l-n-s / wireguard-install

WireGuard VPN server installer
MIT License
657 stars 166 forks source link

May 08 10:54:22 wireguard wg-quick[5821]: RTNETLINK answers: Operation not supported #32

Open hexicans opened 5 years ago

hexicans commented 5 years ago

Hi,

I have use your install script but i have Error (VM on Xen server) :

net.ipv4.ip_forward = 1
net.ipv4.conf.all.forwarding = 1
net.ipv6.conf.all.forwarding = 1
Created symlink /etc/systemd/system/multi-user.target.wants/wg-quick@wg0.service → /lib/systemd/system/wg-quick@.service.
Job for wg-quick@wg0.service failed because the control process exited with error code.
See "systemctl status wg-quick@wg0.service" and "journalctl -xe" for details.
Client config --> /root/client-wg0.conf
Now reboot the server and enjoy your fresh VPN installation! :^)
root@wireguard:~# systemctl status wg-quick@wg0.service
● wg-quick@wg0.service - WireGuard via wg-quick(8) for wg0
   Loaded: loaded (/lib/systemd/system/wg-quick@.service; enabled; vendor preset: enabled)
   Active: failed (Result: exit-code) since Wed 2019-05-08 10:54:22 CDT; 1min 57s ago
     Docs: man:wg-quick(8)
           man:wg(8)
           https://www.wireguard.com/
           https://www.wireguard.com/quickstart/
           https://git.zx2c4.com/WireGuard/about/src/tools/man/wg-quick.8
           https://git.zx2c4.com/WireGuard/about/src/tools/man/wg.8
  Process: 5821 ExecStart=/usr/bin/wg-quick up wg0 (code=exited, status=1/FAILURE)
 Main PID: 5821 (code=exited, status=1/FAILURE)

May 08 10:54:22 wireguard systemd[1]: Starting WireGuard via wg-quick(8) for wg0...
May 08 10:54:22 wireguard wg-quick[5821]: [#] ip link add wg0 type wireguard
May 08 10:54:22 wireguard wg-quick[5821]: RTNETLINK answers: Operation not supported
May 08 10:54:22 wireguard wg-quick[5821]: Unable to access interface: Protocol not supported
May 08 10:54:22 wireguard wg-quick[5821]: [#] ip link delete dev wg0
May 08 10:54:22 wireguard wg-quick[5821]: Cannot find device "wg0"
May 08 10:54:22 wireguard systemd[1]: wg-quick@wg0.service: Main process exited, code=exited, status=1/FAILURE
May 08 10:54:22 wireguard systemd[1]: Failed to start WireGuard via wg-quick(8) for wg0.
May 08 10:54:22 wireguard systemd[1]: wg-quick@wg0.service: Unit entered failed state.
May 08 10:54:22 wireguard systemd[1]: wg-quick@wg0.service: Failed with result 'exit-code'.
hexicans commented 5 years ago

Trying on debian 8.

hexicans commented 5 years ago

Working :

Before install your script :

$ apt-get install linux-headers-$(uname -r)

After, i launch your script. if you can add this command in your script.. :D

hexicans commented 5 years ago

Hi, new problem.

User can't connect :

2019-05-08 21:43:38.138517: [APP] startActivation: Entering (tunnel: test)
2019-05-08 21:43:38.139493: [APP] startActivation: Starting tunnel
2019-05-08 21:43:38.139974: [APP] startActivation: Success
2019-05-08 21:43:38.152545: [APP] Tunnel 'test' connection status changed to 'connecting'
2019-05-08 21:43:38.294706: [NET] App version: 0.0.20190319 (1); Go backend version: 0.0.20181222
2019-05-08 21:43:38.295367: [NET] Starting tunnel from the app
2019-05-08 21:43:38.372718: [NET] Tunnel interface is utun2
2019-05-08 21:43:38.374744: [NET] DNS64: mapped 178.32.109.93 to itself.
2019-05-08 21:43:38.375649: [NET] Attaching to interface
2019-05-08 21:43:38.377066: [NET] Routine: decryption worker - started
2019-05-08 21:43:38.377214: [NET] Routine: encryption worker - started
2019-05-08 21:43:38.377321: [NET] Routine: decryption worker - started
2019-05-08 21:43:38.377409: [NET] Routine: handshake worker - started
2019-05-08 21:43:38.377471: [NET] Routine: encryption worker - started
2019-05-08 21:43:38.377539: [NET] Routine: decryption worker - started
2019-05-08 21:43:38.377625: [NET] Routine: handshake worker - started
2019-05-08 21:43:38.377715: [NET] Routine: encryption worker - started
2019-05-08 21:43:38.377807: [NET] Routine: handshake worker - started
2019-05-08 21:43:38.377882: [NET] Routine: decryption worker - started
2019-05-08 21:43:38.377953: [NET] Routine: handshake worker - started
2019-05-08 21:43:38.378094: [NET] Routine: handshake worker - started
2019-05-08 21:43:38.378180: [NET] Routine: encryption worker - started
2019-05-08 21:43:38.378242: [NET] Routine: decryption worker - started
2019-05-08 21:43:38.378325: [NET] Routine: decryption worker - started
2019-05-08 21:43:38.378386: [NET] Routine: encryption worker - started
2019-05-08 21:43:38.378448: [NET] Routine: handshake worker - started
2019-05-08 21:43:38.378531: [NET] Routine: TUN reader - started
2019-05-08 21:43:38.378722: [NET] Routine: encryption worker - started
2019-05-08 21:43:38.378787: [NET] Routine: event worker - started
2019-05-08 21:43:38.379230: [NET] UAPI: Updating private key
2019-05-08 21:43:38.379823: [NET] UAPI: Removing all peers
2019-05-08 21:43:38.379884: [NET] UAPI: Transition to peer configuration
2019-05-08 21:43:38.380605: [NET] peer(SaDu…JxxI) - UAPI: Created
2019-05-08 21:43:38.380686: [NET] peer(SaDu…JxxI) - UAPI: Updating endpoint
2019-05-08 21:43:38.380798: [NET] peer(SaDu…JxxI) - UAPI: Updating persistent keepalive interval
2019-05-08 21:43:38.380875: [NET] peer(SaDu…JxxI) - UAPI: Removing all allowedips
2019-05-08 21:43:38.380970: [NET] peer(SaDu…JxxI) - UAPI: Adding allowedip
2019-05-08 21:43:38.381055: [NET] peer(SaDu…JxxI) - UAPI: Adding allowedip
2019-05-08 21:43:38.381617: [NET] Routine: receive incoming IPv6 - started
2019-05-08 21:43:38.382214: [NET] Routine: receive incoming IPv4 - started
2019-05-08 21:43:38.382361: [NET] UDP bind has been updated
2019-05-08 21:43:38.382441: [NET] peer(SaDu…JxxI) - Starting...
2019-05-08 21:43:38.382623: [NET] peer(SaDu…JxxI) - Routine: nonce worker - started
2019-05-08 21:43:38.382693: [NET] peer(SaDu…JxxI) - Routine: sequential receiver - started
2019-05-08 21:43:38.382763: [NET] peer(SaDu…JxxI) - Routine: sequential sender - started
2019-05-08 21:43:38.382918: [NET] peer(SaDu…JxxI) - Sending keepalive packet
2019-05-08 21:43:38.383005: [NET] Device started
2019-05-08 21:43:38.383032: [NET] peer(SaDu…JxxI) - Sending handshake initiation
2019-05-08 21:43:38.385213: [NET] peer(SaDu…JxxI) - Awaiting keypair
2019-05-08 21:43:38.385365: [APP] Tunnel 'test' connection status changed to 'connected'
2019-05-08 21:43:38.389422: [NET] UAPI: Processing get operation
2019-05-08 21:43:39.388333: [NET] UAPI: Processing get operation
2019-05-08 21:43:39.471511: [NET] Network change detected with satisfied route and interface order [en0, utun2, pdp_ip0]
2019-05-08 21:43:39.473726: [NET] DNS64: mapped 178.32.109.93 to itself.
2019-05-08 21:43:39.474259: [NET] UAPI: Transition to peer configuration
2019-05-08 21:43:39.474602: [NET] peer(SaDu…JxxI) - UAPI: Updating endpoint
2019-05-08 21:43:39.474971: [NET] Binding sockets to interface 8
2019-05-08 21:43:39.475892: [NET] Unable to bind v6 socket to interface:%!(EXTRA syscall.Errno=invalid argument)
2019-05-08 21:43:40.387539: [NET] UAPI: Processing get operation
2019-05-08 21:43:41.387863: [NET] UAPI: Processing get operation
2019-05-08 21:43:43.587001: [NET] peer(SaDu…JxxI) - Sending handshake initiation
2019-05-08 21:43:48.601572: [NET] peer(SaDu…JxxI) - Sending handshake initiation
2019-05-08 21:43:53.868238: [NET] peer(SaDu…JxxI) - Sending handshake initiation
2019-05-08 21:43:59.050086: [NET] peer(SaDu…JxxI) - Handshake did not complete after 5 seconds, retrying (try 2)
2019-05-08 21:43:59.050478: [NET] peer(SaDu…JxxI) - Sending handshake initiation
2019-05-08 21:44:04.204938: [NET] peer(SaDu…JxxI) - Sending handshake initiation
2019-05-08 21:44:05.735620: [NET] UAPI: Processing get operation
2019-05-08 21:44:05.736076: [APP] Status update notification timeout for tunnel 'test'. Tunnel status is now 'connected'.
2019-05-08 21:44:05.737414: [NET] UAPI: Processing get operation
2019-05-08 21:44:06.021256: [NET] UAPI: Processing get operation
2019-05-08 21:44:07.023750: [NET] UAPI: Processing get operation
2019-05-08 21:44:08.023490: [NET] UAPI: Processing get operation
2019-05-08 21:44:09.022922: [NET] UAPI: Processing get operation
2019-05-08 21:44:09.538888: [NET] peer(SaDu…JxxI) - Handshake did not complete after 5 seconds, retrying (try 2)
2019-05-08 21:44:09.539352: [NET] peer(SaDu…JxxI) - Sending handshake initiation

i have made :

$ echo 1 > /proc/sys/net/ipv4/ip_forward

but error persist.

Wireguard is booted :


root@wireguard:~# systemctl status wg-quick@wg0.service
● wg-quick@wg0.service - WireGuard via wg-quick(8) for wg0
   Loaded: loaded (/lib/systemd/system/wg-quick@.service; enabled)
   Active: active (exited) since Wed 2019-05-08 12:46:25 CDT; 1h 55min ago
     Docs: man:wg-quick(8)
           man:wg(8)
           https://www.wireguard.com/
           https://www.wireguard.com/quickstart/
           https://git.zx2c4.com/WireGuard/about/src/tools/man/wg-quick.8
           https://git.zx2c4.com/WireGuard/about/src/tools/man/wg.8
 Main PID: 489 (code=exited, status=0/SUCCESS)

May 08 12:46:25 wireguard wg-quick[489]: [#] ip link add wg0 type wireguard
May 08 12:46:25 wireguard wg-quick[489]: [#] wg setconf wg0 /dev/fd/63
May 08 12:46:25 wireguard wg-quick[489]: [#] ip address add 10.9.0.1/24 dev wg0
May 08 12:46:25 wireguard wg-quick[489]: [#] ip link set mtu 1420 up dev wg0
May 08 12:46:25 wireguard systemd[1]: Started WireGuard via wg-quick(8) for wg0.
May 08 14:41:52 wireguard systemd[1]: Started WireGuard via wg-quick(8) for wg0.
root@wireguard:~# 
root@wireguard:~# netstat -tlnp
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address           Foreign Address         State       PID/Program name
tcp        0      0 0.0.0.0:22              0.0.0.0:*               LISTEN      535/sshd
tcp6       0      0 :::22                   :::*                    LISTEN      535/sshd
root@wireguard:~#
root@wireguard:~# ifconfig
eth0      Link encap:Ethernet  HWaddr 02:00:00:ca:bf:1d
          inet addr:178.32.109.93  Bcast:178.32.109.93  Mask:255.255.255.255
          inet6 addr: fe80::ff:feca:bf1d/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:101594 errors:0 dropped:0 overruns:0 frame:0
          TX packets:3462 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:5321086 (5.0 MiB)  TX bytes:243842 (238.1 KiB)

lo        Link encap:Local Loopback
          inet addr:127.0.0.1  Mask:255.0.0.0
          inet6 addr: ::1/128 Scope:Host
          UP LOOPBACK RUNNING  MTU:65536  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)

wg0       Link encap:UNSPEC  HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
          inet addr:10.9.0.1  P-t-P:10.9.0.1  Mask:255.255.255.0
          UP POINTOPOINT RUNNING NOARP  MTU:1420  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)

root@wireguard:~#
root@wireguard:~# ping 10.9.0.1
PING 10.9.0.1 (10.9.0.1) 56(84) bytes of data.
64 bytes from 10.9.0.1: icmp_seq=1 ttl=64 time=0.026 ms
64 bytes from 10.9.0.1: icmp_seq=2 ttl=64 time=0.023 ms
64 bytes from 10.9.0.1: icmp_seq=3 ttl=64 time=0.029 ms
^C
--- 10.9.0.1 ping statistics ---
3 packets transmitted, 3 received, 0% packet loss, time 1999ms
rtt min/avg/max/mdev = 0.023/0.026/0.029/0.002 ms
root@wireguard:~#

My computer is connected and he obtain an IP address, but can't ping 10.9.0.1 and he have no access to internet.

Do you have an idea ? if you have skype or discord, we can check it live. (same problem in debian 9)