Development discussion of WireGuard
 help / color / Atom feed
* More reliable packages available for RHEL, CentOS, and Fedora
@ 2020-04-04 21:12 Jason
  2020-04-04 21:22 ` Jason
  2020-04-15 21:41 ` Jason
  0 siblings, 2 replies; 4+ messages in thread
From: Jason @ 2020-04-04 21:12 UTC (permalink / raw)


Hey folks,

Joe Doss (cc'd) has maintained our DKMS packages for Fedora, RHEL, and CentOS
for the last several years on his copr. Recently there have been some nice
changes due to the 1.0ing of WireGuard.

- Fedora 32 will get Linux 5.6, so it won't need the DKMS package:
  https://bodhi.fedoraproject.org/updates/FEDORA-2020-e8b6474ee5
- Fedora 31 and 30 will also get Linux 5.6 during the next month, so
  they won't need the DKMS package.
- Joe has joined ELRepo (cc'd) as a package maintainer, so RHEL/CentOS
  7/8 will now have binary kmods built over there, signed with ELrepo's
  validating UEFI Secure Boot key, so enterprise users will have more
  reliable updates.
- I've contacted Red Hat about bringing WireGuard directly into the RHEL kernel;
  we'll see what happens there. (I've also reached out to Oracle
  regarding their enterprise situation.)
- The wireguard-tools package moved into Fedora-proper, which means it's
  now available on F32, F31, F30, and RHEL/CentOS 7,8 via EPEL.

The net result of this is that when F31 and F32 move to 5.6, we will no
longer need the copr with DKMS, at all, and also that today, enterprise
users now have a more reliable way to use WireGuard.

The most up to date instructions are on https://www.wireguard.com/install/
but the current situation is:

Fedora 32 now and Fedora 31,30 in a few weeks from now:
$ sudo dnf install wireguard-tools

Fedora 31,30 now, but not in a few weeks from now:
$ sudo dnf copr enable jdoss/wireguard
$ sudo dnf install wireguard-dkms wireguard-tools

RHEL 8:
$ sudo yum install https://dl.fedoraproject.org/pub/epel/epel-release-latest-8.noarch.rpm
$ sudo yum install https://www.elrepo.org/elrepo-release-8.el8.elrepo.noarch.rpm
$ sudo yum install kmod-wireguard wireguard-tools

CentOS 8:
$ sudo yum install elrepo-release epel-release
$ sudo yum install kmod-wireguard wireguard-tools

RHEL 7:
$ sudo yum install https://dl.fedoraproject.org/pub/epel/epel-release-latest-7.noarch.rpm
$ sudo yum install https://www.elrepo.org/elrepo-release-7.el7.elrepo.noarch.rpm
$ sudo yum install kmod-wireguard wireguard-tools

CentOS 7:
$ sudo yum install epel-release
$ sudo yum install https://www.elrepo.org/elrepo-release-7.el7.elrepo.noarch.rpm
$ sudo yum install kmod-wireguard wireguard-tools

Thanks,
Jason


^ permalink raw reply	[flat|nested] 4+ messages in thread

* More reliable packages available for RHEL, CentOS, and Fedora
  2020-04-04 21:12 More reliable packages available for RHEL, CentOS, and Fedora Jason
@ 2020-04-04 21:22 ` Jason
  2020-04-15 21:41 ` Jason
  1 sibling, 0 replies; 4+ messages in thread
From: Jason @ 2020-04-04 21:22 UTC (permalink / raw)


I was asked to loop in the ELRepo mailing list too. Below is the email
I just sent out to wgml.

On Sat, Apr 4, 2020 at 3:12 PM Jason A. Donenfeld <Jason at zx2c4.com> wrote:
>
> Hey folks,
>
> Joe Doss (cc'd) has maintained our DKMS packages for Fedora, RHEL, and CentOS
> for the last several years on his copr. Recently there have been some nice
> changes due to the 1.0ing of WireGuard.
>
> - Fedora 32 will get Linux 5.6, so it won't need the DKMS package:
>   https://bodhi.fedoraproject.org/updates/FEDORA-2020-e8b6474ee5
> - Fedora 31 and 30 will also get Linux 5.6 during the next month, so
>   they won't need the DKMS package.
> - Joe has joined ELRepo (cc'd) as a package maintainer, so RHEL/CentOS
>   7/8 will now have binary kmods built over there, signed with ELrepo's
>   validating UEFI Secure Boot key, so enterprise users will have more
>   reliable updates.
> - I've contacted Red Hat about bringing WireGuard directly into the RHEL kernel;
>   we'll see what happens there. (I've also reached out to Oracle
>   regarding their enterprise situation.)
> - The wireguard-tools package moved into Fedora-proper, which means it's
>   now available on F32, F31, F30, and RHEL/CentOS 7,8 via EPEL.
>
> The net result of this is that when F31 and F32 move to 5.6, we will no
> longer need the copr with DKMS, at all, and also that today, enterprise
> users now have a more reliable way to use WireGuard.
>
> The most up to date instructions are on https://www.wireguard.com/install/
> but the current situation is:
>
> Fedora 32 now and Fedora 31,30 in a few weeks from now:
> $ sudo dnf install wireguard-tools
>
> Fedora 31,30 now, but not in a few weeks from now:
> $ sudo dnf copr enable jdoss/wireguard
> $ sudo dnf install wireguard-dkms wireguard-tools
>
> RHEL 8:
> $ sudo yum install https://dl.fedoraproject.org/pub/epel/epel-release-latest-8.noarch.rpm
> $ sudo yum install https://www.elrepo.org/elrepo-release-8.el8.elrepo.noarch.rpm
> $ sudo yum install kmod-wireguard wireguard-tools
>
> CentOS 8:
> $ sudo yum install elrepo-release epel-release
> $ sudo yum install kmod-wireguard wireguard-tools
>
> RHEL 7:
> $ sudo yum install https://dl.fedoraproject.org/pub/epel/epel-release-latest-7.noarch.rpm
> $ sudo yum install https://www.elrepo.org/elrepo-release-7.el7.elrepo.noarch.rpm
> $ sudo yum install kmod-wireguard wireguard-tools
>
> CentOS 7:
> $ sudo yum install epel-release
> $ sudo yum install https://www.elrepo.org/elrepo-release-7.el7.elrepo.noarch.rpm
> $ sudo yum install kmod-wireguard wireguard-tools
>
> Thanks,
> Jason


^ permalink raw reply	[flat|nested] 4+ messages in thread

* More reliable packages available for RHEL, CentOS, and Fedora
  2020-04-04 21:12 More reliable packages available for RHEL, CentOS, and Fedora Jason
  2020-04-04 21:22 ` Jason
@ 2020-04-15 21:41 ` Jason
  2020-04-15 21:47   ` stunnel
  1 sibling, 1 reply; 4+ messages in thread
From: Jason @ 2020-04-15 21:41 UTC (permalink / raw)


It turns out that ELRepo is a bit of a crumbling mess, unfortunately.
FOR CENTOS USERS ONLY, the instructions in the previous email need to
include:

$ sudo yum install yum-plugins-elrepo

Hopefully Red Hat will simply include WireGuard in RHEL 7 and 8, so
that we won't have to deal with this. But for now, this appears to be
the best we've got.

Jason


^ permalink raw reply	[flat|nested] 4+ messages in thread

* More reliable packages available for RHEL, CentOS, and Fedora
  2020-04-15 21:41 ` Jason
@ 2020-04-15 21:47   ` stunnel
  0 siblings, 0 replies; 4+ messages in thread
From: stunnel @ 2020-04-15 21:47 UTC (permalink / raw)


On 4/15/2020 2:41 PM, Jason A. Donenfeld wrote:
> It turns out that ELRepo is a bit of a crumbling mess, unfortunately.
> FOR CENTOS USERS ONLY, the instructions in the previous email need to
> include:
>
> $ sudo yum install yum-plugins-elrepo
>
> Hopefully Red Hat will simply include WireGuard in RHEL 7 and 8, so
> that we won't have to deal with this. But for now, this appears to be
> the best we've got.
>
> Jason
>
Actually that's:

yum install yum-plugin-elrepo


Cheers.


^ permalink raw reply	[flat|nested] 4+ messages in thread

end of thread, back to index

Thread overview: 4+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2020-04-04 21:12 More reliable packages available for RHEL, CentOS, and Fedora Jason
2020-04-04 21:22 ` Jason
2020-04-15 21:41 ` Jason
2020-04-15 21:47   ` stunnel

Development discussion of WireGuard

Archives are clonable: git clone --mirror http://inbox.vuxu.org/wireguard

Example config snippet for mirrors

Newsgroup available over NNTP:
	nntp://inbox.vuxu.org/vuxu.archive.wireguard


AGPL code for this site: git clone https://public-inbox.org/public-inbox.git