Struct GunnarWireGuard 

pub struct GunnarWireGuard { /* private fields */ }

gunnar’s WireGuard, behind the estate’s Tunnel trait — over crate::wg’s config lane (userspace boringtun in this process, the lane proven on the appliance). up writes wg0.conf for the assigned address with the key ensure_tunnel_key minted (the key the first join carried) and the FRONT as the one dialled peer owning the overlay, then raises it. Every other box is reached THROUGH the front’s relay, so add_peer has nothing to add here.

Implementations

impl GunnarWireGuard

pub fn new(root: &Path, _seed: &Seed) -> GunnarWireGuard

Trait Implementations

impl Tunnel for GunnarWireGuard

fn public_key(&self) -> String

wg0.key’s public half — minted (0600) here if absent, so the FIRST join carries it.

fn up(&mut self, me: &Identity, peers: &[Peer]) -> Result<(), TunnelError>

The front is the peer the door FED with role front — its key and endpoint belong to the lay, not the medium. A reply without one is a transient failure named as such: the loop asks the door again.

fn kind(&self) -> TunnelKind

fn add_peer(&mut self, _peer: &Peer) -> Result<(), TunnelError>

A peer learned after up (the join reply names the ones that joined earlier; later joiners arrive through the front’s peer updates).

fn status(&self) -> TunnelStatus

fn repoint( &mut self, me: &Identity, peers: &[Peer], ) -> Result<bool, TunnelError>

Re-point a tunnel at these peers, in this process (0.5.17, A7 row 7; Gunnar 907f4f99 Tunnel::repoint): the front’s relay moved (a FRONT recharged onto new addresses) or was re-keyed, and a box re-fed after it dials the new relay at once, never after a restart. The running pump is stopped and the new one raised on the same interface and address; the box keeps its own key. Ok(true) when the dial changed, Ok(false) when it already dials these peers, or when no pump runs yet (the raise takes them). Default: handed to Tunnel::up (true).

fn set_preshared_key(&mut self, _psk: Option<&str>) -> Result<bool, TunnelError>

The pre-shared key of this box’s link to the front (0.5.17, A7 row 13; Gunnar 356e8dd2), as the installer fed it (crate::installer::FEED_WG_PSK, base64, 32 bytes), mixed into every handshake: WireGuard’s handshake is X25519 alone, and a key both ends hold — fed over the installer’s post-quantum TLS — is what a recording cannot be opened without. Ok(true) when it changed (a running pump takes it at once). A value that is not a key is refused by name, never quoted. Default: a driver with no such key (none, tailscale) takes nothing (false).

fn installer_reach(&self) -> Result<Reach, TunnelError>

How the installer reaches a VM of this kind during bootstrap (0.3.0): through its own WireGuard link (wireguard, mullvad), straight to the public address (none), or refused by name (tailscale). One answer per kind, crate::installer_link::reach; a driver overrides it only if its kind ever reaches otherwise.