activeeos / wireguard-docker Goto Github PK

Hi,
I run an openvpn server in docker with Tunnelblick on my mac.

I'm curious to give this a shot. But the things is, I don't understand the README where things should run. server versus client, there is no distinctions.

Assuming this is for the server:

docker run -it --rm --cap-add net_admin --cap-add sys_module \
       -v /etc/wireguard:/etc/wireguard -v /lib/wireguard:/lib/wireguard \
       -p 5555:5555/udp activeeos/wireguard-docker

, how should I run it on my mac as a client?

Thanks!

I have tried this docker image on a Ubuntu 16.04 machine,I have no idea what should I do the next?any help would be apperciated

cuz I hate running the program on the physical machine,I like running everything on the docker,then I tried to copy the configuration files from a wrieguard file from a CentOS 7 to this machine which is wireguard working fine there,

$ pwd
/etc/wireguard

$ ls
client.conf cprivatekey cpublickey sprivatekey spublickey wg0.conf

then I run the docker command

docker run -it --rm --cap-add net_admin --cap-add sys_module
-v /etc/wireguard:/etc/wireguard -v /lib/modules:/lib/modules
-p 5555:5555/udp activeeos/wireguard-docker

finaly I have such a concequence:

Good news! Module version 0.0.20181218 for wireguard.ko
exactly matches what is already found in kernel 4.4.0-21-generic.
DKMS will not replace this module.
You may override by specifying --force.

depmod.......

DKMS: install completed.
Setting up wireguard-tools (0.0.20181218-wg1xenial) ...
Setting up wireguard (0.0.20181218-wg1xenial) ...
Processing triggers for libc-bin (2.23-0ubuntu10) ...
Processing triggers for systemd (229-4ubuntu21.2) ...
Processing triggers for menu (2.1.47ubuntu1.16.04.1) ...
Sat Jan 19 06:00:57 UTC 2019: Starting Wireguard
Usage: wg-quick [ up | down | save ] [ CONFIG_FILE | INTERFACE ]

CONFIG_FILE is a configuration file, whose filename is the interface name
followed by .conf'. Otherwise, INTERFACE is an interface name, with configuration found at /etc/wireguard/INTERFACE.conf. It is to be readable by wg(8)'s setconf' sub-command, with the exception of the following additions
to the [Interface] section, which are handled by wg-quick:

• Address: may be specified one or more times and contains one or more
  IP addresses (with an optional CIDR mask) to be set for the interface.
• DNS: an optional DNS server to use while the device is up.
• MTU: an optional MTU for the interface; if unspecified, auto-calculated.
• Table: an optional routing table to which routes will be added; if
  unspecified or auto', the default table is used. If off', no routes
  are added.
• PreUp, PostUp, PreDown, PostDown: script snippets which will be executed
  by bash(1) at the corresponding phases of the link, most commonly used
  to configure DNS. The string `%i' is expanded to INTERFACE.
• SaveConfig: if set to `true', the configuration is saved from the current
  state of the interface upon shutdown.

See wg-quick(8) for more info and examples.

How do I start it:

ln -s $PWD/server.conf /etc/wireguard/wg0.conf
docker run -it --rm --cap-add net_admin --cap-add sys_module \
    --name wireguard \
    -v /etc/wireguard:/etc/wireguard -v /lib/modules:/lib/modules \
    -p 51820:51820/udp activeeos/wireguard-docker

Error message:

Fri Mar 29 07:13:53 UTC 2019: Starting Wireguard
Warning: `/etc/wireguard/wg0.conf' is world accessible
[#] ip link add wg0 type wireguard
[#] wg setconf wg0 /dev/fd/63
[#] ip link set mtu 1420 up dev wg0
[#] wg set wg0 fwmark 51820
[#] ip -4 route add 0.0.0.0/0 dev wg0 table 51820
[#] ip -4 rule add not fwmark 51820 table 51820
[#] ip -4 rule add table main suppress_prefixlength 0
sysctl: setting key "net.ipv4.conf.all.rp_filter": Read-only file system
sysctl: setting key "net.ipv4.conf.default.rp_filter": Read-only file system
sysctl: setting key "net.ipv4.conf.eth0.rp_filter": Read-only file system
sysctl: setting key "net.ipv4.conf.lo.rp_filter": Read-only file system
sysctl: setting key "net.ipv4.conf.wg0.rp_filter": Read-only file system