rhel, debian: Add missing restart policy to ipsec service.

Currently, if openvswitch-ipsec service will die for any reason it will not be restarted. At the same time, that will prevent updating tunnel configuration and prohibit adding new nodes in OVN clusters, for example. Add the 'on-failure' restart policy, so it behaves the same as all other OVS daemons. Acked-by: Frode Nordahl <[email protected]> Signed-off-by: Ilya Maximets <[email protected]>
openvswitch · Jan 16, 2025 · 77a63b5 · 77a63b5
1 parent 46af8a2
commit 77a63b5
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 0 deletions.
diff --git a/debian/openvswitch-ipsec.service b/debian/openvswitch-ipsec.service
@@ -6,6 +6,7 @@ After=openvswitch-switch.service
 [Service]
 Type=forking
 PIDFile=/run/openvswitch/ovs-monitor-ipsec.pid
+Restart=on-failure
 ExecStart=/usr/share/openvswitch/scripts/ovs-ctl --no-monitor \
                     --ike-daemon=strongswan start-ovs-ipsec
 ExecStop=/usr/share/openvswitch/scripts/ovs-ctl stop-ovs-ipsec

diff --git a/rhel/usr_lib_systemd_system_openvswitch-ipsec.service b/rhel/usr_lib_systemd_system_openvswitch-ipsec.service
@@ -6,6 +6,7 @@ After=openvswitch.service
 [Service]
 Type=forking
 PIDFile=/run/openvswitch/ovs-monitor-ipsec.pid
+Restart=on-failure
 ExecStart=/usr/share/openvswitch/scripts/ovs-ctl --no-monitor \
                     --ike-daemon=libreswan start-ovs-ipsec
 ExecStop=/usr/share/openvswitch/scripts/ovs-ctl stop-ovs-ipsec