simono41/docker-wireguard
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
No description
9 commits 1 branch 9 tags 58 KiB
Shell 93.2%
Dockerfile 6.8%
Find a file
bobbypage 5e16644902 Remove need for running in privileged mode 
To remove the need for running privileged mode, set the necessary
`net.ipv4.conf.all.src_valid_mark=1` sysctl via docker and modify the
`/usr/bin/wg-quick` script from setting the sysctl

* Set `net.ipv4.conf.all.src_valid_mark=1` sysctl via docker `--sysctl`

* Set CAPs of NET_ADMIN and SYS_MODULE instead of using `--privileged`

* Check that `net.ipv4.conf.all.src_valid_mark=1` is set in entrypoint
  script

Fixes #2
2020-09-13 01:16:45 +00:00
Dockerfile Pin Ubuntu version and update docs to require privileged mode 2020-05-18 17:14:55 -05:00
entrypoint.sh Remove need for running in privileged mode 2020-09-13 01:16:45 +00:00
LICENSE Initial commit 2019-02-14 11:41:59 -08:00
README.md Remove need for running in privileged mode 2020-09-13 01:16:45 +00:00

README.md

Wireguard

This is a simple docker image to run a wireguard client. It includes a killswitch to ensure that any traffic not encrypted via wireguard is dropped.

Wireguard is implemented as a kernel module, which is key to its performance and simplicity. However, this means that Wireguard must be installed on the host operating system for this container to work properly. Instructions for installing Wireguard can be found here.

You will need a configuration file for your Wireguard interface. Many VPN providers will create this configuration file for you. For example, here is the configuration generator for Mullvad. Be sure to NOT include a killswitch in the configuration file, since the docker image already has one.

Now simply mount the configuration file and run! For example, if your configuration file is located at /path/to/conf/mullvad.conf:

docker run --name wireguard                                          \
    --cap-add NET_ADMIN                                              \
    --cap-add SYS_MODULE                                             \
    --sysctl net.ipv4.conf.all.src_valid_mark=1                      \
    -v /path/to/conf/mullvad.conf:/etc/wireguard/mullvad.conf        \
    jordanpotter/wireguard

Afterwards, you can link other containers to this one:

docker run -it --rm                                                  \
    --net=container:wireguard                                        \
    appropriate/curl http://httpbin.org/ip