On 8/7/24 08:21, Jim C via discuss wrote: > Hi, > > It seems libreswan is a dependency of the OVS IPSec package. It's piggybacked > on our OS when we installed the OVS IPSec pkg. However, our host is already > installed with strongSwan and we want to keep using that. Then we detect some > malfunction on the strongSwan side and we suspect it's due to two IKE daemon > (libreswan & strongSwan) making the OS confused. > > Now, can we not install libreswan in this process? And link the OVS IPSec to > use > strongSwan by default?
(Assuming you're using Rocky Linux as per the other thread.) AFAIK, fedora and RHEL (and Rocky by extension) are not providing strongSwan packages, so OVS RPMs are built with Libreswan as a dependency, as there is no alternative and we need to put the name of the ike daemon to the shipped systemd unit files in those packages. Otherwise, OVS IPsec package would not be usable out of the box. If you're installing strongSwan from a third party source, you'll need to modify OVS RPM spec file and systemd unit files and re-build the RPMs from source. There is no way to disable dependencies in the already built RPM packages. Best regards, Ilya Maximets. _______________________________________________ discuss mailing list disc...@openvswitch.org https://mail.openvswitch.org/mailman/listinfo/ovs-discuss
