diff options
Diffstat (limited to 'gemfeed/atom.xml')
| -rw-r--r-- | gemfeed/atom.xml | 2972 |
1 files changed, 1486 insertions, 1486 deletions
diff --git a/gemfeed/atom.xml b/gemfeed/atom.xml index 8c28a320..00a46348 100644 --- a/gemfeed/atom.xml +++ b/gemfeed/atom.xml @@ -1,6 +1,6 @@ <?xml version="1.0" encoding="utf-8"?> <feed xmlns="http://www.w3.org/2005/Atom"> - <updated>2025-06-22T21:25:58+03:00</updated> + <updated>2025-06-22T22:34:04+03:00</updated> <title>foo.zone feed</title> <subtitle>To be in the .zone!</subtitle> <link href="https://foo.zone/gemfeed/atom.xml" rel="self" /> @@ -390,14 +390,14 @@ by Lorenzo Bettini http://www.lorenzobettini.it http://www.gnu.org/software/src-highlite --> -<pre>paul@f0:~ % doas freebsd-update fetch -paul@f0:~ % doas freebsd-update install -paul@f0:~ % doas shutdown -r now -.. -.. -paul@f0:~ % doas pkg update -paul@f0:~ % doas pkg upgrade -paul@f0:~ % reboot +<pre><font color="#ff0000">paul@f0</font><font color="#F3E651">:~</font><font color="#ff0000"> </font><font color="#F3E651">%</font><font color="#ff0000"> doas freebsd-update fetch</font> +<font color="#ff0000">paul@f0</font><font color="#F3E651">:~</font><font color="#ff0000"> </font><font color="#F3E651">%</font><font color="#ff0000"> doas freebsd-update install</font> +<font color="#ff0000">paul@f0</font><font color="#F3E651">:~</font><font color="#ff0000"> </font><font color="#F3E651">%</font><font color="#ff0000"> doas shutdown -r now</font> +<font color="#F3E651">..</font> +<font color="#F3E651">..</font> +<font color="#ff0000">paul@f0</font><font color="#F3E651">:~</font><font color="#ff0000"> </font><font color="#F3E651">%</font><font color="#ff0000"> doas pkg update</font> +<font color="#ff0000">paul@f0</font><font color="#F3E651">:~</font><font color="#ff0000"> </font><font color="#F3E651">%</font><font color="#ff0000"> doas pkg upgrade</font> +<font color="#ff0000">paul@f0</font><font color="#F3E651">:~</font><font color="#ff0000"> </font><font color="#F3E651">%</font><font color="#ff0000"> reboot</font> </pre> <br /> <span>Next, we install <span class='inlinecode'>wireguard-tools</span> and configure the WireGuard service:</span><br /> @@ -406,19 +406,19 @@ paul@f0:~ % reboot by Lorenzo Bettini http://www.lorenzobettini.it http://www.gnu.org/software/src-highlite --> -<pre>paul@f0:~ % doas pkg install wireguard-tools -paul@f0:~ % doas sysrc wireguard_interfaces=wg0 -wireguard_interfaces: -> wg0 -paul@f0:~ % doas sysrc wireguard_enable=YES -wireguard_enable: -> YES -paul@f0:~ % doas mkdir -p /usr/local/etc/wireguard -paul@f0:~ % doas touch /usr/local/etc/wireguard/wg<font color="#000000">0</font>.conf -paul@f0:~ % doas service wireguard start -paul@f0:~ % doas wg show -interface: wg0 - public key: L+V9o0fNYkMVKNqsX7spBzD/9oSvxM/C7ZCZX1jLO3Q= - private key: (hidden) - listening port: <font color="#000000">20246</font> +<pre><font color="#ff0000">paul@f0</font><font color="#F3E651">:~</font><font color="#ff0000"> </font><font color="#F3E651">%</font><font color="#ff0000"> doas pkg install wireguard-tools</font> +<font color="#ff0000">paul@f0</font><font color="#F3E651">:~</font><font color="#ff0000"> </font><font color="#F3E651">%</font><font color="#ff0000"> doas sysrc </font><font color="#ff0000">wireguard_interfaces</font><font color="#F3E651">=</font><font color="#ff0000">wg0</font> +<font color="#ff0000">wireguard_interfaces</font><font color="#F3E651">:</font><font color="#ff0000"> -</font><font color="#F3E651">></font><font color="#ff0000"> wg0</font> +<font color="#ff0000">paul@f0</font><font color="#F3E651">:~</font><font color="#ff0000"> </font><font color="#F3E651">%</font><font color="#ff0000"> doas sysrc </font><font color="#ff0000">wireguard_enable</font><font color="#F3E651">=</font><font color="#ff0000">YES</font> +<font color="#ff0000">wireguard_enable</font><font color="#F3E651">:</font><font color="#ff0000"> -</font><font color="#F3E651">></font><font color="#ff0000"> YES</font> +<font color="#ff0000">paul@f0</font><font color="#F3E651">:~</font><font color="#ff0000"> </font><font color="#F3E651">%</font><font color="#ff0000"> doas mkdir -p /usr/local/etc/wireguard</font> +<font color="#ff0000">paul@f0</font><font color="#F3E651">:~</font><font color="#ff0000"> </font><font color="#F3E651">%</font><font color="#ff0000"> doas touch /usr/local/etc/wireguard/wg</font><font color="#bb00ff">0</font><font color="#F3E651">.</font><font color="#ff0000">conf</font> +<font color="#ff0000">paul@f0</font><font color="#F3E651">:~</font><font color="#ff0000"> </font><font color="#F3E651">%</font><font color="#ff0000"> doas service wireguard start</font> +<font color="#ff0000">paul@f0</font><font color="#F3E651">:~</font><font color="#ff0000"> </font><font color="#F3E651">%</font><font color="#ff0000"> doas wg show</font> +<font color="#ff0000">interface</font><font color="#F3E651">:</font><font color="#ff0000"> wg0</font> +<font color="#ff0000"> public key</font><font color="#F3E651">:</font><font color="#ff0000"> L</font><font color="#F3E651">+</font><font color="#ff0000">V9o0fNYkMVKNqsX7spBzD</font><font color="#F3E651">/</font><font color="#ff0000">9oSvxM/C7</font><font color="#ff0000">ZCZX1jLO3Q</font><font color="#F3E651">=</font> +<font color="#ff0000"> private key</font><font color="#F3E651">:</font><font color="#ff0000"> </font><font color="#F3E651">(</font><font color="#ff0000">hidden</font><font color="#F3E651">)</font> +<font color="#ff0000"> listening port</font><font color="#F3E651">:</font><font color="#ff0000"> </font><font color="#bb00ff">20246</font> </pre> <br /> <span>We now have the WireGuard up and running, but it is not yet in any functional configuration. We will come back to that later.</span><br /> @@ -429,23 +429,23 @@ interface: wg0 by Lorenzo Bettini http://www.lorenzobettini.it http://www.gnu.org/software/src-highlite --> -<pre>paul@f0:~ % cat <<END | doas tee -a /etc/hosts +<pre><font color="#ff0000">paul@f0</font><font color="#F3E651">:~</font><font color="#ff0000"> </font><font color="#F3E651">%</font><font color="#ff0000"> cat </font><font color="#F3E651"><<</font><font color="#ff0000">END </font><font color="#F3E651">|</font><font color="#ff0000"> doas tee -a /etc/hosts</font> -<font color="#000000">192.168</font>.<font color="#000000">1.120</font> r0 r0.lan r0.lan.buetow.org -<font color="#000000">192.168</font>.<font color="#000000">1.121</font> r1 r1.lan r1.lan.buetow.org -<font color="#000000">192.168</font>.<font color="#000000">1.122</font> r2 r2.lan r2.lan.buetow.org +<font color="#bb00ff">192.168</font><font color="#F3E651">.</font><font color="#bb00ff">1.120</font><font color="#ff0000"> r0 r0</font><font color="#F3E651">.</font><font color="#ff0000">lan r0</font><font color="#F3E651">.</font><font color="#ff0000">lan</font><font color="#F3E651">.</font><font color="#ff0000">buetow</font><font color="#F3E651">.</font><font color="#ff0000">org</font> +<font color="#bb00ff">192.168</font><font color="#F3E651">.</font><font color="#bb00ff">1.121</font><font color="#ff0000"> r1 r1</font><font color="#F3E651">.</font><font color="#ff0000">lan r1</font><font color="#F3E651">.</font><font color="#ff0000">lan</font><font color="#F3E651">.</font><font color="#ff0000">buetow</font><font color="#F3E651">.</font><font color="#ff0000">org</font> +<font color="#bb00ff">192.168</font><font color="#F3E651">.</font><font color="#bb00ff">1.122</font><font color="#ff0000"> r2 r2</font><font color="#F3E651">.</font><font color="#ff0000">lan r2</font><font color="#F3E651">.</font><font color="#ff0000">lan</font><font color="#F3E651">.</font><font color="#ff0000">buetow</font><font color="#F3E651">.</font><font color="#ff0000">org</font> -<font color="#000000">192.168</font>.<font color="#000000">2.130</font> f0.wg0 f0.wg0.wan.buetow.org -<font color="#000000">192.168</font>.<font color="#000000">2.131</font> f1.wg0 f1.wg0.wan.buetow.org -<font color="#000000">192.168</font>.<font color="#000000">2.132</font> f2.wg0 f2.wg0.wan.buetow.org +<font color="#bb00ff">192.168</font><font color="#F3E651">.</font><font color="#bb00ff">2.130</font><font color="#ff0000"> f0</font><font color="#F3E651">.</font><font color="#ff0000">wg0 f0</font><font color="#F3E651">.</font><font color="#ff0000">wg0</font><font color="#F3E651">.</font><font color="#ff0000">wan</font><font color="#F3E651">.</font><font color="#ff0000">buetow</font><font color="#F3E651">.</font><font color="#ff0000">org</font> +<font color="#bb00ff">192.168</font><font color="#F3E651">.</font><font color="#bb00ff">2.131</font><font color="#ff0000"> f1</font><font color="#F3E651">.</font><font color="#ff0000">wg0 f1</font><font color="#F3E651">.</font><font color="#ff0000">wg0</font><font color="#F3E651">.</font><font color="#ff0000">wan</font><font color="#F3E651">.</font><font color="#ff0000">buetow</font><font color="#F3E651">.</font><font color="#ff0000">org</font> +<font color="#bb00ff">192.168</font><font color="#F3E651">.</font><font color="#bb00ff">2.132</font><font color="#ff0000"> f2</font><font color="#F3E651">.</font><font color="#ff0000">wg0 f2</font><font color="#F3E651">.</font><font color="#ff0000">wg0</font><font color="#F3E651">.</font><font color="#ff0000">wan</font><font color="#F3E651">.</font><font color="#ff0000">buetow</font><font color="#F3E651">.</font><font color="#ff0000">org</font> -<font color="#000000">192.168</font>.<font color="#000000">2.120</font> r0.wg0 r0.wg0.wan.buetow.org -<font color="#000000">192.168</font>.<font color="#000000">2.121</font> r1.wg0 r1.wg0.wan.buetow.org -<font color="#000000">192.168</font>.<font color="#000000">2.122</font> r2.wg0 r2.wg0.wan.buetow.org +<font color="#bb00ff">192.168</font><font color="#F3E651">.</font><font color="#bb00ff">2.120</font><font color="#ff0000"> r0</font><font color="#F3E651">.</font><font color="#ff0000">wg0 r0</font><font color="#F3E651">.</font><font color="#ff0000">wg0</font><font color="#F3E651">.</font><font color="#ff0000">wan</font><font color="#F3E651">.</font><font color="#ff0000">buetow</font><font color="#F3E651">.</font><font color="#ff0000">org</font> +<font color="#bb00ff">192.168</font><font color="#F3E651">.</font><font color="#bb00ff">2.121</font><font color="#ff0000"> r1</font><font color="#F3E651">.</font><font color="#ff0000">wg0 r1</font><font color="#F3E651">.</font><font color="#ff0000">wg0</font><font color="#F3E651">.</font><font color="#ff0000">wan</font><font color="#F3E651">.</font><font color="#ff0000">buetow</font><font color="#F3E651">.</font><font color="#ff0000">org</font> +<font color="#bb00ff">192.168</font><font color="#F3E651">.</font><font color="#bb00ff">2.122</font><font color="#ff0000"> r2</font><font color="#F3E651">.</font><font color="#ff0000">wg0 r2</font><font color="#F3E651">.</font><font color="#ff0000">wg0</font><font color="#F3E651">.</font><font color="#ff0000">wan</font><font color="#F3E651">.</font><font color="#ff0000">buetow</font><font color="#F3E651">.</font><font color="#ff0000">org</font> -<font color="#000000">192.168</font>.<font color="#000000">2.110</font> blowfish.wg0 blowfish.wg0.wan.buetow.org -<font color="#000000">192.168</font>.<font color="#000000">2.111</font> fishfinger.wg0 fishfinger.wg0.wan.buetow.org -END +<font color="#bb00ff">192.168</font><font color="#F3E651">.</font><font color="#bb00ff">2.110</font><font color="#ff0000"> blowfish</font><font color="#F3E651">.</font><font color="#ff0000">wg0 blowfish</font><font color="#F3E651">.</font><font color="#ff0000">wg0</font><font color="#F3E651">.</font><font color="#ff0000">wan</font><font color="#F3E651">.</font><font color="#ff0000">buetow</font><font color="#F3E651">.</font><font color="#ff0000">org</font> +<font color="#bb00ff">192.168</font><font color="#F3E651">.</font><font color="#bb00ff">2.111</font><font color="#ff0000"> fishfinger</font><font color="#F3E651">.</font><font color="#ff0000">wg0 fishfinger</font><font color="#F3E651">.</font><font color="#ff0000">wg0</font><font color="#F3E651">.</font><font color="#ff0000">wan</font><font color="#F3E651">.</font><font color="#ff0000">buetow</font><font color="#F3E651">.</font><font color="#ff0000">org</font> +<font color="#ff0000">END</font> </pre> <br /> <span>As you can see, <span class='inlinecode'>192.168.1.0/24</span> is the network used in my LAN (with the <span class='inlinecode'>fN</span> and <span class='inlinecode'>rN</span> hosts) and <span class='inlinecode'>192.168.2.0/24</span> is the network used for the WireGuard mesh network. The <span class='inlinecode'>wg0</span> interface will be used for all WireGuard traffic.</span><br /> @@ -458,8 +458,8 @@ END by Lorenzo Bettini http://www.lorenzobettini.it http://www.gnu.org/software/src-highlite --> -<pre>[root@r0 ~] dnf update -y -[root@r0 ~] reboot +<pre><font color="#F3E651">[</font><font color="#ff0000">root@r0 </font><font color="#F3E651">~]</font><font color="#ff0000"> dnf update -y</font> +<font color="#F3E651">[</font><font color="#ff0000">root@r0 </font><font color="#F3E651">~]</font><font color="#ff0000"> reboot</font> </pre> <br /> <span>Next, we prepare WireGuard on them. Same as on the FreeBSD hosts, we will only prepare WireGuard without any useful configuration yet:</span><br /> @@ -468,12 +468,12 @@ http://www.gnu.org/software/src-highlite --> by Lorenzo Bettini http://www.lorenzobettini.it http://www.gnu.org/software/src-highlite --> -<pre>[root@r0 ~] dnf install -y wireguard-tools -[root@r0 ~] mkdir -p /etc/wireguard -[root@r0 ~] touch /etc/wireguard/wg<font color="#000000">0</font>.conf -[root@r0 ~] systemctl <b><u><font color="#000000">enable</font></u></b> wg-quick@wg0.service -[root@r0 ~] systemctl start wg-quick@wg0.service -[root@r0 ~] systemctl disable firewalld +<pre><font color="#F3E651">[</font><font color="#ff0000">root@r0 </font><font color="#F3E651">~]</font><font color="#ff0000"> dnf install -y wireguard-tools</font> +<font color="#F3E651">[</font><font color="#ff0000">root@r0 </font><font color="#F3E651">~]</font><font color="#ff0000"> mkdir -p /etc/wireguard</font> +<font color="#F3E651">[</font><font color="#ff0000">root@r0 </font><font color="#F3E651">~]</font><font color="#ff0000"> touch /etc/wireguard/wg</font><font color="#bb00ff">0</font><font color="#F3E651">.</font><font color="#ff0000">conf</font> +<font color="#F3E651">[</font><font color="#ff0000">root@r0 </font><font color="#F3E651">~]</font><font color="#ff0000"> systemctl </font><b><font color="#ffffff">enable</font></b><font color="#ff0000"> wg-quick@wg0</font><font color="#F3E651">.</font><font color="#ff0000">service</font> +<font color="#F3E651">[</font><font color="#ff0000">root@r0 </font><font color="#F3E651">~]</font><font color="#ff0000"> systemctl start wg-quick@wg0</font><font color="#F3E651">.</font><font color="#ff0000">service</font> +<font color="#F3E651">[</font><font color="#ff0000">root@r0 </font><font color="#F3E651">~]</font><font color="#ff0000"> systemctl disable firewalld</font> </pre> <br /> <span>We also update the <span class='inlinecode'>hosts</span> file accordingly:</span><br /> @@ -482,23 +482,23 @@ http://www.gnu.org/software/src-highlite --> by Lorenzo Bettini http://www.lorenzobettini.it http://www.gnu.org/software/src-highlite --> -<pre>[root@r0 ~] cat <<END >>/etc/hosts +<pre><font color="#F3E651">[</font><font color="#ff0000">root@r0 </font><font color="#F3E651">~]</font><font color="#ff0000"> cat </font><font color="#F3E651"><<</font><font color="#ff0000">END </font><font color="#F3E651">>></font><font color="#ff0000">/etc/hosts</font> -<font color="#000000">192.168</font>.<font color="#000000">1.130</font> f0 f0.lan f0.lan.buetow.org -<font color="#000000">192.168</font>.<font color="#000000">1.131</font> f1 f1.lan f1.lan.buetow.org -<font color="#000000">192.168</font>.<font color="#000000">1.132</font> f2 f2.lan f2.lan.buetow.org +<font color="#bb00ff">192.168</font><font color="#F3E651">.</font><font color="#bb00ff">1.130</font><font color="#ff0000"> f0 f0</font><font color="#F3E651">.</font><font color="#ff0000">lan f0</font><font color="#F3E651">.</font><font color="#ff0000">lan</font><font color="#F3E651">.</font><font color="#ff0000">buetow</font><font color="#F3E651">.</font><font color="#ff0000">org</font> +<font color="#bb00ff">192.168</font><font color="#F3E651">.</font><font color="#bb00ff">1.131</font><font color="#ff0000"> f1 f1</font><font color="#F3E651">.</font><font color="#ff0000">lan f1</font><font color="#F3E651">.</font><font color="#ff0000">lan</font><font color="#F3E651">.</font><font color="#ff0000">buetow</font><font color="#F3E651">.</font><font color="#ff0000">org</font> +<font color="#bb00ff">192.168</font><font color="#F3E651">.</font><font color="#bb00ff">1.132</font><font color="#ff0000"> f2 f2</font><font color="#F3E651">.</font><font color="#ff0000">lan f2</font><font color="#F3E651">.</font><font color="#ff0000">lan</font><font color="#F3E651">.</font><font color="#ff0000">buetow</font><font color="#F3E651">.</font><font color="#ff0000">org</font> -<font color="#000000">192.168</font>.<font color="#000000">2.130</font> f0.wg0 f0.wg0.wan.buetow.org -<font color="#000000">192.168</font>.<font color="#000000">2.131</font> f1.wg0 f1.wg0.wan.buetow.org -<font color="#000000">192.168</font>.<font color="#000000">2.132</font> f2.wg0 f2.wg0.wan.buetow.org +<font color="#bb00ff">192.168</font><font color="#F3E651">.</font><font color="#bb00ff">2.130</font><font color="#ff0000"> f0</font><font color="#F3E651">.</font><font color="#ff0000">wg0 f0</font><font color="#F3E651">.</font><font color="#ff0000">wg0</font><font color="#F3E651">.</font><font color="#ff0000">wan</font><font color="#F3E651">.</font><font color="#ff0000">buetow</font><font color="#F3E651">.</font><font color="#ff0000">org</font> +<font color="#bb00ff">192.168</font><font color="#F3E651">.</font><font color="#bb00ff">2.131</font><font color="#ff0000"> f1</font><font color="#F3E651">.</font><font color="#ff0000">wg0 f1</font><font color="#F3E651">.</font><font color="#ff0000">wg0</font><font color="#F3E651">.</font><font color="#ff0000">wan</font><font color="#F3E651">.</font><font color="#ff0000">buetow</font><font color="#F3E651">.</font><font color="#ff0000">org</font> +<font color="#bb00ff">192.168</font><font color="#F3E651">.</font><font color="#bb00ff">2.132</font><font color="#ff0000"> f2</font><font color="#F3E651">.</font><font color="#ff0000">wg0 f2</font><font color="#F3E651">.</font><font color="#ff0000">wg0</font><font color="#F3E651">.</font><font color="#ff0000">wan</font><font color="#F3E651">.</font><font color="#ff0000">buetow</font><font color="#F3E651">.</font><font color="#ff0000">org</font> -<font color="#000000">192.168</font>.<font color="#000000">2.120</font> r0.wg0 r0.wg0.wan.buetow.org -<font color="#000000">192.168</font>.<font color="#000000">2.121</font> r1.wg0 r1.wg0.wan.buetow.org -<font color="#000000">192.168</font>.<font color="#000000">2.122</font> r2.wg0 r2.wg0.wan.buetow.org +<font color="#bb00ff">192.168</font><font color="#F3E651">.</font><font color="#bb00ff">2.120</font><font color="#ff0000"> r0</font><font color="#F3E651">.</font><font color="#ff0000">wg0 r0</font><font color="#F3E651">.</font><font color="#ff0000">wg0</font><font color="#F3E651">.</font><font color="#ff0000">wan</font><font color="#F3E651">.</font><font color="#ff0000">buetow</font><font color="#F3E651">.</font><font color="#ff0000">org</font> +<font color="#bb00ff">192.168</font><font color="#F3E651">.</font><font color="#bb00ff">2.121</font><font color="#ff0000"> r1</font><font color="#F3E651">.</font><font color="#ff0000">wg0 r1</font><font color="#F3E651">.</font><font color="#ff0000">wg0</font><font color="#F3E651">.</font><font color="#ff0000">wan</font><font color="#F3E651">.</font><font color="#ff0000">buetow</font><font color="#F3E651">.</font><font color="#ff0000">org</font> +<font color="#bb00ff">192.168</font><font color="#F3E651">.</font><font color="#bb00ff">2.122</font><font color="#ff0000"> r2</font><font color="#F3E651">.</font><font color="#ff0000">wg0 r2</font><font color="#F3E651">.</font><font color="#ff0000">wg0</font><font color="#F3E651">.</font><font color="#ff0000">wan</font><font color="#F3E651">.</font><font color="#ff0000">buetow</font><font color="#F3E651">.</font><font color="#ff0000">org</font> -<font color="#000000">192.168</font>.<font color="#000000">2.110</font> blowfish.wg0 blowfish.wg0.wan.buetow.org -<font color="#000000">192.168</font>.<font color="#000000">2.111</font> fishfinger.wg0 fishfinger.wg0.wan.buetow.org -END +<font color="#bb00ff">192.168</font><font color="#F3E651">.</font><font color="#bb00ff">2.110</font><font color="#ff0000"> blowfish</font><font color="#F3E651">.</font><font color="#ff0000">wg0 blowfish</font><font color="#F3E651">.</font><font color="#ff0000">wg0</font><font color="#F3E651">.</font><font color="#ff0000">wan</font><font color="#F3E651">.</font><font color="#ff0000">buetow</font><font color="#F3E651">.</font><font color="#ff0000">org</font> +<font color="#bb00ff">192.168</font><font color="#F3E651">.</font><font color="#bb00ff">2.111</font><font color="#ff0000"> fishfinger</font><font color="#F3E651">.</font><font color="#ff0000">wg0 fishfinger</font><font color="#F3E651">.</font><font color="#ff0000">wg0</font><font color="#F3E651">.</font><font color="#ff0000">wan</font><font color="#F3E651">.</font><font color="#ff0000">buetow</font><font color="#F3E651">.</font><font color="#ff0000">org</font> +<font color="#ff0000">END</font> </pre> <br /> <span>Unfortunately, the SELinux policy on Rocky Linux blocks WireGuard's operation. By making the <span class='inlinecode'>wireguard_t</span> domain permissive using <span class='inlinecode'>semanage permissive -a wireguard_t</span>, SELinux will no longer enforce restrictions for WireGuard, allowing it to work as intended:</span><br /> @@ -507,9 +507,9 @@ END by Lorenzo Bettini http://www.lorenzobettini.it http://www.gnu.org/software/src-highlite --> -<pre>[root@r0 ~] dnf install -y policycoreutils-python-utils -[root@r0 ~] semanage permissive -a wireguard_t -[root@r0 ~] reboot +<pre><font color="#F3E651">[</font><font color="#ff0000">root@r0 </font><font color="#F3E651">~]</font><font color="#ff0000"> dnf install -y policycoreutils-python-utils</font> +<font color="#F3E651">[</font><font color="#ff0000">root@r0 </font><font color="#F3E651">~]</font><font color="#ff0000"> semanage permissive -a wireguard_t</font> +<font color="#F3E651">[</font><font color="#ff0000">root@r0 </font><font color="#F3E651">~]</font><font color="#ff0000"> reboot</font> </pre> <br /> <a class='textlink' href='https://github.com/angristan/wireguard-install/discussions/499'>https://github.com/angristan/wireguard-install/discussions/499</a><br /> @@ -522,14 +522,14 @@ http://www.gnu.org/software/src-highlite --> by Lorenzo Bettini http://www.lorenzobettini.it http://www.gnu.org/software/src-highlite --> -<pre>blowfish$ doas pkg_add wireguard-tools -blowfish$ doas mkdir /etc/wireguard -blowfish$ doas touch /etc/wireguard/wg<font color="#000000">0</font>.conf -blowsish$ cat <<END | doas tee /etc/hostname.wg0 -inet <font color="#000000">192.168</font>.<font color="#000000">2.110</font> <font color="#000000">255.255</font>.<font color="#000000">255.0</font> NONE -up -!/usr/local/bin/wg setconf wg0 /etc/wireguard/wg<font color="#000000">0</font>.conf -END +<pre><font color="#ff0000">blowfish$ doas pkg_add wireguard-tools</font> +<font color="#ff0000">blowfish$ doas mkdir /etc/wireguard</font> +<font color="#ff0000">blowfish$ doas touch /etc/wireguard/wg</font><font color="#bb00ff">0</font><font color="#F3E651">.</font><font color="#ff0000">conf</font> +<font color="#ff0000">blowsish$ cat </font><font color="#F3E651"><<</font><font color="#ff0000">END </font><font color="#F3E651">|</font><font color="#ff0000"> doas tee /etc/hostname</font><font color="#F3E651">.</font><font color="#ff0000">wg0</font> +<font color="#ff0000">inet </font><font color="#bb00ff">192.168</font><font color="#F3E651">.</font><font color="#bb00ff">2.110</font><font color="#ff0000"> </font><font color="#bb00ff">255.255</font><font color="#F3E651">.</font><font color="#bb00ff">255.0</font><font color="#ff0000"> NONE</font> +<font color="#ff0000">up</font> +<font color="#F3E651">!</font><font color="#ff0000">/usr/local/bin/wg setconf wg0 /etc/wireguard/wg</font><font color="#bb00ff">0</font><font color="#F3E651">.</font><font color="#ff0000">conf</font> +<font color="#ff0000">END</font> </pre> <br /> <span>Note that on <span class='inlinecode'>blowfish</span>, we configure <span class='inlinecode'>192.168.2.110</span> here in the <span class='inlinecode'>hostname.wg</span>, and on <span class='inlinecode'>fishfinger</span>, we configure <span class='inlinecode'>192.168.2.111</span>. Those are the IP addresses of the WireGuard interfaces on those hosts.</span><br /> @@ -540,19 +540,19 @@ END by Lorenzo Bettini http://www.lorenzobettini.it http://www.gnu.org/software/src-highlite --> -<pre>blowfish$ cat <<END | doas tee -a /etc/hosts +<pre><font color="#ff0000">blowfish$ cat </font><font color="#F3E651"><<</font><font color="#ff0000">END </font><font color="#F3E651">|</font><font color="#ff0000"> doas tee -a /etc/hosts</font> -<font color="#000000">192.168</font>.<font color="#000000">2.130</font> f0.wg0 f0.wg0.wan.buetow.org -<font color="#000000">192.168</font>.<font color="#000000">2.131</font> f1.wg0 f1.wg0.wan.buetow.org -<font color="#000000">192.168</font>.<font color="#000000">2.132</font> f2.wg0 f2.wg0.wan.buetow.org +<font color="#bb00ff">192.168</font><font color="#F3E651">.</font><font color="#bb00ff">2.130</font><font color="#ff0000"> f0</font><font color="#F3E651">.</font><font color="#ff0000">wg0 f0</font><font color="#F3E651">.</font><font color="#ff0000">wg0</font><font color="#F3E651">.</font><font color="#ff0000">wan</font><font color="#F3E651">.</font><font color="#ff0000">buetow</font><font color="#F3E651">.</font><font color="#ff0000">org</font> +<font color="#bb00ff">192.168</font><font color="#F3E651">.</font><font color="#bb00ff">2.131</font><font color="#ff0000"> f1</font><font color="#F3E651">.</font><font color="#ff0000">wg0 f1</font><font color="#F3E651">.</font><font color="#ff0000">wg0</font><font color="#F3E651">.</font><font color="#ff0000">wan</font><font color="#F3E651">.</font><font color="#ff0000">buetow</font><font color="#F3E651">.</font><font color="#ff0000">org</font> +<font color="#bb00ff">192.168</font><font color="#F3E651">.</font><font color="#bb00ff">2.132</font><font color="#ff0000"> f2</font><font color="#F3E651">.</font><font color="#ff0000">wg0 f2</font><font color="#F3E651">.</font><font color="#ff0000">wg0</font><font color="#F3E651">.</font><font color="#ff0000">wan</font><font color="#F3E651">.</font><font color="#ff0000">buetow</font><font color="#F3E651">.</font><font color="#ff0000">org</font> -<font color="#000000">192.168</font>.<font color="#000000">2.120</font> r0.wg0 r0.wg0.wan.buetow.org -<font color="#000000">192.168</font>.<font color="#000000">2.121</font> r1.wg0 r1.wg0.wan.buetow.org -<font color="#000000">192.168</font>.<font color="#000000">2.122</font> r2.wg0 r2.wg0.wan.buetow.org +<font color="#bb00ff">192.168</font><font color="#F3E651">.</font><font color="#bb00ff">2.120</font><font color="#ff0000"> r0</font><font color="#F3E651">.</font><font color="#ff0000">wg0 r0</font><font color="#F3E651">.</font><font color="#ff0000">wg0</font><font color="#F3E651">.</font><font color="#ff0000">wan</font><font color="#F3E651">.</font><font color="#ff0000">buetow</font><font color="#F3E651">.</font><font color="#ff0000">org</font> +<font color="#bb00ff">192.168</font><font color="#F3E651">.</font><font color="#bb00ff">2.121</font><font color="#ff0000"> r1</font><font color="#F3E651">.</font><font color="#ff0000">wg0 r1</font><font color="#F3E651">.</font><font color="#ff0000">wg0</font><font color="#F3E651">.</font><font color="#ff0000">wan</font><font color="#F3E651">.</font><font color="#ff0000">buetow</font><font color="#F3E651">.</font><font color="#ff0000">org</font> +<font color="#bb00ff">192.168</font><font color="#F3E651">.</font><font color="#bb00ff">2.122</font><font color="#ff0000"> r2</font><font color="#F3E651">.</font><font color="#ff0000">wg0 r2</font><font color="#F3E651">.</font><font color="#ff0000">wg0</font><font color="#F3E651">.</font><font color="#ff0000">wan</font><font color="#F3E651">.</font><font color="#ff0000">buetow</font><font color="#F3E651">.</font><font color="#ff0000">org</font> -<font color="#000000">192.168</font>.<font color="#000000">2.110</font> blowfish.wg0 blowfish.wg0.wan.buetow.org -<font color="#000000">192.168</font>.<font color="#000000">2.111</font> fishfinger.wg0 fishfinger.wg0.wan.buetow.org -END +<font color="#bb00ff">192.168</font><font color="#F3E651">.</font><font color="#bb00ff">2.110</font><font color="#ff0000"> blowfish</font><font color="#F3E651">.</font><font color="#ff0000">wg0 blowfish</font><font color="#F3E651">.</font><font color="#ff0000">wg0</font><font color="#F3E651">.</font><font color="#ff0000">wan</font><font color="#F3E651">.</font><font color="#ff0000">buetow</font><font color="#F3E651">.</font><font color="#ff0000">org</font> +<font color="#bb00ff">192.168</font><font color="#F3E651">.</font><font color="#bb00ff">2.111</font><font color="#ff0000"> fishfinger</font><font color="#F3E651">.</font><font color="#ff0000">wg0 fishfinger</font><font color="#F3E651">.</font><font color="#ff0000">wg0</font><font color="#F3E651">.</font><font color="#ff0000">wan</font><font color="#F3E651">.</font><font color="#ff0000">buetow</font><font color="#F3E651">.</font><font color="#ff0000">org</font> +<font color="#ff0000">END</font> </pre> <br /> <h2 style='display: inline' id='wireguard-configuration'>WireGuard configuration</h2><br /> @@ -677,10 +677,10 @@ PersistentKeepalive = 25 by Lorenzo Bettini http://www.lorenzobettini.it http://www.gnu.org/software/src-highlite --> -<pre>> git clone https://codeberg.org/snonux/wireguardmeshgenerator -> cd ./wireguardmeshgenerator -> bundle install -> sudo dnf install -y wireguard-tools +<pre><font color="#F3E651">></font><font color="#ff0000"> git clone https</font><font color="#F3E651">:</font><font color="#ff0000">//codeberg</font><font color="#F3E651">.</font><font color="#ff0000">org/snonux/wireguardmeshgenerator</font> +<font color="#F3E651">></font><font color="#ff0000"> cd </font><font color="#F3E651">.</font><font color="#ff0000">/wireguardmeshgenerator</font> +<font color="#F3E651">></font><font color="#ff0000"> bundle install</font> +<font color="#F3E651">></font><font color="#ff0000"> sudo dnf install -y wireguard-tools</font> </pre> <br /> <span>This assumes that Ruby and the <span class='inlinecode'>bundler</span> gem are already installed. If not, refer to the docs of your distribution.</span><br /> @@ -816,39 +816,39 @@ hosts: by Lorenzo Bettini http://www.lorenzobettini.it http://www.gnu.org/software/src-highlite --> -<pre><b><u><font color="#000000">begin</font></u></b> - options = { hosts: [] } - OptionParser.new <b><u><font color="#000000">do</font></u></b> |opts| - opts.banner = <font color="#808080">'Usage: wireguardmeshgenerator.rb [options]'</font> - opts.on(<font color="#808080">'--generate'</font>, <font color="#808080">'Generate Wireguard configs'</font>) <b><u><font color="#000000">do</font></u></b> - options[:generate] = <b><u><font color="#000000">true</font></u></b> - <b><u><font color="#000000">end</font></u></b> - opts.on(<font color="#808080">'--install'</font>, <font color="#808080">'Install Wireguard configs'</font>) <b><u><font color="#000000">do</font></u></b> - options[:install] = <b><u><font color="#000000">true</font></u></b> - <b><u><font color="#000000">end</font></u></b> - opts.on(<font color="#808080">'--clean'</font>, <font color="#808080">'Clean Wireguard configs'</font>) <b><u><font color="#000000">do</font></u></b> - options[:clean] = <b><u><font color="#000000">true</font></u></b> - <b><u><font color="#000000">end</font></u></b> - opts.on(<font color="#808080">'--hosts=HOSTS'</font>, <font color="#808080">'Comma separated hosts to configure'</font>) <b><u><font color="#000000">do</font></u></b> |hosts| - options[:hosts] = hosts.split(<font color="#808080">','</font>) - <b><u><font color="#000000">end</font></u></b> - <b><u><font color="#000000">end</font></u></b>.parse! - - conf = YAML.load_file(<font color="#808080">'wireguardmeshgenerator.yaml'</font>).freeze - conf[<font color="#808080">'hosts'</font>].keys.select { options[:hosts].empty? || options[:hosts].<b><u><font color="#000000">include</font></u></b>?(_1) } - .each <b><u><font color="#000000">do</font></u></b> |host| - <i><font color="silver"># Generate Wireguard configuration for the host reload!</font></i> - WireguardConfig.new(host, conf[<font color="#808080">'hosts'</font>]).generate! <b><u><font color="#000000">if</font></u></b> options[:generate] - <i><font color="silver"># Install Wireguard configuration for the host.</font></i> - InstallConfig.new(host, conf[<font color="#808080">'hosts'</font>]).upload!.install!.reload! <b><u><font color="#000000">if</font></u></b> options[:install] - <i><font color="silver"># Clean Wireguard configuration for the host.</font></i> - WireguardConfig.new(host, conf[<font color="#808080">'hosts'</font>]).clean! <b><u><font color="#000000">if</font></u></b> options[:clean] - <b><u><font color="#000000">end</font></u></b> -<b><u><font color="#000000">rescue</font></u></b> StandardError => e - puts <font color="#808080">"Error: #{e.message}"</font> - puts e.backtrace.join(<font color="#808080">"\n"</font>) - exit <font color="#000000">2</font> -<b><u><font color="#000000">end</font></u></b> +<pre><b><font color="#ffffff">begin</font></b> +<font color="#ff0000"> options </font><font color="#F3E651">=</font><font color="#ff0000"> </font><font color="#F3E651">{</font><font color="#ff0000"> hosts</font><font color="#F3E651">:</font><font color="#ff0000"> </font><font color="#F3E651">[]</font><font color="#ff0000"> </font><font color="#F3E651">}</font> +<font color="#ff0000"> OptionParser</font><font color="#F3E651">.</font><font color="#ff0000">new </font><b><font color="#ffffff">do</font></b><font color="#ff0000"> </font><font color="#F3E651">|</font><font color="#ff0000">opts</font><font color="#F3E651">|</font> +<font color="#ff0000"> opts</font><font color="#F3E651">.</font><font color="#ff0000">banner </font><font color="#F3E651">=</font><font color="#ff0000"> </font><font color="#bb00ff">'Usage: wireguardmeshgenerator.rb [options]'</font> +<font color="#ff0000"> opts</font><font color="#F3E651">.</font><font color="#ff0000">on</font><font color="#F3E651">(</font><font color="#bb00ff">'--generate'</font><font color="#F3E651">,</font><font color="#ff0000"> </font><font color="#bb00ff">'Generate Wireguard configs'</font><font color="#F3E651">)</font><font color="#ff0000"> </font><b><font color="#ffffff">do</font></b> +<font color="#ff0000"> options</font><font color="#F3E651">[:</font><font color="#ff0000">generate</font><font color="#F3E651">]</font><font color="#ff0000"> </font><font color="#F3E651">=</font><font color="#ff0000"> </font><b><font color="#ffffff">true</font></b> +<font color="#ff0000"> </font><b><font color="#ffffff">end</font></b> +<font color="#ff0000"> opts</font><font color="#F3E651">.</font><font color="#ff0000">on</font><font color="#F3E651">(</font><font color="#bb00ff">'--install'</font><font color="#F3E651">,</font><font color="#ff0000"> </font><font color="#bb00ff">'Install Wireguard configs'</font><font color="#F3E651">)</font><font color="#ff0000"> </font><b><font color="#ffffff">do</font></b> +<font color="#ff0000"> options</font><font color="#F3E651">[:</font><font color="#ff0000">install</font><font color="#F3E651">]</font><font color="#ff0000"> </font><font color="#F3E651">=</font><font color="#ff0000"> </font><b><font color="#ffffff">true</font></b> +<font color="#ff0000"> </font><b><font color="#ffffff">end</font></b> +<font color="#ff0000"> opts</font><font color="#F3E651">.</font><font color="#ff0000">on</font><font color="#F3E651">(</font><font color="#bb00ff">'--clean'</font><font color="#F3E651">,</font><font color="#ff0000"> </font><font color="#bb00ff">'Clean Wireguard configs'</font><font color="#F3E651">)</font><font color="#ff0000"> </font><b><font color="#ffffff">do</font></b> +<font color="#ff0000"> options</font><font color="#F3E651">[:</font><font color="#ff0000">clean</font><font color="#F3E651">]</font><font color="#ff0000"> </font><font color="#F3E651">=</font><font color="#ff0000"> </font><b><font color="#ffffff">true</font></b> +<font color="#ff0000"> </font><b><font color="#ffffff">end</font></b> +<font color="#ff0000"> opts</font><font color="#F3E651">.</font><font color="#ff0000">on</font><font color="#F3E651">(</font><font color="#bb00ff">'--hosts=HOSTS'</font><font color="#F3E651">,</font><font color="#ff0000"> </font><font color="#bb00ff">'Comma separated hosts to configure'</font><font color="#F3E651">)</font><font color="#ff0000"> </font><b><font color="#ffffff">do</font></b><font color="#ff0000"> </font><font color="#F3E651">|</font><font color="#ff0000">hosts</font><font color="#F3E651">|</font> +<font color="#ff0000"> options</font><font color="#F3E651">[:</font><font color="#ff0000">hosts</font><font color="#F3E651">]</font><font color="#ff0000"> </font><font color="#F3E651">=</font><font color="#ff0000"> hosts</font><font color="#F3E651">.</font><font color="#ff0000">split</font><font color="#F3E651">(</font><font color="#bb00ff">','</font><font color="#F3E651">)</font> +<font color="#ff0000"> </font><b><font color="#ffffff">end</font></b> +<font color="#ff0000"> </font><b><font color="#ffffff">end</font></b><font color="#F3E651">.</font><font color="#ff0000">parse!</font> + +<font color="#ff0000"> conf </font><font color="#F3E651">=</font><font color="#ff0000"> YAML</font><font color="#F3E651">.</font><font color="#ff0000">load_file</font><font color="#F3E651">(</font><font color="#bb00ff">'wireguardmeshgenerator.yaml'</font><font color="#F3E651">).</font><font color="#ff0000">freeze</font> +<font color="#ff0000"> conf</font><font color="#F3E651">[</font><font color="#bb00ff">'hosts'</font><font color="#F3E651">].</font><font color="#ff0000">keys</font><font color="#F3E651">.</font><font color="#ff0000">select </font><font color="#F3E651">{</font><font color="#ff0000"> options</font><font color="#F3E651">[:</font><font color="#ff0000">hosts</font><font color="#F3E651">].</font><font color="#ff0000">empty? </font><font color="#F3E651">||</font><font color="#ff0000"> options</font><font color="#F3E651">[:</font><font color="#ff0000">hosts</font><font color="#F3E651">].</font><b><font color="#ffffff">include</font></b><font color="#F3E651">?(</font><font color="#ff0000">_1</font><font color="#F3E651">)</font><font color="#ff0000"> </font><font color="#F3E651">}</font> +<font color="#ff0000"> </font><font color="#F3E651">.</font><font color="#ff0000">each </font><b><font color="#ffffff">do</font></b><font color="#ff0000"> </font><font color="#F3E651">|</font><font color="#ff0000">host</font><font color="#F3E651">|</font> +<font color="#ff0000"> </font><i><font color="#ababab"># Generate Wireguard configuration for the host reload!</font></i> +<font color="#ff0000"> WireguardConfig</font><font color="#F3E651">.</font><font color="#ff0000">new</font><font color="#F3E651">(</font><font color="#ff0000">host</font><font color="#F3E651">,</font><font color="#ff0000"> conf</font><font color="#F3E651">[</font><font color="#bb00ff">'hosts'</font><font color="#F3E651">]).</font><font color="#ff0000">generate! </font><b><font color="#ffffff">if</font></b><font color="#ff0000"> options</font><font color="#F3E651">[:</font><font color="#ff0000">generate</font><font color="#F3E651">]</font> +<font color="#ff0000"> </font><i><font color="#ababab"># Install Wireguard configuration for the host.</font></i> +<font color="#ff0000"> Insta |