Thursday, 11 February 2016

Re: Strongswan merge for Xenial

Hi All

On Sun, Jan 24, 2016 at 9:38 PM, Simon Deziel <> wrote:
Hi Ryan,

On 2016-01-22 11:54 AM, Ryan Harper wrote:
> Hello,
> I've been working on merging[1] strongswan from Debian into Ubuntu for
> Xenial.  We've not completed a merge with Debian for some time (Feb 19,
> 2014 was the last time).  Ubuntu has been using version 5.1.2 since then
> but Debian and upstream have moved on.  Ubuntu has collected a large delta
> between Debian and with this merge I'm attempting to reduce the delta to
> ease merging in the future.  In particular, the major change would be to
> no longer create a package per-plugin and instead use the more general
> standard/extra plugin packages as in Debian.  Each plugin has an
> individual conf file which controls settings including whether to load or
> not.  Currently the default template conf files default to loading plugins
> if present;  it's not clear to me if this is a sensible default or if we
> should left them off by default.  Note that Strongswan doesn't currently
> have something akin to apache's a2enmod and a2dismod meaning users will
> need to edit conf as needed.  During this merge, I've also been using a
> git-based merge workflow and the git repo tracking it is available here[3].
> Since the delta is large, I want to make sure that we document the changes
> and provide opportunity for users of Strongswan in Ubuntu to provide
> feedback and comments on this merge.  I've updated the package and placed
> it in a PPA[2].

Once more update in the PPA[1]; this time with working dist-upgrade with all plugins

I've captured my dist-upgrade test here (uses lxd) here[2]

Changelog updates since 1ubuntu2:

strongswan (5.3.5-1ubuntu4) xenial; urgency=medium

  * debian/control: fix i386 build, learn Architecture: all vs. any.

 -- Ryan Harper <>  Wed, 10 Feb 2016 20:32:45 -0600

strongswan (5.3.5-1ubuntu3) xenial; urgency=medium

  * debian/control: Add missing strongswan-plugin-* virtual packages to fix
    dist-upgrade from 5.1.2-0ubuntu8 to 5.3.5-1ubuntu3

 -- Ryan Harper <>  Wed, 10 Feb 2016 14:22:00 -0600

Remaining TODOs:
  - drop libfastcgi, clearsilver-dev builddeps and plugins
  - confirm none of the default packages/plugins have dependencies on packages outside of main
  - create dep8 test for quick validation of ipsec daemon

1. ppa:raharper/merges