Required tools for WireGuard, such as wg and wg-quick

Clone this repo:
  1. 13f4ac4 ipc: linux: enforce IFNAMSIZ limit by Jason A. Donenfeld · 9 months ago master
  2. 729242a man: set private key in PreUp rather than PostUp by Jason A. Donenfeld · 11 months ago
  3. e6888dd wg-quick: run PreUp hook after creating interface by Daniel Gröber · 1 year, 4 months ago
  4. b4f6b4f show: fix show all endpoints output by Dmitry Selivanov · 1 year, 2 months ago
  5. 139aac5 ipc: freebsd: NULL out some freed memory in kernel_set_device() by Kyle Evans · 1 year, 6 months ago

wireguard-tools — tools for configuring WireGuard

This supplies the main userspace tooling for using and configuring WireGuard tunnels, including the wg(8) and wg-quick(8) utilities. This project supports Linux, OpenBSD, FreeBSD, macOS, Windows, and Android.

More information may be found at


$ cd src
$ make

There are no dependencies other than a good C compiler and a sane libc.


# make install

This command takes into account several environment variables:

  • PREFIX default: /usr

  • DESTDIR default:

  • BINDIR default: $(PREFIX)/bin

  • LIBDIR default: $(PREFIX)/lib

  • MANDIR default: $(PREFIX)/share/man

  • BASHCOMPDIR default: $(PREFIX)/share/bash-completion/completions

  • RUNSTATEDIR default: /var/run

  • PKG_CONFIG default: pkg-config

  • WITH_BASHCOMPLETION default: [auto-detect]

  • WITH_WGQUICK default: [auto-detect]

  • WITH_SYSTEMDUNITS default: [auto-detect]

  • DEBUG default:

The first section is rather standard. The second section is not:

  • WITH_BASHCOMPLETION decides whether or not bash completion files for the tools are installed. This is just a nice thing for people who have bash. If you don‘t have bash, or don’t want this, set the environment variable to no. If you‘d like to force its use, even if bash-completion isn’t detected in DESTDIR, then set it to yes.

  • WITH_WGQUICK decides whether or not the wg-quick(8) script is installed. This is a very quick and dirty bash script for reading a few extra variables from wg(8)-style configuration files, and automatically configures the interface. If you don‘t have bash, you probably don’t want this at all. Likewise, if you already have a working network management tool or configuration, you probably want to integrate wg(8) or the direct WireGuard API into your network manager, rather than using wg-quick(8). But for folks who like simple quick and dirty scripts, this is nice. If you‘d like to force its use, even if bash isn’t detected in DESTDIR, then set it to yes.

  • WITH_SYSTEMDUNITS decides whether or not systemd units are installed for wg-quick(8). If you don‘t use systemd, you certainly don’t want this, and should set it to no. If systemd isn't auto-detected, but you still would like to install it, set this to yes.

  • DEBUG decides whether to build with -g, when set to yes.

If you‘re a simple make && make install kind of user, you can get away with not setting these variables and relying on the auto-detection. However, if you’re writing a package for a distro, you'll want to explicitly set these, depending on what you want.


The contrib/ subdirectory contains various scripts and examples. Most of these are not immediately useful for production use, but should provide inspiration for creating fully-featured tools. See the README in each directory.


This project is released under the GPLv2.