# 使用 Homebrew, apk, apt, dnf, MacPorts, Nix, pacman, zypper 安装 wireguard-tools

查看 wireguard-tools 的安装路径、可执行文件、元数据以及面向 AI 代理工作流的安全说明。

## 安装

```sh
sudo av install brew:wireguard-tools
```

其他安装命令:

### macOS

- Homebrew (100%):

```sh
brew install wireguard-tools
```

  证据: local Homebrew formula metadata

- MacPorts (94%):

```sh
sudo port install wireguard-tools
```

  证据: MacPorts ports tree: net/wireguard-tools/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1

### Linux

- apk (92%):

```sh
sudo apk add wireguard-tools
```

  证据: Alpine Linux edge package indexes: wireguard-tools from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz

- Debian apt (92%):

```sh
sudo apt install wireguard-tools
```

  证据: Debian stable package indexes: wireguard-tools from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz

- dnf (92%):

```sh
sudo dnf install wireguard-tools
```

  证据: Fedora Rawhide package metadata: wireguard-tools from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst

- Nix (92%):

```sh
nix profile install nixpkgs#wireguard-tools
```

  证据: nixpkgs package indexes: pkgs/by-name/wi/wireguard-tools/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1

- pacman (92%):

```sh
sudo pacman -S wireguard-tools
```

  证据: Arch Linux sync databases: wireguard-tools from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz

- zypper (92%):

```sh
sudo zypper install wireguard-tools
```

  证据: openSUSE Tumbleweed package metadata: wireguard-tools from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst

## 软件包事实

- **软件包键:** brew:wireguard-tools
- **软件包管理器:** Homebrew
- **版本:** 1.0.20260223
- **来源摘要:** Tools for the WireGuard secure network tunnel
- **主页:** <https://www.wireguard.com/>
- **最后更新:** 2026-05-18T12:02:02-04:00
- **已生成:** 2026-08-03T19:37:03+00:00

## 可执行文件

- wg (别名)
- wg-quick (别名)

## 安装行为

- Bottle: 不可用

## 版本和新鲜度

- 页面生成时间: 2026-08-03
- 管理器版本: 1.0.20260223
## 项目历史与用法

wireguard-tools is the command-line companion package for WireGuard. It supplies `wg`, the low-level configuration utility, and `wg-quick`, the convenience script that turns simple interface configuration files into working tunnels.

### 项目历史

WireGuard was designed around a deliberately small kernel or userspace tunnel implementation plus simple userspace configuration. The official repositories page identifies wireguard-tools as the cross-platform userspace tooling for configuring WireGuard implementations, including `wg(8)` and `wg-quick(8)`.

`wg` became the protocol-specific tool for setting and reading interface state, peers, keys, endpoints, allowed IPs, handshakes, and transfer counters. `wg-quick` grew into the pragmatic wrapper for common host setups: it reads an interface-named config file, adds the interface, assigns addresses, configures routes, and then tears that setup down again on request.

### 采用历史

The tools package became the everyday interface to WireGuard both before and after the protocol reached Linux 5.6. Before mainline inclusion, it paired with out-of-tree kernel modules and userspace implementations; after inclusion, it remained necessary because the kernel feature alone does not provide the user-facing `wg` and `wg-quick` commands.

Its cross-platform scope also matters: the official project describes wireguard-tools as tooling for WireGuard implementations rather than only for Linux. Package ecosystems therefore treat it as the stable CLI surface that can sit on top of kernel drivers, BSD ports, macOS interfaces, Windows support, and wireguard-go.

### 使用方式

`wg` is used for precise interface inspection and configuration: showing runtime status, setting peers, applying keys, and dumping machine-readable state for scripts. It is the command admins reach for when they need to see whether a tunnel has handshaken or exactly which allowed IPs are active.

`wg-quick` is the fast path for common deployments. It looks for an interface config such as `/etc/wireguard/wg0.conf`, applies WireGuard settings, assigns addresses, and infers routes from peer allowed IPs, while still allowing more advanced users to bypass it and call `wg` plus platform networking commands directly.

### 为什么软件包爱好者会关心

This is the package that turns WireGuard from a kernel feature or protocol implementation into something shell users can operate. For many systems, installing WireGuard really means installing the tunnel implementation plus wireguard-tools.

The package is also beloved in automation because `wg` has script-friendly output and `wg-quick` keeps the common one-file tunnel pattern boring. That combination made WireGuard unusually approachable for sysadmins compared with older VPN stacks that relied on larger daemon configurations and certificate-heavy workflows.

### 时间线

- 2017: The WireGuard paper describes a separate userspace `wg(8)` tool for configuration.
- 2019: WireGuard is accepted into the net-next path toward Linux 5.6, increasing the importance of stable userspace tooling around the kernel implementation.
- 2020: Linux 5.6 ships WireGuard support; wireguard-tools remains the common CLI package for configuring it.
- 2026: The upstream cgit repository continues to publish tagged wireguard-tools releases and cross-platform fixes.

### Related projects

- wireguard-go can create a userspace WireGuard interface that is then configured with `wg`.
- NetworkManager and desktop network settings tools can cover higher-level workflows, but wireguard-tools remains the reference command-line layer.

### 来源

- <https://git.zx2c4.com/wireguard-tools/>
- <https://git.zx2c4.com/wireguard-tools/about/src/man/wg-quick.8>
- <https://git.zx2c4.com/wireguard-tools/about/src/man/wg.8>
- <https://kernelnewbies.org/Linux_5.6>
- <https://www.wireguard.com/papers/wireguard.pdf>
- <https://www.wireguard.com/repositories/>


## 安全说明

broad file, network, media, or database tool signal.

- **Geiger 风险:** blue / 中
- broad file, network, media, or database tool signal


## Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.


## Configuration files

- Unix: /etc/wireguard/INTERFACE.conf

## Credential files

- Unix: /etc/wireguard/INTERFACE.conf
## 其他软件包管理器记录

- Debian apt - wireguard-tools - 1.0.20210914-3: normalized package name match | Debian stable package indexes: wireguard-tools from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | fast, modern, secure kernel VPN tunnel (userland utilities) | https://www.wireguard.com
- Nix - wireguard-tools: normalized package name match | nixpkgs package indexes: pkgs/by-name/wi/wireguard-tools/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
- Ubuntu apt - wireguard-tools - 1.0.20210914-1ubuntu4: normalized package name match | Ubuntu 24.04 LTS package indexes: wireguard-tools from https://archive.ubuntu.com/ubuntu/dists/noble/main/binary-amd64/Packages.gz | fast, modern, secure kernel VPN tunnel (userland utilities) | https://www.wireguard.com
- apk - wireguard-tools - 1.0.20260223-r0: normalized package name match | Alpine Linux edge package indexes: wireguard-tools from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | Next generation secure network tunnel: userspace tools | https://www.wireguard.com
- apk - wireguard-tools-bash-completion - 1.0.20260223-r0: normalized package name match | Alpine Linux edge package indexes: wireguard-tools-bash-completion from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | Bash completions for wireguard-tools | https://www.wireguard.com
- apk - wireguard-tools-doc - 1.0.20260223-r0: normalized package name match | Alpine Linux edge package indexes: wireguard-tools-doc from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | Next generation secure network tunnel: userspace tools (documentation) | https://www.wireguard.com
- apk - wireguard-tools-openrc - 1.0.20260223-r0: normalized package name match | Alpine Linux edge package indexes: wireguard-tools-openrc from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | Next generation secure network tunnel: userspace tools (OpenRC init scripts) | https://www.wireguard.com
- apk - wireguard-tools-systemd - 1.0.20260223-r0: normalized package name match | Alpine Linux edge package indexes: wireguard-tools-systemd from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | Next generation secure network tunnel: userspace tools (systemd files) | https://www.wireguard.com
- apk - wireguard-tools-wg - 1.0.20260223-r0: normalized package name match | Alpine Linux edge package indexes: wireguard-tools-wg from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | Next generation secure network tunnel: userspace tools (wg) | https://www.wireguard.com
- apk - wireguard-tools-wg-quick - 1.0.20260223-r0: normalized package name match | Alpine Linux edge package indexes: wireguard-tools-wg-quick from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | Next generation secure network tunnel: userspace tools (wg-quick) | https://www.wireguard.com
- dnf - wireguard-tools - 1.0.20260223-2.fc45: normalized package name match | Fedora Rawhide package metadata: wireguard-tools from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst | Fast, modern, secure VPN tunnel | https://www.wireguard.com/
- pacman - wireguard-tools - 1.0.20260223-1: normalized package name match | Arch Linux sync databases: wireguard-tools from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz | next generation secure network tunnel - tools for configuration | https://www.wireguard.com/
- zypper - wireguard-tools - 1.0.20260223-2.3: normalized package name match | openSUSE Tumbleweed package metadata: wireguard-tools from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | WireGuard userspace tools | https://www.wireguard.com/
- MacPorts - wireguard-tools: normalized package name match | MacPorts ports tree: net/wireguard-tools/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1


## Combined YAML source

View the package source record on GitHub. [combined/wireguard-tools.yml](https://github.com/mxcl/pkgdb/blob/main/combined/wireguard-tools.yml)


## 来源

- pkg.so package database
- Geiger risk classifier
- curated configuration and credential file locations
- curated package history
- pkgdb category and tag curation
- external package-manager database matches
- cross-ecosystem install command graph