Wireguard added to Alpine Linux

Jason A. Donenfeld Jason at zx2c4.com
Fri Mar 3 04:24:16 CET 2017


Hi Stuart,

On Thu, Mar 2, 2017 at 1:49 PM, Stuart Cardall
<developer at it-offshore.co.uk> wrote:
> Wireguard can be added to Alpine with:
>
> apk add wireguard-tools

Great!

>. On the server it is probably necessary to:
>
> echo wireguard >> /etc/modules && rc-update add modules boot

This step should not be necessary. You're probably forgetting to call
`depmod -a` after installing the module. This is needed to ensure that
the right module aliases and dependency information is generated, so
that the module is _auto-loaded_ when users run `ip link add wg0 type
wireguard`.

> A wireguard user mentioned on irc earlier today that everything is working
> perfectly.

Awesome!

>
> To monitor releases @ Alpine we use https://release-monitoring.org/ - if it
> doesn't pick up the changes I'll subscribe.

Okay. Well, keep in mind that I publish release notes here and tips to
distributions about any possible build changes, so your involvement or
at least subscription here would indeed be a good thing.

>
> If there is a step I was missing to correctly run `make check` I would still
> like to run it in the future - perhaps it will pick up potential issues from
> Alpine using musl libc (not glibc).

It's certainly not any of the current `make check` or tests/ stuff
that you're currently looking at. Rather, when WireGuard is compiled
in debug mode, if you insert it, then it will go through a series of
self-tests. For more intense testing, involving the userspace
component, there's `make test-qemu`, which builds a kernel and boots
up QEMU... But I suspect this is a bit too heavy weight for a distro.
And besides, it's already being run for every commit for all
kernel.org kernels on: https://www.wireguard.io/build-status/ By the
way -- this uses musl libc, so I ensure it will always run nicely
there.

The only thing remaining in the package is to remove the incoherent
"wireguard-tests" package, which doesn't work in the way you'd hope,
and doesn't belong there.

Regards,
Jason


More information about the WireGuard mailing list