[GH-ISSUE #145] can't modprobe af_key on GKE Kubernetes #133

Closed
opened 2026-03-02 07:27:59 +03:00 by kerem · 3 comments
Owner

Originally created by @zegetech on GitHub (May 7, 2019).
Original GitHub issue: https://github.com/hwdsl2/docker-ipsec-vpn-server/issues/145

Does this work on GKE. Trying the ubuntu GKE node image and note getting through to modprobe af_key.

getting

 modprobe: ERROR: ../libkmod/libkmod.c:586 kmod_search_moddep() could not open moddep file '/lib/modules/4.15.0-1028-gcp/modules.dep.bin'
 modprobe: FATAL: Module af_key not found in directory /lib/modules/4.15.0-1028-gcp 

Originally created by @zegetech on GitHub (May 7, 2019). Original GitHub issue: https://github.com/hwdsl2/docker-ipsec-vpn-server/issues/145 Does this work on GKE. Trying the ubuntu GKE node image and note getting through to modprobe af_key. getting ```bash modprobe: ERROR: ../libkmod/libkmod.c:586 kmod_search_moddep() could not open moddep file '/lib/modules/4.15.0-1028-gcp/modules.dep.bin' modprobe: FATAL: Module af_key not found in directory /lib/modules/4.15.0-1028-gcp ```
kerem closed this issue 2026-03-02 07:27:59 +03:00
Author
Owner

@hwdsl2 commented on GitHub (May 7, 2019):

@zegetech Hello! Unfortunately, this Docker image has not been tested on GKE. According to your logs, your server's kernel is missing its corresponding kernel modules in /lib/modules/4.15.0-1028-gcp. Once you fix that, you'll be able to use modprobe to insert the af_key module.

<!-- gh-comment-id:490264851 --> @hwdsl2 commented on GitHub (May 7, 2019): @zegetech Hello! Unfortunately, this Docker image has not been tested on GKE. According to your logs, your server's kernel is missing its corresponding kernel modules in `/lib/modules/4.15.0-1028-gcp`. Once you fix that, you'll be able to use `modprobe` to insert the `af_key` module.
Author
Owner

@hwdsl2 commented on GitHub (Jun 9, 2019):

The af_key kernel module is no longer required in the latest version of this Docker image with Libreswan 3.28.

<!-- gh-comment-id:500246406 --> @hwdsl2 commented on GitHub (Jun 9, 2019): The `af_key` kernel module is no longer required in the latest version of this Docker image with Libreswan 3.28.
Author
Owner

@zegetech commented on GitHub (Jun 11, 2019):

Great. Thanks @hwdsl2 . Had got it work by

  1. Using an ubuntu Node image
  2. Doing a host mount on the deployment to /lib/modules

Now i can use the GKE default and more secure cos image

<!-- gh-comment-id:500764760 --> @zegetech commented on GitHub (Jun 11, 2019): Great. Thanks @hwdsl2 . Had got it work by 1. Using an `ubuntu` Node image 2. Doing a host mount on the deployment to /lib/modules Now i can use the GKE default and more secure `cos` image
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/docker-ipsec-vpn-server#133
No description provided.