development
- b
bored-island-21407
10/26/2021, 8:10 PMnice that you can recover from that - b
bored-island-21407
10/27/2021, 1:06 PMit is a pain in the ass to install wireguard (let alone netclient) on centos - j
jolly-london-20127
10/27/2021, 1:06 PMselinux? - b
bored-island-21407
10/27/2021, 1:08 PMno, have to install a bunch of stuff including a new kernel, iptables, wireguard-kms, wireguard tools, etc... - b
bored-island-21407
10/27/2021, 1:08 PMand then a reboot is required because of the updated kernel - b
bored-island-21407
10/27/2021, 1:08 PMand that is using the official wireguard install instructions - j
jolly-london-20127
10/27/2021, 1:19 PMahhh is that because it's centos 7? - j
jolly-london-20127
10/27/2021, 1:19 PMor same for centos 8? - b
bored-island-21407
10/27/2021, 1:19 PMno, trying centos 8 - b
bored-island-21407
10/27/2021, 1:20 PMgoing to make it tough to automate - j
jolly-london-20127
10/27/2021, 1:21 PMman...taht's annoying - j
jolly-london-20127
10/27/2021, 1:21 PMwe could default to userspace on centos - j
jolly-london-20127
10/27/2021, 1:21 PMwhich of course sucks for performance, but given the security restrictions on RH distros might be more in line anyway - b
bored-island-21407
10/27/2021, 1:22 PMthats a thought. is there a userspace netclient executable? - j
jolly-london-20127
10/27/2021, 1:25 PMyes, actually all you need to do is specify WG_QUICK_USERSPACE_IMPLEMENTATION when running the "join" command and the regular netclient will use wg-quick + wireguard-go or boringtun - j
jolly-london-20127
10/27/2021, 1:25 PMhaven't tested with boringtun but wireguard-go should work at least - b
bored-island-21407
10/27/2021, 1:29 PMwonder if i will run into same issues with fedora and rockylinux (no rhel on DO) - v
victorious-optician-32228
10/27/2021, 9:13 PMhaha i have this CentOS topic right now as well. I have a PBX with CentOS 7.9 And here we go with the issues: - no wireguard availaible (guess i could fix this) - no package resolvectl found - GLIBC is Version 2.17 but netmaker needs _2.28 - b
bored-island-21407
10/27/2021, 9:14 PMsort of got wireguard working in usermode on rockylinux 8 - b
bored-island-21407
10/27/2021, 9:15 PMgetting selinux errors - v
victorious-optician-32228
10/27/2021, 9:25 PMwhat i found easy: ubuntu server 20.04 - j
jolly-london-20127
10/27/2021, 9:26 PMin next release, GLIBC will not be an issue. This appears to be a hard limit on centos 7 right now (though not on centos 8) - j
jolly-london-20127
10/27/2021, 9:27 PMcant really help with how difficult wireguard is to install - v
victorious-optician-32228
10/27/2021, 9:47 PMohh that sounds good. You mention CentOS 8. Keep in mind: centOs 7.9 will have longer support then CentOS 8. So it would be nice if we get netclient running on 7.9. What about resolvectl? Package was not found during netclient install Does that help? "resolvectl was never part of the systemd package in Bionic. Per the systemd changelog, systemd-resolve was renamed to resolvectl in systemd 239, but Bionic has systemd 237. Thus in Bionic it is systemd-resolve." And what does that mean for netclient? - j
jolly-london-20127
10/27/2021, 10:05 PMresolvectl is not a hard dependency - j
jolly-london-20127
10/27/2021, 10:06 PMit is just what we use to configure dns automatically - j
jolly-london-20127
10/27/2021, 10:06 PMso if resolvectl is not found, you are on your own to configure the netmaker nameserver as a nameserver locally - j
jolly-london-20127
10/27/2021, 10:06 PMthis can usually be done very easily by just setting it in /etc/resolv.conf - j
jolly-london-20127
10/27/2021, 10:07 PMbut that is not the "correct" way of setting dns, which is usually complicated and dependent on the system - j
jolly-london-20127
10/27/2021, 10:07 PMtl;dr, for systems without resolvectl, just stick the ip of the server in /etc/resolv.conf