diff --git a/integration/netconfig/netconfig_test.go b/integration/netconfig/netconfig_test.go
index 6a5a3ac..6ebec98 100644
--- a/integration/netconfig/netconfig_test.go
+++ b/integration/netconfig/netconfig_test.go
@@ -213,6 +213,11 @@ func (w *wgLink) Attrs() *netlink.LinkAttrs {
 }
 
 var wireGuardAvailable = func() bool {
+	// The wg tool must also be available for our test to succeed:
+	if _, err := exec.LookPath("wg"); err == nil {
+		return false
+	}
+
 	// ns must not collide with any namespace used in the test functions: this
 	// function will be called by the helper process, too.
 	const ns = "ns4"
diff --git a/travis/Dockerfile b/travis/Dockerfile
index 48955ed..41547ca 100644
--- a/travis/Dockerfile
+++ b/travis/Dockerfile
@@ -12,7 +12,7 @@ RUN echo 'APT::Acquire::Retries "5";' > /etc/apt/apt.conf.d/80retry
 
 RUN apt-get update && \
     DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends \
-    dnsmasq ndisc6 nftables dnsutils strace && \
+    dnsmasq ndisc6 nftables dnsutils strace wireguard && \
     rm -rf /var/lib/apt/lists/*
 
 WORKDIR /usr/src