[WireGuard] What is a good way to ingrate (as of now) wireguard into openrc in Gentoo?

Joakim Sindholt opensource at zhasha.com
Mon Nov 21 15:06:53 CET 2016


On Mon, Nov 21, 2016 at 6:15 AM, Kalin KOZHUHAROV <me.kalin at gmail.com> 
wrote:
> config_wg0="192.168.13.12/24"
> wireguard_wg0="/etc/wireguard/wg0.conf"
> 
> Finally, symlink to net.lo:
> 
>   ln -nfs net.lo /etc/init.d/net.wg0
> 
> Then `/etc/init.d/net.wg0 start` and `/etc/init.d/net.wg0 stop` work
> as expected.

Yep, that's how it's supposed to be used

> EDIT: Add this to /etc/rc.conf to make things run smoothly:
> rc_hotplug="!net.wg?"

I have not experienced any issues like this.

> However `/etc/init.d/net.wg0 restart` sometimes fails silently...
> I am trying to reproduce it, but cannot get the pattern of failures.
> It outputs all fine to the console, but there is no actual interface 
> created...
> 
> [...]
> 
> I tried to debug a few things and my observation is that "sometimes",
> interface is reappearing after `ip link delete dev wg0`...
> Any ideas? I thought am not running any automagic daemons (systemd,
> networkmanager, etc.).
> But... there is some systemd code lurking may be.
> Anyway, I added it to be NOT hotplugged:
> $ grep wg /etc/rc.conf
> rc_hotplug="pcscd !net.wg?"
> 
> And it seems to work! Otherwise the interface gets marked as
> hotpluggable and is being recreated/killed (see the first number  on
> `ip link show dev wg0` constantly growing)

Interesting. I've had problems with other programs interfering in the 
past,
most notably dhcpcd which would nuke my routing rules, but never this.
The script is basically just a whittled down version of the pppd.sh 
script
and should work in much the same way. I just hacked it up rather quickly
so it's very possible that I missed something really important.
I'm running an otherwise bog-standard clean gentoo install with pretty 
much
nothing installed and this issue hasn't presented itself so far.
It's being updated today so I'll get on it if I can reproduce it.
Pretty weird though...






More information about the WireGuard mailing list