/testing/guestbin/swan-prep kroot@swantest:/home/build/libreswan/testing/pluto/newoe-24-poc-poc-fast\[root@road newoe-24-poc-poc-fast]# cp policies/* /etc/ipsec.d/policies/ kroot@swantest:/home/build/libreswan/testing/pluto/newoe-24-poc-poc-fast\[root@road newoe-24-poc-poc-fast]# cp road-ikev2-oe.conf /etc/ipsec.d/ikev2-oe.conf kroot@swantest:/home/build/libreswan/testing/pluto/newoe-24-poc-poc-fast\[root@road newoe-24-poc-poc-fast]# echo "192.1.2.0/24" >> /etc/ipsec.d/policies/private-or-clear kroot@swantest:/home/build/libreswan/testing/pluto/newoe-24-poc-poc-fast\[root@road newoe-24-poc-poc-fast]# ipsec start Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Redirecting to: namespaces direct start via ipsec pluto kroot@swantest:/home/build/libreswan/testing/pluto/newoe-24-poc-poc-fast\[root@road newoe-24-poc-poc-fast]# /testing/pluto/bin/wait-until-pluto-started kroot@swantest:/home/build/libreswan/testing/pluto/newoe-24-poc-poc-fast\[root@road newoe-24-poc-poc-fast]# # ensure for tests acquires expire before our failureshunt=2m kroot@swantest:/home/build/libreswan/testing/pluto/newoe-24-poc-poc-fast\[root@road newoe-24-poc-poc-fast]# echo 30 > /proc/sys/net/core/xfrm_acq_expires kroot@swantest:/home/build/libreswan/testing/pluto/newoe-24-poc-poc-fast\[root@road newoe-24-poc-poc-fast]# # give OE policies time to load kroot@swantest:/home/build/libreswan/testing/pluto/newoe-24-poc-poc-fast\[root@road newoe-24-poc-poc-fast]# sleep 5 kroot@swantest:/home/build/libreswan/testing/pluto/newoe-24-poc-poc-fast\[root@road newoe-24-poc-poc-fast]# ip -s xfrm monitor > /tmp/xfrm-monitor.out & [1] 15806 kroot@swantest:/home/build/libreswan/testing/pluto/newoe-24-poc-poc-fast\[root@road newoe-24-poc-poc-fast]# echo "initdone" initdone kroot@swantest:/home/build/libreswan/testing/pluto/newoe-24-poc-poc-fast\[root@road newoe-24-poc-poc-fast]# ping -n -c 4 -i 0.05 -I 192.1.3.209 192.1.2.23 PING 192.1.2.23 (192.1.2.23) from 192.1.3.209 : 56(84) bytes of data. 64 bytes from 192.1.2.23: icmp_seq=2 ttl=64 time=0.072 ms 64 bytes from 192.1.2.23: icmp_seq=3 ttl=64 time=0.070 ms 64 bytes from 192.1.2.23: icmp_seq=4 ttl=64 time=0.067 ms --- 192.1.2.23 ping statistics --- 4 packets transmitted, 3 received, 25% packet loss, time 155ms rtt min/avg/max/mdev = 0.067/0.069/0.072/0.009 ms [1]+ Terminated ip -s xfrm monitor > /tmp/xfrm-monitor.out kroot@swantest:/home/build/libreswan/testing/pluto/newoe-24-poc-poc-fast\[root@road newoe-24-poc-poc-fast]# # wait on OE retransmits and rekeying kroot@swantest:/home/build/libreswan/testing/pluto/newoe-24-poc-poc-fast\[root@road newoe-24-poc-poc-fast]# sleep 5 kroot@swantest:/home/build/libreswan/testing/pluto/newoe-24-poc-poc-fast\[root@road newoe-24-poc-poc-fast]# # will show two established tunnels and no shunts kroot@swantest:/home/build/libreswan/testing/pluto/newoe-24-poc-poc-fast\[root@road newoe-24-poc-poc-fast]# ipsec whack --trafficstatus whack: is Pluto running? connect() for "/run/pluto/pluto.ctl" failed (111 Connection refused) kroot@swantest:/home/build/libreswan/testing/pluto/newoe-24-poc-poc-fast\[root@road newoe-24-poc-poc-fast 33]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 33 roadrun.sh 'ipsec whack --trafficstatus' <<<<<<<<<>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 33 roadrun.sh 'ipsec whack --shuntstatus' <<<<<<<<< /dev/null 2> /dev/null kroot@swantest:/home/build/libreswan/testing/pluto/newoe-24-poc-poc-fast\[root@road newoe-24-poc-poc-fast 1]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 1 roadrun.sh 'killall ip > /dev/null 2> /dev/null' <<<<<<<<<>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 33 roadrun.sh 'ipsec whack --trafficstatus' <<<<<<<<< [192.1.2.23-192.1.2.23:0-65535 0] kroot@swantest:/home/build/libreswan/testing/pluto/newoe-24-poc-poc-fast\[root@road newoe-24-poc-poc-fast]# : ==== cut ==== kroot@swantest:/home/build/libreswan/testing/pluto/newoe-24-poc-poc-fast\[root@road newoe-24-poc-poc-fast]# ipsec auto --status whack: is Pluto running? connect() for "/run/pluto/pluto.ctl" failed (111 Connection refused) kroot@swantest:/home/build/libreswan/testing/pluto/newoe-24-poc-poc-fast\[root@road newoe-24-poc-poc-fast 33]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 33 final.sh 'ipsec auto --status' <<<<<<<<<>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 1 final.sh 'if [ -f /sbin/ausearch ]; then ausearch -r -m avc -ts recent ; fi' <<<<<<<<<