian units are using StrongSwan, so they do not need these
Libreswan-specific options, however, it's better to keep systemd
integration similar to Fedora/RHEL. There is at least one other
option that can be used with StrongSwan.
Only the Debian init file is updated, because we don't have IPsec
support for init in Fedora/RHEL.
There is a line length warning in the example, but it's hard to split
it into multiple lines, and I think, it's a good configuration example
to provide.
Fixes: 09d7c5ac0054 ("ipsec: Add support for using non-root ipsec.conf.")
Acked-by: Frode Nordahl <fnordahl@ubuntu.com>
Signed-off-by: Ilya Maximets <i.maximets@ovn.org>
6 lines
204 B
Bash
6 lines
204 B
Bash
# This is a POSIX shell fragment -*- sh -*-
|
|
|
|
# OVS_CTL_OPTS: Extra options to pass to ovs-ctl. This is, for example,
|
|
# a suitable place to specify --no-restart-ike-daemon.
|
|
# OVS_CTL_OPTS=
|