Headless installation & CLI interface?

[rudenkornk]

Describe the bug
Amnezia client is currently a GUI-first application requiring manual graphical installation and configuring.
Enabling and disabling VPN also requires to use GUI client.

Expected behavior

1. Ability to perform a headless scripted installation.
2. CLI client not requiring any graphical support.

Desktop (please complete the following information):

• OS: Ubuntu 22.04-24.04, Fedora 38-40

[jeffangelion]

About headless installation:

jeffangelion@redstar:~$ sudo ./AmneziaVPN_Linux_Installer.bin install
[0] Arguments: ./AmneziaVPN_Linux_Installer.bin, install
[3] Operations sanity check succeeded.
[10] OS: Debian GNU/Linux 12 (bookworm), architecture: x86_64
[10] Check if app already installed: false
[74] Loaded control script ":/metadata/installer-config/controlscript_js.js"
[74] No target directory specified, using default value: "/opt/AmneziaVPN"
[74] Preparing meta information download...
[81] Warning: QFont::setPixelSize: Pixel size <= 0 (-1)
[81] Selected components without dependencies:
org.amneziavpn.package
[81] Installation space required: "547.22 MB" Temporary space required: "256.00 MB" Local repository size: "0.00 bytes"
[82] Tmp and install directories are on the same volume. Volume mount point: "/" Free space available: "76.94 GB"
[82] Installation will use 291.22 MB of disk space.
[82] Do you want to continue?
[82] Yes|No
yes
[3784] backup  operation: Mkdir
[3784] 	- arguments: /opt/AmneziaVPN
[3784] Done
[3784] perform  operation: Mkdir
[3784] 	- arguments: /opt/AmneziaVPN
[3784] Done
[3784] Preparing the installation...
[3785] Install size: 1 components
[3788] Preparing to unpack components...
[3789] backup org.amneziavpn.package concurrent operation: Extract
[3789] 	- arguments: installer://org.amneziavpn.package/4.6.0.3data.7z, /opt/AmneziaVPN
[3789] Started
[3810] Unpacking components...
[3810] perform org.amneziavpn.package concurrent operation: Extract
[3810] 	- arguments: installer://org.amneziavpn.package/4.6.0.3data.7z, /opt/AmneziaVPN
[3810] Started
[9195] Installing component AmneziaVPN
[9195] "Execute" as admin: true
[9195] backup org.amneziavpn.package operation: Execute
[9195] 	- arguments: bash, /opt/AmneziaVPN/post_install.sh, UNDOEXECUTE, bash, /opt/AmneziaVPN/post_uninstall.sh
[9195] Done
[9196] perform org.amneziavpn.package operation: Execute
[9196] 	- arguments: bash, /opt/AmneziaVPN/post_install.sh, UNDOEXECUTE, bash, /opt/AmneziaVPN/post_uninstall.sh
[9198] bash" started, arguments: "/opt/AmneziaVPN/post_install.sh
[9213] AmneziaVPN log dir created at /var/log/\n
[9951] Done
[9954] Writing maintenance tool: "/opt/AmneziaVPN/maintenancetool.new"
[9954] Writing maintenance tool.
[10034] Wrote permissions for maintenance tool.
[10075] Maintenance tool hard restart: false.
[10075] Installation finished!
[10075] Components installed successfully.
jeffangelion@redstar:~$ 

[rasolAAaa]

بسیار عالی دست تون درد نکنه خیلی ممنون از دست اندرکاران برنامه خوبتان در تاریخ جمعه ۱۹ ژوئیهٔ ۲۰۲۴،‏ ۱۲:۲۰ Ivan Vatlin ***@***.***> نوشت:

…

About headless installation: ***@***.***:~$ sudo ./AmneziaVPN_Linux_Installer.bin install [0] Arguments: ./AmneziaVPN_Linux_Installer.bin, install [3] Operations sanity check succeeded. [10] OS: Debian GNU/Linux 12 (bookworm), architecture: x86_64 [10] Check if app already installed: false [74] Loaded control script ":/metadata/installer-config/controlscript_js.js" [74] No target directory specified, using default value: "/opt/AmneziaVPN" [74] Preparing meta information download... [81] Warning: QFont::setPixelSize: Pixel size <= 0 (-1) [81] Selected components without dependencies: org.amneziavpn.package [81] Installation space required: "547.22 MB" Temporary space required: "256.00 MB" Local repository size: "0.00 bytes" [82] Tmp and install directories are on the same volume. Volume mount point: "/" Free space available: "76.94 GB" [82] Installation will use 291.22 MB of disk space. [82] Do you want to continue? [82] Yes|No yes [3784] backup operation: Mkdir [3784] - arguments: /opt/AmneziaVPN [3784] Done [3784] perform operation: Mkdir [3784] - arguments: /opt/AmneziaVPN [3784] Done [3784] Preparing the installation... [3785] Install size: 1 components [3788] Preparing to unpack components... [3789] backup org.amneziavpn.package concurrent operation: Extract [3789] - arguments: installer://org.amneziavpn.package/4.6.0.3data.7z, /opt/AmneziaVPN [3789] Started [3810] Unpacking components... [3810] perform org.amneziavpn.package concurrent operation: Extract [3810] - arguments: installer://org.amneziavpn.package/4.6.0.3data.7z, /opt/AmneziaVPN [3810] Started [9195] Installing component AmneziaVPN [9195] "Execute" as admin: true [9195] backup org.amneziavpn.package operation: Execute [9195] - arguments: bash, /opt/AmneziaVPN/post_install.sh, UNDOEXECUTE, bash, /opt/AmneziaVPN/post_uninstall.sh [9195] Done [9196] perform org.amneziavpn.package operation: Execute [9196] - arguments: bash, /opt/AmneziaVPN/post_install.sh, UNDOEXECUTE, bash, /opt/AmneziaVPN/post_uninstall.sh [9198] bash" started, arguments: "/opt/AmneziaVPN/post_install.sh [9213] AmneziaVPN log dir created at /var/log/\n [9951] Done [9954] Writing maintenance tool: "/opt/AmneziaVPN/maintenancetool.new" [9954] Writing maintenance tool. [10034] Wrote permissions for maintenance tool. [10075] Maintenance tool hard restart: false. [10075] Installation finished! [10075] Components installed successfully. ***@***.***:~$ — Reply to this email directly, view it on GitHub <#850 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/BIQMEYQXH5AWRGDEUEL5THTZNDAM5AVCNFSM6AAAAABJGKGBJCVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDEMZYGU3TSMJRGU> . You are receiving this because you are subscribed to this thread.Message ID: ***@***.***>

[StreetStrider]

@jeffangelion how to connect then? It seemes that docs centered around gui. It cannot find a guide on how to connect from command line.

[isnullxbh]

@pokamest, do you have any plans to support connection from command line?

[neikist]

Are there any updates? Or can I find another client, that doesn't need a GUI, anywhere? I want to run it on my home server which doesn't have a GUI. Current client here requires a lot of extra dependencies.

[StreetStrider]

I used amneziawg-go. Then, given the config provided at /etc/wgcf-profile.conf:

amneziawg-go wg0
wg setconf wg0 /etc/wgcf-profile.conf
ip address add $ADDRESS dev wg0 # Address: from profile
ip link set up dev wg0

ip route delete default
ip route add $ENDPOINT via $GW dev eth0 # Endpoint: from profile, GW is default gateway
ip route add default dev wg0

You may or may not need other actions, I used docker environment and image FROM amneziavpn/amneziawg-go:0.2.12.

[ukqfhf]

It also would be great to have a official Raycast extension to simplify interaction

[nerevarishe101]

@StreetStrider on

wg setconf wg0 /etc/wgcf-profile.conf

I get error:

Line unrecognized: `Address=10.8.1.9/32'
Configuration parsing error

Any idea what i am doing wrong?

I try with wireguard tools and with amnezia wireguard tools from here

My config look like this:

[Interface]
Address = 10.8.1.9/32
DNS = 1.1.1.1, 1.0.0.1
PrivateKey = xxxxxxxxxxxxxxxxxxxxxxxxxx
Jc = xx
Jmin = xx
Jmax = xx
S1 = xx
S2 = xx
H1 = xxxxxxxxx
H2 = xxxxxxxxx
H3 = xxxxxxxxx
H4 = xxxxxxxxx

[Peer]
PublicKey = xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
PresharedKey = xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
AllowedIPs = 0.0.0.0/0, ::/0
Endpoint = xxx.xxx.xxx.xxx:xxxxxx
PersistentKeepalive = xx

[StreetStrider]

@nerevarishe101 I had it in the past. As far as I understood you need either to remove Address from your config or to use some tooling over wg that understands Address. I took 1st path, I comment out Address in my config and install routing on my own (ip address add $ADDRESS dev wg0 then ip route add $ENDPOINT via $GW dev eth0 as shown above).

I think the 2nd path is to use something like wg-quick. Consult this question. You can google the error wg configuration parsing error and you'll find additional clues.

[evgeny-kim]

How to install and use Amnezia VPN client without GUI

Here's an example Debian setup that can be easily adapted to other platforms:

1. Install Go

wget https://go.dev/dl/go1.24.3.linux-amd64.tar.gz
sudo tar -C /usr/local -xzf go1.24.3.linux-amd64.tar.gz

~/.bashrc:

export GOROOT=/usr/local/go
export GOPATH=$HOME/go
export PATH=$PATH:$GOROOT/bin:$GOPATH/bin

go version

2. Install amneziawg-go

git clone https://github.com/amnezia-vpn/amneziawg-go
cd amneziawg-go
make
sudo mv amneziawg-go /usr/local/bin/
sudo chmod +x /usr/local/bin/amneziawg-go

3. Install amneziawg-tools

git clone https://github.com/amnezia-vpn/amneziawg-tools.git
cd amneziawg-tools/src/
make
sudo make install

4. Add config

/etc/amnezia/wg0.conf:

[Interface]
PrivateKey = YOUR_PRIVATE_KEY
Address = YOUR_VPN_INTERFACE_IP/CIDR
DNS = 1.1.1.1                         # Or your preferred DNS server
Table = off                           # We will be using PostUp/PreDown for routing

# AmneziaWG specific parameters (use your actual values)
Jc = 
Jmin = 
Jmax = 
S1 = 
S2 = 
H1 = 
H2 = 
H3 = 
H4 = 

# PostUp: Commands executed after VPN interface (wg0) is up
#  - Route VPN server traffic via eth0
#  - Delete existing default IPv4 route via eth0
#  - Set new default IPv4 route to send all traffic via VPN (wg0)
#  - Set new default IPv6 route to send all IPv6 traffic via VPN (wg0)
PostUp = ip route add YOUR_VPN_ENDPOINT_IP via YOUR_ETH0_GATEWAY_IP dev eth0; ip route del default via YOUR_ETH0_GATEWAY_IP dev eth0; ip route add 0.0.0.0/0 dev wg0; ip -6 route add ::/0 dev wg0

# PreDown: Commands executed before VPN interface (wg0) is taken down
#  - Delete default IPv4 route that sent traffic via VPN (wg0)
#  - Delete default IPv6 route that sent traffic via VPN (wg0)
#  - Restore original default IPv4 route via eth0
#  - Delete route for VPN server via eth0
PreDown = ip route del 0.0.0.0/0 dev wg0; ip -6 route del ::/0 dev wg0; ip route add default via YOUR_ETH0_GATEWAY_IP dev eth0; ip route del YOUR_VPN_ENDPOINT_IP via YOUR_ETH0_GATEWAY_IP dev eth0

[Peer]
PublicKey = YOUR_PEER_PUBLIC_KEY
PresharedKey = YOUR_PRESHARED_KEY
AllowedIPs = 0.0.0.0/0, ::/0          # Route all traffic
Endpoint = YOUR_VPN_ENDPOINT_IP:PORT
PersistentKeepalive = 25

5. Test connection

Connect VPN:

sudo awg-quick up wg0
ip route show
curl ifconfig.me

Disconnect VPN:

sudo awg-quick down wg0
ip route show
curl ifconfig.me

6. Start on boot

sudo systemctl enable awg-quick@wg0.service
sudo systemctl start awg-quick@wg0.service

[potap1978]

Пример настройки Debian:

1. Установить Go

wget https://go.dev/dl/go1.24.3.linux-amd64.tar.gz
sudo tar -C /usr/local -xzf go1.24.3.linux-amd64.tar.gz

~/.bashrc:

export GOROOT=/usr/local/go
export GOPATH=$HOME/go
export PATH=$PATH:$GOROOT/bin:$GOPATH/bin

go version

2. Установить amneziawg-go

git clone https://github.com/amnezia-vpn/amneziawg-go
cd amneziawg-go
make
sudo mv amneziawg-go /usr/local/bin/
sudo chmod +x /usr/local/bin/amneziawg-go

3. Установите amneziawg-tools

git clone https://github.com/amnezia-vpn/amneziawg-tools.git
cd amneziawg-tools/src/
make
sudo make install

4. Добавить конфигурацию

/etc/amnezia/wg0.conf:

[Interface]
PrivateKey = YOUR_PRIVATE_KEY
Address = YOUR_VPN_INTERFACE_IP/CIDR
DNS = 1.1.1.1                         # Or your preferred DNS server
Table = off                           # We will be using PostUp/PreDown for routing

# AmneziaWG specific parameters (use your actual values)
Jc = 
Jmin = 
Jmax = 
S1 = 
S2 = 
H1 = 
H2 = 
H3 = 
H4 = 

# PostUp: Commands executed after VPN interface (wg0) is up
#  - Route VPN server traffic via eth0
#  - Delete existing default IPv4 route via eth0
#  - Set new default IPv4 route to send all traffic via VPN (wg0)
#  - Set new default IPv6 route to send all IPv6 traffic via VPN (wg0)
PostUp = ip route add YOUR_VPN_ENDPOINT_IP via YOUR_ETH0_GATEWAY_IP dev eth0; ip route del default via YOUR_ETH0_GATEWAY_IP dev eth0; ip route add 0.0.0.0/0 dev wg0; ip -6 route add ::/0 dev wg0

# PreDown: Commands executed before VPN interface (wg0) is taken down
#  - Delete default IPv4 route that sent traffic via VPN (wg0)
#  - Delete default IPv6 route that sent traffic via VPN (wg0)
#  - Restore original default IPv4 route via eth0
#  - Delete route for VPN server via eth0
PreDown = ip route del 0.0.0.0/0 dev wg0; ip -6 route del ::/0 dev wg0; ip route add default via YOUR_ETH0_GATEWAY_IP dev eth0; ip route del YOUR_VPN_ENDPOINT_IP via YOUR_ETH0_GATEWAY_IP dev eth0

[Peer]
PublicKey = YOUR_PEER_PUBLIC_KEY
PresharedKey = YOUR_PRESHARED_KEY
AllowedIPs = 0.0.0.0/0, ::/0          # Route all traffic
Endpoint = YOUR_VPN_ENDPOINT_IP:PORT
PersistentKeepalive = 25

5. Тестовое соединение

Подключить VPN:

sudo awg-quick up wg0
ip route show
curl ifconfig.me

Отключить VPN:

sudo awg-quick down wg0
ip route show
curl ifconfig.me

6. Запуск при загрузке

sudo systemctl enable awg-quick@wg0.service
sudo systemctl start awg-quick@wg0.service

root@DEBIAN:~# awg-quick up wg0
[#] ip link add wg0 type amneziawg
Error: Unknown device type.
[!] Missing WireGuard (Amnezia VPN) kernel module. Falling back to slow userspace implementation.
[#] amneziawg-go wg0
┌──────────────────────────────────────────────────────────────┐
│ │
│ Running amneziawg-go is not required because this │
│ kernel has first class support for AmneziaWG. For │
│ information on installing the kernel module, │
│ please visit: │
| https://github.com/amnezia-vpn/amneziawg-linux-kernel-module │
│ │
└──────────────────────────────────────────────────────────────┘
[#] awg setconf wg0 /dev/fd/63
[#] ip -4 address add 172.16.0.2/32 dev wg0
[#] ip -6 address add 2606:4700:110:8f1b:944b:950f:8f25:255e/128 dev wg0
[#] ip link set mtu 1280 up dev wg0
[#] resolvconf -a wg0 -m 0 -x
/usr/bin/awg-quick: line 32: resolvconf: command not found
[#] ip link delete dev wg0

Неа,

root@DEBIAN:~# ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host noprefixroute
valid_lft forever preferred_lft forever
2: enp0s3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000
link/ether 08:00:27:d9:34:b7 brd ff:ff:ff:ff:ff:ff
inet 192.168.10.1/24 brd 192.168.10.255 scope global enp0s3
valid_lft forever preferred_lft forever
inet6 fe80::a00:27ff:fed9:34b7/64 scope link
valid_lft forever preferred_lft forever

[evgeny-kim]

[#] resolvconf -a wg0 -m 0 -x
/usr/bin/awg-quick: line 32: resolvconf: command not found

You should have resolvconf installed

install: sudo apt install resolvconf
confirm: sudo systemctl status resolvconf

[Nastradamus]

As far as I understand, there is no support for the vless protocol in amneziawg-go.
Because of this, my providers are blocking AmneziaWG, amneziawg-go.

We still need normal headless version, with vless support.

[dmtazetdinov]

does it work with obfuscation (i1..i5)? I have a syntax error in the config