drkivi/amneziawg-for-armv7 repository overview

docker pull drkivi/amneziawg-for-armv7:latest

docker run -d \
  --name amneziawg \
  -v /path/to/local/wg0.conf:/etc/amnezia/amneziawg/wg0.conf \
  --cap-add=NET_ADMIN \
  --cap-add=SYS_MODULE \
  --privileged \
  drkivi/amneziawg-for-armv7:latest

sudo ip route add ip.to.awg.server via ip.of.default.gateway dev eth0
sudo ip route add default via 172.17.0.2 dev docker0

sudo ip route delete ip.to.awg.server via ip.of.default.gateway dev eth0
sudo ip route delete default via 172.17.0.2 dev docker0

docker exec -it amneziawg ifconfig

/interface/veth add address=192.168.88.88/24 gateway=192.168.88.1 name=veth1
/interface/bridge/port add bridge=Bridge-Docker interface=veth1

/ip firewall nat
add action=masquerade chain=srcnat comment="for amnezia-wg client" out-interface=bridge
/ip firewall nat
add action=dst-nat chain=dstnat comment="for amnezia-wg server" dst-port=51820 protocol=udp to-addresses=192.168.88.88 to-ports=51820

/container/config set registry-url=https://registry-1.docker.io tmpdir=/usb1/docker/pull
/container/mounts add dst=/etc/amnezia/amneziawg name=awg_config src=/awg

/container/add remote-image=drkivi/amneziawg-for-armv7 interface=veth1 root-dir=/usb1/docker/amneziawg logging=yes mounts=awg_config workdir=/ hostname=amnezia

docker save amneziawg-for-armv7:latest > amneziawg-for-armv7.tar

/container/add remote-image=/path/to/amneziawg-for-armv7.tar interface=veth1 root-dir=/usb1/docker/amneziawg logging=yes mounts=awg_config workdir=/ hostname=amnezia

/ip/dhcp-client/edit [dhcp interface name] default-route-distance=5
/ip/route/add dst-address=0.0.0.0/0 gateway=192.168.88.88 distance=2 comment="AmneziaWG Route"
/ip/route add dst-address=ip.of.awg.server/32 gateway=192.168.88.1 distance=1 comment="To AmneziaWG Server"

/ip/route/remove [find where dst-address="0.0.0.0/0" && gateway="192.168.88.88"]
/ip/route/remove [find where dst-address="ip.of.awg.server/32" && gateway="192.168.88.1"]

:if ([ :len [/container find where status="running"] ] > 0) do={
    /container stop [find where status="running"]
    :delay 5
    /ip route
    remove [find where dst-address="0.0.0.0/0" && gateway="192.168.88.88"]
    remove [find where dst-address="ip.of.awg.server/32" && gateway="192.168.88.1"]
    /log info "Container amneziawg-for-armv7 stopped successfully."
} else={
    /container start [find where name="replace-it-with-container-uuid"]
    :delay 5
    /ip route
    add dst-address=ip.of.awg.server/32 gateway=192.168.88.1 distance=1 comment="To AmneziaWG Server"
    add dst-address=0.0.0.0/0 gateway=192.168.88.88 distance=2 comment="AmneziaWG Route"
    /log info "Container amneziawg-for-armv7 started successfully."
}

:local srvIp "ip.of.awg.server/32"
:local lanGw "192.168.88.1"
:local wgGw  "192.168.88.88"

:local id [/container find where name=$cName]
:if ([:len $id]=0) do={ /log warning ("Container '" . $cName . "' not found"); :return }

:local running [/container get $id running]

:if ($running) do={

    /container stop $id

    :local tries 0
    :set running [/container get $id running]
    :while (($running=true) and ($tries<20)) do={
        :set tries ($tries+1)
        :delay 1
        :set running [/container get $id running]
    }

    :if ($running) do={
        /log warning ("Graceful stop failed; killing " . $cName)
        /container kill $id
        :set tries 0
        :set running [/container get $id running]
        :while (($running=true) and ($tries<10)) do={
            :set tries ($tries+1)
            :delay 1
            :set running [/container get $id running]
        }
    }

    :local h1 [/ip route find where dst-address="0.0.0.0/0" and gateway=$wgGw]
    :if ([:len $h1]>0) do={ /ip route remove $h1 }

    :local h2 [/ip route find where dst-address=$srvIp and gateway=$lanGw]
    :if ([:len $h2]>0) do={ /ip route remove $h2 }

    :if (!$running) do={
        /log info ("Container " . $cName . " stopped")
    } else={
        /log warning ("Container " . $cName . " still running after kill")
    }

} else={

    /container start $id

    :local tries 0
    :set running [/container get $id running]
    :while ((!$running) and ($tries<20)) do={
        :set tries ($tries+1)
        :delay 1
        :set running [/container get $id running]
    }

    :if ([:len [/ip route find where dst-address=$srvIp and gateway=$lanGw]]=0) do={
        /ip route add dst-address=$srvIp gateway=$lanGw distance=1 comment="AmneziaWG Auto"
    }
    :if ([:len [/ip route find where dst-address="0.0.0.0/0" and gateway=$wgGw]]=0) do={
        /ip route add dst-address="0.0.0.0/0" gateway=$wgGw distance=2 comment="AmneziaWG Auto"
    }

    :if ($running) do={
        /log info ("Container " . $cName . " started")
    } else={
        /log warning ("Container " . $cName . " not running after start")
    }
}

:local srvIp "ip.of.awg.server/32"
:local lanGw "192.168.88.1"
:local wgGw  "192.168.88.88"

:local id [/container find where name=$cName]
:if ([:len $id]=0) do={ /log warning ("Container '" . $cName . "' not found"); :return }

:local rawMem [/container get $id memory-current]

:if ([:len $rawMem] > 0) do={

    /container stop $id

    :local tries 0
    :set rawMem [/container get $id memory-current]
    :while (([:len $rawMem] > 0) and ($tries < 30)) do={
        :set tries ($tries + 1)
        :delay 1
        :set rawMem [/container get $id memory-current]
    }

    :if ([:len $rawMem] > 0) do={
        /log warning ("Graceful stop failed; killing " . $cName)
        /container kill $id
        :set tries 0
        :set rawMem [/container get $id memory-current]
        :while (([:len $rawMem] > 0) and ($tries < 15)) do={
            :set tries ($tries + 1)
            :delay 1
            :set rawMem [/container get $id memory-current]
        }
    }

    :local h1 [/ip route find where dst-address="0.0.0.0/0" and gateway=$wgGw]
    :if ([:len $h1] > 0) do={ /ip route remove $h1 }

    :local h2 [/ip route find where dst-address=$srvIp and gateway=$lanGw]
    :if ([:len $h2] > 0) do={ /ip route remove $h2 }

    :if ([:len $rawMem] = 0) do={
        /log info ("Container " . $cName . " stopped")
    } else={
        /log warning ("Container " . $cName . " still running after kill")
    }

} else={

    /container start $id

    :local tries 0
    :set rawMem ""
    :while (([:len $rawMem] = 0) and ($tries < 20)) do={
        :set tries ($tries + 1)
        :delay 1
        :set rawMem [/container get $id memory-current]
    }

    :if ([:len [/ip route find where dst-address=$srvIp and gateway=$lanGw]] = 0) do={
        /ip route add dst-address=$srvIp gateway=$lanGw distance=1 comment="AmneziaWG Auto"
    }
    :if ([:len [/ip route find where dst-address="0.0.0.0/0" and gateway=$wgGw]] = 0) do={
        /ip route add dst-address="0.0.0.0/0" gateway=$wgGw distance=2 comment="AmneziaWG Auto"
    }

    :if ([:len $rawMem] > 0) do={
        /log info ("Container " . $cName . " started")
    } else={
        /log warning ("Container " . $cName . " not running after start")
    }

}