ipsec and zfs on FreeBSD 8.1 -- kernel problem

[Roland Smith]

On Tue, Aug 03, 2010 at 08:40:52AM -0700, Joshua Coats wrote:
> I've been experimenting with a FreeBSD 8.1 build, booting with a root in 
> zfs, but I've found a problem with the kernel:  using the generic kernel 
> works fine, but this particular server needs ipsec enabled, and the 
> kernel I built with ipsec support for some reason can't mount the zfs 
> partitions, despite loading what I believe are the necessary kernel 
> modules (zfs.ko, opensolaris.ko) at startup.

I'm assuming you're booting from a UFS /boot? Otherwise you'd need to build
the required modules into the kernel.

Maybe you need to build/install a zfs-enabled bootloader? I see some code in
/usr/src/sys/boot/i386/zfsboot/ and /usr/src/sys/boot/i386/zfsloader/, but I'm
not a ZFS user.

> Does special zfs support need to be built into the kernel?  The only 
> modifications from the generic kernel for the ipsec kernel I'm using 
> are:
> 
> options IPSEC
> options IPSEC_FILTERTUNNEL
> device crypto
> 
> This specific kernel config worked fine on FreeBSD 7.3, so I'm at a 
> loss.

When building a custom kernel, _always_ start from a GENERIC kernel from the
release you're using. There have been changes between 7.3 and 8.1 that you are
probably missing. 

Roland
-- 
R.F.Smith                                   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 196 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-questions/attachments/20100803/9575f98b/attachment.pgp