wg-wrap.git/internal/wireguard/wireguard_stub.go, branch mainwg-wrap runs commands in network namespaces configured with userspace wireguard tunnels.
https://git.theodohertyfamily.com/wg-wrap.git/atom?h=main2026-05-30T03:35:21Zrefactor: rename module to git.theodohertyfamily.com/wg-wrap and apply public domain license2026-05-30T03:35:21ZJames O'Dohertyjames@theodohertyfamily.com2026-05-30T03:35:21Zurn:sha1:da70b10fbd056f19d892acad542ce96c40c58389
- Update go.mod and all internal imports to reflect the new module path
- Add LICENSE file with the Unlicense (public domain dedication)
- Increase timeouts in e2e lifecycle tests to prevent flaky failures
- Verify all tests, linting, and formatting pass with the new module name
feat: implement userspace wireguard data-path and unprivileged host fd-passing2026-05-29T22:29:12ZJames O'Dohertyjames@theodohertyfamily.com2026-05-29T22:29:12Zurn:sha1:ee2f5d545825752af63da36e2b9ec7a92985a875
- Implement complete rootless network namespace bootstrap via C launcher using unshare(CLONE_NEWUSER | CLONE_NEWNS | CLONE_NEWNET).
- Resolve unprivileged network isolation blackhole via host-socket preservation (FD passing): open client UDP sockets on the host pre-isolation, clear O_CLOEXEC, and ingest them via custom `FDBind` inside the sandbox.
- Implement isolated routing table automation over `tun0` (addresses, MTU, default routes).
- Implement persistent, multi-process namespace sharing and joining using reference-counted PID files and the setns system call.
- Write robust, self-contained E2E data plane test suites in `tests/e2e/e2e_test.go` using a mock UDP listener.
- Update project documentation (`README.md` and `AGENTS.md`) to reflect completed milestones.
- Ensure 100% test passing rate and zero lint/staticcheck warnings.
Implement platform compatibility stubs and update AGENTS.md2026-05-22T13:21:07ZJames O'Dohertyjames@theodohertyfamily.com2026-05-22T13:21:07Zurn:sha1:4c01c88143635cf8b154c936fb0ac6546a509a85