pstils
August 1, 2025, 3:16pm
1
I’m having trouble getting a wireguard vpn connection on my partners new fairphone 6 running e/os andoird 15, /e/ OS version 3.0.4-a15-20250708507307-official-FP6. It’s a completely fresh install.
I have a home server running the wireguard VPN. It’s working on all other devices (iPhone, couple of macbooks), configured in the same way (pivpn -a).
When I import the conf file (directly, or using the QR code) I get the connection request, and wireguard shows in the VPN list in the Network and Internet settings. It’s not toggled to “always-on VPN”, but doesn’t work either way. There are no other VPNs in the list.
I’ve tried the WG Tunnel app, I’ve tried side-loading the wireguard app - same results.
The conf file looks like this:
[Interface]
[Peer]
Any help with this would be much appreciated.
tcecyk
August 1, 2025, 7:07pm
2
while both the official wireguard app and wg-tunnel can use a usermode userspace implementation and built-in kernel wireguard (5.6+), only wg tunnel exposes a user switch for this through the settings. Is your experience any different if you explicitly run the usermode userspace implementation?
pstils
August 2, 2025, 6:40am
3
In WG Tunnel the switch to run using the kernel module rather than in userspace is set to usermode, but when I try to switch it to kernel mode it says “Root shell denied”.
The phone is not rooted, and I’d rather not root it, but if there’s a way to temporarily do so to enable the kernel module then I’d be happy to try.
smu44
August 2, 2025, 7:05am
4
In WG Tunnel there is a “Local logging” setting, maybe something of interest will show then?
pstils
August 2, 2025, 9:47am
5
Here’s what I’m getting from the logs:
1754127741.621 29746 29746 W WindowOnBackDispatcher: sendCancelIfRunning: isInProgress=false callback=b.w@f25a4dd
pstils
August 2, 2025, 10:17am
6
I think the problem might be there.
tcecyk
August 2, 2025, 10:27am
7
imo most relevant is
Handshake did not complete after 5 seconds
Can you ssh into the pivpn and tcpdump on the interface to look what arrives?
When you transfered a config per QRcode - was that same file known to be working elsewhere on the other devices you mention, just as sanity check?
pstils
August 2, 2025, 12:04pm
8
tcecyk:
just as sanity check?
SMH, I’m an idiot - pivpn -a was configuring the endpoint incorrectly. Used a known working conf worked, and then manually correcting that in the conf fixed it. IDK if it’s possible to delete the thread - this has nothing to do with /e/os and everything to do with my idiocy.
1 Like
tcecyk
August 2, 2025, 12:09pm
9
troubleshooting threads have their own worth.
I fumbled many wireguard configs and banged my head until realizing I switched private, public or preshared key in some field. They all have the same damn length. A key prefix would make it obvious…