<html><head><style>pre,code,address {
margin: 0px;
}
h1,h2,h3,h4,h5,h6 {
margin-top: 0.2em;
margin-bottom: 0.2em;
}
ol,ul {
margin-top: 0em;
margin-bottom: 0em;
}
blockquote {
margin-top: 0em;
margin-bottom: 0em;
}
</style><style>pre,code,address {
margin: 0px;
}
h1,h2,h3,h4,h5,h6 {
margin-top: 0.2em;
margin-bottom: 0.2em;
}
ol,ul {
margin-top: 0em;
margin-bottom: 0em;
}
blockquote {
margin-top: 0em;
margin-bottom: 0em;
}
</style></head><body><div>Hello,</div><div><br></div><div>Sometime, my Wireguard connection is not working: there is no endpoint listed for the peer in 'sudo wg show', I supposed it's because the Wireguard was configured before the system has internet connectivity (and DNS resolution).</div><div><br></div><div style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-family: Cantarell; font-size: 14.666667px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-tap-highlight-color: rgba(0, 0, 0, 0.4); -webkit-text-stroke-width: 0px; text-decoration: none;">Is there a way to make sure a Wireguard connection is only started if there is connectivity?</div><div style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-family: Cantarell; font-size: 14.666667px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-tap-highlight-color: rgba(0, 0, 0, 0.4); -webkit-text-stroke-width: 0px; text-decoration: none;"><br></div><div style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-family: Cantarell; font-size: 14.666667px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-tap-highlight-color: rgba(0, 0, 0, 0.4); -webkit-text-stroke-width: 0px; text-decoration: none;">On my setup, starting the wireguard profile after the device 'wlan0' is up would be sufficient :</div><div style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-family: Cantarell; font-size: 14.666667px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-tap-highlight-color: rgba(0, 0, 0, 0.4); -webkit-text-stroke-width: 0px; text-decoration: none;"><br></div><pre>> $ nmcli connection show</pre><pre>> NAME UUID <b>TYPE</b> DEVICE </pre><pre>> FUNG-1395 447d6d94-75a7-4201-af17-77142956f6ef wifi wlan0 </pre><pre>> luc-Wireguard-VPN <i>e1c83fba-ee67-4587-bfcb-807755776e32</i> <b>wireguard</b> sltuniv0 </pre><div style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-family: Cantarell; font-size: 14.666667px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-tap-highlight-color: rgba(0, 0, 0, 0.4); -webkit-text-stroke-width: 0px; text-decoration: none;"><br></div><div style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-family: Cantarell; font-size: 14.666667px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-tap-highlight-color: rgba(0, 0, 0, 0.4); -webkit-text-stroke-width: 0px; text-decoration: none;">I've read that's what the 'connection.secondaries' setting is for, but:</div><pre><br></pre><pre>> $ nmcli connection modify FUNG-1395 connection.secondaries <i>e1c83fba-ee67-4587-bfcb-807755776e32</i></pre><pre>> Error: failed to modify connection.secondaries: '<i>e1c83fba-ee67-4587-bfcb-807755776e32</i>' is not a VPN connection profile.</pre><div><br></div><div>Too bad 😅️</div><div><br></div><div>→ Is there a reason why a wireguard profile cannot be add to connection.secondaries? Wireguard seems like a VPN to me.</div><div><br></div><div>→ If you have any other idea to make sure the Wireguard profile starts after the system has internet connectivity, then please, let me know!</div><div><br></div><div>Thanks in advance,</div><div><br></div><div>Samuel</div><div><span></span></div><div><br></div><div><span></span></div></body></html>