mirror of
https://github.com/hwdsl2/docker-ipsec-vpn-server.git
synced 2026-04-26 01:55:53 +03:00
[GH-ISSUE #464] ERROR: no XFRM kernel support detected #434
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @mailguest on GitHub (Dec 16, 2024).
Original GitHub issue: https://github.com/hwdsl2/docker-ipsec-vpn-server/issues/464
任务列表
问题描述
我的服务器启动报错如下：
2024-12-16T13:15:01.087574+00:00 ipsec-vpn-server pluto[853]: starting up 3 helper threads
2024-12-16T13:15:01.087610+00:00 ipsec-vpn-server pluto[853]: started thread for helper 0
2024-12-16T13:15:01.087626+00:00 ipsec-vpn-server pluto[853]: helper(1): seccomp security for helper not supported
2024-12-16T13:15:01.087645+00:00 ipsec-vpn-server pluto[853]: started thread for helper 1
2024-12-16T13:15:01.087658+00:00 ipsec-vpn-server pluto[853]: helper(2): seccomp security for helper not supported
2024-12-16T13:15:01.087671+00:00 ipsec-vpn-server pluto[853]: started thread for helper 2
2024-12-16T13:15:01.087686+00:00 ipsec-vpn-server pluto[853]: helper(3): seccomp security for helper not supported
2024-12-16T13:15:01.087698+00:00 ipsec-vpn-server pluto[853]: using Linux xfrm kernel support code on #0 SMP Fri Sep 20 03:08:02 2024
2024-12-16T13:15:01.087732+00:00 ipsec-vpn-server pluto[853]: FATAL ERROR: no XFRM kernel support detected, missing /proc/sys/net/core/xfrm_acq_expires and /proc/net/xfrm_stat: No such file or directory (errno 2)
2024-12-16T13:15:01.087762+00:00 ipsec-vpn-server pluto[853]: WARNING: helper threads still running
2024-12-16T13:15:01.087782+00:00 ipsec-vpn-server pluto[853]: ERROR: netlink write() of XFRM_MSG_FLUSHPOLICY message for flush policy failed: Bad file descriptor (errno 9)
2024-12-16T13:15:01.087790+00:00 ipsec-vpn-server pluto[853]: ERROR: netlink write() of XFRM_MSG_FLUSHSA message for flush state failed: Bad file descriptor (errno 9)
2024-12-16T13:15:01.087965+00:00 ipsec-vpn-server pluto[853]: FATAL: ASSERTION FAILED: event_initialized(ev) (free_signal_handlers() +440 programs/pluto/server.c)
重现步骤
重现该 bug 的步骤：
期待的正确结果
希望得到解决办法。
日志
启用日志，检查 VPN 状态，并且添加错误日志以帮助解释该问题（如果适用）。
docker exec -it ipsec-vpn-server ipsec status
ERROR: ipsec whack: Pluto is not running (no "/run/pluto/pluto.ctl"): No such file or directory (errno 2)
服务器信息
其它信息
添加关于该 bug 的其它信息。
@hwdsl2 commented on GitHub (Dec 16, 2024):
@mailguest 你好！你的服务器日志中的错误
no XFRM kernel support detected...说明 Docker 主机的 Linux 系统内核不支持 IPsec VPN。建议你另外尝试 IPsec VPN 以外的其他解决方案。