Retrict Docker Container To VPN

Retrict Docker Container To VPN

[Benni Laib]

[-- Attachment #1: Type: text/plain, Size: 399 bytes --]

Hi there,

I am currently struggling with setting up a Docker container that can only access the internet through a WireGuard tunnel. According to [the website](https://www.wireguard.com/#ready-for-containers), this should be possible, but I can't find anything on how to set it up.
Can you guys help me with that and perhaps point me to useful information?

Thank you very much in advance,
Benjamin

[-- Attachment #2: Type: text/html, Size: 581 bytes --]

Re: Retrict Docker Container To VPN

[Jason A. Donenfeld]

Hi Benni,

You're probably looking for this document:
https://www.wireguard.com/netns/

Basically you do this:

# ip link add wg0 type wireguard
# ip link set wg0 netns PID

Where "PID" is the PID of any process running in that Docker
container. After that, you'll be able to see wg0 inside the Docker
container, but not in the host. The only traffic that will leave the
Docker container will then be encrypted packets sent to peer
endpoints.

Jason