WireGuard Interface Group Removed During Install When Using OPNsense Importer

[utkonos]

When using the OPNsense importer, if the imported configuration includes a WireGuard VPN, the WireGuard (Group) interface is subsequently removed during the install process that follows the importer. I have tried and failed to discover a method for getting it back.



The step where it is removed is "(root): Created web GUI TLS certificate".



I have tried to trigger the creation of the interface by doing the following, but none worked.

1. Uninstalling and reinstalling the plugin.
2. Disabling and enabling the local server configuration.
3. Disabling and enabling WireGuard.
4. Creating a new local server configuration.
5. Creating a new local server configuration with all others disabled and WireGuard disabled.

Anyone have a suggestion for a workaround for getting the interface added back? Also, if there are any pointers as to where this happens in the source code, I could take a stab at fixing it and making a PR.

[utkonos]

I have found a workaround that writes the WireGuard group interface back to the configuration. If I make a change to interfaces such as adding a lock (prevent interface removal) to one of the existing interfaces that does not have a lock, then in addition to the lock, the WireGuard group interface is added back. The message in the config revision section states that "/interfaces.php made changes".

Is there a way to force this PHP to run without making a change? And if so, can this PHP be forced to run via API?

[utkonos]

If anyone runs into this installer bug, here is a specific workaround until the problem can be fixed.

1. Login to the OPNsense web console.
2. Navigate to the "Interfaces" menu.
3. Select "Assignments".
4. In the pane that appears on the right, click "Save".

Also, here is the Github issue for the bug:

https://github.com/opnsense/core/issues/5768