pub fn net_up(
state_dir: &Path,
wg_key: Option<&Path>,
interface: &str,
kill_switch: bool,
) -> Result<(), String>Expand description
net-up --enroll-state DIR [--wg-key FILE] [--interface hatch0] [--kill-switch] (root): bring up
the kernel WireGuard interface from the enrolled state and optionally install the egress
kill-switch. After this the long-lived node can run unprivileged with --no-wg, and the
WireGuard private key can live in a root-only place the node never reads.