[Feature request] Android support

[Unb0rn]

Any chance we'll have Android support at some point?
Maybe something like wireguard-linux-compat?
It would be cool if it was possible to build this inside the kernel or after introducing GKI2.0 even set up generic builds.
Thanks!

[infinet]

Support Android, iphone are good features to have, but the learning curve is steep. It is not on my todo list at this moment.

[Unb0rn]

I wonder if Android changes anything, has anyone tried?
If we take the way Wireguard was implemented (I mean kmod):

• There's this repo that just patches the source (actually adds the script that pulls another repo during the build and adds the corresponding Kconfig entries, plus changes default m to default y - to avoid any problems with Android modules management
• This second wireguard-linux-compat repo is just a backported code to run wireguard on any linux kernel below 5.6, no specific Android tweaks or something

And this is it - if I get it right - if we have Kbuild with obj-y we should be able to build the working kernel

iptables is a totally different thing - afaik there is no xtables_libdir in Android, so rebuilding iptables binary may be the only option but actually I have no idea)

[infinet]

I have a feeling it will be easier to do it in userspace. Use golang or rust to write a mobile app. But again there is a learning curve. Perhaps someone else with that knowledge can step in.

[mrsobakin]

@Unb0rn It is possible to use wgobfs on android, but it's really nontrivial. Building the kernel module itself is only part of the problem: Android's version of iptables is built without the external modules support, so you will have to recompile iptables too.

That said, I don't remember having any issues with it after the initial setup. So yeah, if you really want to do it and you are determined enough, it's certainly possible, but it's probably not worth it.

I packed it as a magisk module, but it's not portable at all. I don't think there's even a way to make a portable kernel module. Building it on android is also out of the question, because kernel headers aren't included in ROMs. Each user will have to cross-compile the module for their kernel, then make a magisk module, and then use custom iptables to load it.