[Bug 272842] Missing WireGuard integration into the base system rc.d scripts

From: <bugzilla-noreply_at_freebsd.org>
Date: Mon, 31 Jul 2023 12:28:50 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=272842

            Bug ID: 272842
           Summary: Missing WireGuard integration into the base system
                    rc.d scripts
           Product: Base System
           Version: 13.2-RELEASE
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Some People
          Priority: ---
         Component: conf
          Assignee: bugs@FreeBSD.org
          Reporter: crest@rlwinm.de
 Attachment #243735 text/plain
         mime type:

Created attachment 243735
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=243735&action=edit
A WireGuard rc.d script

FreeBSD 13.2 and newer include WireGuard support in the base system, but lack
an rc.d script to make it easy to take advantage of the imported WireGuard
implementation. These are the steps I used before to configure a WireGuard
interface: https://blog.rlwinm.de/wireguard-configuration-for-freebsd-13-2 .

As a quality of life improvement I reimplemented most of wg-quick(8) features
in /bin/sh as rc.d script:
https://gist.githubusercontent.com/Crest/c5f408b8d347f41cf3f84bfee6a9224d/raw/8a1f219bf1957d7e1ecbeaa72998961707e27984/wireguard.sh
. More details can be found here:
https://blog.rlwinm.de/the-missing-wireguard-integration-into-rc-d-for-freebsd-13-2
.

I did *not* reimplement the saving the configuration or spawning a daemon that
continually messes with the routing table since FreeBSD provides better ways to
isolate routing tables (multiple FIBs, vnets).

-- 
You are receiving this mail because:
You are the assignee for the bug.