3 ms·
How do you manage your wireguard setup? Mine breaks pretty much every time I upgrade because it depends on a kernel module. Maybe this goes away when I can upgr
by marcrosoft 6y ago
How do you manage your wireguard setup? Mine breaks pretty much every time I upgrade because it depends on a kernel module. Maybe this goes away when I can upgrade to the latest kernel with native support?
- kitotik 6y agoI’m in a heterogeneous setup so it’s a mix of dkms, Linux kernel built-in, and the go userspace daemon depending on OS/Vendor. For Linux with kernel module, I’ve had the best luck using Arch and dkms.
- cyphar 6y agoIf you're using distribution packages for WireGuard (whether they're in the official repos or not), they should be rebuilt with each kernel upgrade and so you shouldn't be having any issues with stability. But yes, if you upgrade to a kernel where WireGuard is part of the main kernel package (even if it's backported by your distribution) then you wouldn't have those issues either.
- zx2c4 6y agoHere's where we're at with WireGuard distro kernel shipping support, as of writing (July 4, 2020): - Ubuntu Focal 20.04 LTS: native built-in - Ubuntu Eoan 19.10: native built-in - Ubuntu Bionic 18.04 LTS: native built-in - Ubuntu Xenial 16.04 LTS: dkms :( - Ubuntu Trusty 14.04 LTS: dkms :( - Debian: native built-in - Fedora: native built-in - Mageia: native built-in - Arch: native built-in - OpenSUSE: native built-in - SUSE Linux Enterprise: native built-in - Alpine: native built-in - Gentoo: native built-in - Exherbo: native built-in - NixOS: native built-in - RHEL/CentOS: dkms and elrepo kmod :( - Void: native built-in - Adélie: native built-in - Source Mage: native built-in - Buildroot: native built-in The rule of thumb here is: distros with kernel ≥ 5.6 have it native built-in, plus a few distros that have backported it, like Ubuntu, Debian, and SUSE. I'm in the process of working with other distros to get it backported; we'll see if I'm successful. I'm also maintaining a 5.4.y backport for distros who ship this LTS kernel (like Oracle's UEK), to make backporting it easier: <https://git.zx2c4.com/wireguard-linux/log/?h=backport-5.4.y> https://git.zx2c4.com/wireguard-linux/log/?h=backport-5.4.y>. There are instructions for each distro on <https://www.wireguard.com/install/> https://www.wireguard.com/install/>. If you're presently having "update troubles", make sure you're using the latest variant of any of the "native built-in" distros written above.
- mcspiff 6y agoAlso for Linux routers, OpenWRT ships a kmod package: https://openwrt.org/packages/pkgdata/kmod-wireguard https://openwrt.org/packages/pkgdata/kmod-wireguard
- Legogris 6y agoDebian: Still dkms for mainline stable repo (Debian 10 buster) as it's on 4.x kernels. For native built-in you need to go with bullseye (Debian testing) or get a newer kernel through some other means.
- luckman212 6y agoI hope FreeBSD gets it soon too. I know they're working on it.
- nix23 6y agoAlready in ports: https://www.freshports.org/net/wireguard/ https://www.freshports.org/net/wireguard/ Work for in-kernel are in full swing.