conf: Generate and install config snippets also for charon-cmd and charon-nm

This allows easier customization for distributions (e.g. disable some
plugins by default).
This commit is contained in:
Tobias Brunner
2026-03-17 08:08:38 +01:00
parent 9d268feabd
commit 0d10fa6dda
4 changed files with 59 additions and 8 deletions
+10
View File
@@ -0,0 +1,10 @@
charon-cmd {}
Section with settings specific to the CLI client `charon-cmd`.
Settings from the `charon` section are not inherited, but many can be used
here as well.
charon-cmd.load_modular := yes
Load only explicitly enabled plugins
charon-cmd.plugins.include charon-cmd/*.conf
Plugin config snippets used by charon-cmd
+6
View File
@@ -12,6 +12,9 @@ charon-nm.install_virtual_ip_on = lo
Interface on which virtual IP addresses are installed. Note that NM
also installs the virtual IPs on the XFRM interface.
charon-nm.load_modular := yes
Load only explicitly enabled plugins
charon-nm.mtu = 1400
MTU for XFRM interfaces created by the NM plugin.
@@ -43,6 +46,9 @@ charon-nm.routing_table_prio = 210
Priority of the routing table. Higher than the default priority used for the
regular IKE daemon.
charon-nm.plugins.include charon-nm/*.conf
Plugin config snippets used by charon-nm
charon-nm.plugins.kernel-netlink.fwmark = !210
Make packets with this mark ignore the routing table. Must be the same mark
set in charon-nm.plugins.socket-default.fwmark.