lp://staging/wireguard-linux/stable

Branch merges

This import branch has no branches proposed for merge into it.

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

1390. By Jason A. Donenfeld on 2019-12-19

version: bump snapshot

1389. By Jason A. Donenfeld on 2019-12-19

compat: ipv6_dst_lookup_flow was backported to 5.3 and 5.4

1388. By Jason A. Donenfeld on 2019-12-17

wg-quick: linux: use already configured addresses instead of in-memory

The ADDRESSES array might not have addresses added during PreUp. But
moreover, nft(8) and iptables(8) don't like ip addresses in the form
somev6prefix::someipv4suffix, such as fd00::1.2.3.4, while ip(8) can
handle it. So by adding these first and then asking for them back, we
always get normalized addresses suitable for nft(8) and iptables(8).

Reported-by: Silvan Nagl <mail@53c70r.de>

1387. By Kai Haberzettl <email address hidden> on 2019-12-13

tools: adjust wg.8 syntax for consistency in COMMANDS section

Signed-off-by: Kai Haberzettl <email address hidden>

1386. By Jason A. Donenfeld on 2019-12-12

wg-quick: linux: try both iptables(8) and nft(8) on teardown

Daniel argues that technically a package manager could install nft(8)
after previously having started wg-quick(8) using iptables(8).

Suggested-by: Daniel Kahn Gillmor <email address hidden>

1385. By Jason A. Donenfeld on 2019-12-12

version: bump snapshot

1384. By YueHaibing <email address hidden> on 2019-12-12

main: remove unused include <linux/version.h>

Remove including <linux/version.h> that we don't need.

Signed-off-by: YueHaibing <email address hidden>

1383. By Jason A. Donenfeld on 2019-12-12

wg-quick: linux: support older nft(8)

Older nft(8), such as that on Ubuntu, does not accept the - parameter to
the -f argument and doesn't accept symbolic priority names. So instead
use the canonical numeric priority forms and use <(echo) instead of -.

1382. By Josh Soref <email address hidden> on 2019-12-12

global: fix up spelling

Signed-off-by: Josh Soref <email address hidden>

1381. By Jason A. Donenfeld on 2019-12-12

wg-quick: linux: add support for nft and prefer it

If nft(8) is installed, use it. These rules should be identical to the
iptables-restore(8) ones, with the advantage that cleanup is easy
because we use custom table names.