Zen

Translation

English type: Plain text
These keys will be referenced as `fcos_public_key` and `fcos_private_key` from here on out in this guide.
100/1050 · 105

Sign in to save the translation.

English Portuguese (Brazil) Actions
Configuring FCOS to use WireGuard
Configurando FCOS para usar WireGuard
Some examples in this page may not work properly. An issue with WireGuard SELinux isolation breaks Pre/Post actions in the WireGuard configuration for recent releases of Fedora Coreos. You can check the progress of this issue on the https://github.com/coreos/fedora-coreos-tracker/issues/1487[issue tracker].
 
Introduction
Introdução
https://www.wireguard.com/[WireGuard] is a novel VPN that runs inside the Linux Kernel and uses state-of-the-art cryptography. It aims to be faster, simpler, leaner, and more useful than IPSec, while avoiding the massive headache. It intends to be considerably more performant than OpenVPN. WireGuard is designed as a general purpose VPN for running on embedded interfaces and super computers alike, fit for many different circumstances. It runs over UDP.
https://www.wireguard.com/[WireGuard] é uma nova VPN que é executada dentro do kernel do Linux e usa criptografia de última geração. Tem como objetivo ser mais rápido, simples, enxuto e útil do que o IPSec, evitando ao mesmo tempo uma enorme dor de cabeça. Ele pretende ter um desempenho consideravelmente maior do que o OpenVPN. O WireGuard é projetado como uma VPN de propósito geral para execução em interfaces incorporadas e supercomputadores semelhantes, adequado para muitas circunstâncias diferentes. Ele funciona sobre UDP.
https://www.wireguard.com/[Conceptual Overview]
https://www.wireguard.com/[Visão geral conceitual]
https://www.wireguard.com/quickstart/[Quickstart]
https://www.wireguard.com/quickstart/[Início rápido]
https://www.wireguard.com/papers/wireguard.pdf[Whitepaper]
https://www.wireguard.com/papers/wireguard.pdf[Whitepaper]
FCOS has full support for WireGuard out of the box. This guide is going to demonstrate how to set up a single connection between a FCOS server and one client computer. It goes over the basic client configuration, but it does not cover installing WireGuard on your clients.
FCOS tem suporte total para WireGuard pronto para uso. Este guia vai demonstrar como configurar uma única conexão entre um servidor FCOS e um computador cliente. Ele aborda a configuração básica do cliente, mas não cobre a instalação do WireGuard em seus clientes.
Generate Keys
Gerar chaves
You will need to generate some keys to configure WireGuard. For this guide, the keys should be pre-generated on your workstation. First, let's create the FCOS WireGuard keys:
Você precisará gerar algumas chaves para configurar o WireGuard. Para este guia, as chaves devem ser pré-geradas em sua estação de trabalho. Primeiro, vamos criar as chaves WireGuard do FCOS:
Generate FCOS WireGuard keys
Gerar chaves WireGuard do FCOS
$ umask 077
$ wg genkey | tee privatekey | wg pubkey > publickey
$ umask 077
$ wg genkey | tee privatekey | wg pubkey > publickey
These keys will be referenced as `fcos_public_key` and `fcos_private_key` from here on out in this guide.
Essas chaves serão referidas como `fcos_public_key` e` fcos_private_key` daqui em diante neste guia.
Now let's generate the client keys:
Agora, vamos gerar as chaves do cliente:
Generate Client One WireGuard keys
 
These keys will be referenced as `client_one_public_key` and `client_one_private_key` from here on out in this guide.
 
Now create a PresharedKey:
 
Generate a Preshared key per peer pair
 
$ wg genpsk > fcos_client_one_psk
 
The PresharedKey will be referenced as `fcos_client_one_psk` from here on out in this guide.
 
The `wg genpsk` command generates a PresharedKey that can only be used once per peer pair. Every peer you add to the FCOS server will need to generate a unique PresharedKey.
 
Configure WireGuard on FCOS
 
You can now configure your Ignition config to create the `wg0` configuration file:
 
Example FCOS WireGuard configuration
 
variant: fcos
version: {butane-latest-stable-spec}
storage:
files:
- path: /etc/wireguard/wg0.conf
mode: 0600
contents:
inline: |
[Interface]
Address = 192.168.71.1/24,fdc9:3c6b:21c7:e6bd::1/64
PrivateKey = <fcos_private_key>
ListenPort = 51820
 
[Peer]
PublicKey = <client_one_public_key>
PresharedKey = <fcos_client_one_psk>
AllowedIPs = 192.168.71.0/24,fdc9:3c6b:21c7:e6bd::/64
systemd:
units:
- name: wg-quick@wg0.service
enabled: true
 
Boot FCOS and log in. When you run `sudo wg show` you should see this:
 
Check WireGuard configuration on FCOS
 

Loading…

User avatar rffontenelle

Translation added
These keys will be referenced as `fcos_public_key` and `fcos_private_key` from here on out in this guide.
Essas chaves serão referidas como `fcos_public_key` e` fcos_private_key` daqui em diante neste guia.
3 years ago
Browse all string changes

Things to check

Placeholders

The following format strings are missing: `fcos_private_key`
The following format strings are extra: ` fcos_private_key`

Reset

Glossary

English Portuguese (Brazil)
No related strings found in the glossary.

String information

Source string description
type: Plain text
Flags
placeholders:r"`[\w.\/\-_=@&*:$●+~()\] ]*`"
Source string location
pages/sysconfig-configure-wireguard.adoc:27
String age
3 years ago
Last updated
a year ago
Source string age
3 years ago
Translation file
po/pt_BR/master/pages/sysconfig-configure-wireguard.po, string 13