pamolloy

Wireguard + VXLAN demo

Scripts to confgire a group of hosts on a LAN to use VXLAN over Wireguard.

Wireguard routing

• Making your own private Internet
• VXLAN & Linux
• Bridge vs Macvlan
• iproute2 bridging

pamolloy

I keep running into the following issue:

Jan 23 15:48:52 localhost irssi-notify.bash[23391]: ssh_askpass: exec(/usr/libexec/openssh/ssh-askpass): No such file or directory
Jan 23 15:48:52 localhost irssi-notify.bash[23391]: user@host: Permission denied (publickey).

After I installed openssh-askpass I get prompted for the password for my key every time ssh is called in the script.

pamolloy

Download the latest ugw3 package from https://github.com/Lochnair/vyatta-wireguard/releases and install it on your USG using dpkg -i wireguard-ugw3-<version>.deb.

cd /config/auth
umask 077
mkdir wireguard
cd wireguard
wg genkey > wg_private.key
wg pubkey < wg_private.key > wg_public.key

pamolloy

#include <linux/module.h>
#include <linux/device.h>
#include <linux/platform_device.h>

#include <linux/gpio.h>
#include <linux/gpio/consumer.h>
#include <linux/of_gpio.h>
#include <linux/pm_runtime.h>

#define MODULE_NAME "device"

pamolloy

#! /bin/sh

NAME=foo
DAEMON=/root/$NAME

case "$1" in
  start)
    printf "Starting $NAME: "
    start-stop-daemon -S -q -b -x $DAEMON
    [ $? = 0 ] && echo "OK" || echo "FAIL"

pamolloy

<?xml version="1.0" encoding="utf-8"?>
<!DOCTYPE rrd SYSTEM "http://oss.oetiker.ch/rrdtool/rrdtool.dtd">
<!-- Round Robin Database Dump -->
<rrd>
	<version>0003</version>
	<step>10</step> <!-- Seconds -->
	<lastupdate>1469481585</lastupdate> <!-- 2016-07-25 17:19:45 EDT -->

	<ds>
		<name> shortterm </name>

pamolloy

boot
pwd
apt-get
apt
ifconfig
cd /proc
cd acpi
cd asus
cd embedded_controller/
cd scsi

pamolloy

    , Option "V" ["variable"]
                 (ReqArg
                  (\arg opt -> do
                     let (key,val) = case break (`elem` ":=") arg of
                                       (k,_:v) -> (k,v)
                                       (k,_)   -> (k,"true")
                     return opt{ optVariables = (key,val) : optVariables opt })
                  "KEY[:VALUE]")
                 ""

pamolloy

config 'switch' 'eth0'
        option 'enable' '1'

config 'switch_vlan' 'eth0_0'
        option 'device' 'eth0'
        option 'vlan' '0'
        option 'ports' '1 2 3 5'

config 'switch_vlan' 'eth0_1'
        option 'device' 'eth0'

pamolloy

config 'dnsmasq'
        option 'domainneeded' '1'
        option 'boguspriv' '1'
        option 'filterwin2k' '0'
        option 'localise_queries' '1'
        option 'rebind_protection' '1'
        option 'rebind_localhost' '1'
        option 'local' '/lan/'
        option 'domain' 'lan'
        option 'expandhosts' '1'