debian/README.Debian

   1 * SAFETY MEASURES:
   2 ==================
   3
   4 Please consider setting this package "on hold" by typing
   5     echo "frr hold" | dpkg --set-selections
   6 and verifying this using
   7     dpkg --get-selections | grep 'hold$'
   8
   9 Setting a package "on hold" means that it will not automatically be upgraded.
  10 Instead apt-get only displays a warning saying that a new version would be
  11 available forcing you to explicitly type "apt-get install frr" to upgrade it.
  12
  13
  14 * What is frr?
  15 =================
  16
  17 http://www.frrouting.org/
  18 FRR is a routing software suite, providing implementations of OSPFv2,
  19 OSPFv3, RIP v1 and v2, RIPng, ISIS, PIM, BGP and LDP for Unix platforms, particularly
  20 FreeBSD and Linux and also NetBSD, to mention a few. FRR is a fork of Quagga
  21 which itself is a fork of Zebra.
  22 Zebra was developed by Kunihiro Ishiguro.
  23
  24
  25 * Build Profiles used in the upstream debian/
  26 =============================================
  27
  28 The following Build Profiles have been added:
  29
  30 - pkg.frr.nortrlib (pkg.frr.rtrlib)
  31   controls whether the RPKI module is built.
  32   Will be enabled by default at some point, adds some extra dependencies.
  33
  34 - pkg.frr.nosystemd
  35   Disables both systemd unit file installation as well as watchfrr sd_notify
  36   support at startup.  Removes libsystemd dependency.
  37
  38 Note that all options have a "no" form;  if you want to have your decision
  39 be sticky regardless of changes to what it defaults to, then always use one
  40 of the two.  For example, all occurrences of <pkg.frr.rtrlib> will at some
  41 point be replaced with <!pkg.frr.nortrlib>.
  42
  43 The main frr package has the exact same contents regardless of rtrlib or snmp
  44 choices.  The options only control frr-snmp and frr-rpki-rtrlib packages.
  45
  46 The main frr package does NOT have the same contents if pkg.frr.nosystemd is
  47 used.  This option should only be used for systems that do not have systemd,
  48 e.g. Ubuntu 14.04.
  49
  50
  51 * Debian Policy compliance notes
  52 ================================
  53
  54 - 4.15 Reproducibility
  55   FRR build is reproducible as outlined in version 4.2.1 of the Policy, but
  56   won't be reproducible when the build directory is varied.  This is because
  57   configure parameters are burned into the executables which includes CFLAGS
  58   like -fdebug-prefix-map=/build/directory/...
  59
  60
  61 * Daemon selection:
  62 ===================
  63
  64 The Debian package uses /etc/frr/daemons to tell the
  65 initscript which daemons to start. It's in the format
  66 <daemon>=<yes|no|priority>
  67 with no spaces (it's simply source-d into the initscript).
  68 Default is not to start anything, since it can hose your
  69 system's routing table if not set up properly.
  70
  71 Priorities were suggested by Dancer <dancer@zeor.simegen.com>.
  72 They're used to start the FRR daemons in more than one step
  73 (for example start one or two at network initialization and the
  74 rest later). The number of FRR daemons being small, priorities
  75 must be between 1 and 9, inclusive (or the initscript has to be
  76 changed). /etc/init.d/frr then can be started as
  77
  78 /etc/init.d/frr <start|stop|restart|<priority>>
  79
  80 where priority 0 is the same as 'stop', priority 10 or 'start'
  81 means 'start all'
  82
  83
  84 * Error message "privs_init: initial cap_set_proc failed":
  85 ==========================================================
  86
  87 This error message means that "capability support" has to be built
  88 into the kernel.
  89
  90
  91 * Error message "netlink-listen: overrun: No buffer space available":
  92 =====================================================================
  93
  94 If this message occurs the receive buffer should be increased by adding the
  95 following to /etc/sysctl.conf and "--nl-bufsize" to /etc/frr/daemons.
  96 > net.core.rmem_default = 262144
  97 > net.core.rmem_max = 262144
  98 See message #4525 from 2005-05-09 in the quagga-users mailing list.
  99
 100
 101 * vtysh immediately exists:
 102 ===========================
 103
 104 Check /etc/pam.d/frr, it probably denies access to your user. The passwords
 105 configured in /etc/frr/frr.conf are only for telnet access.
 106
 107
 108  -- Ondřej Surý <Ondřej Surý <ondrej@debian.org>>, Fri,  3 Jul 2020 12:39:42 +0200