Skip to content

config wireguard group#126

Open
stuartrobert wants to merge 5 commits intovoxpupuli:masterfrom
stuartrobert:97_wireguard_group
Open

config wireguard group#126
stuartrobert wants to merge 5 commits intovoxpupuli:masterfrom
stuartrobert:97_wireguard_group

Conversation

@stuartrobert
Copy link

Pull Request (PR) description

This issue addresses #97 which enables support for RedHat family.

This Pull Request (PR) fixes the following issues

Fixes #97
Fixes #125

- add hiera config and data dir
- add new parameter for group of $config_directory
- add data for current default use of systemd-network
- add data for RedHat family which uses root
- update metadata to indicate support of RedHat
- replace refs with parameter
- update file mode for config and pub key
@stuartrobert stuartrobert changed the title config wireguard group #97 config wireguard group Mar 5, 2025
@@ -0,0 +1,3 @@
---

wireguard::config_directory_group: 'systemd-network'
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

has redhat no equivalent group?

Copy link
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Not out of the box. The systemd-network group is only created if you install systemd-networkd. The RHEL 9 docs don't even mention any configuration using networkctl - here is the RHEL 9 networking documentation (free to access): https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/9/html-single/configuring_and_managing_networking/index

On RHEL 9 wireguard-tools only requires that systemd-resolved be installed that is "extra" (ie not systemd-networkd). The default ownership on /etc/wireguard is root/root with mode 0700.

Looking at some old bugzilla reports, Redhat didn't want to support systemd-networkd for RHEL 8 and perhaps RHEL 9, but I've struggled to find mention of it in RHEL 9 docs.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

use config_directory instead of literal string The group (in the /etc/wireguard/ permissions) should not be hard coded.

3 participants