{"id":3708,"date":"2022-12-20T17:19:49","date_gmt":"2022-12-20T20:19:49","guid":{"rendered":"http:\/\/lode.uno\/linux-man\/index.php\/2022\/12\/20\/_stackmanager-man8\/"},"modified":"2022-12-20T17:19:49","modified_gmt":"2022-12-20T20:19:49","slug":"_stackmanager-man8","status":"publish","type":"post","link":"https:\/\/lode.uno\/linux-man\/2022\/12\/20\/_stackmanager-man8\/","title":{"rendered":"_STACKMANAGER (man8)"},"content":{"rendered":"<h1 align=\"center\">_STACKMANAGER<\/h1>\n<p> <a href=\"#NAME\">NAME<\/a><br \/> <a href=\"#SYNOPSIS\">SYNOPSIS<\/a><br \/> <a href=\"#DESCRIPTION\">DESCRIPTION<\/a><br \/> <a href=\"#SEE ALSO\">SEE ALSO<\/a><br \/> <a href=\"#HISTORY\">HISTORY<\/a><br \/> <a href=\"#AUTHOR\">AUTHOR<\/a> <\/p>\n<hr>\n<h2>NAME <a name=\"NAME\"><\/a> <\/h2>\n<p style=\"margin-left:11%; margin-top: 1em\">ipsec__stackmanager \u2212 internal script to bring up kernel components for Libreswan<\/p>\n<h2>SYNOPSIS <a name=\"SYNOPSIS\"><\/a> <\/h2>\n<table width=\"100%\" border=\"0\" rules=\"none\" frame=\"void\" cellspacing=\"0\" cellpadding=\"0\">\n<tr valign=\"top\" align=\"left\">\n<td width=\"11%\"><\/td>\n<td width=\"52%\">\n<p style=\"margin-top: 1em\"><b>ipsec<\/b> <i>_stackmanager\u00a0start\u00a0<\/i>[\u2212\u2212xfrm]<\/p>\n<\/td>\n<td width=\"37%\"> <\/td>\n<\/tr>\n<tr valign=\"top\" align=\"left\">\n<td width=\"11%\"><\/td>\n<td width=\"52%\">\n<p style=\"margin-top: 1em\"><b>ipsec<\/b> <i>_stackmanager\u00a0stop<\/i><\/p>\n<\/td>\n<td width=\"37%\"> <\/td>\n<\/tr>\n<\/table>\n<h2>DESCRIPTION <a name=\"DESCRIPTION\"><\/a> <\/h2>\n<p style=\"margin-left:11%; margin-top: 1em\"><i>ipsec _stackmanager<\/i> is called from within the init sub\u2212system (systemd, upstart, sysv initscripts) to bring up the Libreswan kernel component as configured via the <i>protostack=<\/i> option in the <i>ipsec.conf<\/i> configuration file.<\/p>\n<p style=\"margin-left:11%; margin-top: 1em\">This involves loading and optionally unloading of the required kernel modules. Because the Linux kernel cannot autodetect most crypto related drivers on\u2212demand, _stackmanager handles loading the modules for the specific IPsec stack.<\/p>\n<p style=\"margin-left:11%; margin-top: 1em\">When the \u2212\u2212xfrm option is given to the start command, the XFRM stack is loaded regardless of the existence or contents of the ipsec.conf file. This is used for docker tests where the host system, which might not have libreswan installed, needs to run _stackmanager from the source tree to load the modules on the host so the modules are available inside the containers.<\/p>\n<h2>SEE ALSO <a name=\"SEE ALSO\"><\/a> <\/h2>\n<p style=\"margin-left:11%; margin-top: 1em\"><b>ip<\/b>(8), <b>ipsec_tncfg<\/b>(8), <b>ipsec.conf<\/b>(5), <b>ipsec_addconn<\/b>(8), <b>pluto<\/b>(8)<\/p>\n<h2>HISTORY <a name=\"HISTORY\"><\/a> <\/h2>\n<p style=\"margin-left:11%; margin-top: 1em\">This script was introduced in Libreswan. On the older Openswan systems, this functionality was split over various script files such as ipsec _startnetkey, ipsec _startklips, ipsec _realsetup and ipsec setup. Man page written for the Libreswan project <<b><font color=\"#0000FF\">https:\/\/libreswan.org\/<\/font><\/b><font color=\"#000000\">> by Paul Wouters.<\/font><\/p>\n<h2>AUTHOR <a name=\"AUTHOR\"><\/a> <\/h2>\n<p style=\"margin-left:11%; margin-top: 1em\"><font color=\"#000000\"><b>Paul Wouters<\/b><\/font><\/p>\n<p style=\"margin-left:17%;\"><font color=\"#000000\">placeholder to suppress warning<\/font><\/p>\n<hr>\n","protected":false},"excerpt":{"rendered":"<p>  ipsec__stackmanager \u2212 internal script to bring up kernel components for Libreswan <\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2],"tags":[5,52,817,4],"class_list":["post-3708","post","type-post","status-publish","format-standard","hentry","category-8-administracion-del-sistema","tag-5","tag-administracion","tag-ipsec__stackmanager","tag-man8"],"gutentor_comment":0,"_links":{"self":[{"href":"https:\/\/lode.uno\/linux-man\/wp-json\/wp\/v2\/posts\/3708","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/lode.uno\/linux-man\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/lode.uno\/linux-man\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/lode.uno\/linux-man\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/lode.uno\/linux-man\/wp-json\/wp\/v2\/comments?post=3708"}],"version-history":[{"count":0,"href":"https:\/\/lode.uno\/linux-man\/wp-json\/wp\/v2\/posts\/3708\/revisions"}],"wp:attachment":[{"href":"https:\/\/lode.uno\/linux-man\/wp-json\/wp\/v2\/media?parent=3708"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/lode.uno\/linux-man\/wp-json\/wp\/v2\/categories?post=3708"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/lode.uno\/linux-man\/wp-json\/wp\/v2\/tags?post=3708"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}