From owner-freebsd-questions@FreeBSD.ORG Thu Dec 5 15:30:28 2013 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id E893F197 for ; Thu, 5 Dec 2013 15:30:28 +0000 (UTC) Received: from mail-ea0-x22d.google.com (mail-ea0-x22d.google.com [IPv6:2a00:1450:4013:c01::22d]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by mx1.freebsd.org (Postfix) with ESMTPS id 801D314C4 for ; Thu, 5 Dec 2013 15:30:28 +0000 (UTC) Received: by mail-ea0-f173.google.com with SMTP id o10so386020eaj.4 for ; Thu, 05 Dec 2013 07:30:26 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=B7oPG7pVQWsr/HipTIaFeiGhGY5aHlZtm/N5aW79Bds=; b=PByTr7eAi/2sylputUMemvWDtWk+I5xr5NfjxjQSZy0Ig39mqM4fZ40SC02+B85RWN 3/M9Hjmo1vC5+8ajMPcFsL+5s635HJw76esRWP6NRBluLMPQeKHGoEMzwb/GJIVYQaE+ 2eE+v7tDNU5iPekDOketkxDBE10J3wxOU9NSUdwQUbclwdvmOK91iHGxYANQYSu6u0sz lAHHH93N77mS92v9anBStiZksF/JRfrAwbWkWUI5LIswjbUKZia1zCL6F3XWYNgM/r7r 3SMT0y4t45AujWw4WWU5hCE6IqWJD8WIwCHr/U4c5dJdwfYJMrEIQEtoFnoCe2Dn6HSE 7Vog== MIME-Version: 1.0 X-Received: by 10.15.83.8 with SMTP id b8mr77403421eez.6.1386257426857; Thu, 05 Dec 2013 07:30:26 -0800 (PST) Received: by 10.14.210.199 with HTTP; Thu, 5 Dec 2013 07:30:26 -0800 (PST) In-Reply-To: <1A249B2C-B341-4270-B343-627901FD9562@my.gd> References: <1A249B2C-B341-4270-B343-627901FD9562@my.gd> Date: Thu, 5 Dec 2013 10:30:26 -0500 Message-ID: Subject: Re: do I have to compile a new kernel? or just add options somehow? From: "firmdog@gmail.com" To: Fleuriot Damien Content-Type: text/plain; charset=ISO-8859-1 X-Content-Filtered-By: Mailman/MimeDel 2.1.17 Cc: freebsd-questions@freebsd.org X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 05 Dec 2013 15:30:29 -0000 So the answer is that it's NOT possible to load modules at boot time for GENERIC? I have to actually build a new kernel? Thanks! On Thu, Dec 5, 2013 at 9:42 AM, Fleuriot Damien wrote: > > On Dec 5, 2013, at 3:35 PM, "firmdog@gmail.com" wrote: > > > I am having difficulty understanding what is compiled into the GENERIC > > kernel. > > > > I need to enable "device crypto" with IPSEC and IPSEC_NAT_T options. > > > > Can I just configure the GENERIC kernel in a config file? Or do I have to > > compile a totally new kernel? > > _______________________________________________ > > freebsd-questions@freebsd.org mailing list > > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > > To unsubscribe, send any mail to " > freebsd-questions-unsubscribe@freebsd.org" > > > While it's far from being a good practice, you can simply add your: > device crypto > options IPSEC > options IPSEC_NAT_T > > to /sys/amd64/conf/GENERIC (assuming you're running a 64bit release that > is). > > > Then: cd /usr/src && make kernel-toolchain && make buildkernel > > Once the kernel is built, you only need to "make installkernel" and reboot. > > It is good practice, before rebooting, to run "mergemaster -p" , even if > you've only done a minor upgrade, let good habits sink in ;) > > > > > Regarding what is compiled in the GENERIC kernel, you can find the > included options and devices at: > /sys/amd64/conf/GENERIC > or > /sys/i386/conf/GENERIC > > You may also run config -x /boot/kernel/kernel , if your kernel was built > with INCLUDE_CONFIG_FILE , which GENERIC does. > >