buster-backports started to serve kernel 5.6+ around mid June, 2020. By installing Linux kernel from the suite, we’ll have in-tree WireGuard kernel module and some more up-to-date drivers, all officially signed.
Setup Debian Backports Suite
/etc/apt/sources.list.d/debian-buster-backports.list with following content.
deb http://deb.debian.org/debian/ buster-backports main contrib non-free deb-src http://deb.debian.org/debian/ buster-backports main contrib non-free
Install (amd64) Linux Kernel From Backports
sudo apt update sudo apt -t buster-backports install linux-image-amd64
wireguard depends on
wireguard-dkms. As the system now have
wireguard-modules, we don’t have to compile WireGuard kernel module locally with DKMS, or fiddling with kernel module signing (to have Secure Boot enabled) anymore.
sudo apt update sudo apt install wireguard