From 143617a0ecd8e7eca8b0bf073f9842e5c6f229af Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?zyxhere=F0=9F=92=AD?= <zyx@envs.net>
Date: Mon, 28 Sep 2026 22:29:57 +0000
Subject: [PATCH] net-vpn/amneziawg-tools: only do checkconfig in `start_pre()`
 function
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Signed-off-by: zyxhere💭 <zyx@envs.net>
---
 .../amneziawg-tools-3.1.20260812-r1.ebuild    | 89 +++++++++++++++++++
 .../amneziawg-tools/files/awg-quick.init-r1   | 36 ++++++++
 2 files changed, 125 insertions(+)
 create mode 100644 net-vpn/amneziawg-tools/amneziawg-tools-3.1.20260812-r1.ebuild
 create mode 100644 net-vpn/amneziawg-tools/files/awg-quick.init-r1

diff --git a/net-vpn/amneziawg-tools/amneziawg-tools-3.1.20260812-r1.ebuild b/net-vpn/amneziawg-tools/amneziawg-tools-3.1.20260812-r1.ebuild
new file mode 100644
index 0000000000..d0e00688a9
--- /dev/null
+++ b/net-vpn/amneziawg-tools/amneziawg-tools-3.1.20260812-r1.ebuild
@@ -0,0 +1,89 @@
+# Copyright 1999-2026 Gentoo Authors
+# Distributed under the terms of the GNU General Public License v2
+
+EAPI=8
+
+inherit linux-info shell-completion systemd toolchain-funcs
+
+DESCRIPTION="Required tools for AmneziaWG, such as awg(8) and awg-quick(8)"
+HOMEPAGE="https://github.com/amnezia-vpn/amneziawg-tools"
+SRC_URI="https://github.com/amnezia-vpn/${PN}/archive/refs/tags/v${PV/_p/-}.tar.gz -> ${P}.tar.gz"
+S="${WORKDIR}/${PN}-${PV/_p/-}"
+
+LICENSE="GPL-2"
+SLOT="0"
+KEYWORDS="~amd64"
+IUSE="+awg-quick selinux"
+
+BDEPEND="virtual/pkgconfig"
+RDEPEND="${DEPEND}
+	awg-quick? (
+		|| ( net-firewall/nftables net-firewall/iptables )
+		virtual/resolvconf
+	)
+	selinux? ( sec-policy/selinux-wireguard )
+"
+
+awg_quick_optional_config_nob() {
+	CONFIG_CHECK="$CONFIG_CHECK ~$1"
+	declare -g ERROR_$1="CONFIG_$1: This option is required for automatic routing of default routes inside of awg-quick(8), though it is not required for general AmneziaWG usage."
+}
+
+pkg_setup() {
+	if use awg-quick; then
+		awg_quick_optional_config_nob IP_ADVANCED_ROUTER
+		awg_quick_optional_config_nob IP_MULTIPLE_TABLES
+		awg_quick_optional_config_nob IPV6_MULTIPLE_TABLES
+		if has_version net-firewall/nftables; then
+			awg_quick_optional_config_nob NF_TABLES
+			awg_quick_optional_config_nob NF_TABLES_IPV4
+			awg_quick_optional_config_nob NF_TABLES_IPV6
+			awg_quick_optional_config_nob NFT_CT
+			awg_quick_optional_config_nob NFT_FIB
+			awg_quick_optional_config_nob NFT_FIB_IPV4
+			awg_quick_optional_config_nob NFT_FIB_IPV6
+			awg_quick_optional_config_nob NF_CONNTRACK_MARK
+		elif has_version net-firewall/iptables; then
+			awg_quick_optional_config_nob NETFILTER_XTABLES
+			awg_quick_optional_config_nob NETFILTER_XT_MARK
+			awg_quick_optional_config_nob NETFILTER_XT_CONNMARK
+			awg_quick_optional_config_nob NETFILTER_XT_MATCH_COMMENT
+			awg_quick_optional_config_nob NETFILTER_XT_MATCH_ADDRTYPE
+			awg_quick_optional_config_nob IP6_NF_RAW
+			awg_quick_optional_config_nob IP_NF_RAW
+			awg_quick_optional_config_nob IP6_NF_FILTER
+			awg_quick_optional_config_nob IP_NF_FILTER
+		fi
+	fi
+	get_version
+	if ! has_version net-vpn/amneziawg-modules; then
+		ewarn
+		ewarn "Linux kernel does not have upstream support for AmneziaWG."
+		ewarn "However, the net-vpn/amneziawg-modules ebuild"
+		ewarn "contains a module that should work for your kernel."
+		ewarn "It is highly recommended to install it:"
+		ewarn
+		ewarn "    emerge -av net-vpn/amneziawg-modules"
+		ewarn
+	fi
+	linux-info_pkg_setup
+}
+
+src_compile() {
+	emake RUNSTATEDIR="${EPREFIX}/run" -C src CC="$(tc-getCC)" LD="$(tc-getLD)"
+}
+
+src_install() {
+	dodoc README.md
+	dodoc -r contrib
+	emake \
+		WITH_BASHCOMPLETION=yes \
+		WITH_SYSTEMDUNITS=yes \
+		WITH_WGQUICK=$(usex awg-quick) \
+		DESTDIR="${D}" \
+		BASHCOMPDIR="$(get_bashcompdir)" \
+		SYSTEMDUNITDIR="$(systemd_get_systemunitdir)" \
+		PREFIX="${EPREFIX}/usr" \
+		-C src install
+	use awg-quick && newinitd "${FILESDIR}/awg-quick.init-r1" awg-quick
+}
diff --git a/net-vpn/amneziawg-tools/files/awg-quick.init-r1 b/net-vpn/amneziawg-tools/files/awg-quick.init-r1
new file mode 100644
index 0000000000..cad2d5b7b7
--- /dev/null
+++ b/net-vpn/amneziawg-tools/files/awg-quick.init-r1
@@ -0,0 +1,36 @@
+#!/sbin/openrc-run
+# Copyright 1999-2026 Gentoo Authors
+# Distributed under the terms of the GNU General Public License v2
+
+name="AmneziaWG"
+description="AmneziaWG via awg-quick(8)"
+
+depend() {
+	need net
+	use dns
+}
+
+CONF="${SVCNAME#*.}"
+
+start_pre() {
+	if [ "$CONF" = "$SVCNAME" ]; then
+		eerror "You cannot call this init script directly. You must create a symbolic link to it with the configuration name:"
+		eerror "    ln -s /etc/init.d/awg-quick /etc/init.d/awg-quick.vpn0"
+		eerror "And then call it instead:"
+		eerror "    /etc/init.d/awg-quick.vpn0 start"
+		return 1
+	fi
+	return 0
+}
+
+start() {
+	ebegin "Starting $description for $CONF"
+	awg-quick up "$CONF"
+	eend $? "Failed to start $description for $CONF"
+}
+
+stop() {
+	ebegin "Stopping $description for $CONF"
+	awg-quick down "$CONF"
+	eend $? "Failed to stop $description for $CONF"
+}