/testing/guestbin/swan-prep
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-ddns-02\[root@west ikev2-ddns-02]# ipsec start
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Redirecting to: /etc/init.d/ipsec start
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Starting pluto IKE daemon for IPsec: 
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-ddns-02\[root@west ikev2-ddns-02]# /testing/pluto/bin/wait-until-pluto-started
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-ddns-02\[root@west ikev2-ddns-02]# cp resolv.conf /etc
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-ddns-02\[root@west ikev2-ddns-02]# # need to disable ipv6 and activate auto-interface
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-ddns-02\[root@west ikev2-ddns-02]# cp west-unbound.conf /etc/unbound/unbound.conf
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-ddns-02\[root@west ikev2-ddns-02]# # will throw an error about bad unresolvable name
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-ddns-02\[root@west ikev2-ddns-02]# echo "initdone"
initdone
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-ddns-02\[root@west ikev2-ddns-02]# sleep 5
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-ddns-02\[root@west ikev2-ddns-02]# ipsec status |grep "===" # should show %dns for pending resolving
whack: is Pluto running?  connect() for "/run/pluto/pluto.ctl" failed (111 Connection refused)
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-ddns-02\[root@west ikev2-ddns-02 1]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 1 westrun.sh 'ipsec status |grep "===" # should show %dns for pending resolving' <<<<<<<<<<tuc<<<<<<<<<<unbound-control-setup > /dev/null 2>&1
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-ddns-02\[root@west ikev2-ddns-02]# # use modified service file that skips ICANN root key checks
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-ddns-02\[root@west ikev2-ddns-02]# cat /lib/systemd/system/unbound.service | grep -v ExecStartPre > /etc/systemd/system/unbound.service
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-ddns-02\[root@west ikev2-ddns-02]# systemctl daemon-reload
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-ddns-02\[root@west ikev2-ddns-02]# systemctl start unbound.service
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-ddns-02\[root@west ikev2-ddns-02]# unbound-control local_data right.libreswan.org 3600 IN A 192.1.2.23
[1566825032] unbound-control[9552:0] error: connect: Connection refused for 127.0.0.1
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-ddns-02\[root@west ikev2-ddns-02 1]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 1 westrun.sh 'unbound-control local_data right.libreswan.org 3600 IN A 192.1.2.23' <<<<<<<<<<tuc<<<<<<<<<<# trigger DDNS event (saves us from waiting)
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-ddns-02\[root@west ikev2-ddns-02 1]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 1 westrun.sh '# trigger DDNS event (saves us from waiting)' <<<<<<<<<<tuc<<<<<<<<<<ipsec whack --ddns
whack: is Pluto running?  connect() for "/run/pluto/pluto.ctl" failed (111 Connection refused)
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-ddns-02\[root@west ikev2-ddns-02 33]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 33 westrun.sh 'ipsec whack --ddns' <<<<<<<<<<tuc<<<<<<<<<<# give conn time to establish by itself
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-ddns-02\[root@west ikev2-ddns-02 33]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 33 westrun.sh '# give conn time to establish by itself' <<<<<<<<<<tuc<<<<<<<<<<sleep 3
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-ddns-02\[root@west ikev2-ddns-02]# # tunnel should show up in final.sh
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-ddns-02\[root@west ikev2-ddns-02]# # seems to slow down/hang shutdown
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-ddns-02\[root@west ikev2-ddns-02]# rm /etc/resolv.conf
rm: cannot remove '/etc/resolv.conf': Device or resource busy
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-ddns-02\[root@west ikev2-ddns-02 1]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 1 westrun.sh 'rm /etc/resolv.conf' <<<<<<<<<<tuc<<<<<<<<<<echo done
done
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-ddns-02\[root@west ikev2-ddns-02]# ipsec whack --trafficstatus
whack: is Pluto running?  connect() for "/run/pluto/pluto.ctl" failed (111 Connection refused)
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-ddns-02\[root@west ikev2-ddns-02 33]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 33 final.sh 'ipsec whack --trafficstatus' <<<<<<<<<<tuc<<<<<<<<<<# clean up after ourselves
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-ddns-02\[root@west ikev2-ddns-02 33]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 33 final.sh '# clean up after ourselves' <<<<<<<<<<tuc<<<<<<<<<<rm -f /etc/systemd/system/unbound.service
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-ddns-02\[root@west ikev2-ddns-02]# : ==== cut ====
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-ddns-02\[root@west ikev2-ddns-02]# ipsec auto --status
whack: is Pluto running?  connect() for "/run/pluto/pluto.ctl" failed (111 Connection refused)
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-ddns-02\[root@west ikev2-ddns-02 33]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 33 final.sh 'ipsec auto --status' <<<<<<<<<<tuc<<<<<<<<<<: ==== tuc ====
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-ddns-02\[root@west ikev2-ddns-02]# ../bin/check-for-core.sh
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-ddns-02\[root@west ikev2-ddns-02]# if [ -f /sbin/ausearch ]; then ausearch -r -m avc -ts recent ; fi
type=AVC msg=audit(1566824781.750:169760): avc:  denied  { write } for  pid=5361 comm="ip" path="/tmp/pluto.log" dev="dm-0" ino=942309374 scontext=unconfined_u:system_r:ifconfig_t:s0 tcontext=unconfined_u:object_r:container_file_t:s0:c718,c778 tclass=file permissive=1
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-ddns-02\[root@west ikev2-ddns-02]# : ==== end ====
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-ddns-02\[root@west ikev2-ddns-02]#