WireGuard automated installer | Ubuntu, Debian, CentOS, Fedora

Nyr

Lightweight WireGuard installer, written entirely in bash.

GitHub:
https://github.com/Nyr/wireguard-install

One-liner:
wget https://git.io/wireguard -O wireguard-install.sh && bash wireguard-install.sh

Supported distros:
- Ubuntu 20.04 and 18.04
- Debian 10
- Centos 8 and 7
- Fedora 32 and 31

FAQ:

Will it work in my Raspberry Pi?
Probably, I don't have one to test. Install the raspberrypi-kernel-headers package and hope for the best. But you should consider using a distribution with built-in kernel support when it becomes available.

OpenVZ support?
News on this soon. I have something in mind, but I want to do it right and it's a decent ammount of work. That's why I wanted to release the current version of wireguard-install, which is fully compatible with everything else first.

Can you add x feature?
Maybe, if it's worth it. But I'll keep the installer simple and functional, so keep that in mind. Niche features are unlikely to be implemented.

I like the project, how can I help?
Tell other people about it! wireguard-install is new and many people do not yet know about it. Some other low-quality tools based on my openvpn-install work exist, with credits and copyright notices removed. It's a sad sight to me after nearly a decade maintaining openvpn-install.

MikeA

This is what I like to see.

berkay

I was waiting for this, thanks!

RedSox

Thank you Master. You made life easier for thousands of people ^:)^

P.S. I wish someone showed up here with a script that installs and configures a mailbox (Exim+Dovecot+Roundcube) in just 5 minutes...

_MS_

Awesome! Thanks

Nyr

RedSox said: P.S. I wish someone showed up here with a script that installs and configures a mailbox (Exim+Dovecot+Roundcube) in just 5 minutes...

https://www.iredmail.org/

DP

Diamondz

<333333

Jord

PREM

Rhys

@RedSox said:
Thank you Master. You made life easier for thousands of people ^:)^

P.S. I wish someone showed up here with a script that installs and configures a mailbox (Exim+Dovecot+Roundcube) in just 5 minutes...

mailcow

theblackesthat

Is it possible to use same config for multiple users at the same time?

Nyr

@theblackesthat said:
Is it possible to use same config for multiple users at the same time?

You can add up to 253 users per server, but each one has a statically assigned address, so two clients can't use the same credentials (and they shouldn't anyway).

EHRA

Thank you Nyr!

mtsbatalha

Thanks @Nyr.

Is compatible to Debian 9?

Nyr

@mtsbatalha said:
Thanks @Nyr.

Is compatible to Debian 9?

Official support for Debian 9 ends in one month and there are no WireGuard packages for it anyway, so that would be a lot of trouble for little benefit.

adamluk

Thanks @Nyr

I'm having a few probs, I know I need to install iptables for one. Would it be possible for you to take a look please?

We are ready to set up your WireGuard server now.
Press any key to continue...
E: gnupg, gnupg2 and gnupg1 do not seem to be installed, but one of them is required for this operation Get:1 http://ppa.launchpad.net/wireguard/wireguard/ubuntu bionic InRelease [15.9 kB] Hit:2 http://us.archive.ubuntu.com/ubuntu bionic InRelease Err:1 http://ppa.launchpad.net/wireguard/wireguard/ubuntu bionic InRelease The following signatures couldn't be verified because the public key is not available: NO_PUBKEY AE33835F504A1A25 Hit:3 http://security.ubuntu.com/ubuntu bionic-security InRelease Hit:4 http://us.archive.ubuntu.com/ubuntu bionic-updates InRelease Hit:5 http://us.archive.ubuntu.com/ubuntu bionic-backports InRelease Reading package lists... Done W: GPG error: http://ppa.launchpad.net/wireguard/wireguard/ubuntu bionic InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY AE33835F504A1A25 E: The repository 'http://ppa.launchpad.net/wireguard/wireguard/ubuntu bionic InRelease' is not signed. N: Updating from such a repository can't be done securely, and is therefore disabled by default. N: See apt-secure(8) manpage for repository creation and user configuration details. Reading package lists... Done Building dependency tree Reading state information... Done linux-headers-4.15.0-99-generic is already the newest version (4.15.0-99.100). 0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded. Reading package lists... Done Building dependency tree Reading state information... Done linux-headers-generic is already the newest version (4.15.0.99.89). 0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded. Reading package lists... Done Building dependency tree Reading state information... Done E: Unable to locate package wireguard wireguard-install.sh: line 323: wg: command not found wireguard-install.sh: line 323: /etc/wireguard/wg0.conf: No such file or directory chmod: cannot access '/etc/wireguard/wg0.conf': No such file or directory Job for wg-iptables.service failed because the control process exited with error code. See "systemctl status wg-iptables.service" and "journalctl -xe" for details. grep: /etc/wireguard/wg0.conf: No such file or directory wireguard-install.sh: line 129: wg: command not found wireguard-install.sh: line 130: wg: command not found wireguard-install.sh: line 132: wg: command not found grep: /etc/wireguard/wg0.conf: No such file or directory wireguard-install.sh: line 132: /etc/wireguard/wg0.conf: No such file or directory grep: /etc/wireguard/wg0.conf: No such file or directory wireguard-install.sh: line 141: wg: command not found grep: /etc/wireguard/wg0.conf: No such file or directory grep: /etc/wireguard/wg0.conf: No such file or directory grep: /etc/wireguard/wg0.conf: No such file or directory Failed to enable unit: Unit file [email protected] does not exist.

This is Ubuntu 18.04 KVM, Inception Hosting

matlag

@RedSox said:
Thank you Master. You made life easier for thousands of people ^:)^

P.S. I wish someone showed up here with a script that installs and configures a mailbox (Exim+Dovecot+Roundcube) in just 5 minutes...

We're not on topic, but:
https://yunohost.org/
That's way more than just mailbox, but it doesn't include wireguard!

Nyr

adamluk said: E: gnupg, gnupg2 and gnupg1 do not seem to be installed, but one of them is required for this operation

I'll address this in an hour or so.

Your system image has probably been customized from the distribution defaults by the provider and lacks a dependency which is required. iptables is installed for Ubuntu, in your case it was a problem related to the first one.

Thanks a lot for the report.

Nyr

adamluk said: gnupg, gnupg2 and gnupg1 do not seem to be installed

Fixed in the latest commit.

LightBlade

Thanks.. this is what i need... already used your installer openvpn in 3y now. Very stable for access my porn linux iso collection

Limpan

Awesome. Thank you @Nyr

myshahrul

Great work. thank you

AlwaysSkint

Nyr for President!

NanoG6

Thanks @Nyr!
And for OpenVZ support (wireguard-go?) that would be really awesome, time to use those cheap idling NAT VPS

Nyr

NanoG6 said: that would be really awesome, time to use those cheap idling NAT VPS

Yes, I know that a lot of people want that and I'll try to get it done as soon as possible.

For several reasons, it's going to be more work than one would guess at first glance, but I'm hoping it'll be worth it.

emre

@Nyr if you have a dual stack home connection with ipv6 and ipv4 normally browser default is ipv6 and fallback is ipv4

but with your wireguard (and updated openvpn) installations, browser default is ipv4 and fallback is ipv6.

is there any particular reason for this?

I want ipv6 to be the default for everything if possible

this ss is from ipleak.net with vpn I just installed.

KUDOS for this beautiful wireguard script on the other hand.
between installling a vultr instance and connecting to vpn only takes 2 mins!

bdl

@Nyr said:
FAQ:

Will it work in my Raspberry Pi?
Probably, I don't have one to test. ...

Is there anyway we can all chip in some dollarz to get you one to test?

mtsbatalha

@bdl said:

@Nyr said:
FAQ:

Will it work in my Raspberry Pi?
Probably, I don't have one to test. ...

Is there anyway we can all chip in some dollarz to get you one to test?

I'll test it in my rasp 4.

NanoG6

@bdl said:

@Nyr said:
FAQ:

Will it work in my Raspberry Pi?
Probably, I don't have one to test. ...

Is there anyway we can all chip in some dollarz to get you one to test?

At the bottom of his github page

Bertie

Does this differ from the Angristan script in some particular ways? I remember your OVPN setup scripts used vastly different parameters on the basis of security.

mtsbatalha

@Nyr DNS_PROBE_FINISHED_NO_INTERNET.

I can't browser. Shoult I missing any thing?