Run firefox with Wireguard VPN using network namespaces

vpnexec.sh

#!/bin/sh
exec ip netns exec vpn su user -c "$*"

vpnfirefox.sh

#!/bin/sh
firefox -CreateProfile private
exec sudo /usr/local/bin/vpnexec firefox -P private -private -new-session

vpnsetup.sh

#!/bin/sh
set -exu
ip link del dev wg-vpn ||:
ip -n vpn link del dev wg-vpn ||:
ip link add dev wg-vpn type wireguard
ip netns add vpn ||:
ip link set dev wg-vpn netns vpn
ip -n vpn addr add 10.9.7.2/32 peer 10.9.7.1/32 dev wg-vpn
ip -n vpn addr add fc01::2/64 peer fc01::1/64 dev wg-vpn
ip -n vpn link set dev wg-vpn up
ip -n vpn route add default via 10.9.7.2
ip -n vpn route add default via fc01::1
ip netns exec vpn wg set wg-vpn private-key $LOCALPRIVATEKEYFILE peer $PEERPUBLICKEY endpoint $ENDPOINT allowed-ips 0.0.0.0/0,::/0