From owner-freebsd-questions@FreeBSD.ORG Thu Dec 5 14:42:22 2013 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id D457FD97 for ; Thu, 5 Dec 2013 14:42:22 +0000 (UTC) Received: from mail-wi0-f179.google.com (mail-wi0-f179.google.com [209.85.212.179]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by mx1.freebsd.org (Postfix) with ESMTPS id 68E691126 for ; Thu, 5 Dec 2013 14:42:22 +0000 (UTC) Received: by mail-wi0-f179.google.com with SMTP id z2so8343267wiv.12 for ; Thu, 05 Dec 2013 06:42:20 -0800 (PST) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:content-type:mime-version:subject:from :in-reply-to:date:cc:content-transfer-encoding:message-id:references :to; bh=bbNlJjAV8ne3Xz2o+SloPu2k14Nlrf7CVU0JhOher2E=; b=i6HyEOtG2a3ufM0lo/uqUSmw0GKHfhHj4AJJJA3eQqByr/B03MJd61zuZzlAthMIPG Gu7Tu40cSD6jBP0zJPw8E/omhZUrIxGDO5k9lTCNkNR3KZCK8RLGQPki3PJMChZevkJ7 A/KM3Mygz671KTzr5X8gOat7kjoCnVWAyF6eOIpRqJuGoVO9R5EGTBSQoggTox5xq7cL 8NaQetzFH7vekBQ9wQAv+nw0FQgrjLrmWr9sBipUoVuGn2ysYKSYCM2+USK468RHOftX CWAijC4C0H5l3X9DOwKwp+y87FFAcOCXwI6grxAN22ZoKfE6QPZ5YAaWn310NuRphRUj h+Iw== X-Gm-Message-State: ALoCoQkkUOJ9Zdys0Gfk3TeaTc3HPAS1Y3zjb+GbJ8hsokvp6rosmRwP8xpe7pIWVCXLn78Umupx X-Received: by 10.180.76.204 with SMTP id m12mr12414001wiw.9.1386254539933; Thu, 05 Dec 2013 06:42:19 -0800 (PST) Received: from dfleuriot.paris.hi-media-techno.com ([83.167.62.196]) by mx.google.com with ESMTPSA id e10sm6868234wiy.7.2013.12.05.06.42.18 for (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Thu, 05 Dec 2013 06:42:19 -0800 (PST) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 6.6 \(1510\)) Subject: Re: do I have to compile a new kernel? or just add options somehow? From: Fleuriot Damien In-Reply-To: Date: Thu, 5 Dec 2013 15:42:17 +0100 Content-Transfer-Encoding: quoted-printable Message-Id: <1A249B2C-B341-4270-B343-627901FD9562@my.gd> References: To: "firmdog@gmail.com" X-Mailer: Apple Mail (2.1510) Cc: freebsd-questions@freebsd.org X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 05 Dec 2013 14:42:22 -0000 On Dec 5, 2013, at 3:35 PM, "firmdog@gmail.com" = wrote: > I am having difficulty understanding what is compiled into the GENERIC > kernel. >=20 > I need to enable "device crypto" with IPSEC and IPSEC_NAT_T options. >=20 > Can I just configure the GENERIC kernel in a config file? Or do I have = to > compile a totally new kernel? > _______________________________________________ > freebsd-questions@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to = "freebsd-questions-unsubscribe@freebsd.org" While it's far from being a good practice, you can simply add your: device crypto options IPSEC options IPSEC_NAT_T to /sys/amd64/conf/GENERIC (assuming you're running a 64bit release that = is). Then: cd /usr/src && make kernel-toolchain && make buildkernel Once the kernel is built, you only need to "make installkernel" and = reboot. It is good practice, before rebooting, to run "mergemaster -p" , even if = you've only done a minor upgrade, let good habits sink in ;) Regarding what is compiled in the GENERIC kernel, you can find the = included options and devices at: /sys/amd64/conf/GENERIC or /sys/i386/conf/GENERIC You may also run config -x /boot/kernel/kernel , if your kernel was = built with INCLUDE_CONFIG_FILE , which GENERIC does.