From owner-freebsd-current@FreeBSD.ORG Thu Nov 22 09:14:19 2007 Return-Path: Delivered-To: freebsd-current@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 400B116A46B for ; Thu, 22 Nov 2007 09:14:19 +0000 (UTC) (envelope-from frank@pinky.sax.de) Received: from post.frank-behrens.de (post.frank-behrens.de [82.139.255.138]) by mx1.freebsd.org (Postfix) with ESMTP id 8878C13C478 for ; Thu, 22 Nov 2007 09:14:18 +0000 (UTC) (envelope-from frank@pinky.sax.de) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=pinky.sax.de; h=from:to:date:mime-version:subject:content-type:content-transfer-encoding:content-description; q=dns/txt; s=pinky1; t=1195721210; i=frank@pinky.sax.de; bh=MJoPbC6bHykWe/LYEMsZSu09MNhH5ZK4YQbY/Wz/sAY=; b=fDKa/GsDchWUbB6dN3gyIXYnPyHtwm+vJoKB6UATrcuq4rb1fl4RF+mkEe47e0vGKFifeLg6sWLt1G/8kPAy+Q== Received: from [192.168.20.32] (sun.behrens [192.168.20.32]) by post.frank-behrens.de (8.14.2/8.14.1) with ESMTP-MSA id lAM8kgDD002815 for ; Thu, 22 Nov 2007 09:46:43 +0100 (CET) (envelope-from frank@pinky.sax.de) Message-Id: <200711220846.lAM8kgDD002815@post.frank-behrens.de> From: "Frank Behrens" To: freebsd-current@freebsd.org Date: Thu, 22 Nov 2007 09:46:43 +0100 MIME-Version: 1.0 Priority: normal X-mailer: Pegasus Mail for Windows (4.31, DE v4.31 R1) Content-type: text/plain; charset=US-ASCII Content-transfer-encoding: 7BIT Content-description: Mail message body X-Hashcash: 1:24:071122:freebsd-current@freebsd.org::bVTksavsci5ZrLc6:000000jUiX Subject: Can not boot 7.0-BETA3 with IPSEC X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 22 Nov 2007 09:14:19 -0000 Hi, I tried to use the new 7.0 version, but have some trouble. The PC has been running 5.x/6.x for years without problems, but my new kernel does not boot. A self compiled GENERIC 7.0- BETA3 kernel runs without problems. When I use the following kernel configuration ----------- include GENERIC ident GENIPSEC makeoptions DEBUG=-g # Build kernel with gdb(1) debug symbols options INVARIANTS # Enable calls of extra sanity checking options INVARIANT_SUPPORT # Extra sanity checks of internal structures, required by INVARIANTS options WITNESS # Enable checks to detect deadlocks and cycles options WITNESS_SKIPSPIN # Don't run witness on spinlocks for speed options IPSEC #IP security device crypto #options IPSEC_DEBUG #debug for IP security options IPSEC_FILTERTUNNEL #filter ipsec packets from a tunnel device puc nodevice uart options COM_MULTIPORT ---------- the kernel boots until FreeBSD 7.0-BETA3-200711220702 #1: Thu Nov 22 08:10:52 CET 2007 frank@moon.behrens:/data3/sys/obj/data3/sources/fbsd7/sys/GENIPSEC WARNING: WITNESS option enabled, expect reduced performance. ... cryptosoft0: on motherboard crypto: assign cryptosoft0 driver id 0, flags 100663296 ... Fast IPsec: Initialized Security Association Processing. ... SMP: AP CPU #1 Launched! cpu1 AP: ID: 0x01000000 VER: 0x00050014 LDR: 0x00000000 DFR: 0xffffffff lint0: 0x00010700 lint1: 0x00000400 TPR: 0x00000000 SVR: 0x000001ff timer: 0x000200ef therm: 0x00010000 err: 0x00010000 pcm: 0x00010000 WARNING: WITNESS option enabled, expect reduced performance. Trying to mount root from ufs:/dev/ad6s1a start_init: trying /sbin/init Then the system seems to hang, no messages, no reaction on serial console. With an different kernel including DDB I was not able to enter the kernel debugger, although I must admit that I never used DDB so maybe I made a mistake in this part. To repeat: A self compiled GENERIC kernel boots fine, I tried single user 6.2 world and multi user 7.0 world. But I was never able to boot a 7.0 kernel with IPSEC. Is my IPSEC kernel configuration ok? How should I debug the problem, additional debug prints in IPSEC code? Best regards, Frank -- Frank Behrens, Osterwieck, Germany PGP-key 0x5B7C47ED on public servers available.