WireGuard

by nicoulaj

Score 15

Issues Website Download

UUID: wireguard@nicoulaj.net

Last edited:

2 weeks ago 2025-09-22, 14:11

Last commit: [373d22ad] Update translation template metadata (#7805)

Enable/disable WireGuard connections.

Log In To Comment!

18 Comments

ii0-0ii-2 weeks ago

LM22.2 core program not included; no idea what sudo's to use to install

Timur-1 month ago

WireGuard connections are part of the Network Manager applet from of https://github.com/linuxmint/cinnamon/issues/10225

marcogiorgio-1 year ago

is someone using the Papirus icon theme? When using this theme, the logo becomes a white "X" instead of showing the proper wireguard logo

ziogref-1 year ago

Probably again for just future me, Make sure the following packages are installed apt install wireguard wireguard-tools resolvconf

ziogref-1 year ago

in Linux mint 22 you need to remove resolvconf if you have it installed. sudo apt purge resolvconf

pzim-2 years ago

For not entering the password every times you want to connect or disconnect, replace in ~/.local/share/cinnamon/applets/wireguard@nicoulaj.net/applet.js 'pkexec' by 'sudo' line 123 : replace : ``` ['pkexec', 'wg-quick', enable ? 'up' : 'down', iface], ``` by : ``` ['sudo', 'wg-quick', enable ? 'up' : 'down', iface], ``` Then in sudo visudo add this line : with no empty line : ``` # Allow members of group sudo to execute any command %sudo ALL=(ALL:ALL) ALL YOUR_USER_NAME ALL=(ALL) NOPASSWD: /usr/bin/wg-quick # See sudoers(5) for more information on "@include" directives: ``` Replace YOUR_USER_NAME by your username or ALL ######################## The config files need to be in /etc/wireguard/ (e.g /etc/wireguard/wg0.conf) as @ziogref said And you must let access for reading to your username to the folder wiregard ######################## Finnaly restart Cinnamon to make it works

alxmatweew-6 days ago

Suddenly, someone else will help ... With this approach, after each update of the applet, you have to change "pkexec" to "sudo", which is tiring. I think it's better to write a rule for PolicyKit once, for example, like this: $sudo nano /usr/share/polkit-1/actions/org.freedesktop.policykit.wireguard-vpntun.policy <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE policyconfig PUBLIC "-//freedesktop//DTD PolicyKit Policy Configuration 1.0//EN" "http://www.freedesktop.org/software/polkit/policyconfig-1.dtd"> <policyconfig> <action id="org.freedesktop.policykit.wireguard-vpntun"> <description>Bring up WireGuard interface vpntun</description> <message>Authentication is required to bring up WireGuard interface vpntun</message> <defaults> <allow_any>auth_admin</allow_any> <allow_inactive>auth_admin</allow_inactive> <allow_active>yes</allow_active> </defaults> <annotate key="org.freedesktop.policykit.exec.path">/usr/bin/wg-quick</annotate> <annotate key="org.freedesktop.policykit.exec.allow_gui">false</annotate> </action> </policyconfig>

SoleInvictus-5 days ago

You are the best. This works perfectly, thank you!

Pablo Gutierrez-2 years ago

In the text # Allow members of group sudo to execute any command %sudo ALL=(ALL:ALL) ALL YOUR_USER_NAME ALL=(ALL) NOPASSWD: /usr/bin/wg-quick # See sudoers(5) for more information on "@include" directives: I should only place my username where it says YOUR_USER_NAME? or do i need to replace it where it says ALL as well?

pzim-2 years ago

- To let reading access for your username to the folder wiregard : sudo chmod o+r /etc/wireguard - To restart Cinnamon : ( Alt+F2, type r and hit enter)

pzim-2 years ago

And thank you to @nicoulaj for this usefull applet ;-) If you want to import NordVPN's Wireguard's conf files : https://gist.github.com/bluewalk/7b3db071c488c82c604baf76a42eaad3?permalink_comment_id=4189557#gistcomment-4189557 https://github.com/sfiorini/NordVPN-Wireguard

ziogref-3 years ago

Wireguard config files need to be in /etc/wireguard/ (e.g /etc/wireguard/wg0.conf) Probably for future me, but this is where the plugin looks for the wireguard profiles.

oleole39-3 years ago

Hello, glad to find this! Would you consider adding an option enabling to launch a given config automically at startup ?

johsoderi-5 years ago

I couldn't get this to work either, but If you only have one vpn you can use the applet "Bash Sensors" instead. Since wg-quick needs sudo, I added the following line with visudo: ALL ALL=(root) NOPASSWD: /usr/bin/wg-quick Warning: This is a huge security risk! Since wg_quick a bash script, you're giving root access to anyone who can edit it. I used these settings for Bash Sensors: - Refresh interval: 10 sec - Shell: sh - Command 1: echo '' - Two-line mode: Off - Dynamic icon: On - Cmd: ls /sys/class/net | grep <wg config name> > /dev/null && echo "<path to On icon>" || echo "<path to Off icon>" Note: PNG's can be used for icons. These are the ones I used: https://findicons.com/files/icons/1933/symbols/128/green_light.png https://findicons.com/files/icons/1933/symbols/128/red_light.png - Dynamic tooltip: On - Cmd: ls /sys/class/net | grep <wg config name> > /dev/null && echo "<wg config name>: UP" || echo "<wg config name>: DOWN" - Menu command (on applet left-click): ls /sys/class/net | grep <wg config name> > /dev/null && sudo wg-quick up <wg config name> || sudo wg-quick down <wg config name> - Display output: Off My config for the lazy (~/.cinnamon/configs/bash-sensors@pkkk/45.json): https://pastebin.com/KqQQNcJc

johsoderi-5 years ago

I can't find any way to edit my comment, but the "Menu command (on applet left-click)" part is wrong. It should be: "ls /sys/class/net | grep <wg config name> && sudo wg-quick down <wg config name> || sudo wg-quick up <wg config name>". The file on pastebin is updated, you can import it by clicking the "hamburger" icon and import. Then fix the icon paths and change all instances of "integrity_vpn" to the name of your WireGuard config.

nicoulaj-4 years ago

Can you try latest version and file an issue at https://github.com/nicoulaj/cinnamon-applet-wireguard if it does not work ?

Michael Parker-5 years ago

Hello everytime my kernel updates your extension breaks it seems it has to do with the name of the updated file i was wondering if you can update this applet to detect those changes

nicoulaj-4 years ago

What distribution do you use ? Anyway wireguard is a kernel module, so after a kernel update you need to reboot or at least reload it, it depends on how it is handled on your distribution. But I guess the extension could detect this situation and show a proper error, please file an issue at https://github.com/nicoulaj/cinnamon-applet-wireguard