1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21

# Consolidated IPsec configuration. Drives algorithm table, static SAs,
# and policy database from one oneshot. The original SMF split (algs +
# manual-key + policy) supports independent enabling of each piece;
# Hammerhead bundles them and skips steps where the config file is
# absent, covering every real combination cleanly.
#
# Replaces:
#   /lib/svc/manifest/network/ipsec/ipsecalgs.xml
#   /lib/svc/manifest/network/ipsec/manual-key.xml
#   /lib/svc/manifest/network/ipsec/policy.xml
[service]
name = "ipsec"
description = "IPsec algorithms, SAs, and policy"
type = "oneshot"
[exec]
start = "/etc/zyginit/services/ipsec/start.sh"
stop  = "/etc/zyginit/services/ipsec/stop.sh"
[dependencies]
requires = ["network"]
[restart]
on = "never"