From owner-freebsd-questions@FreeBSD.ORG  Tue Aug  3 15:57:21 2010
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 15617106567B
	for <freebsd-questions@freebsd.org>;
	Tue,  3 Aug 2010 15:57:21 +0000 (UTC)
	(envelope-from joshu@rescomp.berkeley.edu)
Received: from hal.rescomp.berkeley.edu (hal.Rescomp.Berkeley.EDU
	[169.229.70.150])
	by mx1.freebsd.org (Postfix) with ESMTP id 067BE8FC16
	for <freebsd-questions@freebsd.org>;
	Tue,  3 Aug 2010 15:57:20 +0000 (UTC)
Received: by hal.rescomp.berkeley.edu (Postfix, from userid 1364)
	id 87C30597CBA; Tue,  3 Aug 2010 08:40:52 -0700 (PDT)
Date: Tue, 3 Aug 2010 08:40:52 -0700
From: Joshua Coats <joshu@rescomp.berkeley.edu>
To: freebsd-questions@freebsd.org
Message-ID: <20100803154052.GA20157@hal.rescomp.berkeley.edu>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
"Bcc: joshu@rescomp.berkeley.edu"
User-Agent: Mutt/1.5.20 (2009-06-14)
Subject: ipsec and zfs on FreeBSD 8.1 -- kernel problem
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 03 Aug 2010 15:57:21 -0000

I've been experimenting with a FreeBSD 8.1 build, booting with a root in 
zfs, but I've found a problem with the kernel:  using the generic kernel 
works fine, but this particular server needs ipsec enabled, and the 
kernel I built with ipsec support for some reason can't mount the zfs 
partitions, despite loading what I believe are the necessary kernel 
modules (zfs.ko, opensolaris.ko) at startup.

Does special zfs support need to be built into the kernel?  The only 
modifications from the generic kernel for the ipsec kernel I'm using 
are:

options IPSEC
options IPSEC_FILTERTUNNEL
device crypto

This specific kernel config worked fine on FreeBSD 7.3, so I'm at a 
loss.

Thanks,

-- 
Joshua A. Coats
Unix Systems Administrator
Network and Infrastructure, RSSP-IT
University of California, Berkeley