Skip to content

Conversation

@pete4abw
Copy link

Replaced use of <(echo $var)' for wg setconf -fandnft -fcommands. Use of<(echo $var)' obscured actual input to wg and nft commands
and replaced with /dev/fd/63 which just indicates piped input.
After this commit, output will reflect actual commands for nft
and will echo the config parameters being read by wg setconf.
Config parameters will also hide Private and Preshared keys like
the `wg' command.

Before

[#] wg setconf wg0 /dev/fd/63
[#] nft -f /dev/fd/63

After

[#] wg setconf wg0 /dev/fd/63
wg configuration
[Interface]
PrivateKey = (hidden)
ListenPort = 51820

[Peer]
PublicKey = xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx=
PresharedKey = (hidden)
AllowedIPs = 0.0.0.0/0
Endpoint = xxx.xxx.xxx.xxx:51820
PersistentKeepalive = 25

[#] nft delete table ip wg-quick-wg0

Replaced use of `<(echo $var)' for `wg setconf -f` and `nft -f` commands.
Use of `<(echo $var)' obscured actual input to `wg` and `nft` commands
and replaced with /dev/fd/63 which just indicates piped input.
After this commit, output will reflect actual commands for `nft`
and will echo the config parameters being read by `wg setconf`.
Config parameters will also hide Private and Preshared keys like
the `wg' command.

Before
======
[#] wg setconf wg0 /dev/fd/63
[#] nft -f /dev/fd/63

After
=====
[#] wg setconf wg0 /dev/fd/63
wg configuration
[Interface]
PrivateKey = (hidden)
ListenPort = 51820

[Peer]
PublicKey = xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx=
PresharedKey = (hidden)
AllowedIPs = 0.0.0.0/0
Endpoint = xxx.xxx.xxx.xxx:51820
PersistentKeepalive = 25

[#] nft delete table ip wg-quick-wg0
@zx2c4-bot zx2c4-bot force-pushed the master branch 2 times, most recently from 4574b8e to 0b7d982 Compare June 19, 2025 15:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

1 participant