libreswan: set DNSSEC_ROOTKEY_FILE, LINUX_VARIANT