Skip to main content
emisar

WireGuard VPN

v0.1.7

WireGuard state — interfaces, peers, transfer counts, last handshakes — plus operator actions: bring iface up/down via wg-quick, remove a peer from a live iface. Use to debug connectivity or evict a compromised peer.

5 allowed by default 3 need approval by default
Pack ID
wireguard
Vendor
emisar
OS
linux
Actions
8
Required binaries. Install these on the host before relying on the pack — an action that calls a missing one fails at run time.
wg

Install

emisar pack install fetches this pack, re-validates it, and verifies its content hash against the --hash below — the exact bytes this page was rendered against, so a tampered copy is rejected — before copying it into the runner's packs dir. The command reloads a running daemon itself; no manual restart.

on the runner host 
sudo emisar pack install wireguard --hash sha256:0dcb405567a8b1ff9cfb5c1ec350eb01d1f92bb10b01d7e1d1fc93fe38548ff5

Actions 8 total

View on GitHub
  • wg.quick_down exec high

    wg-quick down <iface>

    Tear down a WireGuard interface. All active sessions through it drop. PostDown rules run (typically cleaning up routes/firewall).

    View source on GitHub
  • wg.quick_up exec high

    wg-quick up <iface>

    Bring up a WireGuard interface defined in /etc/wireguard/<iface>.conf. Applies the address, peers, and PostUp rules.

    View source on GitHub
  • wg.set_peer_remove exec high

    wg set <iface> peer <pubkey> remove

    Remove one peer from a running WireGuard interface. Its tunnel sessions drop. The peer can no longer connect until added back (or the config file is reloaded).

    View source on GitHub
  • wg.show exec low

    wg show

    List all interfaces with peers + endpoints + last-handshake.

    View source on GitHub
  • wg.show_endpoints exec low

    wg show all endpoints

    Show per-peer remote endpoint (last known).

    View source on GitHub
  • wg.show_latest_handshakes exec low

    wg show all latest-handshakes

    Show per-peer epoch of last handshake. 0 means never seen.

    View source on GitHub
  • wg.show_transfer exec low

    wg show all transfer

    Show per-peer cumulative bytes rx/tx. Use to confirm "is the tunnel actually carrying traffic?".

    View source on GitHub
  • wg.showconf exec low

    wg showconf <iface>

    Show the effective config for one WireGuard interface (`[Interface]`/`[Peer]` sections, peer pubkeys, allowed-ips, endpoints). PrivateKey and PresharedKey lines are masked at the source.

    View source on GitHub
← Back to registry
Pack reference Publish your own →