Is it possible to install Wireguard on Luxonis OS?

unseeing6866

Hi all,

I would like to have VPN access to my OAK 4 S even when it is installed in a remote location. Having wireguard would fit nicely with our existing stack. Seeing as Luxonis OS is based on Yocto, is it possible to somehow enable wireguard like it is on a regular Yocto build?

OskarSonc

Hey unseeing6866 - hm so WireGuard kernel support should be already enabled on Luxonis OS:

~ # gunzip /proc/config.gz -c | grep CONFIG_WIREGUARD
CONFIG_WIREGUARD=y
# CONFIG_WIREGUARD_DEBUG is not set

But Luxonis OS doesn’t currently ship a supported VPN setup, so it’d be custom work. We could/will support this when demand will be big enough.

unseeing6866

OskarSonc Thanks for checking!

That is great news! When my OAK 4 S arrives I should be able to connect it to my VPN easily then!

When you say “doesnt ship a supported VPN setup”, do you mean that there is no surrounding custom setup tools made by Luxonis for VPNs? Surely that’s not needed since most people who use Wireguard would already have their own setup system?

Regardless, thank you for checking for me! I will report back here when my devices arrive in case anyone else is curious about wireguard.

unseeing6866

OskarSonc

Hi,

My devices have arrived! I have tried setting up wireguard using the kernels netlink interface but it doesn't seem to work:

~ # ip link add dev wg0 type wireguard

Error: argument "wg0" is wrong: Unknown device

It's odd because CONFIG_WIREGUARD=y clearly exists, and I can see the headers have been included, but it might be that the ip command is too old to be able to use it. Is there a way to upgrade it to allow for wireguard-tools?

UPDATE:

The busybox ip command seems new enough to be able to create wireguard network interface, but I found that I can also just create a wireguard conf and import it with nmcli! Problem solved!