[strongSwan] systemd swanctl possible error

[Noel Kuntze]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Hello Ygor,

The reason is simple: The provided strongswan-swanctl.service file does not have an [Install]
section. That means, that systemctl does not know from which target directories it should symlink to the .service file.
You are free to define your own [Install] section with your targets.
If you do not know what a [Install] section does, please read the man page for systemd unit files (man systemd.unit).

I use Arch Linux myself and created the strongswan-thermi, strongswan-privdrop and strongswan-git packages there.

Personally, I use the following service file instead of the one provided by strongswan:

[Unit]
Description=strongSwan IPsec IKEv1/IKEv2 daemon using swanctl
Requires=network.target
After=network.target

[Service]
Type=notify
ExecStart=/usr/bin/charon-systemd
ExecStartPost=/usr/bin/swanctl --load-all --noprompt
ExecReload=/usr/bin/swanctl --reload
Restart=on-failure

[Install]
WantedBy=multi-user.target


Mit freundlichen Grüßen/Regards,
Noel Kuntze

GPG Key ID: 0x63EC6658
Fingerprint: 23CA BB60 2146 05E7 7278 6592 3839 298F 63EC 6658

Am 02.01.2015 um 17:51 schrieb Ygor Regados:
> I am trying to use the new strongswan systemd service on Arch Linux. It
> is working after a manual start but when I try to "enable"
> strongswan-swanctl, it returns the following error:
>
>> # systemctl enable strongswan-swanctl
>> The unit files have no [Install] section. They are not meant to be enabled
>> using systemctl.
>> Possible reasons for having this kind of units are:
>> 1) A unit may be statically enabled by being symlinked from another unit's
>>    .wants/ or .requires/ directory.
>> 2) A unit's purpose may be to act as a helper for some other unit which has
>>    a requirement dependency on it.
>> 3) A unit may be started when needed via activation (socket, path, timer,
>>    D-Bus, udev, scripted systemctl call, ...).
>
> Is this expected (i.e. it should start automatically by other means)?
> Using strongSwan 5.2.1.
>
> Thanks,
> Ygor
>
> _______________________________________________
> Users mailing list
> Users at lists.strongswan.org
> https://lists.strongswan.org/mailman/listinfo/users

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=7NQE
-----END PGP SIGNATURE-----