If not, ensure that is setup first using chmod.

# Usually, read and execution permissions for folders inside /opt/ are granted. You'll need sudo access for executing this command. # By default, the root group does not have write permissions on /opt.

In all probability, you should have these installed by default. For more information on what Wireguard interfaces these are, please refer this post first and this guide from Mullvad. I wrote a tiny shell script that picks a random Mullvad Wireguard interface from a list and connects to it. Rotating the public key as a feature has not been implemented yet. In addition, it is recommended to cyclically keep switching the VPN servers everyday. To provide the same properties as OpenVPN it should be enough to change pubkey every time the user does a connect/disconnect. “Often” might be a time limit, a bandwidth limit, and events like reboot of the system, the app, new WiFi, new DHCP lease, or explicitly by the user. In order to get identity hiding forward secrecy the suggestion is to have the client change its static pubkey often in order to de-link VPN sessions, in the event of a compromise of the server’s static private key.

Mullvad server locations