Debian-based configuration for wireguard

Daniel Kahn Gillmor dkg at fifthhorseman.net
Wed Jul 12 01:12:09 CEST 2017


On Wed 2017-07-12 00:48:59 +0200, Jason A. Donenfeld wrote:
> It is for this reason that wg(8)'s private-key and preshared-key
> arguments take a file to the key, not the actual key itself.

Right.  but the ifupdown configuration that Egbert has proposed tries to
pull some info from the /etc/network/interfaces stanza and then some
other info from a wireguard configuration file.  To a novice user it
looks pretty confusing because the split seems arbitrary.

So the extension to ifupdown should really take just the path to the key
file as an extra argument, not a path to a full wg(8) conf file.  I
agree with Egbert that this patch isn't ready for integration with
ifupdown, unfortunately.

          --dkg


More information about the WireGuard mailing list