Direct Restore to Microsoft Azure | VeeamPN software-defined networking
Post Reply
DDIT
Expert
Posts: 108
Liked: 20 times
Joined: Oct 29, 2015 5:58 pm
Full Name: Michael Yorke
Contact:

Veeam PN 2 Error: cannot create wireguard device

Post by DDIT » May 24, 2019 2:23 pm

I'm testing Veeam PN 2 and have followed the Veeam documentation to install it from the script on Ubuntu Server 18.04 on Hyper-V. I have a LetsEncrypt cert setup too.

When logging into the Hub, I flick the site-to-site switch to 'On' and I get
Image

On the console, I get
Image

Any ideas where I have gone wrong? Thanks in advance.

wishr
Veeam Software
Posts: 1260
Liked: 122 times
Joined: Aug 07, 2018 3:11 pm
Full Name: Fedor Maslov
Contact:

Re: Veeam PN 2 Error: cannot create wireguard device

Post by wishr » May 24, 2019 4:00 pm

Hi Michael,

Please raise a support request since additional detailed information is required for investigation (please don't forget to let us know your case ID).

Thank you

IGolovenko
Veeam Software
Posts: 11
Liked: 4 times
Joined: Jul 31, 2018 12:37 pm
Full Name: Ilya Golovenko
Contact:

Re: Veeam PN 2 Error: cannot create wireguard device

Post by IGolovenko » May 25, 2019 2:50 pm 1 person likes this post

Hi Michael,

It seems WireGuard kernel module is not loaded (maybe due to kernel upgrade). Please restart the appliance VM and check whether it helps.

DDIT
Expert
Posts: 108
Liked: 20 times
Joined: Oct 29, 2015 5:58 pm
Full Name: Michael Yorke
Contact:

Re: Veeam PN 2 Error: cannot create wireguard device

Post by DDIT » May 28, 2019 1:37 pm

Done. #03587164

DDIT
Expert
Posts: 108
Liked: 20 times
Joined: Oct 29, 2015 5:58 pm
Full Name: Michael Yorke
Contact:

Re: Veeam PN 2 Error: cannot create wireguard device

Post by DDIT » May 28, 2019 1:38 pm

IGolovenko wrote:
May 25, 2019 2:50 pm
Hi Michael,

It seems WireGuard kernel module is not loaded (maybe due to kernel upgrade). Please restart the appliance VM and check whether it helps.
I tried restarting the VM, but this didn't help.

IGolovenko
Veeam Software
Posts: 11
Liked: 4 times
Joined: Jul 31, 2018 12:37 pm
Full Name: Ilya Golovenko
Contact:

Re: Veeam PN 2 Error: cannot create wireguard device

Post by IGolovenko » May 28, 2019 2:54 pm

I assume installation of WireGuard package has failed for some reason. You can try to re-install it manually:

Code: Select all

sudo apt-get install linux-headers-$(uname -r) wireguard-dkms wireguard-tools

DDIT
Expert
Posts: 108
Liked: 20 times
Joined: Oct 29, 2015 5:58 pm
Full Name: Michael Yorke
Contact:

Re: Veeam PN 2 Error: cannot create wireguard device

Post by DDIT » May 30, 2019 12:00 pm

DDIT wrote:
May 28, 2019 1:37 pm
Done. #03587164
Got this notification from Veeam :(

This is Veeam Support with a system generated courtesy notification. Unfortunately, due to high Support Team load we were unable to process your request and it has been archived automatically.
Please keep in mind that as a Free Product case, Support is provided on a best effort basis. Support Policy for Free Products can be found here: https://www.veeam.com/veeam_software_su ... icy_ds.pdf

I'll try the manual method mentioned above and report back.

DDIT
Expert
Posts: 108
Liked: 20 times
Joined: Oct 29, 2015 5:58 pm
Full Name: Michael Yorke
Contact:

Re: Veeam PN 2 Error: cannot create wireguard device

Post by DDIT » May 31, 2019 3:57 pm

IGolovenko wrote:
May 28, 2019 2:54 pm
I assume installation of WireGuard package has failed for some reason. You can try to re-install it manually:

Code: Select all

sudo apt-get install linux-headers-$(uname -r) wireguard-dkms wireguard-tools
output is
Image
:(

IGolovenko
Veeam Software
Posts: 11
Liked: 4 times
Joined: Jul 31, 2018 12:37 pm
Full Name: Ilya Golovenko
Contact:

Re: Veeam PN 2 Error: cannot create wireguard device

Post by IGolovenko » May 31, 2019 4:26 pm

That's weird. What do the following commands show?

dkms status
lsmod | grep wireguard

anthonyspiteri79
Veeam Software
Posts: 640
Liked: 151 times
Joined: Jan 14, 2016 6:48 am
Full Name: Anthony Spiteri
Location: Perth, Australia
Contact:

Re: Veeam PN 2 Error: cannot create wireguard device

Post by anthonyspiteri79 » Jun 02, 2019 2:15 am

Hey there Michael. Any luck with this? I wonder if it's actually more an issue with the certificate you installed. If you deploy a fresh instance and use the default SSL cert generated as part of the install... do you get the same error?
Anthony Spiteri
Senior Global Technologist, Product Strategy
Email: anthony.spiteri@veeam.com | Mobile: +61488335699
Twitter: @anthonyspiteri

DDIT
Expert
Posts: 108
Liked: 20 times
Joined: Oct 29, 2015 5:58 pm
Full Name: Michael Yorke
Contact:

Re: Veeam PN 2 Error: cannot create wireguard device

Post by DDIT » Jun 03, 2019 8:47 am

IGolovenko wrote:
May 31, 2019 4:26 pm
That's weird. What do the following commands show?

dkms status
Image
IGolovenko wrote:
May 31, 2019 4:26 pm
lsmod | grep wireguard
I get no output on this. Nothing at all.

@anthonyspiteri79 - I'll try deploying a fresh instance, use the default SSL, and report back. I'm pretty busy, so this might take a few days.

Oletho
Enthusiast
Posts: 66
Liked: 2 times
Joined: Sep 17, 2010 4:37 am
Full Name: Ole Thomsen
Contact:

Re: Veeam PN 2 Error: cannot create wireguard device

Post by Oletho » Jun 07, 2019 8:44 pm

I have exact same situation, except that i use the default cert.

And my dkms status output is slightly different:

wireguard, 0.0.20190406, 4.15.0-51-generic, x86_64: installed

IGolovenko
Veeam Software
Posts: 11
Liked: 4 times
Joined: Jul 31, 2018 12:37 pm
Full Name: Ilya Golovenko
Contact:

Re: Veeam PN 2 Error: cannot create wireguard device

Post by IGolovenko » Jun 10, 2019 9:14 am

Oletho,

What does the following command show?

Code: Select all

lsmod | grep wireguard
If the output is empty then it means WireGuard kernel module is not loaded.
If so, you can try to insert WireGuard module using the following command:

Code: Select all

modprobe wireguard

Oletho
Enthusiast
Posts: 66
Liked: 2 times
Joined: Sep 17, 2010 4:37 am
Full Name: Ole Thomsen
Contact:

Re: Veeam PN 2 Error: cannot create wireguard device

Post by Oletho » Jun 10, 2019 9:31 am

modprobe wireguard gives me:

modprobe: ERROR: could not insert 'wireguard': Required key not available

and on the console: PKCS#7 signature not signed with a trusted key

IGolovenko
Veeam Software
Posts: 11
Liked: 4 times
Joined: Jul 31, 2018 12:37 pm
Full Name: Ilya Golovenko
Contact:

Re: Veeam PN 2 Error: cannot create wireguard device

Post by IGolovenko » Jun 10, 2019 11:02 am 2 people like this post

So it seems you have UEFI Secure Boot enabled on the system. Currently WireGuard kernel module is built using DKMS which means it an out-of-tree module and thus not signed by Canonical. Secure Boot does not allow unsigned modules to be loaded. You can try to follow steps from https://wiki.ubuntu.com/UEFI/SecureBoot/DKMS to configure DKMS to work with Secure Boot.

Oletho
Enthusiast
Posts: 66
Liked: 2 times
Joined: Sep 17, 2010 4:37 am
Full Name: Ole Thomsen
Contact:

Re: Veeam PN 2 Error: cannot create wireguard device

Post by Oletho » Jun 10, 2019 4:37 pm 1 person likes this post

Spot on!

I used method 2 from the wiki, and the site connection is up now.

Thanks :)

DDIT
Expert
Posts: 108
Liked: 20 times
Joined: Oct 29, 2015 5:58 pm
Full Name: Michael Yorke
Contact:

Re: Veeam PN 2 Error: cannot create wireguard device

Post by DDIT » Jul 23, 2019 4:09 pm 1 person likes this post

After a looooooong time away from this side project, I got it working, also by following method 2 in the above linked article.

Now I just need to setup the other site(s) and test performance!

Post Reply

Who is online

Users browsing this forum: No registered users and 3 guests