Updates

2026-09-13 06:53:33 +01:00
parent 75670e4d5c
commit e7e63bc491
45 changed files with 2117 additions and 22 deletions
@@ -7,5 +7,74 @@
 # This script will run as root, to have full access needed
 # to setup wireguard
 # This script will also be idempotent, so that it doesn't
-# have to install repeatedly if the required tools and 
-# packages are alread installed.
+# have to install repeatedly if the required tools and
+# packages are alread installed.
+
+set -euo pipefail
+
+REQUIRED_TOOLS=(wg wg-quick)
+HAVE_ALL_TOOLS=true
+
+for tool in "${REQUIRED_TOOLS[@]}"; do
+    if ! command -v "$tool" >/dev/null 2>&1; then
+        HAVE_ALL_TOOLS=false
+        break
+    fi
+done
+
+if [ "$HAVE_ALL_TOOLS" = true ]; then
+    echo "wireguard tools already installed — nothing to do."
+    exit 0
+fi
+
+if [ "$(id -u)" -ne 0 ]; then
+    echo "error: this script must be run as root" >&2
+    exit 1
+fi
+
+detect_distro() {
+    if [ -f /etc/os-release ]; then
+        # shellcheck disable=SC1091
+        . /etc/os-release
+        echo "$ID"
+    else
+        echo "unknown"
+    fi
+}
+
+DISTRO="$(detect_distro)"
+
+case "$DISTRO" in
+    debian | ubuntu | linuxmint | raspbian)
+        echo "detected Debian-family distro: $DISTRO"
+        export DEBIAN_FRONTEND=noninteractive
+        apt-get update -y
+        apt-get install -y wireguard
+        ;;
+    fedora | rhel | centos | rocky | almalinux)
+        echo "detected Fedora-family distro: $DISTRO"
+        dnf install -y wireguard-tools
+        ;;
+    arch | manjaro | endeavouros)
+        echo "detected Arch-family distro: $DISTRO"
+        pacman -Syu --noconfirm --needed wireguard-tools
+        ;;
+    *)
+        echo "error: unsupported distro: $DISTRO" >&2
+        echo "install wireguard manually (kernel module + wg/wg-quick tools)" >&2
+        exit 1
+        ;;
+esac
+
+for tool in "${REQUIRED_TOOLS[@]}"; do
+    if ! command -v "$tool" >/dev/null 2>&1; then
+        echo "error: '$tool' still missing after install" >&2
+        exit 1
+    fi
+done
+
+mkdir -p /etc/wireguard
+chmod 700 /etc/wireguard
+
+echo "wireguard setup complete."
+wg --version