[gentoo-embedded] GNAP 1.5 and ipsec-tools

[gentoo-embedded] GNAP 1.5 and ipsec-tools

[John Hampton]

I'm trying out GNAP 1.5 and have added ipsec-tools to
specs/packages.conf so that I can create IPSec tunnels.  I've also
modified the kernel.config etc.  When running gnap_make, it fails
building the livecd stage 1 phase.  The relevant parts of the gnap_make
log file are:

checking net/pfkeyv2.h usability... no
checking net/pfkeyv2.h presence... no
checking for net/pfkeyv2.h... no
checking netinet/ipsec.h usability... no
checking netinet/ipsec.h presence... no
checking for netinet/ipsec.h... no
checking for /usr/src/linux/include/linux/pfkeyv2.h... no
checking for /usr/src/linux/include/linux/pfkeyv2.h... (cached) no
configure: error: Unable to find linux-2.6 kernel headers

!!! ERROR: net-firewall/ipsec-tools-0.4-r1 failed.
!!! Function src_compile, Line 35, Exitcode 1
!!! (no error message)
!!! If you need support, post the topmost build error, NOT this status
message.

<snip>
Gentoo Catalyst, version 1.1.0
Copyright 2003-2004 The Gentoo Foundation
Distributed under the GNU General Public License version 2

Using command line specified Catalyst configuration file, gnapcatalyst.conf
Setting storedir to config file value "/var/images/gnap/IMAGE"
Setting portdir to default value "/usr/portage"
Setting distdir to config file value "/usr/portage/distfiles"


Setting options to config file value "ccache pkgcache distcc"


Setting sharedir to config file value "/usr/lib/catalyst"
Compiler cache support enabled.
Package cache support enabled.
Distcc support enabled.
Building natively for x86
Setting up directories...
Running command "rm -rf
/var/images/gnap/IMAGE/tmp/gnap/livecd-stage1-x86-20050407"
Unpacking stage tarball...
Running command "tar xjpf
/var/images/gnap/IMAGE/builds/gnap/stage3-x86-20050407.tar.bz2 -C
/var/images/gnap/IMAGE/tmp/gnap/livecd-stage1-x86-20050407"
Unpacking portage tree snapshot...
Running command "tar xjpf
/var/images/gnap/IMAGE/snapshots/portage-20050407.tar.bz2 -C
/var/images/gnap/IMAGE/tmp/gnap/livecd-stage1-x86-20050407/usr"
Configuring profile link...
Running command "rm -f
/var/images/gnap/IMAGE/tmp/gnap/livecd-stage1-x86-20050407/etc/make.profile"
Running command "ln -sf ../usr/portage/profiles/uclibc/x86/hardened
/var/images/gnap/IMAGE/tmp/gnap/livecd-stage1-x86-20050407/etc/make.profile"
Configuring /etc/portage...
Running command "rm -rf
/var/images/gnap/IMAGE/tmp/gnap/livecd-stage1-x86-20050407/etc/portage"
Running command "cp -R /var/images/gnap/gnap-1.5/specs//portage_confdir
/var/images/gnap/IMAGE/tmp/gnap/livecd-stage1-x86-20050407/etc/portage"
Setting up chroot...
Running command "cp /etc/resolv.conf
/var/images/gnap/IMAGE/tmp/gnap/livecd-stage1-x86-20050407/etc"
Running command "rm -f
/var/images/gnap/IMAGE/tmp/gnap/livecd-stage1-x86-20050407/etc/make.conf"
Running command "/bin/bash
/usr/lib/catalyst/targets/livecd-stage1/livecd-stage1.sh run 'hotplug'
'metalog' 'vixie-cron' 'pciutils' 'usbutils' 'iputils' 'iproute2'
'ipsec-tools' 'dnsmasq' 'cbqinit' 'htbinit' 'dropbear' 'tcpdump' 'dash'
'shorewall' 'firehol' 'logrotate' 'livecd-tools' 'hwdata-knoppix'
'genkernel' 'iftop' 'openvpn' 'hwsetup' 'openntpd' 'dnsmasq' 'rrdtool'
'boa' 'rp-pppoe' 'traceroute' 'tcpdump' 'iptraf' 'bridge-utils' 'wget'"

!!! catalyst: LiveCD stage1 build aborting due to error.
!!! catalyst: could not complete build

(sorry for the line wraps)

my gnapcatalyst.conf has:

storedir="/var/images/gnap/IMAGE"
distdir="/usr/portage/distfiles"
options="ccache pkgcache distcc"
sharedir="/usr/lib/catalyst"

Anyway, it appears that it can't find 2.6 headers.  Anyone know how to
fix that?  I've tried symlinking
/var/images/gnap/IMAGE/tmp/gnap/livecd-stage1-20050407/usr/src/linux to
/usr/src/linux-2.6.9.  Obviously, that didn't work.  So, can anyone
explain to me where/how catalyst decides what linux headers to use when
compiling tools?  Perhaps it isn't even a catalyst problem.  Any help or
pointers would be much appreciated.

-John

--
gentoo-embedded@gentoo.org mailing list

Re: [gentoo-embedded] uclibc/hardened profile and ipsec-tools

[Thierry Carrez]

John Hampton wrote:

> checking net/pfkeyv2.h usability... no
> checking net/pfkeyv2.h presence... no
> checking for net/pfkeyv2.h... no
> checking netinet/ipsec.h usability... no
> checking netinet/ipsec.h presence... no
> checking for netinet/ipsec.h... no
> checking for /usr/src/linux/include/linux/pfkeyv2.h... no
> checking for /usr/src/linux/include/linux/pfkeyv2.h... (cached) no
> configure: error: Unable to find linux-2.6 kernel headers

I wouldn't say it's related to GNAP but rather to the uclibc/hardened
profile. You can test by chrooting in your livecd-stage1 tmp directory
and try emerging ipsec-tools from there, I guess it wouldn't work
either. If you can reproduce the problem that way, outside the GNAP
scope, you should probably file a bug.

I suspect that the current ipsec-tools ebuild doesn't pool enough deps
to work with the uclibc/x86/hardened profile that GNAP uses.

-- 
Koon
--
gentoo-embedded@gentoo.org mailing list