gurabli

Thanks, this did the trick for me. A choose manually a mirror and worked.

Everything understood! Many thanks!

I just wanted to understand correctly who this works (the questions I asked regarding kernel, ppa, dkms). I think I got it right, and basically everything is working as it should. Just to confirm, your version of wg from dmesg is also 0.0.20190702

OK, so I was right, that the version available now in the kernel is not the most recent wg version and it will be updated when you push the update to the kernel? It is how it goes? So basically the downside of having wg in the kernel is that it can't be updated from ppa, a new kernel update is required? The upside is that there is no need for dkms build since wg is already in the kernel? Can I try to install the kernel headers for the new kernel and try apt install wireguard-dkms or it will fail to build?

I managed to upgrade my NEO2 to the 5.3.9 kernel as per your instructions. It looks everything is running fine. However, I'm still not on the latest Wireguard verion: [ 15.833259] wireguard: WireGuard 0.0.20190702 loaded. See www.wireguard.com for information. [ 15.833268] wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld <Jason@zx2c4.com>. All Rights Reserved. I have the official Ubuntu PPA added, deb http://ppa.launchpad.net/wireguard/wireguard/ubuntu bionic main and if I install wireguard with apt install wireguard the latest version wireguard-0.0.20191012 is installed, still, even after restart, the version loaded is 0.0.20190702 What do you think, why is this? Maybe this is because the version in the kernel is not updated to the latest 191012 version? If you push that update then it will simply install with an apt update & upgrade?

Wow, many thanks Igor. So it is safe to uograde my Nanopi Neo2 and Orange Pi Zero boards to Kernel 5.x,and these are the stable versions. On upgrading it should not brake anything, if I'm correct, as I don't have access to one of my devices, only over ssh. And kernel 5.x already has WG integrated, so only wg-tools needs to be installes - and that is really good! Thanks for your hard work!

Many thanks! I don't use any expansion board. And I really don't want to use a fan, needs to stay passive. I will look into these heatsinks. I see these don't have adhesive tape, what is the best way to glue/install these on the SoC and the memory chip? Thanks Edit: this 14x14x10 should be ok? HUF 488.72 6%OFF | En-Labs 10pcs Aluminum Heatsink 14*14*10mm Electronic Chip Radiator Cooler w/ 3M Brand 9448A Thermal Double Sided Adhesive Tape https://s.click.aliexpress.com/e/rOdNOldQ And what is the size of the memory chip? I don't have access to the devicw now.

I have a problem now with installing kernel headers: Welcome to Ubuntu Bionic with Armbian Linux 4.19.63-sunxi64 System load: 0.10 0.09 0.08 Up time: 1 day Memory usage: 26 % of 481MB Zram usage: 9 % of 240Mb IP: 192.168.1.125 10.66.66.1 CPU temp: 60°C Usage of /: 3% of 59G [ General system configuration (beta): armbian-config ] Last login: Fri Nov 22 06:43:30 2019 from xxxxx nanopi@nanopineo2:~$ sudo apt install linux-headers-4.19.63-sunxi64 [sudo] password for nanopi: Reading package lists... Done Building dependency tree Reading state information... Done E: Unable to locate package linux-headers-4.19.63-sunxi64 E: Couldn't find any package by glob 'linux-headers-4.19.63-sunxi64' E: Couldn't find any package by regex 'linux-headers-4.19.63-sunxi64' nanopi@nanopineo2:~$ I would like to uograde to the latest Wireguard version, but installing wireguard-dkms fails, can't build the requires modules without the kernel headers, I guess. Simply installing WG from the ppa doesn't update to the newest version on system level. I managed to update last time like this, but if I remember correctly, I was abke to install headers. I tried with armbian-config, installed headers, but still doesn't work. Any ideas? http://ix.io/22v3

So much thanks, I will try this. I see the last step, thas it mean after a kernel update I need to issue this again?

Thanks, I will look into this. Not an expect enough to locate what module is for wifi and how to backlist, but will do my best. USB can be disabled in armbian-config, correct?

I run the OPi Zero as a Pihole with etherned, and I would like to minimize power consumption as low as possible. 1. I did change the frequency to be between 120 - 960 Mhz, and ondemand. This probably reduces power and heat too. 2. I'm not sure how to disable USB (I don't need it at all) and WiFi. I read the threads, like this but not sure how to do. Can you please guide me? 3. I saw there are other options too, with a tool h3consuption, but I don't know how to install it and what can I do to squeze down a couple of mW's more. Your help is very much appreciated!

Hi, anybody knows what size of a heatsink can I put on an Orange Pi Zero? It is in the small cube enclosure (without additional addon board). Maybe a link to eBay or Aliexpress? Thanks!

Hi, I just got my Orange Pi Zero for a Pihole. Running with a quality PSU and a SanDisk Ultra 16GB A1 card. Everything went perfectly fine, Pihole is the DNS for LAN, while my router handles WAN DNS (DNS over TLS with Cloudflare). I'm concerned a little bit about logging. What do you recommend to keep the sd card safe. I think Pihole is logging to /var/log/ whete running for less than 24 hours I have pihole.log 3MB size, with pihole.log.1 around 2MB. Is there a way to use log2ram for this or a good practice of log rotation, writing to RAM, etc? Your help is welcome!

Many thanks, Igor This is really great news. Add it, for sure! WG is really a beast!

Hi, I'm thinking about getting a HC2, but I would like to be sure if Wireguard is supported on Odroid. Did you manage to make it work? I run Armbian on a NEO2 and Wireguard works perfectly. Thanks!

I managed to configure Wireguard on my remote NEO2 server and my home server. The NEO2 is configured as the server. It works amazing. Fast and easy, waaay faster then SSH tunneling, not to mentione OpenVPN. Sure, it maybe not as secure as OpenVPN or SSH, sinve no audit yet on Wireguard, but in my use case it is perfect. Great job and thanks for your support. It is awsome what a small piece of board like NEO2 can do with a great and optimized OS like Armbian

Excellent! I will do the configuration, sure. So it is not a problem that modprobe doesn't give anything back? Strange, that I had apt isntall error too. But I will check. Thanks.

I'm feom phone now, but strange, last two lines of dmesg say ok. Even if I had error during apt install. [ 76.932990] wireguard: WireGuard 0.0.20190702 loaded. See www.wireguard.com for information. [ 76.932998] wireguard: Copyright (C) 2015-2019 Jason A. D onenfeld <Jason@zx2c4.com>. All Rights Reserved. What do you think, is it actually working?

Nothing, empty.

Hi, I'm running Armbian Ubuntu Server on my Neo2 and works quite good. I just can't install Wireguard. I have installed kernel headers from armbian config, bit still fails. I use the ppa repo. Kernel stable latest, 4.19.57 Any ideas how to proceed and install?

Thanks. I'm running Armbian Ubuntu image. But how do I activete and configure watchdog?

Well, I think I mixed up, I wanted to say patch OpenSSH. As the patch is required to be able to build OpenSSH agains OpenSSL 1.1. Still, I apply the patch to the correct version of OpenSSH, and fails.

Yes, lesson learned for sure. I did consider this when I was working on it. Will have access to the device soon. I will need to configure (hardware) watchdog, I opened a thread about this. In this case watchdod wouldn't help me, but in many other cases certainly would. Still, I don't get it why I couldn't patch OpenSSL 1.1.

Yes, I see the patch for OpenSSL 1.1x compatibility, but I get errors when I apply the patch to OpenSSL. Don't know why. And the HPN-SSH patch should be applied after the OpenSSL patch? I'm not too familiar with patching. Did you manage to apply both patches and build OpenSSH? I configured HPN-SSH successfully on my home and VPS servers running Ubuntu Server 16.04 LTS, and the performance is amazing, compared to stock SSH. I can fully max out my ISP upload, I have download speed over remote locations of around 10 MB/s, while on stock SSH it was 1-2,5 MB/s max. I'm using aes128-cb cipher now, but no noticeable difference with most ciphers. If a depreciated arcfour cipher is used, then it will give way less stress on SoC, still maintaining encryption, but not too secure. However, it depends on the use case, I stream hts from Tvheadend and want to keep some level of encryption on the stream and server-client communication. But I really struggle of how to compile HPN-SSH on Armbian, and now I messed up the system and have no access (and it is on a remote location). Yeah, one should never mess with system like this on remote, non-VPS system:)

Hi, I'm running a NEO2 with Ubuntu at a remote location, so watchdog would be very important to have. Didn't use it before, but afaik H5 SoC supports hardware watchdog. How should I turn it on and do I need to install and configure anything? I read about H3, but not sure about H5. Thanks!