Re: bird and ipsec (strongswan) routes

2024-11-21 Thread Thomas Liske
Hi, I prefer to use XFRM interfaces on Linux. You get an dedicated interface for each site where you can use any static or dynamic (L3- based -- Did you consider to use eBGP between your sites?) routing setup. You can configure it like a VTI while not being a VTI ;-) When using StrongSwan you nee

[PATCH] Set PR_SET_DUMPABLE before switching uid to allow core dumps.

2023-01-13 Thread Thomas Liske
Signed-off-by: Thomas Liske --- This patch sets the PR_SET_DUMPABLE capability before switching to a unprivileged user to allow core dumps (see also the paragraph about set-user-ID in `man 5 core`) Background: While debugging bird on Alpine we wonder why it was not possible to get a core dump