simono41/docker-wireguard
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
No description
14 commits 1 branch 9 tags 58 KiB
Shell 93.2%
Dockerfile 6.8%
Find a file
Jake Wharton 0a8f9b682e Switch base image from Ubuntu to Alpine 
This dramatically reduces the size of the container from hundreds of MiBs to just over ten.

BEFORE
```
$ docker history ea2d6da4cbdc
IMAGE               CREATED             CREATED BY                                      SIZE                COMMENT
ea2d6da4cbdc        27 seconds ago      /bin/sh -c #(nop)  ENTRYPOINT ["/entrypoint.…   0B
2c7e3f0de3c8        27 seconds ago      /bin/sh -c #(nop) COPY file:ad76fe44d1402628…   1.44kB
1a29ca960363        29 seconds ago      /bin/sh -c apt-get update && apt-get install…   367MB
f643c72bc252        12 days ago         /bin/sh -c #(nop)  CMD ["/bin/bash"]            0B
<missing>           12 days ago         /bin/sh -c mkdir -p /run/systemd && echo 'do…   7B
<missing>           12 days ago         /bin/sh -c [ -z "$(apt-get indextargets)" ]     0B
<missing>           12 days ago         /bin/sh -c set -xe   && echo '#!/bin/sh' > /…   811B
<missing>           12 days ago         /bin/sh -c #(nop) ADD file:4f15c4475fbafb3fe…   72.9MB
```

AFTER
```
$ docker history 6b71b07e8ccd
IMAGE               CREATED              CREATED BY                                      SIZE                COMMENT
6b71b07e8ccd        About a minute ago   /bin/sh -c #(nop)  ENTRYPOINT ["/entrypoint.…   0B
898dbb77c8ce        About a minute ago   /bin/sh -c #(nop) COPY file:ad76fe44d1402628…   1.44kB
8470d1ebb9cb        About a minute ago   /bin/sh -c apk add --no-cache       openreso…   7.37MB
d6e46aa2470d        6 weeks ago          /bin/sh -c #(nop)  CMD ["/bin/sh"]              0B
<missing>           6 weeks ago          /bin/sh -c #(nop) ADD file:f17f65714f703db90…   5.57MB
```
2020-12-08 10:34:28 -05:00
Dockerfile Switch base image from Ubuntu to Alpine 2020-12-08 10:34:28 -05:00
entrypoint.sh Merge pull request #4 from bobbypage/ipv6 2020-09-12 20:59:54 -05:00
LICENSE Initial commit 2019-02-14 11:41:59 -08:00
README.md Update README to recommend using an image tag 2020-09-14 20:02:15 -05:00

README.md

Wireguard

This is a simple docker image to run a Wireguard client. It includes a kill switch to ensure that any traffic not encrypted via Wireguard is dropped.

Wireguard is implemented as a kernel module, which is key to its performance and simplicity. However, this means that Wireguard must be installed on the host operating system for this container to work properly. Instructions for installing Wireguard can be found here.

You will need a configuration file for your Wireguard interface. Many VPN providers will create this configuration file for you. For example, here is the configuration generator for Mullvad. Be sure to NOT include a kill switch in the configuration file, since the docker image already has one.

Now simply mount the configuration file and run! For example, if your configuration file is located at /path/to/conf/mullvad.conf:

docker run --name wireguard                                          \
    --cap-add NET_ADMIN                                              \
    --cap-add SYS_MODULE                                             \
    --sysctl net.ipv4.conf.all.src_valid_mark=1                      \
    -v /path/to/conf/mullvad.conf:/etc/wireguard/mullvad.conf        \
    jordanpotter/wireguard

Afterwards, you can link other containers to this one:

docker run -it --rm                                                  \
    --net=container:wireguard                                        \
    appropriate/curl http://httpbin.org/ip

Wireguard is new technology and its behavior may change in the future. For this reason, it's recommended to specify an image tag when running this container, such as jordanpotter/wireguard:1.0.0. The available tags are listed here.