How to configure Wi-Fi on Void with dhcpcd wpa_supplicant
| OS / Distro | Void Linux |
|---|---|
| Category | Operating Systems |
| Guide type | Procedure |
| Skill level | Intermediate to advanced |
| Time | 15 - 60 minutes including verification |
Engineers running Void Linux hit How to configure Wi-Fi on Void with dhcpcd wpa_supplicant often enough that there is a stable fix pattern. This page captures it in the order a Linux on-call would run it during a real incident.
What how to configure wi-fi on void with dhcpcd wpa_supplicant actually involves on Void Linux
This task on Void Linux is one of the more searched operational topics across distro forums and Unix StackExchange in the last 12 months. The procedure below is the path that works on a current Void Linux install with default config.
The rest of this page is the structured fix path. Start with diagnose, then remediation, then the automation options so you do not have to do this by hand the next time it surfaces. Verify and safety sections at the end are the discipline that keeps the fix from regressing in production.
Diagnose first, fix second
Check service journal for the calling unit. journalctl -u <service> --since today --no-pager shows the full unit timeline. Add -p err to filter to errors only. Use journalctl -u <service> -f in another terminal while you reproduce; the bug usually surfaces in the live log within seconds.
Confirm identity and privilege. Run id, sudo -l, getent passwd $USER, and on systems with SSSD run sssctl user-checks $USER. About one in five 'why does this not work' tickets are actually 'I am in the wrong account', 'my Kerberos ticket expired', or 'I am hitting a sudoers rule I did not know about'.
Reproduce the failure with the relevant CLI in verbose or debug mode. apt -o Debug::pkgProblemResolver=true, dnf -v, zypper --verbose, pacman -dvv, systemctl status --no-pager -l, and strace -f -e trace=openat,read,write all expose what the high-level error message hides. Save the debug output to a file so you can grep it later instead of scrolling.
Solution-focused remediation path
When the failure happens in production but not in dev, do not just diff the application. Diff the kernel version, the libc version, the distro release, the SELinux/AppArmor profile, the cgroup tree, and the systemd unit. uname -a + ldd --version + cat /etc/os-release + getenforce + systemctl show <service> --no-pager | grep -E 'CPU|Memory|Tasks' covers the typical surface. One of those is almost always different between the two environments.
Most Void Linux failures fall into one of three buckets: configuration drift (a setting changed and nobody documented it), dependency gap (a package, kernel module, or library is missing or wrong version), or resource exhaustion (disk, memory, file handles, or inodes). Triage in that order. It covers around 80 percent of real-world cases. If the failure does not fit any of the three, it is likely an upstream regression worth tracking against the distro bug tracker.
If storage is suspect, capture both the block-device view and the filesystem view. lsblk -f + blkid + df -hT + du -shx /* + findmnt + mount | column -t. For ZFS use zpool status -v and zfs list -t snapshot. For Btrfs use btrfs filesystem usage / and btrfs subvolume list /. About a third of 'disk full' issues on Btrfs are metadata exhaustion, where df shows free space but the filesystem refuses writes.
Automate this fix so you do not do it twice
Wire the fix into a systemd unit override or Ansible role for self-healing
If the underlying cause is a setting that drifts over time, do not script the fix repeatedly. Bake it into a configuration-management role that runs on every check-in. Ansible, Puppet, Chef, SaltStack, and tools like Cockpit, Foreman, and Spacewalk all support enforced state. The role reasserts itself, so even if an operator changes the setting locally, the next run brings it back to the codified state (typically every 30 minutes for Puppet, on cron or systemd-timer for Ansible).
# Ansible task that enforces the corrected setting on every run
- name: Enforce hardened sshd config ansible.builtin.lineinfile: path: /etc/ssh/sshd_config regexp: '^#?PermitRootLogin' line: 'PermitRootLogin no' backup: yes notify: restart sshdCodify the fix as a systemd timer or cron job for unattended remediation
For workflows that need to run unattended (clear a stuck cache, rotate logs, fail over a service, rebuild an index) a systemd timer or a cron job is the right place. Timers can fire on boot, on schedule, or after a dependency unit reaches an active state. systemctl list-timers shows the next-fire time for every active timer. For interactive helper workflows, a wrapper shell script in /usr/local/bin/ documented in MOTD or the team wiki keeps the institutional knowledge accessible.
Automate the fix in shell with systemctl, journalctl, and the package manager
On most Linux and BSD systems the most reliable repair primitives are the built-in CLI tools. systemctl status reveals the current service state, journalctl -u exposes the structured log stream, and systemctl reload or restart applies config changes without a reboot. For package management use the distro tool: apt, dnf, zypper, pacman, pkg, opkg, apk. For hardware and inventory checks the canonical readers are lsblk, lspci, lscpu, dmidecode, and lsmod.
# Template - replace SERVICE with the failing unit name
systemctl status SERVICE --no-pager | head -40
journalctl -u SERVICE -n 100 --no-pager
ss -tlnp | grep -i SERVICE
ls -l /etc/SERVICE/ 2>/dev/null
cat /etc/os-release
Common pitfalls and what to watch for
A subtle pitfall on Void Linux is that systemctl status and the actual service state can disagree during a config reload. systemctl reload <svc> succeeds whether or not the service actually re-read the config; many services silently keep the old config and the only way to know is to grep the live process for the new value via /proc/<pid>/cwd or ss -tlnp. Always confirm with the service's own status command (nginx -T, sshd -T, postconf -n) during a change window, not by reading the config file you just wrote.
The other pitfall: assuming that an automated remediation is correct because the systemd unit returned 0. A timer that fires on a journal pattern and runs a remediation script should also publish a metric (Prometheus textfile collector, Node Exporter custom metric) for every run; sudden surges in auto-fix invocations are themselves an outage signal. Otherwise you can hide a slow-burn regression behind a quiet remediation loop for weeks.
Verify the fix worked
- Reproduce the original symptom path. If it still surfaces on any host, container, or VM in the fleet, you have not fixed it.
- Watch for 24 to 48 hours.
journalctl --since '24 hours ago' -u <service> -p errand Prometheus query history can mask issues with cached health for 6 to 12 hours, especially for slow-burn memory leaks and disk-fill regressions. - Run a smoke test under realistic load. Happy-path tests miss race conditions, file-descriptor leaks, and cgroup limits.
- Capture the new state in a runbook so the next person on call does not have to rediscover this. Push it to Confluence or your team wiki, not into Slack.
- If the fix involved a permission or security change, run a CIS Benchmark or DISA STIG audit one more time to confirm you did not open a separate hole while closing this one.
Safety, rollback, blast radius
- Test in a non-production VM, container, or namespace if your environment supports it. The cost of one disposable VM is cheaper than one rollback meeting.
- Export the existing config before changing it. Most Void Linux services support
--print-defaults,systemctl show, or a documented config-dump command. Capture that to source control before you start. - Know your rollback path. Some Void Linux operations are one-way (irreversible filesystem upgrade like ext3 to ext4 inline, kernel ABI change, removal of an LVM physical volume). Confirm reversibility on the official OS documentation before you commit.
- Be aware of cross-service impact. A change to PAM ripples to every service using it. A change to /etc/resolv.conf affects every name lookup. A change to systemd default.target affects every reboot.
- Maintenance window discipline: if the change touches DNS, certificate rotation, kernel upgrade, or anything that emits TLS handshakes, line up a window with stakeholder notification, not a heroic mid-day swap.
FAQ
etckeeper commit, cp file file.bak.$(date +%F), or a Btrfs/ZFS snapshot), then commit it before you change anything. A few operations are one-way (in-place filesystem conversion, partition table rewrite, kernel ABI bump). Check the distro release notes for the specific operation before you commit.systemctl list-dependencies and lsof to enumerate consumers before changing a shared service or configuration file.man <command> on the host, or the upstream project documentation - those almost always still work.sosreport (RHEL family) or supportconfig (SUSE), and your reproduction steps. The distro forum is the no-cost public alternative - search there first; 80 percent of common Void Linux issues already have a working answer marked as solved.References
- Official documentation for Void Linux
- Distro forums and community Q&A (Ubuntu Discourse, Fedora Discussion, Arch BBS, openSUSE Forum, Reddit r/linux + distro subreddits, ServerFault, Unix StackExchange)
- Vendor status pages and release-notes feeds
- CIS Benchmarks and DISA STIG hardening guides for Void Linux
Related fixes
Related guides worth a look while you sort this one out:
- How to fix Alpine Wi-Fi with wpa_supplicant manual config
- How to switch from wpa_supplicant to NetworkManager on Void
- How to fix Wi-Fi rtw_8821ce instability on Debian 12 with backports kernel
- How to fix Wi-Fi association timeout on iwlwifi Fedora 41
- How to fix Wi-Fi drops with rtw_8821ce Realtek driver on Ubuntu
- How to fix Wi-Fi not working on Zorin OS after install