Userspace WireGuard-go in Gateway Docker Image

[drag0n141]

Hi,

i want to use DEFGUARD_USERSPACE=true in the docker container. But it does not work, the wireguard-go package is missing. I am using the latest container.

[2024-11-15T19:18:45Z ERROR defguard_wireguard_rs::wgapi_userspace] Failed to create userspace API. wireguard-go executable not found in PATH. Error: No such file or directory (os error 2)
Error: WireguardError(ExecutableNotFound("wireguard-go"))

[teon]

@drag0n141 yes - official docker images are ment for Linux distributions which have WireGuard in Kernel, thus we don't include the wireguard-go in the docker image.
What would be the case for such a use case?

[drag0n141]

I am want to run the gateway in my kubernetes cluster. For that I need the userspace mode.

[teon]

@drag0n141 oh.. ok! I will add this feature to the backlog.

[teon]

@drag0n141 after discussing this with our team - there is a question, why do you actually need the wireguard-go. Most probably the Kubernetes cluster is linux based, this enabling the Linux Kernel Wireguard implementation to be available. So why Wireguard-go?

[drag0n141]

@teon I already said that, i need the wireguard userspace mode. And i think is that i can not use the network_mode: host in kubernetes. For that i need to open the connections directly in the container.

[teon]

I understand, but why can't you use typical kernel implementation?

[drag0n141]

Why I need to explain that? You guys have the variable DEFGUARD_USERSPACE. And that is for not using the kernel implementation, without wireguard-go installed it does not work.