Date: Thu, 17 Sep 2020 15:50:43 -0700 From: John Baldwin <jhb@FreeBSD.org> To: =?UTF-8?Q?Olivier_Cochard-Labb=c3=a9?= <olivier@freebsd.org> Cc: "Andrey V. Elsukov" <ae@freebsd.org>, src-committers <src-committers@freebsd.org>, svn-src-all <svn-src-all@freebsd.org>, svn-src-head <svn-src-head@freebsd.org> Subject: Re: svn commit: r365449 - head/sbin/rcorder Message-ID: <86cadaa8-12e6-8b61-a8d1-758a7722b795@FreeBSD.org> In-Reply-To: <CA%2Bq%2BTcq0um=SjmFdP-thcKhf7DGuBxewc0E-690HB0tT5riVaw@mail.gmail.com> References: <202009081036.088AaCk8085096@repo.freebsd.org> <CA%2Bq%2BTcr%2B3Gp4EcmJoLYC0JEOmuVzYdujMQdC4P=n9Zi4jYMmkQ@mail.gmail.com> <1ccf2cf7-eb01-a200-4335-4674a010f8a1@FreeBSD.org> <CA%2Bq%2BTcq0um=SjmFdP-thcKhf7DGuBxewc0E-690HB0tT5riVaw@mail.gmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On 9/17/20 3:44 PM, Olivier Cochard-Labbé wrote: > On Thu, Sep 17, 2020 at 10:21 PM John Baldwin <jhb@freebsd.org> wrote: >> I think long term we want OCF's notions of sessions to be a bit more >> fluid such that "client" sessions for things like GELI and IPSec can >> be backed by one or more "driver" sessions (including "driver" sessions >> coming and going as devices come and go). That's a fair bit more work >> however. >> >> > And why not simply add 'kld' into the REQUIRE part of /etc/rc.d/ipsec ? > But this will fix only IPsec: What about other crypto consumers ? The problem is that kld_list can be used to load all sorts of modules. Perhaps some of them need to be loaded after the network is configured, for example, but ipsec is probably before NETWORKING, so moving kld earlier would break those modules. The problem with 'kld' is that it is super generic so there isn't a "right" place to put it. I'm not sure of an easy solution. In your case, if you put aesni_load=YES in loader.conf instead of putting aesni in kld_list you would be fine though. I'm not sure it's really safe to assume that things loaded by kld_list are available for any boot-time services. -- John Baldwin
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?86cadaa8-12e6-8b61-a8d1-758a7722b795>