Wireguard setup

Hi,
I am trying to setup WireGuard server on my Rocky Linux 9 however it is failing on:

# dnf install kmod-wireguard wireguard-tools
Last metadata expiration check: 0:00:34 ago on Thu 03 Nov 2022 10:01:46 GMT.
No match for argument: kmod-wireguard
Error: Unable to find a match: kmod-wireguard

I have elrepo installed.

1 Like

Hi,

That’s because kmod-wireguard is for Rocky 8. For Rocky 9, it’s not needed:

[root@rocky9 ~]# modprobe wireguard
[root@rocky9 ~]# lsmod | grep -i wireguard
wireguard              94208  0
libblake2s             16384  1 wireguard
ip6_udp_tunnel         16384  1 wireguard
udp_tunnel             24576  1 wireguard
curve25519_x86_64      36864  1 wireguard
libcurve25519_generic    49152  2 curve25519_x86_64,wireguard

that’s because default Rocky 9 5.14 kernel has wireguard already in it.

2 Likes

I am having issues with wireguard on Rocky 9 myself. I can get it to handshake and start the connection but I can’t get any data coming in.

internal (active)
  target: default
  icmp-block-inversion: no
  interfaces: wg0
  sources:
  services: cockpit dhcpv6-client mdns samba-client wireguard
  ports:
  protocols:
  forward: yes
  masquerade: no
  forward-ports:
  source-ports:
  icmp-blocks:
  rich rules:

public (active)
  target: default
  icmp-block-inversion: no
  interfaces: ens3
  sources:
  services: cockpit dhcpv6-client dns dns-over-tls http https ssh wireguard
  ports: 51820/udp
  protocols:
  forward: yes
  masquerade: no
  forward-ports:
  source-ports:
  icmp-blocks:
  rich rules:
        rule family="ipv6" source address="fdc0:7ec3:f1ff::/64" masquerade
        rule family="ipv4" source address="10.8.0.0/24" masquerade

Also I have made sure port forwarding is on in sysctl

I’ve had several issues with wireguard and masquerade with Rocky Linux. The connection just drops until I stop wireguard. I haven’t found a solution yet, just voicing my issues as well.

The people who are still having problems, are they using the module built-in to Rocky9?

Yes, no modifications made. Just install wireguard and go. Masquerade drops all connection for me. Take it out and it works flawlessly.