From 765ecd51d720202c33e3a1701d65890504607d3c Mon Sep 17 00:00:00 2001
From: joshsiv-mulga <mrk@mulgadc.com>
Date: Fri, 22 May 2026 16:29:50 +1000
Subject: [PATCH] build: install openvswitch-ipsec for OVN native IPsec

openvswitch-ipsec provides ovs-monitor-ipsec, which reads the
Open_vSwitch.other_config cert/key/CA pointers and materialises
strongSwan configs for every Geneve tunnel managed by ovn-controller.
Pulls in strongswan + strongswan-pki as transitive deps.

Required by bead mulga-siv-125.3.5.
---
 scripts/setup.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/scripts/setup.sh b/scripts/setup.sh
index 9abeef2bd..0457f7497 100755
--- a/scripts/setup.sh
+++ b/scripts/setup.sh
@@ -218,7 +218,7 @@ install_apt_deps() {
             libvirt-daemon-system libvirt-clients \
             pciutils \
             jq curl iproute2 netcat-openbsd wget unzip xz-utils file \
-            ovn-central ovn-host openvswitch-switch dhcpcd-base \
+            ovn-central ovn-host openvswitch-switch openvswitch-ipsec dhcpcd-base \
             > /dev/null
 
         info "System dependencies installed"