[HowTo] WireGuard with OMV Super-Easy

Finally it works, but still have some problems

miniupnpc is already the newest version (2.1-1+b1).

0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.

public: 0IcKZmBS9NEgodNG+L+OhEvVMddqUdsaOKfUkp+kAC7qng=

Failed to get properties: Unit name cockpit-wsinstance-https@.socket is neither a valid invocation ID nor unit name.

● wg-quick@wgnet0.service - WireGuard via wg-quick(8) for wgnet0

Loaded: loaded (/lib/systemd/system/wg-quick@.service; enabled; vendor preset: enabled)

Active: active (exited) since Sun 2020-03-22 00:26:30 +03; 20ms ago

Docs: man:wg-quick(8)

man:wg(8)

https://www.wireguard.com/

https://www.wireguard.com/quickstart/

https://git.zx2c4.com/wireguar…/about/src/man/wg-quick.8

https://git.zx2c4.com/wireguard-tools/about/src/man/wg.8

Process: 18147 ExecStart=/usr/bin/wg-quick up wgnet0 (code=exited, status=0/SUCCESS)

Main PID: 18147 (code=exited, status=0/SUCCESS)

Mar 22 00:26:30 openmediavault.local systemd[1]: Starting WireGuard via wg-quick(8) for wgnet0...

Mar 22 00:26:30 openmediavault.local wg-quick[18147]: [#] ip link add wgnet0 type wireguard

Mar 22 00:26:30 openmediavault.local wg-quick[18147]: [#] wg setconf wgnet0 /dev/fd/63

Mar 22 00:26:30 openmediavault.local wg-quick[18147]: [#] ip -4 address add 10.192.122.1/24 dev wgnet0

Mar 22 00:26:30 openmediavault.local wg-quick[18147]: [#] ip link set mtu 1420 up dev wgnet0

Mar 22 00:26:30 openmediavault.local wg-quick[18147]: [#] iptables -A FORWARD -i wgnet0 -j ACCEPT; iptables -A FORWARD -o wgnet0 -j A

Mar 22 00:26:30 openmediavault.local systemd[1]: Started WireGuard via wg-quick(8) for wgnet0.

lines 1-19/19 (END)█████████████████████████████████████████████████████████

█████████████████████████████████████████████████████████

████ ▄▄▄▄▄ █▄▀ █▄ ▄▄▀▀█▀ █ ▀ ███ █ ▄▀▄█▀▀▀ █ ▄▄▄▄▄ ████

████ █ █ █ ████ ██▀▀█ ▄ ███ ▄▀▀▄█ ▄█ █ █ ████

████ █▄▄▄█ █▄▀▀▀▀ ▄▄█▀▀▄█ ▄▄▄ ▄▄ ▄▄▄▀██ ▀███ █▄▄▄█ ████

████▄▄▄▄▄▄▄█▄▀ █▄▀▄▀ ▀ █ ▀ █▄█ █ ▀ ▀▄█▄▀ ▀ ▀ █▄▄▄▄▄▄▄████

████ ▄ ▀▀▄▀▄█▄█▀ ▄ ▄█▄█ ▄▄▄▄ ▀███▄▀ ▀███▀▀▀▄█▀▄▄▄█▄████

████ ▀▄██ ▄█▀▀▄ ▄ ▀█▄▀▀ █ ▀█ ▀▀█ ▀ ▄█▄▀▀█▄▀█▄ ▄▀▀ █████

████ █▀ ▄█▄▀ ▀▄█▄▄ ▄██▄▄█▀▄▀ ▄▄▄▀▀ █▄ ▄▀▄███▄▄▄▄█ █▀████

████▀█ █▀▄▄ ▀▀▄ ▄▄▀▄ ▀ ▀▀█▀▄▀▀▄█ ▀█▄▀▄ ▀▀▄█ ▄ ▀▀▄█████

████▄▀ ▄█▄▄█ ▀ █ █ ▄▄ ▀ ▄▄▀█▀ ▄ ▀▀▄█ ▄▄▄▄ ██▀▀▀ ████

████▄█ ▀▀ ▄▀▀▀▀█ ▀▀█▀█▄▄ ▄█▀ ▀█ ▀▄▀█▄█▀ ▀▄█▀▄▄ ▄ ██████

█████ ▀▀█▄▄ ▀██▀▄█ ▄█ █▄▀ ▄▀▄ ▀█ █ ▄███▄▀█▀▀▀ ▄▀▀ ▀████

████▄▄▄███▄█▀█ ▄▄▀██▄ ▀ ▀▀ ▄▄▄ ▀ █▄▀▀▄▄ ▀ ▀ ▄▄▄ ▄ █▀████

████ ▄▄▄▄▄ ██▀█▄▄▄▄ ▀▄ ▄█▄ █▄█ ▀▀▀█▀██ ▄▄▀ █▄█ ▀███████

████ █ █ █▀▀▄▄▀█▄ ▄▀▀▄ ▀ ▄▄█▀██▄▄ ▄▄▀ ▀█▄▄ ▄ ▀█ ████

████ █▄▄▄█ █ █▄██▄▄██ ▄█▄▀▀▄▄ ▀ █▄ ▄ ▄ █▄ ▄▄ ▄▀▄█████

████▄▄▄▄▄▄▄█▄▄▄█▄██▄▄█▄▄▄▄███▄█▄▄████▄██████▄█████▄▄▄████

█████████████████████████████████████████████████████████

█████████████████████████████████████████████████████████

Scan this Qrcode in your client. Before connecting ensure that Port 51820 (UDP) is

forwarded from your router to your Server. Trying to set this up via Upnp now.

upnpc : miniupnpc library test client, version 2.1.

(c) 2005-2018 Thomas Bernard.

Go to http://miniupnp.free.fr/ or https://miniupnp.tuxfamily.org/

for more information.

List of UPNP devices found on the network :

desc: http://192.168.0.14:2869/dmr.xml

st: upnp:rootdevice

desc: http://192.168.0.21:8008/ssdp/device-desc.xml

st: upnp:rootdevice

UPnP device found. Is it an IGD ? : http://192.168.0.14:2869/

Trying to continue anyway

Local LAN ip address : unset

GetExternalIPAddress failed.

AddPortMapping(51820, 51820, unset) failed with code 602 (UnknownError)

root@openmediavault:/#

I received a failed handshake on my iPhone:

[NET] peer(t5RE...2/Ao) - Failed to send handshake initiation no known endpoint for peer

Current wgnet0.conf

[Interface]
Address = 10.192.122.1/24
SaveConfig = true
PostUp = iptables -A FORWARD -i wgnet0 -j ACCEPT; iptables -A FORWARD -o wgne$
PostDown = iptables -D FORWARD -i wgnet0 -j ACCEPT; iptables -D FORWARD -o wg$
ListenPort = 51820
PrivateKey = YGlIKAxxxxxxaaaaaa=

[Peer]
PublicKey = 8tdddffff=
AllowedIPs = 10.192.122.2/32

Anybody has any suggestion ?

Zitat von tinh_x7

I received a failed handshake on my iPhone:

Check your peer IP on the iPhone config. Seems like it can't find a host. Are you using an IP or domain name?

I’m using ip.

[Peer]

Endpoint Address ????

Endpoint Port ????

PublicKey = 8tdddffff=

AllowedIPs = 10.192.122.2/32

Hello,

I slip into this topic to see if some people would have tested the Veeam wireguard in their VeeamPN solution?

If ever other people are interested to exchange on the subject in a private message or then see to create a topic for that.

As far as I'm concerned, I would have tested this solution well, but I don't see a container for the moment, just an ova.

Do you think it's possible to make one?

I started from a basic ubuntu container and I added the application as indicated by Veeam: https://helpcenter.veeam.com/d…ampn_on_linux.html?ver=21

Then I did a docker commit to generate my image and I created my container from my image but it doesn't seem to work.

Zitat von Superturisto

[Peer]

Endpoint Address ????

Endpoint Port ????

PublicKey = 8tdddffff=

AllowedIPs = 10.192.122.2/32

Endpoint address: blank

Public Key: t5RE..........

Allowed IPs: 0.0.0.0

If I want to use URL instead, where do I change it ?

Zitat von tinh_x7

Endpoint address: blank

Public Key: t5RE..........

Allowed IPs: 0.0.0.0

If I want to use URL instead, where do I change it ?

Endpoint address: External IP or URL of your wireguard host

Endpoint Port 51820

Hi,

I have tried to install but still getting below errors.

Error 1: Failed to get properties: Unit name cockpit-wsinstance-https@.socket is neither a valid invocation ID nor unit name.

Error 2:

GetExternalIPAddress failed.

AddPortMapping(51820, 51820, unset) failed with code 602 (UnknownError)

Will PortForwarding be for 192.168.0.14 or my OMW (192.168.0.20)?

Failed to get properties: Unit name cockpit-wsinstance-https@.socket is neither a valid invocation ID nor unit name.

● wg-quick@wgnet0.service - WireGuard via wg-quick(8) for wgnet0

Loaded: loaded (/lib/systemd/system/wg-quick@.service; enabled; vendor preset: enabled)

Active: active (exited) since Sat 2020-03-28 05:07:47 +03; 13h ago

Docs: man:wg-quick(8)

man:wg(8)

https://www.wireguard.com/

https://www.wireguard.com/quickstart/

https://git.zx2c4.com/wireguar…/about/src/man/wg-quick.8

https://git.zx2c4.com/wireguard-tools/about/src/man/wg.8

Main PID: 656 (code=exited, status=0/SUCCESS)

Tasks: 0 (limit: 4915)

Memory: 0B

CGroup: /system.slice/system-wg\x2dquick.slice/wg-quick@wgnet0.service

Mar 28 05:07:44 openmediavault.local systemd[1]: Starting WireGuard via wg-quick(8) for wgnet0...

Mar 28 05:07:44 openmediavault.local wg-quick[656]: [#] ip link add wgnet0 type wireguard

Mar 28 05:07:44 openmediavault.local wg-quick[656]: [#] wg setconf wgnet0 /dev/fd/63

Mar 28 05:07:44 openmediavault.local wg-quick[656]: [#] ip -4 address add 10.192.122.1/24 dev wgnet0

Mar 28 05:07:45 openmediavault.local wg-quick[656]: [#] ip link set mtu 1420 up dev wgnet0

Mar 28 05:07:46 openmediavault.local wg-quick[656]: [#] iptables -A FORWARD -i wgnet0 -j ACCEPT; iptables -A FORWARD -o wgnet0 -j ACCEPT; iptables -t nat -A POSTROUTING -o enp0s25 -j MASQUE

Mar 28 05:07:47 openmediavault.local systemd[1]: Started WireGuard via wg-quick(8) for wgnet0.

lines 1-21/21 (END)█████████████████████████████████████████████████████████

█████████████████████████████████████████████████████████

████ ▄▄▄▄▄ █ ▀▄ █▀ ▀▄▄▄▄▀▀▀▀▀ ▄█ ▀▄ █▀▄▄▀▄▀▀ █ ▄▄▄▄▄ ████

████ █ █ █ █ ▄▀▄█▀ █ █▀▄▀▄ ▀ ▀ ▀▄ ▀ ▄███ ▄█ █ █ ████

████ █▄▄▄█ █▀▀▄█ ▀▄▄ ▄▄ █ ▄▄▄ ▄█▀██ ▄█▄ ▀▀███ █▄▄▄█ ████

█████▀▀█ ▄▄▄ ▀ ▀█▄▀█ ▄▄███ ▄▄▄ ▄█▀▀█ ▄ ▄▀▄██ ▄▄▄ ▀ ██████

████ ▄ ▀ █▄█ █▀ ▀▄█▄ ▀▄▀▀▄ █▄█ ▀ █▄ ▄ █▀▀▄█ █▄█ █▄▀█████

████ ▀█▀ ▄ ▀ ▄ ▄▀█▀█ ▀▄▄▄ ▄ █▀ ▄▀▄ █▀ ▄▀ ████

████▄▄▄███▄▄▀▄▀█▀ ▀▄▀▀▄ █▀ ▄▄▄ ▀▀█ ▄ ▄▄▀ ▀█▀ ▄▄▄ ▄▄▄▄████

████ ▄▄▄▄▄ █▀ ███▄ ▀██▀█▄ █▄█ ▄▀ ▄▀ █▀▄█▄▄ █▄█ █ ▄▄████

████ █ █ █▄▄ ▄ ▀▀▄█▀ ██ ▄ ▄████ ▀▄█▄ ▄▄▀▄▄ ▄█▄ ▀████

████ █▄▄▄█ █▀▀▄▀█ █ ▄ ▄▀█ █▄█▄▀▄█ ▄▄▀█▀▄ ▀ █▄▄ ▀▀ █████

████▄▄▄▄▄▄▄█▄█▄█▄▄▄▄▄██▄██▄▄██▄█▄▄█▄██▄█▄█▄▄▄██▄▄▄▄▄▄████

█████████████████████████████████████████████████████████

█████████████████████████████████████████████████████████

Scan this Qrcode in your client. Before connecting ensure that Port 51820 (UDP) is

forwarded from your router to your Server. Trying to set this up via Upnp now.

upnpc : miniupnpc library test client, version 2.1.

(c) 2005-2018 Thomas Bernard.

Go to http://miniupnp.free.fr/ or https://miniupnp.tuxfamily.org/

for more information.

List of UPNP devices found on the network :

desc: http://192.168.0.14:2869/dmr.xml

st: upnp:rootdevice

desc: http://192.168.0.14:2871/dms.xml

st: upnp:rootdevice

UPnP device found. Is it an IGD ? : http://192.168.0.14:2869/

Trying to continue anyway

Local LAN ip address : unset

GetExternalIPAddress failed.

AddPortMapping(51820, 51820, unset) failed with code 602 (UnknownError)

Zitat von ryecoaaron

The wireguard packages are in buster-backports now.

sudo apt-get -t buster-backports install wireguard wireguard-dkms wireguard-tools

I installed wireguard via backports. During installation, I didn't see any errors but when I run modprobe, I get the following:

sudo modprobe wireguard
modprobe: FATAL: Module wireguard not found in directory /lib/modules/4.19.0-0.bpo.6-amd64

Although,

sudo dpkg -l | grep wireguard
ii  wireguard                        1.0.20200206-2~bpo10+1            all          fast, modern, secure kernel VPN tunnel (metapackage)
ii  wireguard-dkms                   0.0.20200215-2~bpo10+1            all          fast, modern, secure kernel VPN tunnel (DKMS version)
ii  wireguard-tools                  1.0.20200206-2~bpo10+1            amd64        fast, modern, secure kernel VPN tunnel (userland utilities)

So is wireguard installed or not?

Thanks for the script, worked perfectly on my OMV 4 install with scanning the QR code on an iPhone. I have a very dumb question. How do I add a second client, my MacBook that can't scan a code? Is there a function to export the config so I can import it into the app on the Mac?

**Nevermind, figured it out!**

Still got errors:

2020-03-29 12:11:41.941
[NET] peer(t5RE…2/Ao) - Handshake did not complete after 5 seconds, retrying (try 5)
2020-03-29 12:11:41.941
[NET] peer(t5RE…2/Ao) - Sending handshake 

Is there a way we can sign up to get a notification when the openmediavault-wireguard plugin gets out of beta?
And regarding that any progress reports somewhere? Is there still a lot of work to do?
Thank you for your work ryecoaaron !

Zitat von henfri

Hello,

Here you go:
1) Just run setup_wireguard_omv.zip script.
2) Ensure Port 51820 (UDP) is forwarded to your OMV Machine. The script tries to do that automatically via upnp.
3) At the end of the script, you will be displayed a QRCode. Scan that in the Wireguard App on your Phone.
4) Connect from your phone

That's all. All configuration files will be in /etc/wireguard
Please resist from changing IP adresses. That is not neccessary. Only the Interface of your network card that you use to connect to the Internet could be changed.
@ryecoaaron This could be a good template for a Plugin.

I was inspired/used part of this https://nbsoftsolutions.com/blog/wireguard-vpn-walkthrough

Greetings,
Hendrik

Alles anzeigen

Appreciate the effort but you're asking people to run an undocumented script blind on their system?

First issue : The very first statement 'set -e' is problematic as it naively tries to tell the script to exit on any error. No error checking is contained in the script. This directive is full of gotcha's http://mywiki.wooledge.org/BashFAQ/105

Honestly, if had the skills to read through and understand every uncommented line then I could do it myself anyway.

PW

Hello,

The Wireguard can only connect via intranet, can't access external sites.

Anybody know why ?