Dustin C. Hatch
6aaf1b7dbb
The *esp4* kernel module does not load automatically on Fedora. Without this module, strongSwan can establish IKE SAs, but not ESP SAs. Listing the module name in a file in `/etc/modules-load.d` configures the *systemd-modules-load* service to load it at boot.
24 lines
483 B
YAML
24 lines
483 B
YAML
- name: ensure strongswan is installed
|
|
package:
|
|
name: strongswan
|
|
state: present
|
|
tags:
|
|
- install
|
|
|
|
- name: ensure esp4 module is configured to load at boot
|
|
copy:
|
|
src: esp4.modules-load.conf
|
|
dest: /etc/modules-load.d/esp4.conf
|
|
mode: '0644'
|
|
notify:
|
|
- load esp4 kernel module
|
|
|
|
- name: ensure strongswan starts at boot
|
|
service:
|
|
name: strongswan
|
|
enabled: true
|
|
- name: ensure strongswan is running
|
|
service:
|
|
name: strongswan
|
|
state: started
|