How to listen on wireguard interface and correctly await for wg0 interface to become available?

[mhitza]

I've dropped in a cockpit.socket override at /etc/systemd/system/cockpit.socket.d/listen.conf

[Socket]
BindToDevice=wg0

And this works, except when the system is restarted.

# journalctl -u cockpit.socket -u [email protected]
-- Boot 029c048a77f641a88420e0c0b2ab7315 --
Nov 30 03:38:32 devbox1 systemd[1]: Dependency failed for Cockpit Web Service Socket.
Nov 30 03:38:32 devbox1 systemd[1]: cockpit.socket: Job cockpit.socket/start failed with result 'dependency'.
Nov 30 03:38:35 devbox1 systemd[1]: Starting WireGuard via wg-quick(8) for wg0...
Nov 30 03:38:35 devbox1 wg-quick[1248]: [#] ip link add wg0 type wireguard
Nov 30 03:38:35 devbox1 wg-quick[1248]: [#] wg setconf wg0 /dev/fd/63

# systemctl show cockpit.socket | grep -i after
After=sys-subsystem-net-devices-wg0.device systemd-journald.socket system.slice sysinit.target

# systemctl show cockpit.socket | grep -i requires
Requires=sysinit.target system.slice

Expecting that when I see the After=sys-subsystem-net-devices-wg0.device dependency everything is setup. There can be something about other dependencies at play here, in which someone else can shed insight. The way I managed to work around the issue in the end was by adding the following lines to my listen.conf drop-in

[Unit]
DefaultDependencies=no
Requires=sys-subsystem-net-devices-wg0.device
After=sys-subsystem-net-devices-wg0.device

But looking for a "better" approach, cause this feels like I'm patching around the issue.

---

RHEL 9.5 / Cockpit 323.1