"wg" interface appearing after each reboot

[Esdeath]

Hello.

While trying to configure wireguard i, somehow, made "wg" record appearing after each reboot in "ip link show" output:

4: wg: <POINTOPOINT,NOARP,UP,LOWER_UP> mtu 1420 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
link/none

The bad thing is if i trying to start VPN via wg-quick up sitWg ("sitWg" is the name of config in /etc/wireguard/ that i actually use) it says that:

Warning: `/etc/wireguard/sitWg.conf' is world accessible
[#] ip link add sitWg type wireguard
[#] wg setconf sitWg /dev/fd/63
[#] ip -4 address add xx.xx.xx.xx/32 dev sitWg
[#] ip link set mtu 1420 up dev sitWg
RTNETLINK answers: Address already in use
[#] ip link delete dev sitWg

and it works only after i do ip link delete wg which removes that interface.

I tried to find what can create that.
And the first thing i suspected is this service:

○ [email protected] - WireGuard via wg-quick(8) for wg
Loaded: loaded (/lib/systemd/system/[email protected]; disabled; vendor preset: enabled)
Active: inactive (dead)
Docs: man:wg-quick(8)
man:wg(8)
https://www.wireguard.com/
https://www.wireguard.com/quickstart/
https://git.zx2c4.com/wireguard-tools/about/src/man/wg-quick.8
https://git.zx2c4.com/wireguard-tools/about/src/man/wg.8

so i turned it off - it didnt helped.
Also i removed /lib/systemd/system/[email protected] file - also didnt worked.

My another thought was my VPN plugin for gnome installed https://github.com/max-moser/network-manager-wireguard.

But i removed every networks i had in it, and nothing changed.

Can anybody told me where to look next?
Thanks.

 

[f33dm3bits]

NetworkManager officially supports Wireguard profiles but I haven't found it working that well. The better option is to use is to use the VPN app that your VPN provider provides, which is also the easier option. Which VPN provider do you have?

 

[Esdeath]

NetworkManager officially supports Wireguard profiles but I haven't found it working that well. The better option is to use is to use the VPN app that your VPN provider provides, which is also the easier option. Which VPN provider do you have?

Thats VPN i use on work, so - i have no choice. Can choose only between corporate Cisco Any connect and Wireguard. And Wireguard seem more stable.

It works fine, i am only annoyed to write 'sudo ip link delete wg' after each restart, but i am not sure why it keeps appearing.

 

[CaffeineAddict]

The bad thing is if i trying to start VPN via wg-quick up sitWg ("sitWg" is the name of config in /etc/wireguard/ that i actually use) it says that:

RTNETLINK answers: Address already in use

It says address is in use so it deletes the interface, if this is your problem then set an IP that's not in use.
If you want to completely remove the interface I guess you'll have to uninstall wireguard.

See also:

wireguard-go/README.md at master · WireGuard/wireguard-go

Mirror only. Official repository is at https://git.zx2c4.com/wireguard-go - WireGuard/wireguard-go

github.com

 

[Aristarchus]

this is as mentioned wireguard interface. One can change the name to anythig as long as it is 7 letters total e.g. aaa.conf

Wireguard has annoying tendency to autoload easy ti fix:

nmcli connection modify wg0 connection.autoconnect no

where wg0 is your wireguard interface name
to see wireguard interface nme run

ifconfig -a

 

[Esdeath]

It says address is in use so it deletes the interface, if this is your problem then set an IP that's not in use.
If you want to completely remove the interface I guess you'll have to uninstall wireguard.

See also:

wireguard-go/README.md at master · WireGuard/wireguard-go

Mirror only. Official repository is at https://git.zx2c4.com/wireguard-go - WireGuard/wireguard-go

github.com

No, this is definitely my misconfiguration issue, because i have wireguard installed on my laptop also, with the same config in use, and there is no such thing happening.

I think when i first time configured it on my desktop i done something wrong, which is hard to say what it was.

 

[Esdeath]

this is as mentioned wireguard interface. One can change the name to anythig as long as it is 7 letters total e.g. aaa.conf

Wireguard has annoying tendency to autoload easy ti fix:

nmcli connection modify wg0 connection.autoconnect no

where wg0 is your wireguard interface name
to see wireguard interface nme run

ifconfig -a

Looks like it helped. Thanks.

 

[vs2-free-users]

I have created a quick for wireguard-go on vs2-free maybe you can get some inspiration.

https://linux.org/threads/quick-guide-debian-setting-up-wireguard-on-a-server-wireguard-go.49032/