[yesb]

Tried out the wg-wrap tool, might come in handy from time to time. Neat that it was made with a local model.

Some issues:

1. `wg-wrap healthcheck` was all green even though unprivileged user namespaces was restricted via AppArmor (Debian). That check doesn't seem to work

2. DNS doesn't work (no domains resolve) if the config lists multiple servers e.g. DNS = 1.1.1.1, 1.0.0.1

3. Peer endpoints don't support domain names, only IP addresses

4. Minor: the tool doesn't add an implied /32 cidr prefix for single ip configs (common from some VPN providers).

[jodoherty]

Hey, thanks for the feedback!

If I get some time to circle back, I'll be sure to incorporate these into some new tests and address them.

I want to set up a qemu-system emulator based testing approach so I can incorporate things like AppArmor and SELinux into end to end tests that include different environment configurations.

Part of that will be setting up software defined networking so I can have things like DNS and wireguard VPN servers in a box and then test and evaluate the wg-wrap behavior at the packet level.