simono41/docker-wireguard
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Pin Ubuntu version and update docs to require privileged mode

Browse source
This commit is contained in:
Jordan Potter 2020-05-18 17:14:55 -05:00
parent 8cdbdd9bab
commit 141e0a3948
2 changed files with 3 additions and 24 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
Dockerfile
View file

@ -1,7 +1,6 @@
FROM ubuntu:latest FROM ubuntu:20.04
RUN apt-get update && apt-get install -y software-properties-common openresolv iptables iproute2 RUN apt-get update && apt-get install -y openresolv iptables iproute2 wireguard
RUN add-apt-repository ppa:wireguard/wireguard && apt-get update && apt-get install -y wireguard-tools
COPY entrypoint.sh /entrypoint.sh COPY entrypoint.sh /entrypoint.sh

22
README.md
View file

@ -9,7 +9,7 @@ Now simply mount the configuration file and run! For example, if your configurat
```bash ```bash
docker run --name wireguard \ docker run --name wireguard \
--cap-add=NET_ADMIN \ --privileged \
-v /path/to/conf/mullvadus2.conf:/etc/wireguard/mullvadus2.conf \ -v /path/to/conf/mullvadus2.conf:/etc/wireguard/mullvadus2.conf \
jordanpotter/wireguard jordanpotter/wireguard
``` ```
@ -21,23 +21,3 @@ docker run -it --rm \
--net=container:wireguard \ --net=container:wireguard \
appropriate/curl http://httpbin.org/ip appropriate/curl http://httpbin.org/ip
``` ```
## Troubleshooting
### Asymmetric Routing
If you see any errors similar to:
```bash
sysctl: setting key "net.ipv4.conf.all.rp_filter": Read-only file system
sysctl: setting key "net.ipv4.conf.default.rp_filter": Read-only file system
```
Then your host is set to discard packets when the route for outbound traffic differs from the route for incoming traffic. To correct this, you'll want to set these values in `/etc/sysctl.conf`:
```bash
net.ipv4.conf.default.rp_filter = 2
net.ipv4.conf.all.rp_filter = 2
```
Afterwards, reboot.