Feature Request: WireGuard

[patschi]

It would be great to have WireGuard implemented in UI and connection details saved in the configuration file.

[lievin-christopher]

Hello,
You can paste your wireguard configuration file in /etc/wireguard/ and create a startup script in /etc/init.d/ (remove DNS line from configfile)
e.g :

cat /etc/wireguard/home.conf

[Interface]
PrivateKey = XXXXX
Address = YYYYY
MTU = 1420

[Peer]
PublicKey = XXXXY
AllowedIPs = YYYYX
Endpoint = XYXYX
PersistentKeepalive = 21

cat /etc/init.d/S97wireguard

#!/bin/sh
DAEMON="wireguard"
PIDFILE="/var/run/$DAEMON.pid"

case "$1" in
	start)
		/usr/bin/wg-quick up home
                [ $? = 0 ] && echo "OK" || echo "FAIL"
                ;;
        stop)
                /usr/bin/wg-quick down home
                [ $? = 0 ] && echo "OK" || echo "FAIL"
                ;;
        restart|reload)
                $0 stop
                $0 start
                ;;
        *)
                echo "Usage: $0 {start|stop|restart}"
                exit 1
esac

exit 0

[emmy008]

Followed your instructions, but getting an error:
stat: unrecognized option: c
BusyBox v1.36.1 () multi-call binary.

Usage: stat [-lt] FILE...

Display file status

    -L      Follow links
    -t      Terse display

stat: unrecognized option: c
BusyBox v1.36.1 () multi-call binary.

Usage: stat [-lt] FILE...

Display file status

    -L      Follow links
    -t      Terse display

/usr/bin/wg-quick: line 47: ((: ( & & 0007) == 0: syntax error: operand expected (error token is "& & 0007) == 0")

which stat returns /usr/bin/stat

[lievin-christopher]

maybe do something like that :

ln -sf /bin/true /bin/resolvconf

[lievin-christopher]

and keep secret file in /etc/wireguard/

chmod 600 /etc/wireguard/*.conf

[emmy008]

@lievin-christopher, thank you for the tips, but for the life of me I cannot get it working. I can get use wg-quick up home, and I have no errors, but it just won't connect. I know the server side is good as I'm using other clients to connect to it.

[Dev77Duck]

Are there any status update in "Feature Request: WireGuard #99"

[Eszartek]

Instead of "ln -sf /bin/true /bin/resolvconf"

create a new file /bin/resolvconf containing:

#!/bin/sh

exit 0

and run "chmod 755 /bin/resolvconf" .

It's working fine for me, I just disregard the stat error.

The resolvconf command is probably just adding the DNS entry in your wg.conf into /etc/resolv.conf.
You can add it manually if you need it ie: "nameserver DNS-ip-from-wg.conf".

[kapouer]

Hello, You can paste your wireguard configuration file in /etc/wireguard/ and create a startup script in /etc/init.d/ (remove DNS line from configfile) e.g :

cat /etc/init.d/S97wireguard

But that doesn't survive an upgrade, does it ?