do I have to compile a new kernel? or just add options somehow?

[Fleuriot Damien]

On Dec 5, 2013, at 3:35 PM, "firmdog at gmail.com" <firmdog at gmail.com> wrote:

> I am having difficulty understanding what is compiled into the GENERIC
> kernel.
> 
> I need to enable "device crypto" with IPSEC and IPSEC_NAT_T options.
> 
> Can I just configure the GENERIC kernel in a config file? Or do I have to
> compile a totally new kernel?
> _______________________________________________
> freebsd-questions at freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "freebsd-questions-unsubscribe at freebsd.org"


While it's far from being a good practice, you can simply add your:
device crypto
options IPSEC
options IPSEC_NAT_T

to /sys/amd64/conf/GENERIC (assuming you're running a 64bit release that is).


Then: cd /usr/src && make kernel-toolchain && make buildkernel

Once the kernel is built, you only need to "make installkernel" and reboot.

It is good practice, before rebooting, to run "mergemaster -p" , even if you've only done a minor upgrade, let good habits sink in ;)




Regarding what is compiled in the GENERIC kernel, you can find the included options and devices at:
/sys/amd64/conf/GENERIC
or
/sys/i386/conf/GENERIC

You may also run config -x /boot/kernel/kernel , if your kernel was built with INCLUDE_CONFIG_FILE , which GENERIC does.