wg-quick calls ip6tables-restore which needs a kernel compiled with CONFIG_IP6_NF_RAW and CONFIG_IP6_NF_RAW. Reproducible: Always Error message: [#] ip6tables-restore -nw ip6tables-restore v1.6.2: ip6tables-restore: unable to initialize table 'raw' Error is gone after loading the modules ip6table_raw and iptable_raw.
It also needs CONFIG_NETFILTER_XT_CONNMARK or it fails with “Error occurred at line: 8”. See also: grep CONNMARK /usr/bin/wg-quick
The bug has been referenced in the following commit(s): https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=8b9ebbaf620a46cdd36da1fb98b0766f65b02fd0 commit 8b9ebbaf620a46cdd36da1fb98b0766f65b02fd0 Author: Jason A. Donenfeld <zx2c4@gentoo.org> AuthorDate: 2019-12-03 10:30:18 +0000 Commit: Jason A. Donenfeld <zx2c4@gentoo.org> CommitDate: 2019-12-03 10:33:48 +0000 net-vpn/wireguard: fix dependencies Bug: https://bugs.gentoo.org/701762 Bug: https://bugs.gentoo.org/701758 Package-Manager: Portage-2.3.79, Repoman-2.3.18 Signed-off-by: Jason A. Donenfeld <zx2c4@gentoo.org> ...0191127.ebuild => wireguard-0.0.20191127-r1.ebuild} | 6 +++++- net-vpn/wireguard/wireguard-9999.ebuild | 18 ++++++++++++++++-- 2 files changed, 21 insertions(+), 3 deletions(-)