Unable to enable wg-quick@wg0.service unit

[invidian]

With following container linux config:

systemd:
  units:
    - name: wg-quick@wg0.service
      enabled: true

The service is not being enabled after install:

# systemctl status wg-quick@wg0
● wg-quick@wg0.service - WireGuard via wg-quick(8) for wg0
   Loaded: loaded (/usr/lib/systemd/system/wg-quick@.service; disabled; vendor preset: disabled)
   Active: inactive (dead)
     Docs: man:wg-quick(8)
           man:wg(8)
           https://www.wireguard.com/
           https://www.wireguard.com/quickstart/
           https://git.zx2c4.com/WireGuard/about/src/tools/man/wg-quick.8
           https://git.zx2c4.com/WireGuard/about/src/tools/man/wg.8

Ignition logs:

# journalctl --all --identifier=ignition | tee ignition.log
-- Logs begin at Tue 2019-06-25 09:11:18 UTC, end at Tue 2019-06-25 11:00:02 UTC. --
Jun 25 09:11:24 localhost ignition[415]: Ignition v0.32.0-1-gca11a02
Jun 25 09:11:24 localhost ignition[415]: reading system config file "/usr/lib/ignition/base.ign"
Jun 25 09:11:24 localhost ignition[415]: no config at "/usr/lib/ignition/base.ign"
Jun 25 09:11:24 localhost ignition[415]: parsed url from cmdline: ""
Jun 25 09:11:24 localhost ignition[415]: no config URL provided
Jun 25 09:11:24 localhost ignition[415]: reading system config file "/usr/lib/ignition/user.ign"
Jun 25 09:11:24 localhost ignition[415]: parsing config with SHA512: 3725a8e2e2a48cfa401debf096c7043f7c9c05e42e2ad046ece6029e7787df6ca2bf9f652399744f98c2be3baf9f2353456ff55fa64baca891e74c6256983a2b
Jun 25 09:11:24 localhost ignition[415]: disks: disks passed
Jun 25 09:11:24 localhost ignition[415]: Ignition finished successfully
Jun 25 09:11:24 localhost ignition[449]: Ignition v0.32.0-1-gca11a02
Jun 25 09:11:24 localhost ignition[449]: reading system config file "/usr/lib/ignition/base.ign"
Jun 25 09:11:24 localhost ignition[449]: no config at "/usr/lib/ignition/base.ign"
Jun 25 09:11:24 localhost ignition[449]: files: compiled without relabeling support, skipping
Jun 25 09:11:24 localhost ignition[449]: files: createUsers: op(1): [started]  creating or modifying user "core"
Jun 25 09:11:24 localhost ignition[449]: files: createUsers: op(1): executing: "/usr/sbin/usermod" "--root" "/sysroot" "--password" "*" "core"
Jun 25 09:11:24 localhost ignition[449]: files: createUsers: op(1): [finished] creating or modifying user "core"
Jun 25 09:11:24 localhost ignition[449]: files: createUsers: op(2): [started]  setting password for "core"
Jun 25 09:11:24 localhost ignition[449]: files: createUsers: op(2): executing: "/usr/sbin/usermod" "--root" "/sysroot" "--password" "*" "core"
Jun 25 09:11:24 localhost ignition[449]: files: createUsers: op(2): [finished] setting password for "core"
Jun 25 09:11:24 localhost ignition[449]: files: createUsers: op(3): [started]  adding ssh keys to user "core"
Jun 25 09:11:24 localhost ignition[449]: files: createUsers: op(3): [finished] adding ssh keys to user "core"
Jun 25 09:11:24 localhost ignition[449]: files: createUsers: op(4): [started]  creating or modifying user "root"
Jun 25 09:11:24 localhost ignition[449]: files: createUsers: op(4): executing: "/usr/sbin/usermod" "--root" "/sysroot" "root"
Jun 25 09:11:24 localhost ignition[449]: files: createUsers: op(4): [finished] creating or modifying user "root"
Jun 25 09:11:24 localhost ignition[449]: files: createUsers: op(5): [started]  adding ssh keys to user "root"
Jun 25 09:11:24 localhost ignition[449]: files: createUsers: op(5): [finished] adding ssh keys to user "root"
Jun 25 09:11:24 localhost ignition[449]: files: createFilesystemsFiles: createFiles: op(6): [started]  writing file "/etc/cni/net.d/10-wg.conf"
Jun 25 09:11:24 localhost ignition[449]: files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/etc/cni/net.d/10-wg.conf"
Jun 25 09:11:24 localhost ignition[449]: files: createFilesystemsFiles: createFiles: op(7): [started]  writing file "/etc/cni/net.d/99-loopback.conf"
Jun 25 09:11:24 localhost ignition[449]: files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/etc/cni/net.d/99-loopback.conf"
Jun 25 09:11:24 localhost ignition[449]: files: createFilesystemsFiles: createFiles: op(8): [started]  writing file "/etc/wireguard/wg0.conf"
Jun 25 09:11:24 localhost ignition[449]: files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/etc/wireguard/wg0.conf"
Jun 25 09:11:24 localhost ignition[449]: files: createFilesystemsFiles: createFiles: op(9): [started]  writing file "/var/lib/iptables/rules-save"
Jun 25 09:11:24 localhost ignition[449]: files: createFilesystemsFiles: createFiles: op(9): [finished] writing file "/var/lib/iptables/rules-save"
Jun 25 09:11:24 localhost ignition[449]: files: createFilesystemsFiles: createFiles: op(a): [started]  writing file "/etc/containerd/config.toml"
Jun 25 09:11:24 localhost ignition[449]: files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/etc/containerd/config.toml"
Jun 25 09:11:24 localhost ignition[449]: files: createFilesystemsFiles: createFiles: op(b): [started]  writing file "/etc/ssh/sshd_config"
Jun 25 09:11:24 localhost ignition[449]: files: createFilesystemsFiles: createFiles: op(b): [finished] writing file "/etc/ssh/sshd_config"
Jun 25 09:11:24 localhost ignition[449]: files: createFilesystemsFiles: createFiles: op(c): [started]  writing file "/etc/hostname"
Jun 25 09:11:24 localhost ignition[449]: files: createFilesystemsFiles: createFiles: op(c): [finished] writing file "/etc/hostname"
Jun 25 09:11:24 localhost ignition[449]: files: op(d): [started]  processing unit "locksmithd.service"
Jun 25 09:11:24 localhost ignition[449]: files: op(d): [finished] processing unit "locksmithd.service"
Jun 25 09:11:24 localhost ignition[449]: files: op(e): [started]  masking unit "locksmithd.service"
Jun 25 09:11:24 localhost ignition[449]: files: op(e): [finished] masking unit "locksmithd.service"
Jun 25 09:11:24 localhost ignition[449]: files: op(f): [started]  processing unit "docker.service"
Jun 25 09:11:24 localhost ignition[449]: files: op(f): [finished] processing unit "docker.service"
Jun 25 09:11:24 localhost ignition[449]: files: op(10): [started]  enabling unit "docker.service"
Jun 25 09:11:24 localhost ignition[449]: files: op(10): [finished] enabling unit "docker.service"
Jun 25 09:11:24 localhost ignition[449]: files: op(11): [started]  processing unit "iptables-restore.service"
Jun 25 09:11:24 localhost ignition[449]: files: op(11): [finished] processing unit "iptables-restore.service"
Jun 25 09:11:24 localhost ignition[449]: files: op(12): [started]  enabling unit "iptables-restore.service"
Jun 25 09:11:24 localhost ignition[449]: files: op(12): [finished] enabling unit "iptables-restore.service"
Jun 25 09:11:24 localhost ignition[449]: files: op(13): [started]  processing unit "wg-quick.service"
Jun 25 09:11:24 localhost ignition[449]: files: op(13): op(14): [started]  writing unit "wg-quick.service" at "etc/systemd/system/wg-quick.service"
Jun 25 09:11:24 localhost ignition[449]: files: op(13): op(14): [finished] writing unit "wg-quick.service" at "etc/systemd/system/wg-quick.service"
Jun 25 09:11:24 localhost ignition[449]: files: op(13): [finished] processing unit "wg-quick.service"
Jun 25 09:11:24 localhost ignition[449]: files: op(15): [started]  enabling unit "wg-quick.service"
Jun 25 09:11:24 localhost ignition[449]: files: op(15): [finished] enabling unit "wg-quick.service"
Jun 25 09:11:24 localhost ignition[449]: files: op(16): [started]  processing unit "containerd.service"
Jun 25 09:11:24 localhost ignition[449]: files: op(16): op(17): [started]  writing systemd drop-in "10-disable-cri.conf" at "etc/systemd/system/containerd.service.d/10-disable-cri.conf"
Jun 25 09:11:24 localhost ignition[449]: files: op(16): op(17): [finished] writing systemd drop-in "10-disable-cri.conf" at "etc/systemd/system/containerd.service.d/10-disable-cri.conf"
Jun 25 09:11:24 localhost ignition[449]: files: op(16): [finished] processing unit "containerd.service"
Jun 25 09:11:24 localhost ignition[449]: files: op(18): [started]  processing unit "sshd.socket"
Jun 25 09:11:24 localhost ignition[449]: files: op(18): op(19): [started]  writing systemd drop-in "10-sshd-port.conf" at "etc/systemd/system/sshd.socket.d/10-sshd-port.conf"
Jun 25 09:11:24 localhost ignition[449]: files: op(18): op(19): [finished] writing systemd drop-in "10-sshd-port.conf" at "etc/systemd/system/sshd.socket.d/10-sshd-port.conf"
Jun 25 09:11:24 localhost ignition[449]: files: op(18): [finished] processing unit "sshd.socket"
Jun 25 09:11:24 localhost ignition[449]: files: op(1a): [started]  processing unit "30-wg0.network"
Jun 25 09:11:24 localhost ignition[449]: files: op(1a): op(1b): [started]  writing unit "30-wg0.network" at "etc/systemd/network/30-wg0.network"
Jun 25 09:11:24 localhost ignition[449]: files: op(1a): op(1b): [finished] writing unit "30-wg0.network" at "etc/systemd/network/30-wg0.network"
Jun 25 09:11:24 localhost ignition[449]: files: op(1a): [finished] processing unit "30-wg0.network"
Jun 25 09:11:24 localhost ignition[449]: files: files passed
Jun 25 09:11:24 localhost ignition[449]: Ignition finished successfully

[dongsupark]

FYI, this issue happens only on Edge, the only channel that includes wireguard.

[dongsupark]

My first guess is that ignition does not work with systemd preset, when it tries to deal with instantiated systemd units.
Related issues: coreos/ignition#586 systemd/systemd#9901

However, Flatcar edge has already systemd v241, and the systemd PR systemd/systemd#9901 is already included in v241.

So I'm not completely sure.

[mazzy89]

I'm having this issue too running Flatcar Edge

[R-MiN]

first get a status
#systemctl status wg-quick@wg0.service
then active the wg-conf
#systemctl start wg-quick@wg0.service
this will work ...

[vbatts]

this works now on flatcar-stable, beta and alpha