Commit graph

14 commits

Author SHA1 Message Date
Jake Wharton
0a8f9b682e Switch base image from Ubuntu to Alpine
This dramatically reduces the size of the container from hundreds of MiBs to just over ten.

BEFORE
```
$ docker history ea2d6da4cbdc
IMAGE               CREATED             CREATED BY                                      SIZE                COMMENT
ea2d6da4cbdc        27 seconds ago      /bin/sh -c #(nop)  ENTRYPOINT ["/entrypoint.…   0B
2c7e3f0de3c8        27 seconds ago      /bin/sh -c #(nop) COPY file:ad76fe44d1402628…   1.44kB
1a29ca960363        29 seconds ago      /bin/sh -c apt-get update && apt-get install…   367MB
f643c72bc252        12 days ago         /bin/sh -c #(nop)  CMD ["/bin/bash"]            0B
<missing>           12 days ago         /bin/sh -c mkdir -p /run/systemd && echo 'do…   7B
<missing>           12 days ago         /bin/sh -c [ -z "$(apt-get indextargets)" ]     0B
<missing>           12 days ago         /bin/sh -c set -xe   && echo '#!/bin/sh' > /…   811B
<missing>           12 days ago         /bin/sh -c #(nop) ADD file:4f15c4475fbafb3fe…   72.9MB
```

AFTER
```
$ docker history 6b71b07e8ccd
IMAGE               CREATED              CREATED BY                                      SIZE                COMMENT
6b71b07e8ccd        About a minute ago   /bin/sh -c #(nop)  ENTRYPOINT ["/entrypoint.…   0B
898dbb77c8ce        About a minute ago   /bin/sh -c #(nop) COPY file:ad76fe44d1402628…   1.44kB
8470d1ebb9cb        About a minute ago   /bin/sh -c apk add --no-cache       openreso…   7.37MB
d6e46aa2470d        6 weeks ago          /bin/sh -c #(nop)  CMD ["/bin/sh"]              0B
<missing>           6 weeks ago          /bin/sh -c #(nop) ADD file:f17f65714f703db90…   5.57MB
```
2020-12-08 10:34:28 -05:00
Jordan Potter
8cecc764ba Update README to recommend using an image tag 2020-09-14 20:02:15 -05:00
Jordan Potter
123557b6bb
Merge pull request #4 from bobbypage/ipv6
Only set ipv6 killswitch if ipv6 interface exists
2020-09-12 20:59:54 -05:00
bobbypage
c563bc848e Only set ipv6 killswitch if ipv6 interface exists 2020-09-13 01:54:04 +00:00
Jordan Potter
f0d786c382
Merge pull request #3 from bobbypage/privileged
Remove need for running in privileged mode
2020-09-12 20:25:34 -05:00
bobbypage
5e16644902 Remove need for running in privileged mode
To remove the need for running privileged mode, set the necessary
`net.ipv4.conf.all.src_valid_mark=1` sysctl via docker and modify the
`/usr/bin/wg-quick` script from setting the sysctl

* Set `net.ipv4.conf.all.src_valid_mark=1` sysctl via docker `--sysctl`

* Set CAPs of NET_ADMIN and SYS_MODULE instead of using `--privileged`

* Check that `net.ipv4.conf.all.src_valid_mark=1` is set in entrypoint
  script

Fixes #2
2020-09-13 01:16:45 +00:00
Jordan Potter
ac2b0180ae Update example config file in README 2020-09-09 22:01:49 -05:00
Jordan Potter
141e0a3948 Pin Ubuntu version and update docs to require privileged mode 2020-05-18 17:14:55 -05:00
Jordan Potter
8cdbdd9bab Add killswitch 2019-05-12 22:21:16 -07:00
Jordan Potter
e49e41b85f Add troubleshooting instructions for asymmetric routing 2019-02-14 15:14:17 -08:00
Jordan Potter
0320555e9d Correct scripts in README 2019-02-14 12:50:15 -08:00
Jordan Potter
3d28131872 Add Dockerfile and entrypoint script 2019-02-14 12:03:36 -08:00
Jordan Potter
fa70bb976d Update README with instructions 2019-02-14 12:01:50 -08:00
Jordan Potter
3cbb38e5e9
Initial commit 2019-02-14 11:41:59 -08:00