From 360dd126f6c9fd0a2a403f01f7ca735119397eca Mon Sep 17 00:00:00 2001 From: Waldemar Brodkorb Date: Wed, 4 Feb 2026 16:35:27 +0100 Subject: [PATCH] package/strongswan: add Linux kernel options See here for options required by Strongswan to work properly: https://docs.strongswan.org/docs/latest/install/kernelModules.html We only enable a subset, which is the bare minimum to start charon IKEv2 daemon. For advanced users this might be not enough. Signed-off-by: Waldemar Brodkorb Signed-off-by: Marcus Hoffmann (cherry picked from commit 8090d0eb9e252eb6a589d2b4fddee8b6ec83764d) Signed-off-by: Thomas Perale --- package/strongswan/strongswan.mk | 12 ++++++++++++ 1 file changed, 12 insertions(+) diff --git a/package/strongswan/strongswan.mk b/package/strongswan/strongswan.mk index 1c1ce67350..4185e13288 100644 --- a/package/strongswan/strongswan.mk +++ b/package/strongswan/strongswan.mk @@ -96,4 +96,16 @@ STRONGSWAN_CONF_OPTS += \ --disable-connmark \ --disable-forecast +# bare minimum to start charon +define STRONGSWAN_LINUX_CONFIG_FIXUPS + $(call KCONFIG_ENABLE_OPT,CONFIG_INET) + $(call KCONFIG_ENABLE_OPT,CONFIG_NET) + $(call KCONFIG_ENABLE_OPT,CONFIG_NETLINK) + $(call KCONFIG_ENABLE_OPT,CONFIG_INET_AH) + $(call KCONFIG_ENABLE_OPT,CONFIG_INET_ESP) + $(call KCONFIG_ENABLE_OPT,CONFIG_XFRM) + $(call KCONFIG_ENABLE_OPT,CONFIG_XFRM_USER) + $(call KCONFIG_ENABLE_OPT,CONFIG_XFRM_INTERFACE) +endef + $(eval $(autotools-package))