test/test-network/systemd-networkd-tests.py

   1 #!/usr/bin/env python3
   2 # SPDX-License-Identifier: LGPL-2.1+
   3 # systemd-networkd tests
   4
   5 import argparse
   6 import os
   7 import re
   8 import shutil
   9 import signal
  10 import subprocess
  11 import sys
  12 import time
  13 import unittest
  14 from shutil import copytree
  15
  16 network_unit_file_path='/run/systemd/network'
  17 networkd_runtime_directory='/run/systemd/netif'
  18 networkd_ci_path='/run/networkd-ci'
  19 network_sysctl_ipv6_path='/proc/sys/net/ipv6/conf'
  20 network_sysctl_ipv4_path='/proc/sys/net/ipv4/conf'
  21
  22 dnsmasq_pid_file='/run/networkd-ci/test-test-dnsmasq.pid'
  23 dnsmasq_log_file='/run/networkd-ci/test-dnsmasq-log-file'
  24
  25 systemd_lib_paths=['/usr/lib/systemd', '/lib/systemd']
  26 which_paths=':'.join(systemd_lib_paths + os.getenv('PATH', os.defpath).lstrip(':').split(':'))
  27
  28 networkd_bin=shutil.which('systemd-networkd', path=which_paths)
  29 resolved_bin=shutil.which('systemd-resolved', path=which_paths)
  30 wait_online_bin=shutil.which('systemd-networkd-wait-online', path=which_paths)
  31 networkctl_bin=shutil.which('networkctl', path=which_paths)
  32 resolvectl_bin=shutil.which('resolvectl', path=which_paths)
  33 timedatectl_bin=shutil.which('timedatectl', path=which_paths)
  34
  35 use_valgrind=False
  36 enable_debug=True
  37 env = {}
  38 asan_options=None
  39 lsan_options=None
  40 ubsan_options=None
  41
  42 running_units = []
  43
  44 def check_output(*command, **kwargs):
  45     # This replaces both check_output and check_call (output can be ignored)
  46     command = command[0].split() + list(command[1:])
  47     return subprocess.check_output(command, universal_newlines=True, **kwargs).rstrip()
  48
  49 def call(*command, **kwargs):
  50     command = command[0].split() + list(command[1:])
  51     return subprocess.call(command, universal_newlines=True, **kwargs)
  52
  53 def run(*command, **kwargs):
  54     command = command[0].split() + list(command[1:])
  55     return subprocess.run(command, universal_newlines=True, **kwargs)
  56
  57 def is_module_available(module_name):
  58     lsmod_output = check_output('lsmod')
  59     module_re = re.compile(rf'^{re.escape(module_name)}\b', re.MULTILINE)
  60     return module_re.search(lsmod_output) or not call('modprobe', module_name, stderr=subprocess.DEVNULL)
  61
  62 def expectedFailureIfModuleIsNotAvailable(module_name):
  63     def f(func):
  64         if not is_module_available(module_name):
  65             return unittest.expectedFailure(func)
  66         return func
  67
  68     return f
  69
  70 def expectedFailureIfERSPANModuleIsNotAvailable():
  71     def f(func):
  72         rc = call('ip link add dev erspan99 type erspan seq key 30 local 192.168.1.4 remote 192.168.1.1 erspan_ver 1 erspan 123', stderr=subprocess.DEVNULL)
  73         if rc == 0:
  74             call('ip link del erspan99')
  75             return func
  76         else:
  77             return unittest.expectedFailure(func)
  78
  79     return f
  80
  81 def expectedFailureIfRoutingPolicyPortRangeIsNotAvailable():
  82     def f(func):
  83         rc = call('ip rule add from 192.168.100.19 sport 1123-1150 dport 3224-3290 table 7', stderr=subprocess.DEVNULL)
  84         if rc == 0:
  85             call('ip rule del from 192.168.100.19 sport 1123-1150 dport 3224-3290 table 7')
  86             return func
  87         else:
  88             return unittest.expectedFailure(func)
  89
  90     return f
  91
  92 def expectedFailureIfRoutingPolicyIPProtoIsNotAvailable():
  93     def f(func):
  94         rc = call('ip rule add not from 192.168.100.19 ipproto tcp table 7', stderr=subprocess.DEVNULL)
  95         if rc == 0:
  96             call('ip rule del not from 192.168.100.19 ipproto tcp table 7')
  97             return func
  98         else:
  99             return unittest.expectedFailure(func)
 100
 101     return f
 102
 103 def expectedFailureIfLinkFileFieldIsNotSet():
 104     def f(func):
 105         support = False
 106         rc = call('ip link add name dummy99 type dummy', stderr=subprocess.DEVNULL)
 107         if rc == 0:
 108             ret = run('udevadm info -w10s /sys/class/net/dummy99', stdout=subprocess.PIPE, stderr=subprocess.STDOUT)
 109             if ret.returncode == 0 and 'E: ID_NET_LINK_FILE=' in ret.stdout.rstrip():
 110                 support = True
 111             call('ip link del dummy99')
 112
 113         if support:
 114             return func
 115         else:
 116             return unittest.expectedFailure(func)
 117
 118     return f
 119
 120 def expectedFailureIfNexthopIsNotAvailable():
 121     def f(func):
 122         rc = call('ip nexthop list', stderr=subprocess.DEVNULL)
 123         if rc == 0:
 124             return func
 125         else:
 126             return unittest.expectedFailure(func)
 127
 128     return f
 129
 130 def expectedFailureIfAlternativeNameIsNotAvailable():
 131     def f(func):
 132         call('ip link add dummy98 type dummy', stderr=subprocess.DEVNULL)
 133         rc = call('ip link prop add dev dummy98 altname hogehogehogehogehoge', stderr=subprocess.DEVNULL)
 134         if rc == 0:
 135             return func
 136         else:
 137             return unittest.expectedFailure(func)
 138
 139     return f
 140
 141 def setUpModule():
 142     global running_units
 143
 144     os.makedirs(network_unit_file_path, exist_ok=True)
 145     os.makedirs(networkd_ci_path, exist_ok=True)
 146
 147     shutil.rmtree(networkd_ci_path)
 148     copytree(os.path.join(os.path.dirname(os.path.abspath(__file__)), 'conf'), networkd_ci_path)
 149
 150     for u in ['systemd-networkd.socket', 'systemd-networkd.service', 'systemd-resolved.service', 'firewalld.service']:
 151         if call(f'systemctl is-active --quiet {u}') == 0:
 152             check_output(f'systemctl stop {u}')
 153             running_units.append(u)
 154
 155     drop_in = [
 156         '[Unit]',
 157         'StartLimitIntervalSec=0',
 158         '[Service]',
 159         'Restart=no',
 160         'ExecStart=',
 161     ]
 162     if use_valgrind:
 163         drop_in += [
 164             'ExecStart=!!valgrind --track-origins=yes --leak-check=full --show-leak-kinds=all ' + networkd_bin,
 165             'PrivateTmp=yes'
 166         ]
 167     else:
 168         drop_in += ['ExecStart=!!' + networkd_bin]
 169     if enable_debug:
 170         drop_in += ['Environment=SYSTEMD_LOG_LEVEL=debug']
 171     if asan_options:
 172         drop_in += ['Environment=ASAN_OPTIONS="' + asan_options + '"']
 173     if lsan_options:
 174         drop_in += ['Environment=LSAN_OPTIONS="' + lsan_options + '"']
 175     if ubsan_options:
 176         drop_in += ['Environment=UBSAN_OPTIONS="' + ubsan_options + '"']
 177     if asan_options or lsan_options or ubsan_options:
 178         drop_in += ['SystemCallFilter=']
 179     if use_valgrind or asan_options or lsan_options or ubsan_options:
 180         drop_in += ['MemoryDenyWriteExecute=no']
 181
 182     os.makedirs('/run/systemd/system/systemd-networkd.service.d', exist_ok=True)
 183     with open('/run/systemd/system/systemd-networkd.service.d/00-override.conf', mode='w') as f:
 184         f.write('\n'.join(drop_in))
 185
 186     drop_in = [
 187         '[Service]',
 188         'Restart=no',
 189         'ExecStart=',
 190     ]
 191     if use_valgrind:
 192         drop_in += ['ExecStart=!!valgrind --track-origins=yes --leak-check=full --show-leak-kinds=all ' + resolved_bin]
 193     else:
 194         drop_in += ['ExecStart=!!' + resolved_bin]
 195     if enable_debug:
 196         drop_in += ['Environment=SYSTEMD_LOG_LEVEL=debug']
 197     if asan_options:
 198         drop_in += ['Environment=ASAN_OPTIONS="' + asan_options + '"']
 199     if lsan_options:
 200         drop_in += ['Environment=LSAN_OPTIONS="' + lsan_options + '"']
 201     if ubsan_options:
 202         drop_in += ['Environment=UBSAN_OPTIONS="' + ubsan_options + '"']
 203     if asan_options or lsan_options or ubsan_options:
 204         drop_in += ['SystemCallFilter=']
 205     if use_valgrind or asan_options or lsan_options or ubsan_options:
 206         drop_in += ['MemoryDenyWriteExecute=no']
 207
 208     os.makedirs('/run/systemd/system/systemd-resolved.service.d', exist_ok=True)
 209     with open('/run/systemd/system/systemd-resolved.service.d/00-override.conf', mode='w') as f:
 210         f.write('\n'.join(drop_in))
 211
 212     check_output('systemctl daemon-reload')
 213     print(check_output('systemctl cat systemd-networkd.service'))
 214     print(check_output('systemctl cat systemd-resolved.service'))
 215     check_output('systemctl restart systemd-resolved')
 216
 217 def tearDownModule():
 218     global running_units
 219
 220     shutil.rmtree(networkd_ci_path)
 221
 222     for u in ['systemd-networkd.service', 'systemd-resolved.service']:
 223         check_output(f'systemctl stop {u}')
 224
 225     shutil.rmtree('/run/systemd/system/systemd-networkd.service.d')
 226     shutil.rmtree('/run/systemd/system/systemd-resolved.service.d')
 227     check_output('systemctl daemon-reload')
 228
 229     for u in running_units:
 230         check_output(f'systemctl start {u}')
 231
 232 def read_link_attr(*args):
 233     with open(os.path.join('/sys/class/net/', *args)) as f:
 234         return f.readline().strip()
 235
 236 def read_bridge_port_attr(bridge, link, attribute):
 237     path_bridge = os.path.join('/sys/devices/virtual/net', bridge)
 238     path_port = 'lower_' + link + '/brport'
 239     path = os.path.join(path_bridge, path_port)
 240
 241     with open(os.path.join(path, attribute)) as f:
 242         return f.readline().strip()
 243
 244 def link_exists(link):
 245     return os.path.exists(os.path.join('/sys/class/net', link))
 246
 247 def remove_links(links):
 248     for link in links:
 249         if link_exists(link):
 250             call('ip link del dev', link)
 251     time.sleep(1)
 252
 253 def remove_fou_ports(ports):
 254     for port in ports:
 255         call('ip fou del port', port, stdout=subprocess.DEVNULL, stderr=subprocess.DEVNULL)
 256
 257 def remove_routing_policy_rule_tables(tables):
 258     for table in tables:
 259         rc = 0
 260         while rc == 0:
 261             rc = call('ip rule del table', table, stdout=subprocess.DEVNULL, stderr=subprocess.DEVNULL)
 262
 263 def remove_routes(routes):
 264     for route_type, addr in routes:
 265         call('ip route del', route_type, addr, stdout=subprocess.DEVNULL, stderr=subprocess.DEVNULL)
 266
 267 def remove_l2tp_tunnels(tunnel_ids):
 268     output = check_output('ip l2tp show tunnel')
 269     for tid in tunnel_ids:
 270         words='Tunnel ' + tid + ', encap'
 271         if words in output:
 272             call('ip l2tp del tunnel tid', tid)
 273     time.sleep(1)
 274
 275 def read_ipv6_sysctl_attr(link, attribute):
 276     with open(os.path.join(os.path.join(network_sysctl_ipv6_path, link), attribute)) as f:
 277         return f.readline().strip()
 278
 279 def read_ipv4_sysctl_attr(link, attribute):
 280     with open(os.path.join(os.path.join(network_sysctl_ipv4_path, link), attribute)) as f:
 281         return f.readline().strip()
 282
 283 def copy_unit_to_networkd_unit_path(*units, dropins=True):
 284     """Copy networkd unit files into the testbed.
 285
 286     Any networkd unit file type can be specified, as well as drop-in files.
 287
 288     By default, all drop-ins for a specified unit file are copied in;
 289     to avoid that specify dropins=False.
 290
 291     When a drop-in file is specified, its unit file is also copied in automatically.
 292     """
 293     print()
 294     for unit in units:
 295         if dropins and os.path.exists(os.path.join(networkd_ci_path, unit + '.d')):
 296             copytree(os.path.join(networkd_ci_path, unit + '.d'), os.path.join(network_unit_file_path, unit + '.d'))
 297         if unit.endswith('.conf'):
 298             dropin = unit
 299             dropindir = os.path.join(network_unit_file_path, os.path.dirname(dropin))
 300             os.makedirs(dropindir, exist_ok=True)
 301             shutil.copy(os.path.join(networkd_ci_path, dropin), dropindir)
 302             unit = os.path.dirname(dropin).rstrip('.d')
 303         shutil.copy(os.path.join(networkd_ci_path, unit), network_unit_file_path)
 304
 305 def remove_unit_from_networkd_path(units):
 306     """Remove previously copied unit files from the testbed.
 307
 308     Drop-ins will be removed automatically.
 309     """
 310     for unit in units:
 311         if (os.path.exists(os.path.join(network_unit_file_path, unit))):
 312             os.remove(os.path.join(network_unit_file_path, unit))
 313             if (os.path.exists(os.path.join(network_unit_file_path, unit + '.d'))):
 314                 shutil.rmtree(os.path.join(network_unit_file_path, unit + '.d'))
 315
 316 def start_dnsmasq(additional_options='', ipv4_range='192.168.5.10,192.168.5.200', ipv6_range='2600::10,2600::20', lease_time='1h'):
 317     dnsmasq_command = f'dnsmasq -8 /var/run/networkd-ci/test-dnsmasq-log-file --log-queries=extra --log-dhcp --pid-file=/var/run/networkd-ci/test-test-dnsmasq.pid --conf-file=/dev/null --interface=veth-peer --enable-ra --dhcp-range={ipv6_range},{lease_time} --dhcp-range={ipv4_range},{lease_time} -R --dhcp-leasefile=/var/run/networkd-ci/lease --dhcp-option=26,1492 --dhcp-option=option:router,192.168.5.1 --dhcp-option=33,192.168.5.4,192.168.5.5 --port=0 ' + additional_options
 318     check_output(dnsmasq_command)
 319
 320 def stop_dnsmasq(pid_file):
 321     if os.path.exists(pid_file):
 322         with open(pid_file, 'r') as f:
 323             pid = f.read().rstrip(' \t\r\n\0')
 324             os.kill(int(pid), signal.SIGTERM)
 325
 326         os.remove(pid_file)
 327
 328 def search_words_in_dnsmasq_log(words, show_all=False):
 329     if os.path.exists(dnsmasq_log_file):
 330         with open (dnsmasq_log_file) as in_file:
 331             contents = in_file.read()
 332             if show_all:
 333                 print(contents)
 334             for line in contents.splitlines():
 335                 if words in line:
 336                     in_file.close()
 337                     print("%s, %s" % (words, line))
 338                     return True
 339     return False
 340
 341 def remove_lease_file():
 342     if os.path.exists(os.path.join(networkd_ci_path, 'lease')):
 343         os.remove(os.path.join(networkd_ci_path, 'lease'))
 344
 345 def remove_log_file():
 346     if os.path.exists(dnsmasq_log_file):
 347         os.remove(dnsmasq_log_file)
 348
 349 def remove_networkd_state_files():
 350     if os.path.exists(os.path.join(networkd_runtime_directory, 'state')):
 351         os.remove(os.path.join(networkd_runtime_directory, 'state'))
 352
 353 def stop_networkd(show_logs=True, remove_state_files=True):
 354     if show_logs:
 355         invocation_id = check_output('systemctl show systemd-networkd -p InvocationID --value')
 356     check_output('systemctl stop systemd-networkd')
 357     if show_logs:
 358         print(check_output('journalctl _SYSTEMD_INVOCATION_ID=' + invocation_id))
 359     if remove_state_files:
 360         remove_networkd_state_files()
 361
 362 def start_networkd(sleep_sec=0):
 363     check_output('systemctl start systemd-networkd')
 364     if sleep_sec > 0:
 365         time.sleep(sleep_sec)
 366
 367 def restart_networkd(sleep_sec=0, show_logs=True, remove_state_files=True):
 368     stop_networkd(show_logs, remove_state_files)
 369     start_networkd(sleep_sec)
 370
 371 def get_operstate(link, show_status=True, setup_state='configured'):
 372     output = check_output(*networkctl_cmd, 'status', link, env=env)
 373     if show_status:
 374         print(output)
 375     for line in output.splitlines():
 376         if 'State:' in line and (not setup_state or setup_state in line):
 377             return line.split()[1]
 378     return None
 379
 380 class Utilities():
 381     def check_link_exists(self, link):
 382         self.assertTrue(link_exists(link))
 383
 384     def check_operstate(self, link, expected, show_status=True, setup_state='configured'):
 385         self.assertRegex(get_operstate(link, show_status, setup_state), expected)
 386
 387     def wait_online(self, links_with_operstate, timeout='20s', bool_any=False, setup_state='configured', setup_timeout=5):
 388         args = wait_online_cmd + [f'--timeout={timeout}'] + [f'--interface={link}' for link in links_with_operstate]
 389         if bool_any:
 390             args += ['--any']
 391         try:
 392             check_output(*args, env=env)
 393         except subprocess.CalledProcessError:
 394             for link in links_with_operstate:
 395                 output = check_output(*networkctl_cmd, 'status', link.split(':')[0], env=env)
 396                 print(output)
 397             raise
 398         if not bool_any and setup_state:
 399             # check at least once now, then once per sec for setup_timeout secs
 400             for secs in range(setup_timeout + 1):
 401                 for link in links_with_operstate:
 402                     output = check_output(*networkctl_cmd, 'status', link.split(':')[0])
 403                     print(output)
 404                     if not re.search(rf'(?m)^\s*State:.*({setup_state}).*$', output):
 405                         # this link isn't in the right state; break into the sleep below
 406                         break
 407                 else:
 408                     # all the links were in the right state; break to exit the timer loop
 409                     break
 410                 # don't bother sleeping if time is up
 411                 if secs < setup_timeout:
 412                     time.sleep(1)
 413             else:
 414                 self.fail(f'link {link} state does not match {setup_state}')
 415
 416     def wait_address(self, link, address_regex, scope='global', ipv='', timeout_sec=100):
 417         for i in range(timeout_sec):
 418             if i > 0:
 419                 time.sleep(1)
 420             output = check_output(f'ip {ipv} address show dev {link} scope {scope}')
 421             if re.search(address_regex, output):
 422                 break
 423         else:
 424             self.assertRegex(output, address_regex)
 425
 426 class NetworkctlTests(unittest.TestCase, Utilities):
 427
 428     links = [
 429         'dummy98',
 430         'test1',
 431         'veth99',
 432     ]
 433
 434     units = [
 435         '11-dummy.netdev',
 436         '11-dummy-mtu.netdev',
 437         '11-dummy.network',
 438         '12-dummy.netdev',
 439         '12-dummy.link',
 440         '25-address-static.network',
 441         '25-veth.netdev',
 442         'netdev-link-local-addressing-yes.network',
 443     ]
 444
 445     def setUp(self):
 446         remove_links(self.links)
 447         stop_networkd(show_logs=False)
 448
 449     def tearDown(self):
 450         remove_links(self.links)
 451         remove_unit_from_networkd_path(self.units)
 452         stop_networkd(show_logs=True)
 453
 454     @expectedFailureIfAlternativeNameIsNotAvailable()
 455     def test_altname(self):
 456         copy_unit_to_networkd_unit_path('netdev-link-local-addressing-yes.network', '12-dummy.netdev', '12-dummy.link')
 457         check_output('udevadm control --reload')
 458         start_networkd()
 459         self.wait_online(['dummy98:degraded'])
 460
 461         output = check_output(*networkctl_cmd, 'status', 'dummy98', env=env)
 462         self.assertRegex(output, 'hogehogehogehogehogehoge')
 463
 464     def test_reconfigure(self):
 465         copy_unit_to_networkd_unit_path('25-address-static.network', '12-dummy.netdev')
 466         start_networkd()
 467         self.wait_online(['dummy98:routable'])
 468
 469         output = check_output('ip -4 address show dev dummy98')
 470         print(output)
 471         self.assertRegex(output, 'inet 10.1.2.3/16 brd 10.1.255.255 scope global dummy98')
 472         self.assertRegex(output, 'inet 10.1.2.4/16 brd 10.1.255.255 scope global secondary dummy98')
 473         self.assertRegex(output, 'inet 10.2.2.4/16 brd 10.2.255.255 scope global dummy98')
 474
 475         check_output('ip address del 10.1.2.3/16 dev dummy98')
 476         check_output('ip address del 10.1.2.4/16 dev dummy98')
 477         check_output('ip address del 10.2.2.4/16 dev dummy98')
 478
 479         check_output(*networkctl_cmd, 'reconfigure', 'dummy98', env=env)
 480         self.wait_online(['dummy98:routable'])
 481
 482         output = check_output('ip -4 address show dev dummy98')
 483         print(output)
 484         self.assertRegex(output, 'inet 10.1.2.3/16 brd 10.1.255.255 scope global dummy98')
 485         self.assertRegex(output, 'inet 10.1.2.4/16 brd 10.1.255.255 scope global secondary dummy98')
 486         self.assertRegex(output, 'inet 10.2.2.4/16 brd 10.2.255.255 scope global dummy98')
 487
 488     def test_reload(self):
 489         start_networkd(3)
 490
 491         copy_unit_to_networkd_unit_path('11-dummy.netdev')
 492         check_output(*networkctl_cmd, 'reload', env=env)
 493         time.sleep(3)
 494         self.check_link_exists('test1')
 495         self.check_operstate('test1', 'off', setup_state='unmanaged')
 496
 497         copy_unit_to_networkd_unit_path('11-dummy.network')
 498         check_output(*networkctl_cmd, 'reload', env=env)
 499         self.wait_online(['test1:degraded'])
 500
 501         remove_unit_from_networkd_path(['11-dummy.network'])
 502         check_output(*networkctl_cmd, 'reload', env=env)
 503         time.sleep(1)
 504         self.check_operstate('test1', 'degraded', setup_state='unmanaged')
 505
 506         remove_unit_from_networkd_path(['11-dummy.netdev'])
 507         check_output(*networkctl_cmd, 'reload', env=env)
 508         self.check_operstate('test1', 'degraded', setup_state='unmanaged')
 509
 510         copy_unit_to_networkd_unit_path('11-dummy.netdev', '11-dummy.network')
 511         check_output(*networkctl_cmd, 'reload', env=env)
 512         self.check_operstate('test1', 'degraded')
 513
 514     def test_glob(self):
 515         copy_unit_to_networkd_unit_path('11-dummy.netdev', '11-dummy.network')
 516         start_networkd()
 517
 518         self.wait_online(['test1:degraded'])
 519
 520         output = check_output(*networkctl_cmd, 'list', env=env)
 521         self.assertRegex(output, '1 lo ')
 522         self.assertRegex(output, 'test1')
 523
 524         output = check_output(*networkctl_cmd, 'list', 'test1', env=env)
 525         self.assertNotRegex(output, '1 lo ')
 526         self.assertRegex(output, 'test1')
 527
 528         output = check_output(*networkctl_cmd, 'list', 'te*', env=env)
 529         self.assertNotRegex(output, '1 lo ')
 530         self.assertRegex(output, 'test1')
 531
 532         output = check_output(*networkctl_cmd, 'status', 'te*', env=env)
 533         self.assertNotRegex(output, '1: lo ')
 534         self.assertRegex(output, 'test1')
 535
 536         output = check_output(*networkctl_cmd, 'status', 'tes[a-z][0-9]', env=env)
 537         self.assertNotRegex(output, '1: lo ')
 538         self.assertRegex(output, 'test1')
 539
 540     def test_mtu(self):
 541         copy_unit_to_networkd_unit_path('11-dummy-mtu.netdev', '11-dummy.network')
 542         start_networkd()
 543
 544         self.wait_online(['test1:degraded'])
 545
 546         output = check_output(*networkctl_cmd, 'status', 'test1', env=env)
 547         self.assertRegex(output, 'MTU: 1600')
 548
 549     def test_type(self):
 550         copy_unit_to_networkd_unit_path('11-dummy.netdev', '11-dummy.network')
 551         start_networkd()
 552         self.wait_online(['test1:degraded'])
 553
 554         output = check_output(*networkctl_cmd, 'status', 'test1')
 555         print(output)
 556         self.assertRegex(output, 'Type: ether')
 557
 558         output = check_output(*networkctl_cmd, 'status', 'lo')
 559         print(output)
 560         self.assertRegex(output, 'Type: loopback')
 561
 562     @expectedFailureIfLinkFileFieldIsNotSet()
 563     def test_udev_link_file(self):
 564         copy_unit_to_networkd_unit_path('11-dummy.netdev', '11-dummy.network')
 565         start_networkd()
 566         self.wait_online(['test1:degraded'])
 567
 568         output = check_output(*networkctl_cmd, 'status', 'test1')
 569         print(output)
 570         self.assertRegex(output, r'Link File: (/usr)?/lib/systemd/network/99-default.link')
 571         self.assertRegex(output, r'Network File: /run/systemd/network/11-dummy.network')
 572
 573         output = check_output(*networkctl_cmd, 'status', 'lo')
 574         print(output)
 575         self.assertRegex(output, r'Link File: (/usr)?/lib/systemd/network/99-default.link')
 576         self.assertRegex(output, r'Network File: n/a')
 577
 578     def test_delete_links(self):
 579         copy_unit_to_networkd_unit_path('11-dummy.netdev', '11-dummy.network',
 580                                         '25-veth.netdev', 'netdev-link-local-addressing-yes.network')
 581         start_networkd()
 582
 583         self.wait_online(['test1:degraded', 'veth99:degraded', 'veth-peer:degraded'])
 584
 585         check_output(*networkctl_cmd, 'delete', 'test1', 'veth99')
 586         self.assertFalse(link_exists('test1'))
 587         self.assertFalse(link_exists('veth99'))
 588         self.assertFalse(link_exists('veth-peer'))
 589
 590 class NetworkdNetDevTests(unittest.TestCase, Utilities):
 591
 592     links_remove_earlier = [
 593         'xfrm99',
 594     ]
 595
 596     links = [
 597         '6rdtun99',
 598         'bond99',
 599         'bridge99',
 600         'dropin-test',
 601         'dummy98',
 602         'erspan98',
 603         'erspan99',
 604         'geneve99',
 605         'gretap96',
 606         'gretap98',
 607         'gretap99',
 608         'gretun96',
 609         'gretun97',
 610         'gretun98',
 611         'gretun99',
 612         'ifb99',
 613         'ip6gretap98',
 614         'ip6gretap99',
 615         'ip6gretun96',
 616         'ip6gretun97',
 617         'ip6gretun98',
 618         'ip6gretun99',
 619         'ip6tnl97',
 620         'ip6tnl98',
 621         'ip6tnl99',
 622         'ipiptun96',
 623         'ipiptun97',
 624         'ipiptun98',
 625         'ipiptun99',
 626         'ipvlan99',
 627         'ipvtap99',
 628         'isataptun99',
 629         'macvlan99',
 630         'macvtap99',
 631         'nlmon99',
 632         'sittun96',
 633         'sittun97',
 634         'sittun98',
 635         'sittun99',
 636         'tap99',
 637         'test1',
 638         'tun99',
 639         'vcan99',
 640         'veth99',
 641         'vlan99',
 642         'vrf99',
 643         'vti6tun97',
 644         'vti6tun98',
 645         'vti6tun99',
 646         'vtitun96',
 647         'vtitun97',
 648         'vtitun98',
 649         'vtitun99',
 650         'vxcan99',
 651         'vxlan99',
 652         'wg98',
 653         'wg99',
 654     ]
 655
 656     units = [
 657         '10-dropin-test.netdev',
 658         '11-dummy.netdev',
 659         '11-dummy.network',
 660         '12-dummy.netdev',
 661         '13-not-match-udev-property.network',
 662         '14-match-udev-property.network',
 663         '15-name-conflict-test.netdev',
 664         '21-macvlan.netdev',
 665         '21-macvtap.netdev',
 666         '21-vlan-test1.network',
 667         '21-vlan.netdev',
 668         '21-vlan.network',
 669         '25-6rd-tunnel.netdev',
 670         '25-bond.netdev',
 671         '25-bond-balanced-tlb.netdev',
 672         '25-bridge.netdev',
 673         '25-bridge-configure-without-carrier.network',
 674         '25-bridge.network',
 675         '25-erspan-tunnel-local-any.netdev',
 676         '25-erspan-tunnel.netdev',
 677         '25-fou-gretap.netdev',
 678         '25-fou-gre.netdev',
 679         '25-fou-ipip.netdev',
 680         '25-fou-ipproto-gre.netdev',
 681         '25-fou-ipproto-ipip.netdev',
 682         '25-fou-sit.netdev',
 683         '25-geneve.netdev',
 684         '25-gretap-tunnel-local-any.netdev',
 685         '25-gretap-tunnel.netdev',
 686         '25-gre-tunnel-any-any.netdev',
 687         '25-gre-tunnel-local-any.netdev',
 688         '25-gre-tunnel-remote-any.netdev',
 689         '25-gre-tunnel.netdev',
 690         '25-ifb.netdev',
 691         '25-ip6gretap-tunnel-local-any.netdev',
 692         '25-ip6gretap-tunnel.netdev',
 693         '25-ip6gre-tunnel-any-any.netdev',
 694         '25-ip6gre-tunnel-local-any.netdev',
 695         '25-ip6gre-tunnel-remote-any.netdev',
 696         '25-ip6gre-tunnel.netdev',
 697         '25-ip6tnl-tunnel-any-any.netdev',
 698         '25-ip6tnl-tunnel-local-any.netdev',
 699         '25-ip6tnl-tunnel-remote-any.netdev',
 700         '25-ip6tnl-tunnel.netdev',
 701         '25-ipip-tunnel-any-any.netdev',
 702         '25-ipip-tunnel-independent.netdev',
 703         '25-ipip-tunnel-independent-loopback.netdev',
 704         '25-ipip-tunnel-local-any.netdev',
 705         '25-ipip-tunnel-remote-any.netdev',
 706         '25-ipip-tunnel.netdev',
 707         '25-ipvlan.netdev',
 708         '25-ipvtap.netdev',
 709         '25-isatap-tunnel.netdev',
 710         '25-macsec.key',
 711         '25-macsec.netdev',
 712         '25-macsec.network',
 713         '25-nlmon.netdev',
 714         '25-sit-tunnel-any-any.netdev',
 715         '25-sit-tunnel-local-any.netdev',
 716         '25-sit-tunnel-remote-any.netdev',
 717         '25-sit-tunnel.netdev',
 718         '25-tap.netdev',
 719         '25-tun.netdev',
 720         '25-tunnel-local-any.network',
 721         '25-tunnel-remote-any.network',
 722         '25-tunnel.network',
 723         '25-vcan.netdev',
 724         '25-veth.netdev',
 725         '25-vrf.netdev',
 726         '25-vti6-tunnel-any-any.netdev',
 727         '25-vti6-tunnel-local-any.netdev',
 728         '25-vti6-tunnel-remote-any.netdev',
 729         '25-vti6-tunnel.netdev',
 730         '25-vti-tunnel-any-any.netdev',
 731         '25-vti-tunnel-local-any.netdev',
 732         '25-vti-tunnel-remote-any.netdev',
 733         '25-vti-tunnel.netdev',
 734         '25-vxcan.netdev',
 735         '25-vxlan.netdev',
 736         '25-wireguard-23-peers.netdev',
 737         '25-wireguard-23-peers.network',
 738         '25-wireguard-preshared-key.txt',
 739         '25-wireguard-private-key.txt',
 740         '25-wireguard.netdev',
 741         '25-wireguard.network',
 742         '25-xfrm.netdev',
 743         '25-xfrm-independent.netdev',
 744         '6rd.network',
 745         'erspan.network',
 746         'gre.network',
 747         'gretap.network',
 748         'gretun.network',
 749         'ip6gretap.network',
 750         'ip6gretun.network',
 751         'ip6tnl.network',
 752         'ipip.network',
 753         'ipvlan.network',
 754         'ipvtap.network',
 755         'isatap.network',
 756         'macsec.network',
 757         'macvlan.network',
 758         'macvtap.network',
 759         'netdev-link-local-addressing-yes.network',
 760         'sit.network',
 761         'vti6.network',
 762         'vti.network',
 763         'vxlan-test1.network',
 764         'vxlan.network',
 765         'xfrm.network',
 766     ]
 767
 768     fou_ports = [
 769         '55555',
 770         '55556']
 771
 772     def setUp(self):
 773         remove_fou_ports(self.fou_ports)
 774         remove_links(self.links_remove_earlier)
 775         remove_links(self.links)
 776         stop_networkd(show_logs=False)
 777
 778     def tearDown(self):
 779         remove_fou_ports(self.fou_ports)
 780         remove_links(self.links_remove_earlier)
 781         remove_links(self.links)
 782         remove_unit_from_networkd_path(self.units)
 783         stop_networkd(show_logs=True)
 784
 785     def test_dropin_and_name_conflict(self):
 786         copy_unit_to_networkd_unit_path('10-dropin-test.netdev', '15-name-conflict-test.netdev')
 787         start_networkd()
 788
 789         self.wait_online(['dropin-test:off'], setup_state='unmanaged')
 790
 791         output = check_output('ip link show dropin-test')
 792         print(output)
 793         self.assertRegex(output, '00:50:56:c0:00:28')
 794
 795     def test_match_udev_property(self):
 796         copy_unit_to_networkd_unit_path('12-dummy.netdev', '13-not-match-udev-property.network', '14-match-udev-property.network')
 797         start_networkd()
 798         self.wait_online(['dummy98:routable'])
 799
 800         output = check_output('networkctl status dummy98')
 801         print(output)
 802         self.assertRegex(output, 'Network File: /run/systemd/network/14-match-udev-property')
 803
 804     def test_wait_online_any(self):
 805         copy_unit_to_networkd_unit_path('25-bridge.netdev', '25-bridge.network', '11-dummy.netdev', '11-dummy.network')
 806         start_networkd()
 807
 808         self.wait_online(['bridge99', 'test1:degraded'], bool_any=True)
 809
 810         self.check_operstate('bridge99', '(off|no-carrier)', setup_state='configuring')
 811         self.check_operstate('test1', 'degraded')
 812
 813     def test_bridge(self):
 814         copy_unit_to_networkd_unit_path('25-bridge.netdev', '25-bridge-configure-without-carrier.network')
 815         start_networkd()
 816
 817         self.wait_online(['bridge99:no-carrier'])
 818
 819         tick = os.sysconf('SC_CLK_TCK')
 820         self.assertEqual(9, round(float(read_link_attr('bridge99', 'bridge', 'hello_time')) / tick))
 821         self.assertEqual(9, round(float(read_link_attr('bridge99', 'bridge', 'max_age')) / tick))
 822         self.assertEqual(9, round(float(read_link_attr('bridge99', 'bridge', 'forward_delay')) / tick))
 823         self.assertEqual(9, round(float(read_link_attr('bridge99', 'bridge', 'ageing_time')) / tick))
 824         self.assertEqual(9,         int(read_link_attr('bridge99', 'bridge', 'priority')))
 825         self.assertEqual(1,         int(read_link_attr('bridge99', 'bridge', 'multicast_querier')))
 826         self.assertEqual(1,         int(read_link_attr('bridge99', 'bridge', 'multicast_snooping')))
 827         self.assertEqual(1,         int(read_link_attr('bridge99', 'bridge', 'stp_state')))
 828         self.assertEqual(3,         int(read_link_attr('bridge99', 'bridge', 'multicast_igmp_version')))
 829
 830         output = check_output(*networkctl_cmd, 'status', 'bridge99')
 831         print(output)
 832         self.assertRegex(output, 'Priority: 9')
 833         self.assertRegex(output, 'STP: yes')
 834         self.assertRegex(output, 'Multicast IGMP Version: 3')
 835
 836     def test_bond(self):
 837         copy_unit_to_networkd_unit_path('25-bond.netdev', '25-bond-balanced-tlb.netdev')
 838         start_networkd()
 839
 840         self.wait_online(['bond99:off', 'bond98:off'], setup_state='unmanaged')
 841
 842         self.assertEqual('802.3ad 4',         read_link_attr('bond99', 'bonding', 'mode'))
 843         self.assertEqual('layer3+4 1',        read_link_attr('bond99', 'bonding', 'xmit_hash_policy'))
 844         self.assertEqual('1000',              read_link_attr('bond99', 'bonding', 'miimon'))
 845         self.assertEqual('fast 1',            read_link_attr('bond99', 'bonding', 'lacp_rate'))
 846         self.assertEqual('2000',              read_link_attr('bond99', 'bonding', 'updelay'))
 847         self.assertEqual('2000',              read_link_attr('bond99', 'bonding', 'downdelay'))
 848         self.assertEqual('4',                 read_link_attr('bond99', 'bonding', 'resend_igmp'))
 849         self.assertEqual('1',                 read_link_attr('bond99', 'bonding', 'min_links'))
 850         self.assertEqual('1218',              read_link_attr('bond99', 'bonding', 'ad_actor_sys_prio'))
 851         self.assertEqual('811',               read_link_attr('bond99', 'bonding', 'ad_user_port_key'))
 852         self.assertEqual('00:11:22:33:44:55', read_link_attr('bond99', 'bonding', 'ad_actor_system'))
 853
 854         self.assertEqual('balance-tlb 5',     read_link_attr('bond98', 'bonding', 'mode'))
 855         self.assertEqual('1',                 read_link_attr('bond98', 'bonding', 'tlb_dynamic_lb'))
 856
 857     def test_vlan(self):
 858         copy_unit_to_networkd_unit_path('21-vlan.netdev', '11-dummy.netdev',
 859                                         '21-vlan.network', '21-vlan-test1.network')
 860         start_networkd()
 861
 862         self.wait_online(['test1:degraded', 'vlan99:routable'])
 863
 864         output = check_output('ip -d link show test1')
 865         print(output)
 866         self.assertRegex(output, ' mtu 2000 ')
 867
 868         output = check_output('ip -d link show vlan99')
 869         print(output)
 870         self.assertRegex(output, ' mtu 2000 ')
 871         self.assertRegex(output, 'REORDER_HDR')
 872         self.assertRegex(output, 'LOOSE_BINDING')
 873         self.assertRegex(output, 'GVRP')
 874         self.assertRegex(output, 'MVRP')
 875         self.assertRegex(output, ' id 99 ')
 876
 877         output = check_output('ip -4 address show dev test1')
 878         print(output)
 879         self.assertRegex(output, 'inet 192.168.24.5/24 brd 192.168.24.255 scope global test1')
 880         self.assertRegex(output, 'inet 192.168.25.5/24 brd 192.168.25.255 scope global test1')
 881
 882         output = check_output('ip -4 address show dev vlan99')
 883         print(output)
 884         self.assertRegex(output, 'inet 192.168.23.5/24 brd 192.168.23.255 scope global vlan99')
 885
 886     def test_macvtap(self):
 887         for mode in ['private', 'vepa', 'bridge', 'passthru']:
 888             with self.subTest(mode=mode):
 889                 if mode != 'private':
 890                     self.tearDown()
 891                 copy_unit_to_networkd_unit_path('21-macvtap.netdev', 'netdev-link-local-addressing-yes.network',
 892                                                 '11-dummy.netdev', 'macvtap.network')
 893                 with open(os.path.join(network_unit_file_path, '21-macvtap.netdev'), mode='a') as f:
 894                     f.write('[MACVTAP]\nMode=' + mode)
 895                 start_networkd()
 896
 897                 self.wait_online(['macvtap99:degraded', 'test1:degraded'])
 898
 899                 output = check_output('ip -d link show macvtap99')
 900                 print(output)
 901                 self.assertRegex(output, 'macvtap mode ' + mode + ' ')
 902
 903     def test_macvlan(self):
 904         for mode in ['private', 'vepa', 'bridge', 'passthru']:
 905             with self.subTest(mode=mode):
 906                 if mode != 'private':
 907                     self.tearDown()
 908                 copy_unit_to_networkd_unit_path('21-macvlan.netdev', 'netdev-link-local-addressing-yes.network',
 909                                                 '11-dummy.netdev', 'macvlan.network')
 910                 with open(os.path.join(network_unit_file_path, '21-macvlan.netdev'), mode='a') as f:
 911                     f.write('[MACVLAN]\nMode=' + mode)
 912                 start_networkd()
 913
 914                 self.wait_online(['macvlan99:degraded', 'test1:degraded'])
 915
 916                 output = check_output('ip -d link show test1')
 917                 print(output)
 918                 self.assertRegex(output, ' mtu 2000 ')
 919
 920                 output = check_output('ip -d link show macvlan99')
 921                 print(output)
 922                 self.assertRegex(output, ' mtu 2000 ')
 923                 self.assertRegex(output, 'macvlan mode ' + mode + ' ')
 924
 925     @expectedFailureIfModuleIsNotAvailable('ipvlan')
 926     def test_ipvlan(self):
 927         for mode, flag in [['L2', 'private'], ['L3', 'vepa'], ['L3S', 'bridge']]:
 928             with self.subTest(mode=mode, flag=flag):
 929                 if mode != 'L2':
 930                     self.tearDown()
 931                 copy_unit_to_networkd_unit_path('25-ipvlan.netdev', 'netdev-link-local-addressing-yes.network',
 932                                                 '11-dummy.netdev', 'ipvlan.network')
 933                 with open(os.path.join(network_unit_file_path, '25-ipvlan.netdev'), mode='a') as f:
 934                     f.write('[IPVLAN]\nMode=' + mode + '\nFlags=' + flag)
 935
 936                 start_networkd()
 937                 self.wait_online(['ipvlan99:degraded', 'test1:degraded'])
 938
 939                 output = check_output('ip -d link show ipvlan99')
 940                 print(output)
 941                 self.assertRegex(output, 'ipvlan  *mode ' + mode.lower() + ' ' + flag)
 942
 943     @expectedFailureIfModuleIsNotAvailable('ipvtap')
 944     def test_ipvtap(self):
 945         for mode, flag in [['L2', 'private'], ['L3', 'vepa'], ['L3S', 'bridge']]:
 946             with self.subTest(mode=mode, flag=flag):
 947                 if mode != 'L2':
 948                     self.tearDown()
 949                 copy_unit_to_networkd_unit_path('25-ipvtap.netdev', 'netdev-link-local-addressing-yes.network',
 950                                                 '11-dummy.netdev', 'ipvtap.network')
 951                 with open(os.path.join(network_unit_file_path, '25-ipvtap.netdev'), mode='a') as f:
 952                     f.write('[IPVTAP]\nMode=' + mode + '\nFlags=' + flag)
 953
 954                 start_networkd()
 955                 self.wait_online(['ipvtap99:degraded', 'test1:degraded'])
 956
 957                 output = check_output('ip -d link show ipvtap99')
 958                 print(output)
 959                 self.assertRegex(output, 'ipvtap  *mode ' + mode.lower() + ' ' + flag)
 960
 961     def test_veth(self):
 962         copy_unit_to_networkd_unit_path('25-veth.netdev', 'netdev-link-local-addressing-yes.network')
 963         start_networkd()
 964
 965         self.wait_online(['veth99:degraded', 'veth-peer:degraded'])
 966
 967         output = check_output('ip -d link show veth99')
 968         print(output)
 969         self.assertRegex(output, 'link/ether 12:34:56:78:9a:bc')
 970         output = check_output('ip -d link show veth-peer')
 971         print(output)
 972         self.assertRegex(output, 'link/ether 12:34:56:78:9a:bd')
 973
 974     def test_tun(self):
 975         copy_unit_to_networkd_unit_path('25-tun.netdev')
 976         start_networkd()
 977
 978         self.wait_online(['tun99:off'], setup_state='unmanaged')
 979
 980         output = check_output('ip -d link show tun99')
 981         print(output)
 982         # Old ip command does not support IFF_ flags
 983         self.assertRegex(output, 'tun (type tun pi on vnet_hdr on multi_queue|addrgenmode) ')
 984
 985     def test_tap(self):
 986         copy_unit_to_networkd_unit_path('25-tap.netdev')
 987         start_networkd()
 988
 989         self.wait_online(['tap99:off'], setup_state='unmanaged')
 990
 991         output = check_output('ip -d link show tap99')
 992         print(output)
 993         # Old ip command does not support IFF_ flags
 994         self.assertRegex(output, 'tun (type tap pi on vnet_hdr on multi_queue|addrgenmode) ')
 995
 996     @expectedFailureIfModuleIsNotAvailable('vrf')
 997     def test_vrf(self):
 998         copy_unit_to_networkd_unit_path('25-vrf.netdev', 'netdev-link-local-addressing-yes.network')
 999         start_networkd()
1000
1001         self.wait_online(['vrf99:carrier'])
1002
1003     @expectedFailureIfModuleIsNotAvailable('vcan')
1004     def test_vcan(self):
1005         copy_unit_to_networkd_unit_path('25-vcan.netdev', 'netdev-link-local-addressing-yes.network')
1006         start_networkd()
1007
1008         self.wait_online(['vcan99:carrier'])
1009
1010     @expectedFailureIfModuleIsNotAvailable('vxcan')
1011     def test_vxcan(self):
1012         copy_unit_to_networkd_unit_path('25-vxcan.netdev', 'netdev-link-local-addressing-yes.network')
1013         start_networkd()
1014
1015         self.wait_online(['vxcan99:carrier', 'vxcan-peer:carrier'])
1016
1017     @expectedFailureIfModuleIsNotAvailable('wireguard')
1018     def test_wireguard(self):
1019         copy_unit_to_networkd_unit_path('25-wireguard.netdev', '25-wireguard.network',
1020                                         '25-wireguard-23-peers.netdev', '25-wireguard-23-peers.network',
1021                                         '25-wireguard-preshared-key.txt', '25-wireguard-private-key.txt')
1022         start_networkd()
1023         self.wait_online(['wg99:carrier', 'wg98:routable'])
1024
1025         if shutil.which('wg'):
1026             call('wg')
1027
1028             output = check_output('wg show wg99 listen-port')
1029             self.assertRegex(output, '51820')
1030             output = check_output('wg show wg99 fwmark')
1031             self.assertRegex(output, '0x4d2')
1032             output = check_output('wg show wg99 allowed-ips')
1033             self.assertRegex(output, r'RDf\+LSpeEre7YEIKaxg\+wbpsNV7du\+ktR99uBEtIiCA=\t192.168.26.0/24 fd31:bf08:57cb::/48')
1034             self.assertRegex(output, r'lsDtM3AbjxNlauRKzHEPfgS1Zp7cp/VX5Use/P4PQSc=\tfdbc:bae2:7871:e1fe:793:8636::/96 fdbc:bae2:7871:500:e1fe:793:8636:dad1/128')
1035             output = check_output('wg show wg99 persistent-keepalive')
1036             self.assertRegex(output, r'RDf\+LSpeEre7YEIKaxg\+wbpsNV7du\+ktR99uBEtIiCA=\t20')
1037             output = check_output('wg show wg99 endpoints')
1038             self.assertRegex(output, r'RDf\+LSpeEre7YEIKaxg\+wbpsNV7du\+ktR99uBEtIiCA=\t192.168.27.3:51820')
1039             output = check_output('wg show wg99 private-key')
1040             self.assertRegex(output, r'EEGlnEPYJV//kbvvIqxKkQwOiS\+UENyPncC4bF46ong=')
1041             output = check_output('wg show wg99 preshared-keys')
1042             self.assertRegex(output, r'RDf\+LSpeEre7YEIKaxg\+wbpsNV7du\+ktR99uBEtIiCA=  IIWIV17wutHv7t4cR6pOT91z6NSz/T8Arh0yaywhw3M=')
1043             self.assertRegex(output, r'lsDtM3AbjxNlauRKzHEPfgS1Zp7cp/VX5Use/P4PQSc=     cPLOy1YUrEI0EMMIycPJmOo0aTu3RZnw8bL5meVD6m0=')
1044
1045             output = check_output('wg show wg98 private-key')
1046             self.assertRegex(output, r'CJQUtcS9emY2fLYqDlpSZiE/QJyHkPWr\+WHtZLZ90FU=')
1047
1048     def test_geneve(self):
1049         copy_unit_to_networkd_unit_path('25-geneve.netdev', 'netdev-link-local-addressing-yes.network')
1050         start_networkd()
1051
1052         self.wait_online(['geneve99:degraded'])
1053
1054         output = check_output('ip -d link show geneve99')
1055         print(output)
1056         self.assertRegex(output, '192.168.22.1')
1057         self.assertRegex(output, '6082')
1058         self.assertRegex(output, 'udpcsum')
1059         self.assertRegex(output, 'udp6zerocsumrx')
1060
1061     def test_ipip_tunnel(self):
1062         copy_unit_to_networkd_unit_path('12-dummy.netdev', 'ipip.network',
1063                                         '25-ipip-tunnel.netdev', '25-tunnel.network',
1064                                         '25-ipip-tunnel-local-any.netdev', '25-tunnel-local-any.network',
1065                                         '25-ipip-tunnel-remote-any.netdev', '25-tunnel-remote-any.network',
1066                                         '25-ipip-tunnel-any-any.netdev', '25-tunnel-any-any.network')
1067         start_networkd()
1068         self.wait_online(['ipiptun99:routable', 'ipiptun98:routable', 'ipiptun97:routable', 'ipiptun96:routable', 'dummy98:degraded'])
1069
1070         output = check_output('ip -d link show ipiptun99')
1071         print(output)
1072         self.assertRegex(output, 'ipip (ipip )?remote 192.169.224.239 local 192.168.223.238 dev dummy98')
1073         output = check_output('ip -d link show ipiptun98')
1074         print(output)
1075         self.assertRegex(output, 'ipip (ipip )?remote 192.169.224.239 local any dev dummy98')
1076         output = check_output('ip -d link show ipiptun97')
1077         print(output)
1078         self.assertRegex(output, 'ipip (ipip )?remote any local 192.168.223.238 dev dummy98')
1079         output = check_output('ip -d link show ipiptun96')
1080         print(output)
1081         self.assertRegex(output, 'ipip (ipip )?remote any local any dev dummy98')
1082
1083     def test_gre_tunnel(self):
1084         copy_unit_to_networkd_unit_path('12-dummy.netdev', 'gretun.network',
1085                                         '25-gre-tunnel.netdev', '25-tunnel.network',
1086                                         '25-gre-tunnel-local-any.netdev', '25-tunnel-local-any.network',
1087                                         '25-gre-tunnel-remote-any.netdev', '25-tunnel-remote-any.network',
1088                                         '25-gre-tunnel-any-any.netdev', '25-tunnel-any-any.network')
1089         start_networkd()
1090         self.wait_online(['gretun99:routable', 'gretun98:routable', 'gretun97:routable', 'gretun96:routable', 'dummy98:degraded'])
1091
1092         output = check_output('ip -d link show gretun99')
1093         print(output)
1094         self.assertRegex(output, 'gre remote 10.65.223.239 local 10.65.223.238 dev dummy98')
1095         self.assertRegex(output, 'ikey 1.2.3.103')
1096         self.assertRegex(output, 'okey 1.2.4.103')
1097         self.assertRegex(output, 'iseq')
1098         self.assertRegex(output, 'oseq')
1099         output = check_output('ip -d link show gretun98')
1100         print(output)
1101         self.assertRegex(output, 'gre remote 10.65.223.239 local any dev dummy98')
1102         self.assertRegex(output, 'ikey 0.0.0.104')
1103         self.assertRegex(output, 'okey 0.0.0.104')
1104         self.assertNotRegex(output, 'iseq')
1105         self.assertNotRegex(output, 'oseq')
1106         output = check_output('ip -d link show gretun97')
1107         print(output)
1108         self.assertRegex(output, 'gre remote any local 10.65.223.238 dev dummy98')
1109         self.assertRegex(output, 'ikey 0.0.0.105')
1110         self.assertRegex(output, 'okey 0.0.0.105')
1111         self.assertNotRegex(output, 'iseq')
1112         self.assertNotRegex(output, 'oseq')
1113         output = check_output('ip -d link show gretun96')
1114         print(output)
1115         self.assertRegex(output, 'gre remote any local any dev dummy98')
1116         self.assertRegex(output, 'ikey 0.0.0.106')
1117         self.assertRegex(output, 'okey 0.0.0.106')
1118         self.assertNotRegex(output, 'iseq')
1119         self.assertNotRegex(output, 'oseq')
1120
1121     def test_ip6gre_tunnel(self):
1122         copy_unit_to_networkd_unit_path('12-dummy.netdev', 'ip6gretun.network',
1123                                         '25-ip6gre-tunnel.netdev', '25-tunnel.network',
1124                                         '25-ip6gre-tunnel-local-any.netdev', '25-tunnel-local-any.network',
1125                                         '25-ip6gre-tunnel-remote-any.netdev', '25-tunnel-remote-any.network',
1126                                         '25-ip6gre-tunnel-any-any.netdev', '25-tunnel-any-any.network')
1127         start_networkd(5)
1128
1129         # Old kernels seem not to support IPv6LL address on ip6gre tunnel, So please do not use wait_online() here.
1130
1131         self.check_link_exists('dummy98')
1132         self.check_link_exists('ip6gretun99')
1133         self.check_link_exists('ip6gretun98')
1134         self.check_link_exists('ip6gretun97')
1135         self.check_link_exists('ip6gretun96')
1136
1137         output = check_output('ip -d link show ip6gretun99')
1138         print(output)
1139         self.assertRegex(output, 'ip6gre remote 2001:473:fece:cafe::5179 local 2a00:ffde:4567:edde::4987 dev dummy98')
1140         output = check_output('ip -d link show ip6gretun98')
1141         print(output)
1142         self.assertRegex(output, 'ip6gre remote 2001:473:fece:cafe::5179 local any dev dummy98')
1143         output = check_output('ip -d link show ip6gretun97')
1144         print(output)
1145         self.assertRegex(output, 'ip6gre remote any local 2a00:ffde:4567:edde::4987 dev dummy98')
1146         output = check_output('ip -d link show ip6gretun96')
1147         print(output)
1148         self.assertRegex(output, 'ip6gre remote any local any dev dummy98')
1149
1150     def test_gretap_tunnel(self):
1151         copy_unit_to_networkd_unit_path('12-dummy.netdev', 'gretap.network',
1152                                         '25-gretap-tunnel.netdev', '25-tunnel.network',
1153                                         '25-gretap-tunnel-local-any.netdev', '25-tunnel-local-any.network')
1154         start_networkd()
1155         self.wait_online(['gretap99:routable', 'gretap98:routable', 'dummy98:degraded'])
1156
1157         output = check_output('ip -d link show gretap99')
1158         print(output)
1159         self.assertRegex(output, 'gretap remote 10.65.223.239 local 10.65.223.238 dev dummy98')
1160         self.assertRegex(output, 'ikey 0.0.0.106')
1161         self.assertRegex(output, 'okey 0.0.0.106')
1162         self.assertRegex(output, 'iseq')
1163         self.assertRegex(output, 'oseq')
1164         output = check_output('ip -d link show gretap98')
1165         print(output)
1166         self.assertRegex(output, 'gretap remote 10.65.223.239 local any dev dummy98')
1167         self.assertRegex(output, 'ikey 0.0.0.107')
1168         self.assertRegex(output, 'okey 0.0.0.107')
1169         self.assertRegex(output, 'iseq')
1170         self.assertRegex(output, 'oseq')
1171
1172     def test_ip6gretap_tunnel(self):
1173         copy_unit_to_networkd_unit_path('12-dummy.netdev', 'ip6gretap.network',
1174                                         '25-ip6gretap-tunnel.netdev', '25-tunnel.network',
1175                                         '25-ip6gretap-tunnel-local-any.netdev', '25-tunnel-local-any.network')
1176         start_networkd()
1177         self.wait_online(['ip6gretap99:routable', 'ip6gretap98:routable', 'dummy98:degraded'])
1178
1179         output = check_output('ip -d link show ip6gretap99')
1180         print(output)
1181         self.assertRegex(output, 'ip6gretap remote 2001:473:fece:cafe::5179 local 2a00:ffde:4567:edde::4987 dev dummy98')
1182         output = check_output('ip -d link show ip6gretap98')
1183         print(output)
1184         self.assertRegex(output, 'ip6gretap remote 2001:473:fece:cafe::5179 local any dev dummy98')
1185
1186     def test_vti_tunnel(self):
1187         copy_unit_to_networkd_unit_path('12-dummy.netdev', 'vti.network',
1188                                         '25-vti-tunnel.netdev', '25-tunnel.network',
1189                                         '25-vti-tunnel-local-any.netdev', '25-tunnel-local-any.network',
1190                                         '25-vti-tunnel-remote-any.netdev', '25-tunnel-remote-any.network',
1191                                         '25-vti-tunnel-any-any.netdev', '25-tunnel-any-any.network')
1192         start_networkd()
1193         self.wait_online(['vtitun99:routable', 'vtitun98:routable', 'vtitun97:routable', 'vtitun96:routable', 'dummy98:degraded'])
1194
1195         output = check_output('ip -d link show vtitun99')
1196         print(output)
1197         self.assertRegex(output, 'vti remote 10.65.223.239 local 10.65.223.238 dev dummy98')
1198         output = check_output('ip -d link show vtitun98')
1199         print(output)
1200         self.assertRegex(output, 'vti remote 10.65.223.239 local any dev dummy98')
1201         output = check_output('ip -d link show vtitun97')
1202         print(output)
1203         self.assertRegex(output, 'vti remote any local 10.65.223.238 dev dummy98')
1204         output = check_output('ip -d link show vtitun96')
1205         print(output)
1206         self.assertRegex(output, 'vti remote any local any dev dummy98')
1207
1208     def test_vti6_tunnel(self):
1209         copy_unit_to_networkd_unit_path('12-dummy.netdev', 'vti6.network',
1210                                         '25-vti6-tunnel.netdev', '25-tunnel.network',
1211                                         '25-vti6-tunnel-local-any.netdev', '25-tunnel-local-any.network',
1212                                         '25-vti6-tunnel-remote-any.netdev', '25-tunnel-remote-any.network')
1213         start_networkd()
1214         self.wait_online(['vti6tun99:routable', 'vti6tun98:routable', 'vti6tun97:routable', 'dummy98:degraded'])
1215
1216         output = check_output('ip -d link show vti6tun99')
1217         print(output)
1218         self.assertRegex(output, 'vti6 remote 2001:473:fece:cafe::5179 local 2a00:ffde:4567:edde::4987 dev dummy98')
1219         output = check_output('ip -d link show vti6tun98')
1220         print(output)
1221         self.assertRegex(output, 'vti6 remote 2001:473:fece:cafe::5179 local (any|::) dev dummy98')
1222         output = check_output('ip -d link show vti6tun97')
1223         print(output)
1224         self.assertRegex(output, 'vti6 remote (any|::) local 2a00:ffde:4567:edde::4987 dev dummy98')
1225
1226     def test_ip6tnl_tunnel(self):
1227         copy_unit_to_networkd_unit_path('12-dummy.netdev', 'ip6tnl.network',
1228                                         '25-ip6tnl-tunnel.netdev', '25-tunnel.network',
1229                                         '25-ip6tnl-tunnel-local-any.netdev', '25-tunnel-local-any.network',
1230                                         '25-ip6tnl-tunnel-remote-any.netdev', '25-tunnel-remote-any.network')
1231         start_networkd()
1232         self.wait_online(['ip6tnl99:routable', 'ip6tnl98:routable', 'ip6tnl97:routable', 'dummy98:degraded'])
1233
1234         output = check_output('ip -d link show ip6tnl99')
1235         print(output)
1236         self.assertRegex(output, 'ip6tnl ip6ip6 remote 2001:473:fece:cafe::5179 local 2a00:ffde:4567:edde::4987 dev dummy98')
1237         output = check_output('ip -d link show ip6tnl98')
1238         print(output)
1239         self.assertRegex(output, 'ip6tnl ip6ip6 remote 2001:473:fece:cafe::5179 local (any|::) dev dummy98')
1240         output = check_output('ip -d link show ip6tnl97')
1241         print(output)
1242         self.assertRegex(output, 'ip6tnl ip6ip6 remote (any|::) local 2a00:ffde:4567:edde::4987 dev dummy98')
1243
1244     def test_sit_tunnel(self):
1245         copy_unit_to_networkd_unit_path('12-dummy.netdev', 'sit.network',
1246                                         '25-sit-tunnel.netdev', '25-tunnel.network',
1247                                         '25-sit-tunnel-local-any.netdev', '25-tunnel-local-any.network',
1248                                         '25-sit-tunnel-remote-any.netdev', '25-tunnel-remote-any.network',
1249                                         '25-sit-tunnel-any-any.netdev', '25-tunnel-any-any.network')
1250         start_networkd()
1251         self.wait_online(['sittun99:routable', 'sittun98:routable', 'sittun97:routable', 'sittun96:routable', 'dummy98:degraded'])
1252
1253         output = check_output('ip -d link show sittun99')
1254         print(output)
1255         self.assertRegex(output, "sit (ip6ip )?remote 10.65.223.239 local 10.65.223.238 dev dummy98")
1256         output = check_output('ip -d link show sittun98')
1257         print(output)
1258         self.assertRegex(output, "sit (ip6ip )?remote 10.65.223.239 local any dev dummy98")
1259         output = check_output('ip -d link show sittun97')
1260         print(output)
1261         self.assertRegex(output, "sit (ip6ip )?remote any local 10.65.223.238 dev dummy98")
1262         output = check_output('ip -d link show sittun96')
1263         print(output)
1264         self.assertRegex(output, "sit (ip6ip )?remote any local any dev dummy98")
1265
1266     def test_isatap_tunnel(self):
1267         copy_unit_to_networkd_unit_path('12-dummy.netdev', 'isatap.network',
1268                                         '25-isatap-tunnel.netdev', '25-tunnel.network')
1269         start_networkd()
1270         self.wait_online(['isataptun99:routable', 'dummy98:degraded'])
1271
1272         output = check_output('ip -d link show isataptun99')
1273         print(output)
1274         self.assertRegex(output, "isatap ")
1275
1276     def test_6rd_tunnel(self):
1277         copy_unit_to_networkd_unit_path('12-dummy.netdev', '6rd.network',
1278                                         '25-6rd-tunnel.netdev', '25-tunnel.network')
1279         start_networkd()
1280         self.wait_online(['sittun99:routable', 'dummy98:degraded'])
1281
1282         output = check_output('ip -d link show sittun99')
1283         print(output)
1284         self.assertRegex(output, '6rd-prefix 2602::/24')
1285
1286     @expectedFailureIfERSPANModuleIsNotAvailable()
1287     def test_erspan_tunnel(self):
1288         copy_unit_to_networkd_unit_path('12-dummy.netdev', 'erspan.network',
1289                                         '25-erspan-tunnel.netdev', '25-tunnel.network',
1290                                         '25-erspan-tunnel-local-any.netdev', '25-tunnel-local-any.network')
1291         start_networkd()
1292         self.wait_online(['erspan99:routable', 'erspan98:routable', 'dummy98:degraded'])
1293
1294         output = check_output('ip -d link show erspan99')
1295         print(output)
1296         self.assertRegex(output, 'erspan remote 172.16.1.100 local 172.16.1.200')
1297         self.assertRegex(output, 'ikey 0.0.0.101')
1298         self.assertRegex(output, 'okey 0.0.0.101')
1299         self.assertRegex(output, 'iseq')
1300         self.assertRegex(output, 'oseq')
1301         output = check_output('ip -d link show erspan98')
1302         print(output)
1303         self.assertRegex(output, 'erspan remote 172.16.1.100 local any')
1304         self.assertRegex(output, '102')
1305         self.assertRegex(output, 'ikey 0.0.0.102')
1306         self.assertRegex(output, 'okey 0.0.0.102')
1307         self.assertRegex(output, 'iseq')
1308         self.assertRegex(output, 'oseq')
1309
1310     def test_tunnel_independent(self):
1311         copy_unit_to_networkd_unit_path('25-ipip-tunnel-independent.netdev', 'netdev-link-local-addressing-yes.network')
1312         start_networkd()
1313
1314         self.wait_online(['ipiptun99:carrier'])
1315
1316     def test_tunnel_independent_loopback(self):
1317         copy_unit_to_networkd_unit_path('25-ipip-tunnel-independent-loopback.netdev', 'netdev-link-local-addressing-yes.network')
1318         start_networkd()
1319
1320         self.wait_online(['ipiptun99:carrier'])
1321
1322     @expectedFailureIfModuleIsNotAvailable('xfrm_interface')
1323     def test_xfrm(self):
1324         copy_unit_to_networkd_unit_path('12-dummy.netdev', 'xfrm.network',
1325                                         '25-xfrm.netdev', 'netdev-link-local-addressing-yes.network')
1326         start_networkd()
1327
1328         self.wait_online(['xfrm99:degraded', 'dummy98:degraded'])
1329
1330         output = check_output('ip link show dev xfrm99')
1331         print(output)
1332
1333     @expectedFailureIfModuleIsNotAvailable('xfrm_interface')
1334     def test_xfrm_independent(self):
1335         copy_unit_to_networkd_unit_path('25-xfrm-independent.netdev', 'netdev-link-local-addressing-yes.network')
1336         start_networkd()
1337
1338         self.wait_online(['xfrm99:degraded'])
1339
1340     @expectedFailureIfModuleIsNotAvailable('fou')
1341     def test_fou(self):
1342         # The following redundant check is necessary for CentOS CI.
1343         # Maybe, error handling in lookup_id() in sd-netlink/generic-netlink.c needs to be updated.
1344         self.assertTrue(is_module_available('fou'))
1345
1346         copy_unit_to_networkd_unit_path('25-fou-ipproto-ipip.netdev', '25-fou-ipproto-gre.netdev',
1347                                         '25-fou-ipip.netdev', '25-fou-sit.netdev',
1348                                         '25-fou-gre.netdev', '25-fou-gretap.netdev')
1349         start_networkd()
1350
1351         self.wait_online(['ipiptun96:off', 'sittun96:off', 'gretun96:off', 'gretap96:off'], setup_state='unmanaged')
1352
1353         output = check_output('ip fou show')
1354         print(output)
1355         self.assertRegex(output, 'port 55555 ipproto 4')
1356         self.assertRegex(output, 'port 55556 ipproto 47')
1357
1358         output = check_output('ip -d link show ipiptun96')
1359         print(output)
1360         self.assertRegex(output, 'encap fou encap-sport auto encap-dport 55555')
1361         output = check_output('ip -d link show sittun96')
1362         print(output)
1363         self.assertRegex(output, 'encap fou encap-sport auto encap-dport 55555')
1364         output = check_output('ip -d link show gretun96')
1365         print(output)
1366         self.assertRegex(output, 'encap fou encap-sport 1001 encap-dport 55556')
1367         output = check_output('ip -d link show gretap96')
1368         print(output)
1369         self.assertRegex(output, 'encap fou encap-sport auto encap-dport 55556')
1370
1371     def test_vxlan(self):
1372         copy_unit_to_networkd_unit_path('25-vxlan.netdev', 'vxlan.network',
1373                                         '11-dummy.netdev', 'vxlan-test1.network')
1374         start_networkd()
1375
1376         self.wait_online(['test1:degraded', 'vxlan99:degraded'])
1377
1378         output = check_output('ip -d link show vxlan99')
1379         print(output)
1380         self.assertRegex(output, '999')
1381         self.assertRegex(output, '5555')
1382         self.assertRegex(output, 'l2miss')
1383         self.assertRegex(output, 'l3miss')
1384         self.assertRegex(output, 'udpcsum')
1385         self.assertRegex(output, 'udp6zerocsumtx')
1386         self.assertRegex(output, 'udp6zerocsumrx')
1387         self.assertRegex(output, 'remcsumtx')
1388         self.assertRegex(output, 'remcsumrx')
1389         self.assertRegex(output, 'gbp')
1390
1391         output = check_output('bridge fdb show dev vxlan99')
1392         print(output)
1393         self.assertRegex(output, '00:11:22:33:44:55 dst 10.0.0.5 self permanent')
1394         self.assertRegex(output, '00:11:22:33:44:66 dst 10.0.0.6 self permanent')
1395         self.assertRegex(output, '00:11:22:33:44:77 dst 10.0.0.7 self permanent')
1396
1397         output = check_output(*networkctl_cmd, 'status', 'vxlan99')
1398         print(output)
1399         self.assertRegex(output, 'VNI: 999')
1400         self.assertRegex(output, 'Destination Port: 5555')
1401         self.assertRegex(output, 'Underlying Device: test1')
1402
1403     def test_macsec(self):
1404         copy_unit_to_networkd_unit_path('25-macsec.netdev', '25-macsec.network', '25-macsec.key',
1405                                         'macsec.network', '12-dummy.netdev')
1406         start_networkd()
1407
1408         self.wait_online(['dummy98:degraded', 'macsec99:routable'])
1409
1410         output = check_output('ip -d link show macsec99')
1411         print(output)
1412         self.assertRegex(output, 'macsec99@dummy98')
1413         self.assertRegex(output, 'macsec sci [0-9a-f]*000b')
1414         self.assertRegex(output, 'encrypt on')
1415
1416         output = check_output('ip macsec show macsec99')
1417         print(output)
1418         self.assertRegex(output, 'encrypt on')
1419         self.assertRegex(output, 'TXSC: [0-9a-f]*000b on SA 1')
1420         self.assertRegex(output, '0: PN [0-9]*, state on, key 01000000000000000000000000000000')
1421         self.assertRegex(output, '1: PN [0-9]*, state on, key 02030000000000000000000000000000')
1422         self.assertRegex(output, 'RXSC: c619528fe6a00100, state on')
1423         self.assertRegex(output, '0: PN [0-9]*, state on, key 02030405000000000000000000000000')
1424         self.assertRegex(output, '1: PN [0-9]*, state on, key 02030405060000000000000000000000')
1425         self.assertRegex(output, '2: PN [0-9]*, state off, key 02030405060700000000000000000000')
1426         self.assertRegex(output, '3: PN [0-9]*, state off, key 02030405060708000000000000000000')
1427         self.assertNotRegex(output, 'key 02030405067080900000000000000000')
1428         self.assertRegex(output, 'RXSC: 8c16456c83a90002, state on')
1429         self.assertRegex(output, '0: PN [0-9]*, state off, key 02030400000000000000000000000000')
1430
1431     def test_nlmon(self):
1432         copy_unit_to_networkd_unit_path('25-nlmon.netdev', 'netdev-link-local-addressing-yes.network')
1433         start_networkd()
1434
1435         self.wait_online(['nlmon99:carrier'])
1436
1437     @expectedFailureIfModuleIsNotAvailable('ifb')
1438     def test_ifb(self):
1439         copy_unit_to_networkd_unit_path('25-ifb.netdev', 'netdev-link-local-addressing-yes.network')
1440         start_networkd()
1441
1442         self.wait_online(['ifb99:degraded'])
1443
1444 class NetworkdL2TPTests(unittest.TestCase, Utilities):
1445
1446     links =[
1447         'l2tp-ses1',
1448         'l2tp-ses2',
1449         'l2tp-ses3',
1450         'l2tp-ses4',
1451         'test1']
1452
1453     units = [
1454         '11-dummy.netdev',
1455         '25-l2tp-dummy.network',
1456         '25-l2tp.network',
1457         '25-l2tp-ip.netdev',
1458         '25-l2tp-udp.netdev']
1459
1460     l2tp_tunnel_ids = [ '10' ]
1461
1462     def setUp(self):
1463         remove_l2tp_tunnels(self.l2tp_tunnel_ids)
1464         remove_links(self.links)
1465         stop_networkd(show_logs=False)
1466
1467     def tearDown(self):
1468         remove_l2tp_tunnels(self.l2tp_tunnel_ids)
1469         remove_links(self.links)
1470         remove_unit_from_networkd_path(self.units)
1471         stop_networkd(show_logs=True)
1472
1473     @expectedFailureIfModuleIsNotAvailable('l2tp_eth')
1474     def test_l2tp_udp(self):
1475         copy_unit_to_networkd_unit_path('11-dummy.netdev', '25-l2tp-dummy.network',
1476                                         '25-l2tp-udp.netdev', '25-l2tp.network')
1477         start_networkd()
1478
1479         self.wait_online(['test1:routable', 'l2tp-ses1:degraded', 'l2tp-ses2:degraded'])
1480
1481         output = check_output('ip l2tp show tunnel tunnel_id 10')
1482         print(output)
1483         self.assertRegex(output, "Tunnel 10, encap UDP")
1484         self.assertRegex(output, "From 192.168.30.100 to 192.168.30.101")
1485         self.assertRegex(output, "Peer tunnel 11")
1486         self.assertRegex(output, "UDP source / dest ports: 3000/4000")
1487         self.assertRegex(output, "UDP checksum: enabled")
1488
1489         output = check_output('ip l2tp show session tid 10 session_id 15')
1490         print(output)
1491         self.assertRegex(output, "Session 15 in tunnel 10")
1492         self.assertRegex(output, "Peer session 16, tunnel 11")
1493         self.assertRegex(output, "interface name: l2tp-ses1")
1494
1495         output = check_output('ip l2tp show session tid 10 session_id 17')
1496         print(output)
1497         self.assertRegex(output, "Session 17 in tunnel 10")
1498         self.assertRegex(output, "Peer session 18, tunnel 11")
1499         self.assertRegex(output, "interface name: l2tp-ses2")
1500
1501     @expectedFailureIfModuleIsNotAvailable('l2tp_ip')
1502     def test_l2tp_ip(self):
1503         copy_unit_to_networkd_unit_path('11-dummy.netdev', '25-l2tp-dummy.network',
1504                                         '25-l2tp-ip.netdev', '25-l2tp.network')
1505         start_networkd()
1506
1507         self.wait_online(['test1:routable', 'l2tp-ses3:degraded', 'l2tp-ses4:degraded'])
1508
1509         output = check_output('ip l2tp show tunnel tunnel_id 10')
1510         print(output)
1511         self.assertRegex(output, "Tunnel 10, encap IP")
1512         self.assertRegex(output, "From 192.168.30.100 to 192.168.30.101")
1513         self.assertRegex(output, "Peer tunnel 12")
1514
1515         output = check_output('ip l2tp show session tid 10 session_id 25')
1516         print(output)
1517         self.assertRegex(output, "Session 25 in tunnel 10")
1518         self.assertRegex(output, "Peer session 26, tunnel 12")
1519         self.assertRegex(output, "interface name: l2tp-ses3")
1520
1521         output = check_output('ip l2tp show session tid 10 session_id 27')
1522         print(output)
1523         self.assertRegex(output, "Session 27 in tunnel 10")
1524         self.assertRegex(output, "Peer session 28, tunnel 12")
1525         self.assertRegex(output, "interface name: l2tp-ses4")
1526
1527 class NetworkdNetworkTests(unittest.TestCase, Utilities):
1528     links = [
1529         'bond199',
1530         'dummy98',
1531         'dummy99',
1532         'gretun97',
1533         'ip6gretun97',
1534         'test1',
1535         'veth99',
1536     ]
1537
1538     units = [
1539         '11-dummy.netdev',
1540         '12-dummy.netdev',
1541         '23-active-slave.network',
1542         '24-keep-configuration-static.network',
1543         '24-search-domain.network',
1544         '25-address-dad-veth-peer.network',
1545         '25-address-dad-veth99.network',
1546         '25-address-link-section.network',
1547         '25-address-preferred-lifetime-zero.network',
1548         '25-address-static.network',
1549         '25-bind-carrier.network',
1550         '25-bond-active-backup-slave.netdev',
1551         '25-fibrule-invert.network',
1552         '25-fibrule-port-range.network',
1553         '25-gre-tunnel-remote-any.netdev',
1554         '25-ip6gre-tunnel-remote-any.netdev',
1555         '25-ipv6-address-label-section.network',
1556         '25-link-local-addressing-no.network',
1557         '25-link-local-addressing-yes.network',
1558         '25-link-section-unmanaged.network',
1559         '25-neighbor-section.network',
1560         '25-neighbor-next.network',
1561         '25-neighbor-ipv6.network',
1562         '25-neighbor-ip-dummy.network',
1563         '25-neighbor-ip.network',
1564         '25-nexthop.network',
1565         '25-qdisc-fq.network',
1566         '25-qdisc-netem-and-fqcodel.network',
1567         '25-qdisc-tbf-and-sfq.network',
1568         '25-route-ipv6-src.network',
1569         '25-route-static.network',
1570         '25-gateway-static.network',
1571         '25-gateway-next-static.network',
1572         '25-sysctl-disable-ipv6.network',
1573         '25-sysctl.network',
1574         '25-veth-peer.network',
1575         '25-veth.netdev',
1576         '26-link-local-addressing-ipv6.network',
1577         'configure-without-carrier.network',
1578         'routing-policy-rule-dummy98.network',
1579         'routing-policy-rule-test1.network']
1580
1581     routing_policy_rule_tables = ['7', '8', '9']
1582     routes = [['blackhole', '202.54.1.2'], ['unreachable', '202.54.1.3'], ['prohibit', '202.54.1.4']]
1583
1584     def setUp(self):
1585         remove_routing_policy_rule_tables(self.routing_policy_rule_tables)
1586         remove_routes(self.routes)
1587         remove_links(self.links)
1588         stop_networkd(show_logs=False)
1589
1590     def tearDown(self):
1591         remove_routing_policy_rule_tables(self.routing_policy_rule_tables)
1592         remove_routes(self.routes)
1593         remove_links(self.links)
1594         remove_unit_from_networkd_path(self.units)
1595         stop_networkd(show_logs=True)
1596
1597     def test_address_static(self):
1598         copy_unit_to_networkd_unit_path('25-address-static.network', '12-dummy.netdev')
1599         start_networkd()
1600
1601         self.wait_online(['dummy98:routable'])
1602
1603         output = check_output('ip -4 address show dev dummy98')
1604         print(output)
1605         self.assertRegex(output, 'inet 10.1.2.3/16 brd 10.1.255.255 scope global dummy98')
1606         self.assertRegex(output, 'inet 10.1.2.4/16 brd 10.1.255.255 scope global secondary dummy98')
1607         self.assertRegex(output, 'inet 10.2.2.4/16 brd 10.2.255.255 scope global dummy98')
1608
1609         # invalid sections
1610         self.assertNotRegex(output, '10.10.0.1/16')
1611         self.assertNotRegex(output, '10.10.0.2/16')
1612
1613         output = check_output('ip -4 address show dev dummy98 label 32')
1614         self.assertRegex(output, 'inet 10.3.2.3/16 brd 10.3.255.255 scope global 32')
1615
1616         output = check_output('ip -4 address show dev dummy98 label 33')
1617         self.assertRegex(output, 'inet 10.4.2.3 peer 10.4.2.4/16 scope global 33')
1618
1619         output = check_output('ip -4 address show dev dummy98 label 34')
1620         self.assertRegex(output, 'inet 192.168.[0-9]*.1/24 brd 192.168.[0-9]*.255 scope global 34')
1621
1622         output = check_output('ip -4 address show dev dummy98 label 35')
1623         self.assertRegex(output, 'inet 172.[0-9]*.0.1/16 brd 172.[0-9]*.255.255 scope global 35')
1624
1625         output = check_output('ip -6 address show dev dummy98')
1626         print(output)
1627         self.assertRegex(output, 'inet6 2001:db8:0:f101::15/64 scope global')
1628         self.assertRegex(output, 'inet6 2001:db8:0:f101::16/64 scope global')
1629         self.assertRegex(output, 'inet6 2001:db8:0:f102::15/64 scope global')
1630         self.assertRegex(output, 'inet6 2001:db8:0:f102::16/64 scope global')
1631         self.assertRegex(output, 'inet6 2001:db8:0:f103::20 peer 2001:db8:0:f103::10/128 scope global')
1632         self.assertRegex(output, 'inet6 fd[0-9a-f:]*1/64 scope global')
1633
1634     def test_address_preferred_lifetime_zero_ipv6(self):
1635         copy_unit_to_networkd_unit_path('25-address-preferred-lifetime-zero.network', '12-dummy.netdev')
1636         start_networkd(5)
1637
1638         self.wait_online(['dummy98:routable'])
1639
1640         output = check_output('ip address show dummy98')
1641         print(output)
1642         self.assertRegex(output, 'inet 10.2.3.4/16 brd 10.2.255.255 scope link deprecated dummy98')
1643         self.assertRegex(output, 'inet6 2001:db8:0:f101::1/64 scope global')
1644
1645         output = check_output('ip route show dev dummy98')
1646         print(output)
1647         self.assertRegex(output, 'default via 20.20.20.1 proto static')
1648
1649     def test_address_dad(self):
1650         copy_unit_to_networkd_unit_path('25-address-dad-veth99.network', '25-address-dad-veth-peer.network',
1651                                         '25-veth.netdev')
1652         start_networkd()
1653         self.wait_online(['veth99:routable', 'veth-peer:degraded'])
1654
1655         output = check_output('ip -4 address show dev veth99')
1656         print(output)
1657         self.assertRegex(output, '192.168.100.10/24')
1658
1659         output = check_output('ip -4 address show dev veth-peer')
1660         print(output)
1661         self.assertNotRegex(output, '192.168.100.10/24')
1662
1663     def test_configure_without_carrier(self):
1664         copy_unit_to_networkd_unit_path('configure-without-carrier.network', '11-dummy.netdev')
1665         start_networkd()
1666         self.wait_online(['test1:routable'])
1667
1668         output = check_output(*networkctl_cmd, 'status', 'test1')
1669         print(output)
1670         self.assertRegex(output, '192.168.0.15')
1671         self.assertRegex(output, '192.168.0.1')
1672         self.assertRegex(output, 'routable')
1673
1674     def test_routing_policy_rule(self):
1675         copy_unit_to_networkd_unit_path('routing-policy-rule-test1.network', '11-dummy.netdev')
1676         start_networkd()
1677         self.wait_online(['test1:degraded'])
1678
1679         output = check_output('ip rule list iif test1 priority 111')
1680         print(output)
1681         self.assertRegex(output, '111:')
1682         self.assertRegex(output, 'from 192.168.100.18')
1683         self.assertRegex(output, r'tos (0x08|throughput)\s')
1684         self.assertRegex(output, 'iif test1')
1685         self.assertRegex(output, 'oif test1')
1686         self.assertRegex(output, 'lookup 7')
1687
1688         output = check_output('ip rule list iif test1 priority 101')
1689         print(output)
1690         self.assertRegex(output, '101:')
1691         self.assertRegex(output, 'from all')
1692         self.assertRegex(output, 'iif test1')
1693         self.assertRegex(output, 'lookup 9')
1694
1695         output = check_output('ip -6 rule list iif test1 priority 100')
1696         print(output)
1697         self.assertRegex(output, '100:')
1698         self.assertRegex(output, 'from all')
1699         self.assertRegex(output, 'iif test1')
1700         self.assertRegex(output, 'lookup 8')
1701
1702         output = check_output('ip -6 rule list iif test1 priority 101')
1703         print(output)
1704         self.assertRegex(output, '101:')
1705         self.assertRegex(output, 'from all')
1706         self.assertRegex(output, 'iif test1')
1707         self.assertRegex(output, 'lookup 9')
1708
1709     def test_routing_policy_rule_issue_11280(self):
1710         copy_unit_to_networkd_unit_path('routing-policy-rule-test1.network', '11-dummy.netdev',
1711                                         'routing-policy-rule-dummy98.network', '12-dummy.netdev')
1712
1713         for trial in range(3):
1714             # Remove state files only first time
1715             start_networkd(3)
1716             self.wait_online(['test1:degraded', 'dummy98:degraded'])
1717             time.sleep(1)
1718
1719             output = check_output('ip rule list table 7')
1720             print(output)
1721             self.assertRegex(output, '111:      from 192.168.100.18 tos (0x08|throughput) iif test1 oif test1 lookup 7')
1722
1723             output = check_output('ip rule list table 8')
1724             print(output)
1725             self.assertRegex(output, '112:      from 192.168.101.18 tos (0x08|throughput) iif dummy98 oif dummy98 lookup 8')
1726
1727             stop_networkd(remove_state_files=False)
1728
1729     @expectedFailureIfRoutingPolicyPortRangeIsNotAvailable()
1730     def test_routing_policy_rule_port_range(self):
1731         copy_unit_to_networkd_unit_path('25-fibrule-port-range.network', '11-dummy.netdev')
1732         start_networkd()
1733         self.wait_online(['test1:degraded'])
1734
1735         output = check_output('ip rule')
1736         print(output)
1737         self.assertRegex(output, '111')
1738         self.assertRegex(output, 'from 192.168.100.18')
1739         self.assertRegex(output, '1123-1150')
1740         self.assertRegex(output, '3224-3290')
1741         self.assertRegex(output, 'tcp')
1742         self.assertRegex(output, 'lookup 7')
1743
1744     @expectedFailureIfRoutingPolicyIPProtoIsNotAvailable()
1745     def test_routing_policy_rule_invert(self):
1746         copy_unit_to_networkd_unit_path('25-fibrule-invert.network', '11-dummy.netdev')
1747         start_networkd()
1748         self.wait_online(['test1:degraded'])
1749
1750         output = check_output('ip rule')
1751         print(output)
1752         self.assertRegex(output, '111')
1753         self.assertRegex(output, 'not.*?from.*?192.168.100.18')
1754         self.assertRegex(output, 'tcp')
1755         self.assertRegex(output, 'lookup 7')
1756
1757     def test_route_static(self):
1758         copy_unit_to_networkd_unit_path('25-route-static.network', '12-dummy.netdev')
1759         start_networkd()
1760         self.wait_online(['dummy98:routable'])
1761
1762         output = check_output(*networkctl_cmd, 'status', 'dummy98', env=env)
1763         print(output)
1764
1765         print('### ip -6 route show dev dummy98')
1766         output = check_output('ip -6 route show dev dummy98')
1767         print(output)
1768         self.assertRegex(output, '2001:1234:5:8fff:ff:ff:ff:ff proto static')
1769         self.assertRegex(output, '2001:1234:5:8f63::1 proto kernel')
1770
1771         print('### ip -6 route show dev dummy98 default')
1772         output = check_output('ip -6 route show dev dummy98 default')
1773         print(output)
1774         self.assertRegex(output, 'default via 2001:1234:5:8fff:ff:ff:ff:ff proto static metric 1024 pref medium')
1775
1776         print('### ip -4 route show dev dummy98')
1777         output = check_output('ip -4 route show dev dummy98')
1778         print(output)
1779         self.assertRegex(output, '149.10.124.48/28 proto kernel scope link src 149.10.124.58')
1780         self.assertRegex(output, '149.10.124.64 proto static scope link')
1781         self.assertRegex(output, '169.254.0.0/16 proto static scope link metric 2048')
1782         self.assertRegex(output, '192.168.1.1 proto static initcwnd 20')
1783         self.assertRegex(output, '192.168.1.2 proto static initrwnd 30')
1784         self.assertRegex(output, 'multicast 149.10.123.4 proto static')
1785
1786         print('### ip -4 route show dev dummy98 default')
1787         output = check_output('ip -4 route show dev dummy98 default')
1788         print(output)
1789         self.assertRegex(output, 'default via 149.10.125.65 proto static onlink')
1790         self.assertRegex(output, 'default via 149.10.124.64 proto static')
1791         self.assertRegex(output, 'default proto static')
1792
1793         print('### ip -4 route show table local dev dummy98')
1794         output = check_output('ip -4 route show table local dev dummy98')
1795         print(output)
1796         self.assertRegex(output, 'local 149.10.123.1 proto static scope host')
1797         self.assertRegex(output, 'anycast 149.10.123.2 proto static scope link')
1798         self.assertRegex(output, 'broadcast 149.10.123.3 proto static scope link')
1799
1800         print('### ip route show type blackhole')
1801         output = check_output('ip route show type blackhole')
1802         print(output)
1803         self.assertRegex(output, 'blackhole 202.54.1.2 proto static')
1804
1805         print('### ip route show type unreachable')
1806         output = check_output('ip route show type unreachable')
1807         print(output)
1808         self.assertRegex(output, 'unreachable 202.54.1.3 proto static')
1809
1810         print('### ip route show type prohibit')
1811         output = check_output('ip route show type prohibit')
1812         print(output)
1813         self.assertRegex(output, 'prohibit 202.54.1.4 proto static')
1814
1815     def test_gateway_reconfigure(self):
1816         copy_unit_to_networkd_unit_path('25-gateway-static.network', '12-dummy.netdev')
1817         start_networkd()
1818         self.wait_online(['dummy98:routable'])
1819         print('### ip -4 route show dev dummy98 default')
1820         output = check_output('ip -4 route show dev dummy98 default')
1821         print(output)
1822         self.assertRegex(output, 'default via 149.10.124.59 proto static')
1823         self.assertNotRegex(output, '149.10.124.60')
1824
1825         remove_unit_from_networkd_path(['25-gateway-static.network'])
1826         copy_unit_to_networkd_unit_path('25-gateway-next-static.network')
1827         restart_networkd(3)
1828         self.wait_online(['dummy98:routable'])
1829         print('### ip -4 route show dev dummy98 default')
1830         output = check_output('ip -4 route show dev dummy98 default')
1831         print(output)
1832         self.assertNotRegex(output, '149.10.124.59')
1833         self.assertRegex(output, 'default via 149.10.124.60 proto static')
1834
1835     def test_ip_route_ipv6_src_route(self):
1836         # a dummy device does not make the addresses go through tentative state, so we
1837         # reuse a bond from an earlier test, which does make the addresses go through
1838         # tentative state, and do our test on that
1839         copy_unit_to_networkd_unit_path('23-active-slave.network', '25-route-ipv6-src.network', '25-bond-active-backup-slave.netdev', '12-dummy.netdev')
1840         start_networkd()
1841         self.wait_online(['dummy98:enslaved', 'bond199:routable'])
1842
1843         output = check_output('ip -6 route list dev bond199')
1844         print(output)
1845         self.assertRegex(output, 'abcd::/16')
1846         self.assertRegex(output, 'src')
1847         self.assertRegex(output, '2001:1234:56:8f63::2')
1848
1849     def test_ip_link_mac_address(self):
1850         copy_unit_to_networkd_unit_path('25-address-link-section.network', '12-dummy.netdev')
1851         start_networkd()
1852         self.wait_online(['dummy98:degraded'])
1853
1854         output = check_output('ip link show dummy98')
1855         print(output)
1856         self.assertRegex(output, '00:01:02:aa:bb:cc')
1857
1858     def test_ip_link_unmanaged(self):
1859         copy_unit_to_networkd_unit_path('25-link-section-unmanaged.network', '12-dummy.netdev')
1860         start_networkd(5)
1861
1862         self.check_link_exists('dummy98')
1863
1864         self.check_operstate('dummy98', 'off', setup_state='unmanaged')
1865
1866     def test_ipv6_address_label(self):
1867         copy_unit_to_networkd_unit_path('25-ipv6-address-label-section.network', '12-dummy.netdev')
1868         start_networkd()
1869         self.wait_online(['dummy98:degraded'])
1870
1871         output = check_output('ip addrlabel list')
1872         print(output)
1873         self.assertRegex(output, '2004:da8:1::/64')
1874
1875     def test_neighbor_section(self):
1876         copy_unit_to_networkd_unit_path('25-neighbor-section.network', '12-dummy.netdev')
1877         start_networkd()
1878         self.wait_online(['dummy98:degraded'], timeout='40s')
1879
1880         print('### ip neigh list dev dummy98')
1881         output = check_output('ip neigh list dev dummy98')
1882         print(output)
1883         self.assertRegex(output, '192.168.10.1.*00:00:5e:00:02:65.*PERMANENT')
1884         self.assertRegex(output, '2004:da8:1::1.*00:00:5e:00:02:66.*PERMANENT')
1885
1886     def test_neighbor_reconfigure(self):
1887         copy_unit_to_networkd_unit_path('25-neighbor-section.network', '12-dummy.netdev')
1888         start_networkd()
1889         self.wait_online(['dummy98:degraded'], timeout='40s')
1890
1891         print('### ip neigh list dev dummy98')
1892         output = check_output('ip neigh list dev dummy98')
1893         print(output)
1894         self.assertRegex(output, '192.168.10.1.*00:00:5e:00:02:65.*PERMANENT')
1895         self.assertRegex(output, '2004:da8:1::1.*00:00:5e:00:02:66.*PERMANENT')
1896
1897         remove_unit_from_networkd_path(['25-neighbor-section.network'])
1898         copy_unit_to_networkd_unit_path('25-neighbor-next.network')
1899         restart_networkd(3)
1900         self.wait_online(['dummy98:degraded'], timeout='40s')
1901         print('### ip neigh list dev dummy98')
1902         output = check_output('ip neigh list dev dummy98')
1903         print(output)
1904         self.assertNotRegex(output, '192.168.10.1.*00:00:5e:00:02:65.*PERMANENT')
1905         self.assertRegex(output, '192.168.10.1.*00:00:5e:00:02:66.*PERMANENT')
1906         self.assertNotRegex(output, '2004:da8:1::1.*PERMANENT')
1907
1908     def test_neighbor_gre(self):
1909         copy_unit_to_networkd_unit_path('25-neighbor-ip.network', '25-neighbor-ipv6.network', '25-neighbor-ip-dummy.network',
1910                                         '12-dummy.netdev', '25-gre-tunnel-remote-any.netdev', '25-ip6gre-tunnel-remote-any.netdev')
1911         start_networkd()
1912         self.wait_online(['dummy98:degraded', 'gretun97:routable', 'ip6gretun97:routable'], timeout='40s')
1913
1914         output = check_output('ip neigh list dev gretun97')
1915         print(output)
1916         self.assertRegex(output, '10.0.0.22 lladdr 10.65.223.239 PERMANENT')
1917
1918         output = check_output('ip neigh list dev ip6gretun97')
1919         print(output)
1920         self.assertRegex(output, '2001:db8:0:f102::17 lladdr 2a:?00:ff:?de:45:?67:ed:?de:[0:]*:49:?88 PERMANENT')
1921
1922     def test_link_local_addressing(self):
1923         copy_unit_to_networkd_unit_path('25-link-local-addressing-yes.network', '11-dummy.netdev',
1924                                         '25-link-local-addressing-no.network', '12-dummy.netdev')
1925         start_networkd()
1926         self.wait_online(['test1:degraded', 'dummy98:carrier'])
1927
1928         output = check_output('ip address show dev test1')
1929         print(output)
1930         self.assertRegex(output, 'inet .* scope link')
1931         self.assertRegex(output, 'inet6 .* scope link')
1932
1933         output = check_output('ip address show dev dummy98')
1934         print(output)
1935         self.assertNotRegex(output, 'inet6* .* scope link')
1936
1937         '''
1938         Documentation/networking/ip-sysctl.txt
1939
1940         addr_gen_mode - INTEGER
1941         Defines how link-local and autoconf addresses are generated.
1942
1943         0: generate address based on EUI64 (default)
1944         1: do no generate a link-local address, use EUI64 for addresses generated
1945            from autoconf
1946         2: generate stable privacy addresses, using the secret from
1947            stable_secret (RFC7217)
1948         3: generate stable privacy addresses, using a random secret if unset
1949         '''
1950
1951         test1_addr_gen_mode = ''
1952         if os.path.exists(os.path.join(os.path.join(network_sysctl_ipv6_path, 'test1'), 'stable_secret')):
1953             with open(os.path.join(os.path.join(network_sysctl_ipv6_path, 'test1'), 'stable_secret')) as f:
1954                 try:
1955                     f.readline()
1956                 except IOError:
1957                     # if stable_secret is unset, then EIO is returned
1958                     test1_addr_gen_mode = '0'
1959                 else:
1960                     test1_addr_gen_mode = '2'
1961         else:
1962             test1_addr_gen_mode = '0'
1963
1964         if os.path.exists(os.path.join(os.path.join(network_sysctl_ipv6_path, 'test1'), 'addr_gen_mode')):
1965             self.assertEqual(read_ipv6_sysctl_attr('test1', 'addr_gen_mode'), test1_addr_gen_mode)
1966
1967         if os.path.exists(os.path.join(os.path.join(network_sysctl_ipv6_path, 'dummy98'), 'addr_gen_mode')):
1968             self.assertEqual(read_ipv6_sysctl_attr('dummy98', 'addr_gen_mode'), '1')
1969
1970     def test_link_local_addressing_remove_ipv6ll(self):
1971         copy_unit_to_networkd_unit_path('26-link-local-addressing-ipv6.network', '12-dummy.netdev')
1972         start_networkd()
1973         self.wait_online(['dummy98:degraded'])
1974
1975         output = check_output('ip address show dev dummy98')
1976         print(output)
1977         self.assertRegex(output, 'inet6 .* scope link')
1978
1979         copy_unit_to_networkd_unit_path('25-link-local-addressing-no.network')
1980         restart_networkd(1)
1981         self.wait_online(['dummy98:carrier'])
1982
1983         output = check_output('ip address show dev dummy98')
1984         print(output)
1985         self.assertNotRegex(output, 'inet6* .* scope link')
1986
1987     def test_sysctl(self):
1988         copy_unit_to_networkd_unit_path('25-sysctl.network', '12-dummy.netdev')
1989         start_networkd()
1990         self.wait_online(['dummy98:degraded'])
1991
1992         self.assertEqual(read_ipv6_sysctl_attr('dummy98', 'forwarding'), '1')
1993         self.assertEqual(read_ipv6_sysctl_attr('dummy98', 'use_tempaddr'), '2')
1994         self.assertEqual(read_ipv6_sysctl_attr('dummy98', 'dad_transmits'), '3')
1995         self.assertEqual(read_ipv6_sysctl_attr('dummy98', 'hop_limit'), '5')
1996         self.assertEqual(read_ipv6_sysctl_attr('dummy98', 'proxy_ndp'), '1')
1997         self.assertEqual(read_ipv4_sysctl_attr('dummy98', 'forwarding'),'1')
1998         self.assertEqual(read_ipv4_sysctl_attr('dummy98', 'proxy_arp'), '1')
1999
2000     def test_sysctl_disable_ipv6(self):
2001         copy_unit_to_networkd_unit_path('25-sysctl-disable-ipv6.network', '12-dummy.netdev')
2002
2003         print('## Disable ipv6')
2004         check_output('sysctl net.ipv6.conf.all.disable_ipv6=1')
2005         check_output('sysctl net.ipv6.conf.default.disable_ipv6=1')
2006
2007         start_networkd()
2008         self.wait_online(['dummy98:routable'])
2009
2010         output = check_output('ip -4 address show dummy98')
2011         print(output)
2012         self.assertRegex(output, 'inet 10.2.3.4/16 brd 10.2.255.255 scope global dummy98')
2013         output = check_output('ip -6 address show dummy98')
2014         print(output)
2015         self.assertRegex(output, 'inet6 2607:5300:203:3906::/64 scope global')
2016         self.assertRegex(output, 'inet6 .* scope link')
2017         output = check_output('ip -4 route show dev dummy98')
2018         print(output)
2019         self.assertEqual(output, '10.2.0.0/16 proto kernel scope link src 10.2.3.4')
2020         output = check_output('ip -6 route show dev dummy98')
2021         print(output)
2022         self.assertRegex(output, 'default via 2607:5300:203:39ff:ff:ff:ff:ff proto static')
2023
2024         check_output('ip link del dummy98')
2025
2026         print('## Enable ipv6')
2027         check_output('sysctl net.ipv6.conf.all.disable_ipv6=0')
2028         check_output('sysctl net.ipv6.conf.default.disable_ipv6=0')
2029
2030         restart_networkd(3)
2031         self.wait_online(['dummy98:routable'])
2032
2033         output = check_output('ip -4 address show dummy98')
2034         print(output)
2035         self.assertRegex(output, 'inet 10.2.3.4/16 brd 10.2.255.255 scope global dummy98')
2036         output = check_output('ip -6 address show dummy98')
2037         print(output)
2038         self.assertRegex(output, 'inet6 2607:5300:203:3906::/64 scope global')
2039         self.assertRegex(output, 'inet6 .* scope link')
2040         output = check_output('ip -4 route show dev dummy98')
2041         print(output)
2042         self.assertEqual(output, '10.2.0.0/16 proto kernel scope link src 10.2.3.4')
2043         output = check_output('ip -6 route show dev dummy98')
2044         print(output)
2045         self.assertRegex(output, 'default via 2607:5300:203:39ff:ff:ff:ff:ff proto static')
2046
2047     def test_bind_carrier(self):
2048         check_output('ip link add dummy98 type dummy')
2049         check_output('ip link set dummy98 up')
2050         time.sleep(2)
2051
2052         copy_unit_to_networkd_unit_path('25-bind-carrier.network', '11-dummy.netdev')
2053         start_networkd()
2054         self.wait_online(['test1:routable'])
2055
2056         output = check_output('ip address show test1')
2057         print(output)
2058         self.assertRegex(output, 'UP,LOWER_UP')
2059         self.assertRegex(output, 'inet 192.168.10.30/24 brd 192.168.10.255 scope global test1')
2060         self.check_operstate('test1', 'routable')
2061
2062         check_output('ip link add dummy99 type dummy')
2063         check_output('ip link set dummy99 up')
2064         time.sleep(2)
2065         output = check_output('ip address show test1')
2066         print(output)
2067         self.assertRegex(output, 'UP,LOWER_UP')
2068         self.assertRegex(output, 'inet 192.168.10.30/24 brd 192.168.10.255 scope global test1')
2069         self.check_operstate('test1', 'routable')
2070
2071         check_output('ip link del dummy98')
2072         time.sleep(2)
2073         output = check_output('ip address show test1')
2074         print(output)
2075         self.assertRegex(output, 'UP,LOWER_UP')
2076         self.assertRegex(output, 'inet 192.168.10.30/24 brd 192.168.10.255 scope global test1')
2077         self.check_operstate('test1', 'routable')
2078
2079         check_output('ip link set dummy99 down')
2080         time.sleep(2)
2081         output = check_output('ip address show test1')
2082         print(output)
2083         self.assertNotRegex(output, 'UP,LOWER_UP')
2084         self.assertRegex(output, 'DOWN')
2085         self.assertNotRegex(output, '192.168.10')
2086         self.check_operstate('test1', 'off')
2087
2088         check_output('ip link set dummy99 up')
2089         time.sleep(2)
2090         output = check_output('ip address show test1')
2091         print(output)
2092         self.assertRegex(output, 'UP,LOWER_UP')
2093         self.assertRegex(output, 'inet 192.168.10.30/24 brd 192.168.10.255 scope global test1')
2094         self.check_operstate('test1', 'routable')
2095
2096     def test_domain(self):
2097         copy_unit_to_networkd_unit_path('12-dummy.netdev', '24-search-domain.network')
2098         start_networkd()
2099         self.wait_online(['dummy98:routable'])
2100
2101         output = check_output(*networkctl_cmd, 'status', 'dummy98', env=env)
2102         print(output)
2103         self.assertRegex(output, 'Address: 192.168.42.100')
2104         self.assertRegex(output, 'DNS: 192.168.42.1')
2105         self.assertRegex(output, 'Search Domains: one')
2106
2107     def test_keep_configuration_static(self):
2108         check_output('systemctl stop systemd-networkd')
2109
2110         check_output('ip link add name dummy98 type dummy')
2111         check_output('ip address add 10.1.2.3/16 dev dummy98')
2112         check_output('ip address add 10.2.3.4/16 dev dummy98 valid_lft 600 preferred_lft 500')
2113         output = check_output('ip address show dummy98')
2114         print(output)
2115         self.assertRegex(output, 'inet 10.1.2.3/16 scope global dummy98')
2116         self.assertRegex(output, 'inet 10.2.3.4/16 scope global dynamic dummy98')
2117         output = check_output('ip route show dev dummy98')
2118         print(output)
2119
2120         copy_unit_to_networkd_unit_path('24-keep-configuration-static.network')
2121         start_networkd()
2122         self.wait_online(['dummy98:routable'])
2123
2124         output = check_output('ip address show dummy98')
2125         print(output)
2126         self.assertRegex(output, 'inet 10.1.2.3/16 scope global dummy98')
2127         self.assertNotRegex(output, 'inet 10.2.3.4/16 scope global dynamic dummy98')
2128
2129     @expectedFailureIfNexthopIsNotAvailable()
2130     def test_nexthop(self):
2131         copy_unit_to_networkd_unit_path('25-nexthop.network', '25-veth.netdev', '25-veth-peer.network')
2132         start_networkd()
2133         self.wait_online(['veth99:routable', 'veth-peer:routable'])
2134
2135         output = check_output('ip nexthop list dev veth99')
2136         print(output)
2137         self.assertRegex(output, '192.168.5.1')
2138
2139     def test_qdisc(self):
2140         copy_unit_to_networkd_unit_path('25-qdisc-netem-and-fqcodel.network', '12-dummy.netdev',
2141                                         '25-qdisc-tbf-and-sfq.network', '11-dummy.netdev')
2142         start_networkd()
2143
2144         self.wait_online(['dummy98:routable', 'test1:routable'])
2145
2146         output = check_output('tc qdisc show dev dummy98')
2147         print(output)
2148         self.assertRegex(output, 'qdisc netem')
2149         self.assertRegex(output, 'limit 100 delay 50.0ms  10.0ms loss 20%')
2150         self.assertRegex(output, 'qdisc fq_codel')
2151         self.assertRegex(output, 'limit 20480p flows 2048 quantum 1400 target 10.0ms ce_threshold 100.0ms interval 200.0ms memory_limit 64Mb ecn')
2152         output = check_output('tc qdisc show dev test1')
2153         print(output)
2154         self.assertRegex(output, 'qdisc tbf')
2155         self.assertRegex(output, 'rate 1Gbit burst 5000b peakrate 100Gbit minburst 987500b lat 70.0ms')
2156         self.assertRegex(output, 'qdisc sfq')
2157         self.assertRegex(output, 'perturb 5sec')
2158
2159     def test_qdisc2(self):
2160         copy_unit_to_networkd_unit_path('25-qdisc-fq.network', '12-dummy.netdev')
2161         start_networkd()
2162
2163         self.wait_online(['dummy98:routable'])
2164
2165         output = check_output('tc qdisc show dev dummy98')
2166         print(output)
2167         self.assertRegex(output, 'qdisc fq')
2168         self.assertRegex(output, 'limit 1000p')
2169
2170 class NetworkdStateFileTests(unittest.TestCase, Utilities):
2171     links = [
2172         'dummy98',
2173     ]
2174
2175     units = [
2176         '12-dummy.netdev',
2177         'state-file-tests.network',
2178     ]
2179
2180     def setUp(self):
2181         remove_links(self.links)
2182         stop_networkd(show_logs=False)
2183
2184     def tearDown(self):
2185         remove_links(self.links)
2186         remove_unit_from_networkd_path(self.units)
2187         stop_networkd(show_logs=True)
2188
2189     def test_state_file(self):
2190         copy_unit_to_networkd_unit_path('12-dummy.netdev', 'state-file-tests.network')
2191         start_networkd()
2192         self.wait_online(['dummy98:routable'])
2193
2194         output = check_output(*networkctl_cmd, '--no-legend', 'list', 'dummy98', env=env)
2195         print(output)
2196         ifindex = output.split()[0]
2197
2198         path = os.path.join('/run/systemd/netif/links/', ifindex)
2199         self.assertTrue(os.path.exists(path))
2200         time.sleep(2)
2201
2202         with open(path) as f:
2203             data = f.read()
2204             self.assertRegex(data, r'ADMIN_STATE=configured')
2205             self.assertRegex(data, r'OPER_STATE=routable')
2206             self.assertRegex(data, r'REQUIRED_FOR_ONLINE=yes')
2207             self.assertRegex(data, r'REQUIRED_OPER_STATE_FOR_ONLINE=routable')
2208             self.assertRegex(data, r'NETWORK_FILE=/run/systemd/network/state-file-tests.network')
2209             self.assertRegex(data, r'DNS=10.10.10.10 10.10.10.11')
2210             self.assertRegex(data, r'NTP=0.fedora.pool.ntp.org 1.fedora.pool.ntp.org')
2211             self.assertRegex(data, r'DOMAINS=hogehoge')
2212             self.assertRegex(data, r'ROUTE_DOMAINS=foofoo')
2213             self.assertRegex(data, r'LLMNR=no')
2214             self.assertRegex(data, r'MDNS=yes')
2215             self.assertRegex(data, r'DNSSEC=no')
2216             self.assertRegex(data, r'ADDRESSES=192.168.(10.10|12.12)/24 192.168.(12.12|10.10)/24')
2217
2218         check_output(*resolvectl_cmd, 'dns', 'dummy98', '10.10.10.12', '10.10.10.13', env=env)
2219         check_output(*resolvectl_cmd, 'domain', 'dummy98', 'hogehogehoge', '~foofoofoo', env=env)
2220         check_output(*resolvectl_cmd, 'llmnr', 'dummy98', 'yes', env=env)
2221         check_output(*resolvectl_cmd, 'mdns', 'dummy98', 'no', env=env)
2222         check_output(*resolvectl_cmd, 'dnssec', 'dummy98', 'yes', env=env)
2223         check_output(*timedatectl_cmd, 'ntp-servers', 'dummy98', '2.fedora.pool.ntp.org', '3.fedora.pool.ntp.org', env=env)
2224         time.sleep(2)
2225
2226         with open(path) as f:
2227             data = f.read()
2228             self.assertRegex(data, r'DNS=10.10.10.12 10.10.10.13')
2229             self.assertRegex(data, r'NTP=2.fedora.pool.ntp.org 3.fedora.pool.ntp.org')
2230             self.assertRegex(data, r'DOMAINS=hogehogehoge')
2231             self.assertRegex(data, r'ROUTE_DOMAINS=foofoofoo')
2232             self.assertRegex(data, r'LLMNR=yes')
2233             self.assertRegex(data, r'MDNS=no')
2234             self.assertRegex(data, r'DNSSEC=yes')
2235
2236         check_output(*timedatectl_cmd, 'revert', 'dummy98', env=env)
2237         time.sleep(2)
2238
2239         with open(path) as f:
2240             data = f.read()
2241             self.assertRegex(data, r'DNS=10.10.10.12 10.10.10.13')
2242             self.assertRegex(data, r'NTP=0.fedora.pool.ntp.org 1.fedora.pool.ntp.org')
2243             self.assertRegex(data, r'DOMAINS=hogehogehoge')
2244             self.assertRegex(data, r'ROUTE_DOMAINS=foofoofoo')
2245             self.assertRegex(data, r'LLMNR=yes')
2246             self.assertRegex(data, r'MDNS=no')
2247             self.assertRegex(data, r'DNSSEC=yes')
2248
2249         check_output(*resolvectl_cmd, 'revert', 'dummy98', env=env)
2250         time.sleep(2)
2251
2252         with open(path) as f:
2253             data = f.read()
2254             self.assertRegex(data, r'DNS=10.10.10.10 10.10.10.11')
2255             self.assertRegex(data, r'NTP=0.fedora.pool.ntp.org 1.fedora.pool.ntp.org')
2256             self.assertRegex(data, r'DOMAINS=hogehoge')
2257             self.assertRegex(data, r'ROUTE_DOMAINS=foofoo')
2258             self.assertRegex(data, r'LLMNR=no')
2259             self.assertRegex(data, r'MDNS=yes')
2260             self.assertRegex(data, r'DNSSEC=no')
2261
2262 class NetworkdBondTests(unittest.TestCase, Utilities):
2263     links = [
2264         'bond199',
2265         'bond99',
2266         'dummy98',
2267         'test1']
2268
2269     units = [
2270         '11-dummy.netdev',
2271         '12-dummy.netdev',
2272         '23-active-slave.network',
2273         '23-bond199.network',
2274         '23-primary-slave.network',
2275         '25-bond-active-backup-slave.netdev',
2276         '25-bond.netdev',
2277         'bond99.network',
2278         'bond-slave.network']
2279
2280     def setUp(self):
2281         remove_links(self.links)
2282         stop_networkd(show_logs=False)
2283
2284     def tearDown(self):
2285         remove_links(self.links)
2286         remove_unit_from_networkd_path(self.units)
2287         stop_networkd(show_logs=True)
2288
2289     def test_bond_active_slave(self):
2290         copy_unit_to_networkd_unit_path('23-active-slave.network', '23-bond199.network', '25-bond-active-backup-slave.netdev', '12-dummy.netdev')
2291         start_networkd()
2292         self.wait_online(['dummy98:enslaved', 'bond199:degraded'])
2293
2294         output = check_output('ip -d link show bond199')
2295         print(output)
2296         self.assertRegex(output, 'active_slave dummy98')
2297
2298     def test_bond_primary_slave(self):
2299         copy_unit_to_networkd_unit_path('23-primary-slave.network', '23-bond199.network', '25-bond-active-backup-slave.netdev', '12-dummy.netdev')
2300         start_networkd()
2301         self.wait_online(['dummy98:enslaved', 'bond199:degraded'])
2302
2303         output = check_output('ip -d link show bond199')
2304         print(output)
2305         self.assertRegex(output, 'primary dummy98')
2306
2307     def test_bond_operstate(self):
2308         copy_unit_to_networkd_unit_path('25-bond.netdev', '11-dummy.netdev', '12-dummy.netdev',
2309                                         'bond99.network','bond-slave.network')
2310         start_networkd()
2311         self.wait_online(['dummy98:enslaved', 'test1:enslaved', 'bond99:routable'])
2312
2313         output = check_output('ip -d link show dummy98')
2314         print(output)
2315         self.assertRegex(output, 'SLAVE,UP,LOWER_UP')
2316
2317         output = check_output('ip -d link show test1')
2318         print(output)
2319         self.assertRegex(output, 'SLAVE,UP,LOWER_UP')
2320
2321         output = check_output('ip -d link show bond99')
2322         print(output)
2323         self.assertRegex(output, 'MASTER,UP,LOWER_UP')
2324
2325         self.check_operstate('dummy98', 'enslaved')
2326         self.check_operstate('test1', 'enslaved')
2327         self.check_operstate('bond99', 'routable')
2328
2329         check_output('ip link set dummy98 down')
2330         time.sleep(2)
2331
2332         self.check_operstate('dummy98', 'off')
2333         self.check_operstate('test1', 'enslaved')
2334         self.check_operstate('bond99', 'degraded-carrier')
2335
2336         check_output('ip link set dummy98 up')
2337         time.sleep(2)
2338
2339         self.check_operstate('dummy98', 'enslaved')
2340         self.check_operstate('test1', 'enslaved')
2341         self.check_operstate('bond99', 'routable')
2342
2343         check_output('ip link set dummy98 down')
2344         check_output('ip link set test1 down')
2345         time.sleep(2)
2346
2347         self.check_operstate('dummy98', 'off')
2348         self.check_operstate('test1', 'off')
2349
2350         for trial in range(30):
2351             if trial > 0:
2352                 time.sleep(1)
2353             output = check_output('ip address show bond99')
2354             print(output)
2355             if get_operstate('bond99') == 'no-carrier':
2356                 break
2357         else:
2358             # Huh? Kernel does not recognize that all slave interfaces are down?
2359             # Let's confirm that networkd's operstate is consistent with ip's result.
2360             self.assertNotRegex(output, 'NO-CARRIER')
2361
2362 class NetworkdBridgeTests(unittest.TestCase, Utilities):
2363     links = [
2364         'bridge99',
2365         'dummy98',
2366         'test1']
2367
2368     units = [
2369         '11-dummy.netdev',
2370         '12-dummy.netdev',
2371         '26-bridge.netdev',
2372         '26-bridge-slave-interface-1.network',
2373         '26-bridge-slave-interface-2.network',
2374         '26-bridge-vlan-master.network',
2375         '26-bridge-vlan-slave.network',
2376         'bridge99-ignore-carrier-loss.network',
2377         'bridge99.network']
2378
2379     routing_policy_rule_tables = ['100']
2380
2381     def setUp(self):
2382         remove_routing_policy_rule_tables(self.routing_policy_rule_tables)
2383         remove_links(self.links)
2384         stop_networkd(show_logs=False)
2385
2386     def tearDown(self):
2387         remove_routing_policy_rule_tables(self.routing_policy_rule_tables)
2388         remove_links(self.links)
2389         remove_unit_from_networkd_path(self.units)
2390         stop_networkd(show_logs=True)
2391
2392     def test_bridge_vlan(self):
2393         copy_unit_to_networkd_unit_path('11-dummy.netdev', '26-bridge-vlan-slave.network',
2394                                         '26-bridge.netdev', '26-bridge-vlan-master.network')
2395         start_networkd()
2396         self.wait_online(['test1:enslaved', 'bridge99:degraded'])
2397
2398         output = check_output('bridge vlan show dev test1')
2399         print(output)
2400         self.assertNotRegex(output, '4063')
2401         for i in range(4064, 4095):
2402             self.assertRegex(output, f'{i}')
2403         self.assertNotRegex(output, '4095')
2404
2405         output = check_output('bridge vlan show dev bridge99')
2406         print(output)
2407         self.assertNotRegex(output, '4059')
2408         for i in range(4060, 4095):
2409             self.assertRegex(output, f'{i}')
2410         self.assertNotRegex(output, '4095')
2411
2412     def test_bridge_property(self):
2413         copy_unit_to_networkd_unit_path('11-dummy.netdev', '12-dummy.netdev', '26-bridge.netdev',
2414                                         '26-bridge-slave-interface-1.network', '26-bridge-slave-interface-2.network',
2415                                         'bridge99.network')
2416         start_networkd()
2417         self.wait_online(['dummy98:enslaved', 'test1:enslaved', 'bridge99:routable'])
2418
2419         output = check_output('ip -d link show test1')
2420         print(output)
2421         self.assertRegex(output, 'master')
2422         self.assertRegex(output, 'bridge')
2423
2424         output = check_output('ip -d link show dummy98')
2425         print(output)
2426         self.assertRegex(output, 'master')
2427         self.assertRegex(output, 'bridge')
2428
2429         output = check_output('ip addr show bridge99')
2430         print(output)
2431         self.assertRegex(output, '192.168.0.15/24')
2432
2433         output = check_output('bridge -d link show dummy98')
2434         print(output)
2435         self.assertEqual(read_bridge_port_attr('bridge99', 'dummy98', 'path_cost'), '400')
2436         self.assertEqual(read_bridge_port_attr('bridge99', 'dummy98', 'hairpin_mode'), '1')
2437         self.assertEqual(read_bridge_port_attr('bridge99', 'dummy98', 'multicast_fast_leave'), '1')
2438         self.assertEqual(read_bridge_port_attr('bridge99', 'dummy98', 'unicast_flood'), '1')
2439         self.assertEqual(read_bridge_port_attr('bridge99', 'dummy98', 'multicast_flood'), '0')
2440         # CONFIG_BRIDGE_IGMP_SNOOPING=y
2441         if (os.path.exists('/sys/devices/virtual/net/bridge00/lower_dummy98/brport/multicast_to_unicast')):
2442             self.assertEqual(read_bridge_port_attr('bridge99', 'dummy98', 'multicast_to_unicast'), '1')
2443         if (os.path.exists('/sys/devices/virtual/net/bridge99/lower_dummy98/brport/neigh_suppress')):
2444             self.assertEqual(read_bridge_port_attr('bridge99', 'dummy98', 'neigh_suppress'), '1')
2445         self.assertEqual(read_bridge_port_attr('bridge99', 'dummy98', 'learning'), '0')
2446         self.assertEqual(read_bridge_port_attr('bridge99', 'dummy98', 'priority'), '23')
2447         self.assertEqual(read_bridge_port_attr('bridge99', 'dummy98', 'bpdu_guard'), '1')
2448         self.assertEqual(read_bridge_port_attr('bridge99', 'dummy98', 'root_block'), '1')
2449
2450         output = check_output('bridge -d link show test1')
2451         print(output)
2452         self.assertEqual(read_bridge_port_attr('bridge99', 'test1', 'priority'), '0')
2453
2454         check_output('ip address add 192.168.0.16/24 dev bridge99')
2455         time.sleep(1)
2456
2457         output = check_output('ip addr show bridge99')
2458         print(output)
2459         self.assertRegex(output, '192.168.0.16/24')
2460
2461         # for issue #6088
2462         print('### ip -6 route list table all dev bridge99')
2463         output = check_output('ip -6 route list table all dev bridge99')
2464         print(output)
2465         self.assertRegex(output, 'ff00::/8 table local metric 256 pref medium')
2466
2467         self.assertEqual(call('ip link del test1'), 0)
2468         time.sleep(3)
2469
2470         self.check_operstate('bridge99', 'degraded-carrier')
2471
2472         check_output('ip link del dummy98')
2473         time.sleep(3)
2474
2475         self.check_operstate('bridge99', 'no-carrier')
2476
2477         output = check_output('ip address show bridge99')
2478         print(output)
2479         self.assertRegex(output, 'NO-CARRIER')
2480         self.assertNotRegex(output, '192.168.0.15/24')
2481         self.assertNotRegex(output, '192.168.0.16/24')
2482
2483         print('### ip -6 route list table all dev bridge99')
2484         output = check_output('ip -6 route list table all dev bridge99')
2485         print(output)
2486         self.assertRegex(output, 'ff00::/8 table local metric 256 (linkdown )?pref medium')
2487
2488     def test_bridge_ignore_carrier_loss(self):
2489         copy_unit_to_networkd_unit_path('11-dummy.netdev', '12-dummy.netdev', '26-bridge.netdev',
2490                                         '26-bridge-slave-interface-1.network', '26-bridge-slave-interface-2.network',
2491                                         'bridge99-ignore-carrier-loss.network')
2492         start_networkd()
2493         self.wait_online(['dummy98:enslaved', 'test1:enslaved', 'bridge99:routable'])
2494
2495         check_output('ip address add 192.168.0.16/24 dev bridge99')
2496         time.sleep(1)
2497
2498         check_output('ip link del test1')
2499         check_output('ip link del dummy98')
2500         time.sleep(3)
2501
2502         output = check_output('ip address show bridge99')
2503         print(output)
2504         self.assertRegex(output, 'NO-CARRIER')
2505         self.assertRegex(output, 'inet 192.168.0.15/24 brd 192.168.0.255 scope global bridge99')
2506         self.assertRegex(output, 'inet 192.168.0.16/24 scope global secondary bridge99')
2507
2508     def test_bridge_ignore_carrier_loss_frequent_loss_and_gain(self):
2509         copy_unit_to_networkd_unit_path('26-bridge.netdev', '26-bridge-slave-interface-1.network',
2510                                         'bridge99-ignore-carrier-loss.network')
2511         start_networkd()
2512         self.wait_online(['bridge99:no-carrier'])
2513
2514         for trial in range(4):
2515             check_output('ip link add dummy98 type dummy')
2516             check_output('ip link set dummy98 up')
2517             if trial < 3:
2518                 check_output('ip link del dummy98')
2519
2520         self.wait_online(['bridge99:routable', 'dummy98:enslaved'])
2521
2522         output = check_output('ip address show bridge99')
2523         print(output)
2524         self.assertRegex(output, 'inet 192.168.0.15/24 brd 192.168.0.255 scope global bridge99')
2525
2526         output = check_output('ip rule list table 100')
2527         print(output)
2528         self.assertEqual(output, '0:    from all to 8.8.8.8 lookup 100')
2529
2530 class NetworkdLLDPTests(unittest.TestCase, Utilities):
2531     links = ['veth99']
2532
2533     units = [
2534         '23-emit-lldp.network',
2535         '24-lldp.network',
2536         '25-veth.netdev']
2537
2538     def setUp(self):
2539         remove_links(self.links)
2540         stop_networkd(show_logs=False)
2541
2542     def tearDown(self):
2543         remove_links(self.links)
2544         remove_unit_from_networkd_path(self.units)
2545         stop_networkd(show_logs=True)
2546
2547     def test_lldp(self):
2548         copy_unit_to_networkd_unit_path('23-emit-lldp.network', '24-lldp.network', '25-veth.netdev')
2549         start_networkd()
2550         self.wait_online(['veth99:degraded', 'veth-peer:degraded'])
2551
2552         output = check_output(*networkctl_cmd, 'lldp', env=env)
2553         print(output)
2554         self.assertRegex(output, 'veth-peer')
2555         self.assertRegex(output, 'veth99')
2556
2557 class NetworkdRATests(unittest.TestCase, Utilities):
2558     links = ['veth99']
2559
2560     units = [
2561         '25-veth.netdev',
2562         'ipv6-prefix.network',
2563         'ipv6-prefix-veth.network']
2564
2565     def setUp(self):
2566         remove_links(self.links)
2567         stop_networkd(show_logs=False)
2568
2569     def tearDown(self):
2570         remove_links(self.links)
2571         remove_unit_from_networkd_path(self.units)
2572         stop_networkd(show_logs=True)
2573
2574     def test_ipv6_prefix_delegation(self):
2575         copy_unit_to_networkd_unit_path('25-veth.netdev', 'ipv6-prefix.network', 'ipv6-prefix-veth.network')
2576         start_networkd()
2577         self.wait_online(['veth99:routable', 'veth-peer:degraded'])
2578
2579         output = check_output(*networkctl_cmd, 'status', 'veth99', env=env)
2580         print(output)
2581         self.assertRegex(output, '2002:da8:1:0')
2582
2583 class NetworkdDHCPServerTests(unittest.TestCase, Utilities):
2584     links = ['veth99']
2585
2586     units = [
2587         '25-veth.netdev',
2588         'dhcp-client.network',
2589         'dhcp-client-timezone-router.network',
2590         'dhcp-server.network',
2591         'dhcp-server-timezone-router.network']
2592
2593     def setUp(self):
2594         remove_links(self.links)
2595         stop_networkd(show_logs=False)
2596
2597     def tearDown(self):
2598         remove_links(self.links)
2599         remove_unit_from_networkd_path(self.units)
2600         stop_networkd(show_logs=True)
2601
2602     def test_dhcp_server(self):
2603         copy_unit_to_networkd_unit_path('25-veth.netdev', 'dhcp-client.network', 'dhcp-server.network')
2604         start_networkd()
2605         self.wait_online(['veth99:routable', 'veth-peer:routable'])
2606
2607         output = check_output(*networkctl_cmd, 'status', 'veth99', env=env)
2608         print(output)
2609         self.assertRegex(output, '192.168.5.*')
2610         self.assertRegex(output, 'Gateway: 192.168.5.1')
2611         self.assertRegex(output, 'DNS: 192.168.5.1')
2612         self.assertRegex(output, 'NTP: 192.168.5.1')
2613
2614     def test_emit_router_timezone(self):
2615         copy_unit_to_networkd_unit_path('25-veth.netdev', 'dhcp-client-timezone-router.network', 'dhcp-server-timezone-router.network')
2616         start_networkd()
2617         self.wait_online(['veth99:routable', 'veth-peer:routable'])
2618
2619         output = check_output(*networkctl_cmd, 'status', 'veth99', env=env)
2620         print(output)
2621         self.assertRegex(output, 'Gateway: 192.168.5.*')
2622         self.assertRegex(output, '192.168.5.*')
2623         self.assertRegex(output, 'Europe/Berlin')
2624
2625 class NetworkdDHCPClientTests(unittest.TestCase, Utilities):
2626     links = [
2627         'veth99',
2628         'vrf99']
2629
2630     units = [
2631         '25-veth.netdev',
2632         '25-vrf.netdev',
2633         '25-vrf.network',
2634         'dhcp-client-anonymize.network',
2635         'dhcp-client-gateway-onlink-implicit.network',
2636         'dhcp-client-ipv4-dhcp-settings.network',
2637         'dhcp-client-ipv4-only-ipv6-disabled.network',
2638         'dhcp-client-ipv4-only.network',
2639         'dhcp-client-ipv6-only.network',
2640         'dhcp-client-ipv6-rapid-commit.network',
2641         'dhcp-client-keep-configuration-dhcp-on-stop.network',
2642         'dhcp-client-keep-configuration-dhcp.network',
2643         'dhcp-client-listen-port.network',
2644         'dhcp-client-reassign-static-routes-ipv4.network',
2645         'dhcp-client-reassign-static-routes-ipv6.network',
2646         'dhcp-client-route-metric.network',
2647         'dhcp-client-route-table.network',
2648         'dhcp-client-use-dns-ipv4-and-ra.network',
2649         'dhcp-client-use-dns-ipv4.network',
2650         'dhcp-client-use-dns-no.network',
2651         'dhcp-client-use-dns-yes.network',
2652         'dhcp-client-use-domains.network',
2653         'dhcp-client-use-routes-no.network',
2654         'dhcp-client-vrf.network',
2655         'dhcp-client-with-ipv4ll-fallback-with-dhcp-server.network',
2656         'dhcp-client-with-ipv4ll-fallback-without-dhcp-server.network',
2657         'dhcp-client-with-static-address.network',
2658         'dhcp-client.network',
2659         'dhcp-server-veth-peer.network',
2660         'dhcp-v4-server-veth-peer.network',
2661         'dhcp-client-use-domains.network',
2662         'static.network']
2663
2664     def setUp(self):
2665         stop_dnsmasq(dnsmasq_pid_file)
2666         remove_links(self.links)
2667         stop_networkd(show_logs=False)
2668
2669     def tearDown(self):
2670         stop_dnsmasq(dnsmasq_pid_file)
2671         remove_lease_file()
2672         remove_log_file()
2673         remove_links(self.links)
2674         remove_unit_from_networkd_path(self.units)
2675         stop_networkd(show_logs=True)
2676
2677     def test_dhcp_client_ipv6_only(self):
2678         copy_unit_to_networkd_unit_path('25-veth.netdev', 'dhcp-server-veth-peer.network', 'dhcp-client-ipv6-only.network')
2679
2680         start_networkd()
2681         self.wait_online(['veth-peer:carrier'])
2682         start_dnsmasq()
2683         self.wait_online(['veth99:routable', 'veth-peer:routable'])
2684
2685         output = check_output(*networkctl_cmd, 'status', 'veth99', env=env)
2686         print(output)
2687         self.assertRegex(output, '2600::')
2688         self.assertNotRegex(output, '192.168.5')
2689
2690         # Confirm that ipv6 token is not set in the kernel
2691         output = check_output('ip token show dev veth99')
2692         print(output)
2693         self.assertRegex(output, 'token :: dev veth99')
2694
2695     def test_dhcp_client_ipv4_only(self):
2696         copy_unit_to_networkd_unit_path('25-veth.netdev', 'dhcp-server-veth-peer.network', 'dhcp-client-ipv4-only-ipv6-disabled.network')
2697
2698         start_networkd()
2699         self.wait_online(['veth-peer:carrier'])
2700         start_dnsmasq(additional_options='--dhcp-option=option:dns-server,192.168.5.6,192.168.5.7', lease_time='2m')
2701         self.wait_online(['veth99:routable', 'veth-peer:routable'])
2702
2703         output = check_output(*networkctl_cmd, 'status', 'veth99', env=env)
2704         print(output)
2705         self.assertNotRegex(output, '2600::')
2706         self.assertRegex(output, '192.168.5')
2707         self.assertRegex(output, '192.168.5.6')
2708         self.assertRegex(output, '192.168.5.7')
2709
2710         # checking routes to DNS servers
2711         output = check_output('ip route show dev veth99')
2712         print(output)
2713         self.assertRegex(output, r'192.168.5.1 proto dhcp scope link src 192.168.5.181 metric 1024')
2714         self.assertRegex(output, r'192.168.5.6 proto dhcp scope link src 192.168.5.181 metric 1024')
2715         self.assertRegex(output, r'192.168.5.7 proto dhcp scope link src 192.168.5.181 metric 1024')
2716
2717         stop_dnsmasq(dnsmasq_pid_file)
2718         start_dnsmasq(additional_options='--dhcp-option=option:dns-server,192.168.5.1,192.168.5.7,192.168.5.8', lease_time='2m')
2719
2720         # Sleep for 120 sec as the dnsmasq minimum lease time can only be set to 120
2721         print('Wait for the dynamic address to be renewed')
2722         time.sleep(125)
2723
2724         self.wait_online(['veth99:routable', 'veth-peer:routable'])
2725
2726         output = check_output(*networkctl_cmd, 'status', 'veth99', env=env)
2727         print(output)
2728         self.assertNotRegex(output, '2600::')
2729         self.assertRegex(output, '192.168.5')
2730         self.assertNotRegex(output, '192.168.5.6')
2731         self.assertRegex(output, '192.168.5.7')
2732         self.assertRegex(output, '192.168.5.8')
2733
2734         # checking routes to DNS servers
2735         output = check_output('ip route show dev veth99')
2736         print(output)
2737         self.assertNotRegex(output, r'192.168.5.6')
2738         self.assertRegex(output, r'192.168.5.1 proto dhcp scope link src 192.168.5.181 metric 1024')
2739         self.assertRegex(output, r'192.168.5.7 proto dhcp scope link src 192.168.5.181 metric 1024')
2740         self.assertRegex(output, r'192.168.5.8 proto dhcp scope link src 192.168.5.181 metric 1024')
2741
2742     def test_dhcp_client_ipv4_ipv6(self):
2743         copy_unit_to_networkd_unit_path('25-veth.netdev', 'dhcp-server-veth-peer.network', 'dhcp-client-ipv6-only.network',
2744                                         'dhcp-client-ipv4-only.network')
2745         start_networkd()
2746         self.wait_online(['veth-peer:carrier'])
2747         start_dnsmasq()
2748         self.wait_online(['veth99:routable', 'veth-peer:routable'])
2749
2750         # link become 'routable' when at least one protocol provide an valid address.
2751         self.wait_address('veth99', r'inet 192.168.5.[0-9]*/24 brd 192.168.5.255 scope global dynamic', ipv='-4')
2752         self.wait_address('veth99', r'inet6 2600::[0-9a-f]*/128 scope global (dynamic noprefixroute|noprefixroute dynamic)', ipv='-6')
2753
2754         output = check_output(*networkctl_cmd, 'status', 'veth99', env=env)
2755         print(output)
2756         self.assertRegex(output, '2600::')
2757         self.assertRegex(output, '192.168.5')
2758
2759     def test_dhcp_client_settings(self):
2760         copy_unit_to_networkd_unit_path('25-veth.netdev', 'dhcp-server-veth-peer.network', 'dhcp-client-ipv4-dhcp-settings.network')
2761
2762         start_networkd()
2763         self.wait_online(['veth-peer:carrier'])
2764         start_dnsmasq()
2765         self.wait_online(['veth99:routable', 'veth-peer:routable'])
2766
2767         print('## ip address show dev veth99')
2768         output = check_output('ip address show dev veth99')
2769         print(output)
2770         self.assertRegex(output, '12:34:56:78:9a:bc')
2771         self.assertRegex(output, '192.168.5')
2772         self.assertRegex(output, '1492')
2773
2774         print('## ip route show table main dev veth99')
2775         output = check_output('ip route show table main dev veth99')
2776         print(output)
2777         # See issue #8726
2778         main_table_is_empty = output == ''
2779         if not main_table_is_empty:
2780             self.assertNotRegex(output, 'proto dhcp')
2781
2782         print('## ip route show table 211 dev veth99')
2783         output = check_output('ip route show table 211 dev veth99')
2784         print(output)
2785         self.assertRegex(output, 'default via 192.168.5.1 proto dhcp')
2786         if main_table_is_empty:
2787             self.assertRegex(output, '192.168.5.0/24 proto dhcp')
2788         self.assertRegex(output, '192.168.5.0/24 via 192.168.5.5 proto dhcp')
2789         self.assertRegex(output, '192.168.5.1 proto dhcp scope link')
2790
2791         print('## dnsmasq log')
2792         self.assertTrue(search_words_in_dnsmasq_log('vendor class: SusantVendorTest', True))
2793         self.assertTrue(search_words_in_dnsmasq_log('DHCPDISCOVER(veth-peer) 12:34:56:78:9a:bc'))
2794         self.assertTrue(search_words_in_dnsmasq_log('client provides name: test-hostname'))
2795         self.assertTrue(search_words_in_dnsmasq_log('26:mtu'))
2796
2797     def test_dhcp6_client_settings_rapidcommit_true(self):
2798         copy_unit_to_networkd_unit_path('25-veth.netdev', 'dhcp-server-veth-peer.network', 'dhcp-client-ipv6-only.network')
2799         start_networkd()
2800         self.wait_online(['veth-peer:carrier'])
2801         start_dnsmasq()
2802         self.wait_online(['veth99:routable', 'veth-peer:routable'])
2803
2804         output = check_output('ip address show dev veth99')
2805         print(output)
2806         self.assertRegex(output, '12:34:56:78:9a:bc')
2807         self.assertTrue(search_words_in_dnsmasq_log('14:rapid-commit', True))
2808
2809     def test_dhcp6_client_settings_rapidcommit_false(self):
2810         copy_unit_to_networkd_unit_path('25-veth.netdev', 'dhcp-server-veth-peer.network', 'dhcp-client-ipv6-rapid-commit.network')
2811         start_networkd()
2812         self.wait_online(['veth-peer:carrier'])
2813         start_dnsmasq()
2814         self.wait_online(['veth99:routable', 'veth-peer:routable'])
2815
2816         output = check_output('ip address show dev veth99')
2817         print(output)
2818         self.assertRegex(output, '12:34:56:78:9a:bc')
2819         self.assertFalse(search_words_in_dnsmasq_log('14:rapid-commit', True))
2820
2821     def test_dhcp_client_settings_anonymize(self):
2822         copy_unit_to_networkd_unit_path('25-veth.netdev', 'dhcp-server-veth-peer.network', 'dhcp-client-anonymize.network')
2823         start_networkd()
2824         self.wait_online(['veth-peer:carrier'])
2825         start_dnsmasq()
2826         self.wait_online(['veth99:routable', 'veth-peer:routable'])
2827
2828         self.assertFalse(search_words_in_dnsmasq_log('VendorClassIdentifier=SusantVendorTest', True))
2829         self.assertFalse(search_words_in_dnsmasq_log('test-hostname'))
2830         self.assertFalse(search_words_in_dnsmasq_log('26:mtu'))
2831
2832     def test_dhcp_client_listen_port(self):
2833         copy_unit_to_networkd_unit_path('25-veth.netdev', 'dhcp-server-veth-peer.network', 'dhcp-client-listen-port.network')
2834         start_networkd()
2835         self.wait_online(['veth-peer:carrier'])
2836         start_dnsmasq('--dhcp-alternate-port=67,5555')
2837         self.wait_online(['veth99:routable', 'veth-peer:routable'])
2838
2839         output = check_output('ip -4 address show dev veth99')
2840         print(output)
2841         self.assertRegex(output, '192.168.5.* dynamic')
2842
2843     def test_dhcp_client_with_static_address(self):
2844         copy_unit_to_networkd_unit_path('25-veth.netdev', 'dhcp-v4-server-veth-peer.network',
2845                                         'dhcp-client-with-static-address.network')
2846         start_networkd()
2847         self.wait_online(['veth-peer:carrier'])
2848         start_dnsmasq()
2849         self.wait_online(['veth99:routable', 'veth-peer:routable'])
2850
2851         output = check_output('ip address show dev veth99 scope global')
2852         print(output)
2853         self.assertRegex(output, r'inet 192.168.5.250/24 brd 192.168.5.255 scope global veth99')
2854         self.assertRegex(output, r'inet 192.168.5.[0-9]*/24 brd 192.168.5.255 scope global secondary dynamic veth99')
2855
2856         output = check_output('ip route show dev veth99')
2857         print(output)
2858         self.assertRegex(output, r'default via 192.168.5.1 proto dhcp src 192.168.5.[0-9]* metric 1024')
2859         self.assertRegex(output, r'192.168.5.0/24 proto kernel scope link src 192.168.5.250')
2860         self.assertRegex(output, r'192.168.5.0/24 via 192.168.5.5 proto dhcp src 192.168.5.[0-9]* metric 1024')
2861         self.assertRegex(output, r'192.168.5.1 proto dhcp scope link src 192.168.5.[0-9]* metric 1024')
2862
2863     def test_dhcp_route_table_id(self):
2864         copy_unit_to_networkd_unit_path('25-veth.netdev', 'dhcp-v4-server-veth-peer.network', 'dhcp-client-route-table.network')
2865         start_networkd()
2866         self.wait_online(['veth-peer:carrier'])
2867         start_dnsmasq()
2868         self.wait_online(['veth99:routable', 'veth-peer:routable'])
2869
2870         output = check_output('ip route show table 12')
2871         print(output)
2872         self.assertRegex(output, 'veth99 proto dhcp')
2873         self.assertRegex(output, '192.168.5.1')
2874
2875     def test_dhcp_route_metric(self):
2876         copy_unit_to_networkd_unit_path('25-veth.netdev', 'dhcp-v4-server-veth-peer.network', 'dhcp-client-route-metric.network')
2877         start_networkd()
2878         self.wait_online(['veth-peer:carrier'])
2879         start_dnsmasq()
2880         self.wait_online(['veth99:routable', 'veth-peer:routable'])
2881
2882         output = check_output('ip route show dev veth99')
2883         print(output)
2884         self.assertRegex(output, 'metric 24')
2885
2886     def test_dhcp_client_reassign_static_routes_ipv4(self):
2887         copy_unit_to_networkd_unit_path('25-veth.netdev', 'dhcp-server-veth-peer.network',
2888                                         'dhcp-client-reassign-static-routes-ipv4.network')
2889         start_networkd()
2890         self.wait_online(['veth-peer:carrier'])
2891         start_dnsmasq(lease_time='2m')
2892         self.wait_online(['veth99:routable', 'veth-peer:routable'])
2893
2894         output = check_output('ip address show dev veth99 scope global')
2895         print(output)
2896         self.assertRegex(output, r'inet 192.168.5.[0-9]*/24 brd 192.168.5.255 scope global dynamic veth99')
2897
2898         output = check_output('ip route show dev veth99')
2899         print(output)
2900         self.assertRegex(output, r'192.168.5.0/24 proto kernel scope link src 192.168.5.[0-9]*')
2901         self.assertRegex(output, r'192.168.5.0/24 proto static')
2902         self.assertRegex(output, r'192.168.6.0/24 proto static')
2903         self.assertRegex(output, r'192.168.7.0/24 proto static')
2904
2905         stop_dnsmasq(dnsmasq_pid_file)
2906         start_dnsmasq(ipv4_range='192.168.5.210,192.168.5.220', lease_time='2m')
2907
2908         # Sleep for 120 sec as the dnsmasq minimum lease time can only be set to 120
2909         print('Wait for the dynamic address to be renewed')
2910         time.sleep(125)
2911
2912         self.wait_online(['veth99:routable'])
2913
2914         output = check_output('ip route show dev veth99')
2915         print(output)
2916         self.assertRegex(output, r'192.168.5.0/24 proto kernel scope link src 192.168.5.[0-9]*')
2917         self.assertRegex(output, r'192.168.5.0/24 proto static')
2918         self.assertRegex(output, r'192.168.6.0/24 proto static')
2919         self.assertRegex(output, r'192.168.7.0/24 proto static')
2920
2921     def test_dhcp_client_reassign_static_routes_ipv6(self):
2922         copy_unit_to_networkd_unit_path('25-veth.netdev', 'dhcp-server-veth-peer.network',
2923                                         'dhcp-client-reassign-static-routes-ipv6.network')
2924         start_networkd()
2925         self.wait_online(['veth-peer:carrier'])
2926         start_dnsmasq(lease_time='2m')
2927         self.wait_online(['veth99:routable', 'veth-peer:routable'])
2928
2929         output = check_output('ip address show dev veth99 scope global')
2930         print(output)
2931         self.assertRegex(output, r'inet6 2600::[0-9a-f]*/128 scope global (noprefixroute dynamic|dynamic noprefixroute)')
2932
2933         output = check_output('ip -6 route show dev veth99')
2934         print(output)
2935         self.assertRegex(output, r'2600::/64 proto ra metric 1024')
2936         self.assertRegex(output, r'2600:0:0:1::/64 proto static metric 1024 pref medium')
2937
2938         stop_dnsmasq(dnsmasq_pid_file)
2939         start_dnsmasq(ipv6_range='2600::30,2600::40', lease_time='2m')
2940
2941         # Sleep for 120 sec as the dnsmasq minimum lease time can only be set to 120
2942         print('Wait for the dynamic address to be renewed')
2943         time.sleep(125)
2944
2945         self.wait_online(['veth99:routable'])
2946
2947         output = check_output('ip -6 route show dev veth99')
2948         print(output)
2949         self.assertRegex(output, r'2600::/64 proto ra metric 1024')
2950         self.assertRegex(output, r'2600:0:0:1::/64 proto static metric 1024 pref medium')
2951
2952     def test_dhcp_keep_configuration_dhcp(self):
2953         copy_unit_to_networkd_unit_path('25-veth.netdev', 'dhcp-v4-server-veth-peer.network', 'dhcp-client-keep-configuration-dhcp.network')
2954         start_networkd()
2955         self.wait_online(['veth-peer:carrier'])
2956         start_dnsmasq(lease_time='2m')
2957         self.wait_online(['veth99:routable', 'veth-peer:routable'])
2958
2959         output = check_output('ip address show dev veth99 scope global')
2960         print(output)
2961         self.assertRegex(output, r'192.168.5.*')
2962
2963         output = check_output(*networkctl_cmd, 'status', 'veth99', env=env)
2964         print(output)
2965         self.assertRegex(output, r'192.168.5.*')
2966
2967         # Stopping dnsmasq as networkd won't be allowed to renew the DHCP lease.
2968         stop_dnsmasq(dnsmasq_pid_file)
2969
2970         # Sleep for 120 sec as the dnsmasq minimum lease time can only be set to 120
2971         print('Wait for the dynamic address to be expired')
2972         time.sleep(125)
2973
2974         print('The lease address should be kept after lease expired')
2975         output = check_output('ip address show dev veth99 scope global')
2976         print(output)
2977         self.assertRegex(output, r'192.168.5.*')
2978
2979         output = check_output(*networkctl_cmd, 'status', 'veth99', env=env)
2980         print(output)
2981         self.assertRegex(output, r'192.168.5.*')
2982
2983         check_output('systemctl stop systemd-networkd')
2984
2985         print('The lease address should be kept after networkd stopped')
2986         output = check_output('ip address show dev veth99 scope global')
2987         print(output)
2988         self.assertRegex(output, r'192.168.5.*')
2989
2990         output = check_output(*networkctl_cmd, 'status', 'veth99', env=env)
2991         print(output)
2992         self.assertRegex(output, r'192.168.5.*')
2993
2994         start_networkd(3)
2995         self.wait_online(['veth-peer:routable'])
2996
2997         print('Still the lease address should be kept after networkd restarted')
2998         output = check_output('ip address show dev veth99 scope global')
2999         print(output)
3000         self.assertRegex(output, r'192.168.5.*')
3001
3002         output = check_output(*networkctl_cmd, 'status', 'veth99', env=env)
3003         print(output)
3004         self.assertRegex(output, r'192.168.5.*')
3005
3006     def test_dhcp_keep_configuration_dhcp_on_stop(self):
3007         copy_unit_to_networkd_unit_path('25-veth.netdev', 'dhcp-v4-server-veth-peer.network', 'dhcp-client-keep-configuration-dhcp-on-stop.network')
3008         start_networkd()
3009         self.wait_online(['veth-peer:carrier'])
3010         start_dnsmasq(lease_time='2m')
3011         self.wait_online(['veth99:routable', 'veth-peer:routable'])
3012
3013         output = check_output('ip address show dev veth99 scope global')
3014         print(output)
3015         self.assertRegex(output, r'192.168.5.*')
3016
3017         stop_dnsmasq(dnsmasq_pid_file)
3018         check_output('systemctl stop systemd-networkd')
3019
3020         output = check_output('ip address show dev veth99 scope global')
3021         print(output)
3022         self.assertRegex(output, r'192.168.5.*')
3023
3024         restart_networkd(3)
3025         self.wait_online(['veth-peer:routable'])
3026
3027         output = check_output('ip address show dev veth99 scope global')
3028         print(output)
3029         self.assertNotRegex(output, r'192.168.5.*')
3030
3031     def test_dhcp_client_reuse_address_as_static(self):
3032         copy_unit_to_networkd_unit_path('25-veth.netdev', 'dhcp-server-veth-peer.network', 'dhcp-client.network')
3033         start_networkd()
3034         self.wait_online(['veth-peer:carrier'])
3035         start_dnsmasq()
3036         self.wait_online(['veth99:routable', 'veth-peer:routable'])
3037
3038         # link become 'routable' when at least one protocol provide an valid address.
3039         self.wait_address('veth99', r'inet 192.168.5.[0-9]*/24 brd 192.168.5.255 scope global dynamic', ipv='-4')
3040         self.wait_address('veth99', r'inet6 2600::[0-9a-f]*/128 scope global (dynamic noprefixroute|noprefixroute dynamic)', ipv='-6')
3041
3042         output = check_output('ip address show dev veth99 scope global')
3043         print(output)
3044         self.assertRegex(output, '192.168.5')
3045         self.assertRegex(output, '2600::')
3046
3047         ipv4_address = re.search(r'192.168.5.[0-9]*/24', output)
3048         ipv6_address = re.search(r'2600::[0-9a-f:]*/128', output)
3049         static_network = '\n'.join(['[Match]', 'Name=veth99', '[Network]', 'IPv6AcceptRA=no', 'Address=' + ipv4_address.group(), 'Address=' + ipv6_address.group()])
3050         print(static_network)
3051
3052         remove_unit_from_networkd_path(['dhcp-client.network'])
3053
3054         with open(os.path.join(network_unit_file_path, 'static.network'), mode='w') as f:
3055             f.write(static_network)
3056
3057         # When networkd started, the links are already configured, so let's wait for 5 seconds
3058         # the links to be re-configured.
3059         restart_networkd(5)
3060         self.wait_online(['veth99:routable', 'veth-peer:routable'])
3061
3062         output = check_output('ip -4 address show dev veth99 scope global')
3063         print(output)
3064         self.assertRegex(output, '192.168.5')
3065         self.assertRegex(output, 'valid_lft forever preferred_lft forever')
3066
3067         output = check_output('ip -6 address show dev veth99 scope global')
3068         print(output)
3069         self.assertRegex(output, '2600::')
3070         self.assertRegex(output, 'valid_lft forever preferred_lft forever')
3071
3072     @expectedFailureIfModuleIsNotAvailable('vrf')
3073     def test_dhcp_client_vrf(self):
3074         copy_unit_to_networkd_unit_path('25-veth.netdev', 'dhcp-server-veth-peer.network', 'dhcp-client-vrf.network',
3075                                         '25-vrf.netdev', '25-vrf.network')
3076         start_networkd()
3077         self.wait_online(['veth-peer:carrier'])
3078         start_dnsmasq()
3079         self.wait_online(['veth99:routable', 'veth-peer:routable', 'vrf99:carrier'])
3080
3081         # link become 'routable' when at least one protocol provide an valid address.
3082         self.wait_address('veth99', r'inet 192.168.5.[0-9]*/24 brd 192.168.5.255 scope global dynamic', ipv='-4')
3083         self.wait_address('veth99', r'inet6 2600::[0-9a-f]*/128 scope global (dynamic noprefixroute|noprefixroute dynamic)', ipv='-6')
3084
3085         print('## ip -d link show dev vrf99')
3086         output = check_output('ip -d link show dev vrf99')
3087         print(output)
3088         self.assertRegex(output, 'vrf table 42')
3089
3090         print('## ip address show vrf vrf99')
3091         output = check_output('ip address show vrf vrf99')
3092         print(output)
3093         self.assertRegex(output, 'inet 169.254.[0-9]*.[0-9]*/16 brd 169.254.255.255 scope link veth99')
3094         self.assertRegex(output, 'inet 192.168.5.[0-9]*/24 brd 192.168.5.255 scope global dynamic veth99')
3095         self.assertRegex(output, 'inet6 2600::[0-9a-f]*/128 scope global (dynamic noprefixroute|noprefixroute dynamic)')
3096         self.assertRegex(output, 'inet6 .* scope link')
3097
3098         print('## ip address show dev veth99')
3099         output = check_output('ip address show dev veth99')
3100         print(output)
3101         self.assertRegex(output, 'inet 169.254.[0-9]*.[0-9]*/16 brd 169.254.255.255 scope link veth99')
3102         self.assertRegex(output, 'inet 192.168.5.[0-9]*/24 brd 192.168.5.255 scope global dynamic veth99')
3103         self.assertRegex(output, 'inet6 2600::[0-9a-f]*/128 scope global (dynamic noprefixroute|noprefixroute dynamic)')
3104         self.assertRegex(output, 'inet6 .* scope link')
3105
3106         print('## ip route show vrf vrf99')
3107         output = check_output('ip route show vrf vrf99')
3108         print(output)
3109         self.assertRegex(output, 'default via 192.168.5.1 dev veth99 proto dhcp src 192.168.5.')
3110         self.assertRegex(output, '169.254.0.0/16 dev veth99 proto kernel scope link src 169.254')
3111         self.assertRegex(output, '192.168.5.0/24 dev veth99 proto kernel scope link src 192.168.5')
3112         self.assertRegex(output, '192.168.5.0/24 via 192.168.5.5 dev veth99 proto dhcp')
3113         self.assertRegex(output, '192.168.5.1 dev veth99 proto dhcp scope link src 192.168.5')
3114
3115         print('## ip route show table main dev veth99')
3116         output = check_output('ip route show table main dev veth99')
3117         print(output)
3118         self.assertEqual(output, '')
3119
3120     def test_dhcp_client_gateway_onlink_implicit(self):
3121         copy_unit_to_networkd_unit_path('25-veth.netdev', 'dhcp-server-veth-peer.network',
3122                                         'dhcp-client-gateway-onlink-implicit.network')
3123         start_networkd()
3124         self.wait_online(['veth-peer:carrier'])
3125         start_dnsmasq()
3126         self.wait_online(['veth99:routable', 'veth-peer:routable'])
3127
3128         output = check_output(*networkctl_cmd, 'status', 'veth99', env=env)
3129         print(output)
3130         self.assertRegex(output, '192.168.5')
3131
3132         output = check_output('ip route list dev veth99 10.0.0.0/8')
3133         print(output)
3134         self.assertRegex(output, 'onlink')
3135         output = check_output('ip route list dev veth99 192.168.100.0/24')
3136         print(output)
3137         self.assertRegex(output, 'onlink')
3138
3139     def test_dhcp_client_with_ipv4ll_fallback_with_dhcp_server(self):
3140         copy_unit_to_networkd_unit_path('25-veth.netdev', 'dhcp-server-veth-peer.network',
3141                                         'dhcp-client-with-ipv4ll-fallback-with-dhcp-server.network')
3142         start_networkd()
3143         self.wait_online(['veth-peer:carrier'])
3144         start_dnsmasq(lease_time='2m')
3145         self.wait_online(['veth99:routable', 'veth-peer:routable'])
3146
3147         output = check_output('ip address show dev veth99')
3148         print(output)
3149
3150         output = check_output('ip -6 address show dev veth99 scope global dynamic')
3151         self.assertNotRegex(output, 'inet6 2600::[0-9a-f]*/128 scope global dynamic')
3152         output = check_output('ip -6 address show dev veth99 scope link')
3153         self.assertRegex(output, 'inet6 .* scope link')
3154         output = check_output('ip -4 address show dev veth99 scope global dynamic')
3155         self.assertRegex(output, 'inet 192.168.5.[0-9]*/24 brd 192.168.5.255 scope global dynamic veth99')
3156         output = check_output('ip -4 address show dev veth99 scope link')
3157         self.assertNotRegex(output, 'inet .* scope link')
3158
3159         print('Wait for the dynamic address to be expired')
3160         time.sleep(130)
3161
3162         output = check_output('ip address show dev veth99')
3163         print(output)
3164
3165         output = check_output('ip -6 address show dev veth99 scope global dynamic')
3166         self.assertNotRegex(output, 'inet6 2600::[0-9a-f]*/128 scope global dynamic')
3167         output = check_output('ip -6 address show dev veth99 scope link')
3168         self.assertRegex(output, 'inet6 .* scope link')
3169         output = check_output('ip -4 address show dev veth99 scope global dynamic')
3170         self.assertRegex(output, 'inet 192.168.5.[0-9]*/24 brd 192.168.5.255 scope global dynamic veth99')
3171         output = check_output('ip -4 address show dev veth99 scope link')
3172         self.assertNotRegex(output, 'inet .* scope link')
3173
3174         search_words_in_dnsmasq_log('DHCPOFFER', show_all=True)
3175
3176     def test_dhcp_client_with_ipv4ll_fallback_without_dhcp_server(self):
3177         copy_unit_to_networkd_unit_path('25-veth.netdev', 'dhcp-server-veth-peer.network',
3178                                         'dhcp-client-with-ipv4ll-fallback-without-dhcp-server.network')
3179         start_networkd()
3180         self.wait_online(['veth99:degraded', 'veth-peer:routable'])
3181
3182         output = check_output('ip address show dev veth99')
3183         print(output)
3184
3185         output = check_output('ip -6 address show dev veth99 scope global dynamic')
3186         self.assertNotRegex(output, 'inet6 2600::[0-9a-f]*/128 scope global dynamic')
3187         output = check_output('ip -6 address show dev veth99 scope link')
3188         self.assertRegex(output, 'inet6 .* scope link')
3189         output = check_output('ip -4 address show dev veth99 scope global dynamic')
3190         self.assertNotRegex(output, 'inet 192.168.5.[0-9]*/24 brd 192.168.5.255 scope global dynamic veth99')
3191         output = check_output('ip -4 address show dev veth99 scope link')
3192         self.assertRegex(output, 'inet .* scope link')
3193
3194     def test_dhcp_client_route_remove_on_renew(self):
3195         copy_unit_to_networkd_unit_path('25-veth.netdev', 'dhcp-server-veth-peer.network',
3196                                         'dhcp-client-ipv4-only-ipv6-disabled.network')
3197         start_networkd()
3198         self.wait_online(['veth-peer:carrier'])
3199         start_dnsmasq(ipv4_range='192.168.5.100,192.168.5.199', lease_time='2m')
3200         self.wait_online(['veth99:routable', 'veth-peer:routable'])
3201
3202         # test for issue #12490
3203
3204         output = check_output('ip -4 address show dev veth99 scope global dynamic')
3205         print(output)
3206         self.assertRegex(output, 'inet 192.168.5.1[0-9]*/24 brd 192.168.5.255 scope global dynamic veth99')
3207         address1=None
3208         for line in output.splitlines():
3209             if 'brd 192.168.5.255 scope global dynamic veth99' in line:
3210                 address1 = line.split()[1].split('/')[0]
3211                 break
3212
3213         output = check_output('ip -4 route show dev veth99')
3214         print(output)
3215         self.assertRegex(output, f'default via 192.168.5.1 proto dhcp src {address1} metric 1024')
3216         self.assertRegex(output, f'192.168.5.1 proto dhcp scope link src {address1} metric 1024')
3217
3218         stop_dnsmasq(dnsmasq_pid_file)
3219         start_dnsmasq(ipv4_range='192.168.5.200,192.168.5.250', lease_time='2m')
3220
3221         print('Wait for the dynamic address to be expired')
3222         time.sleep(130)
3223
3224         output = check_output('ip -4 address show dev veth99 scope global dynamic')
3225         print(output)
3226         self.assertRegex(output, 'inet 192.168.5.2[0-9]*/24 brd 192.168.5.255 scope global dynamic veth99')
3227         address2=None
3228         for line in output.splitlines():
3229             if 'brd 192.168.5.255 scope global dynamic veth99' in line:
3230                 address2 = line.split()[1].split('/')[0]
3231                 break
3232
3233         self.assertNotEqual(address1, address2)
3234
3235         output = check_output('ip -4 route show dev veth99')
3236         print(output)
3237         self.assertNotRegex(output, f'default via 192.168.5.1 proto dhcp src {address1} metric 1024')
3238         self.assertNotRegex(output, f'192.168.5.1 proto dhcp scope link src {address1} metric 1024')
3239         self.assertRegex(output, f'default via 192.168.5.1 proto dhcp src {address2} metric 1024')
3240         self.assertRegex(output, f'192.168.5.1 proto dhcp scope link src {address2} metric 1024')
3241
3242     def test_dhcp_client_use_dns_yes(self):
3243         copy_unit_to_networkd_unit_path('25-veth.netdev', 'dhcp-server-veth-peer.network', 'dhcp-client-use-dns-yes.network')
3244
3245         start_networkd()
3246         self.wait_online(['veth-peer:carrier'])
3247         start_dnsmasq('--dhcp-option=option:dns-server,192.168.5.1 --dhcp-option=option6:dns-server,[2600::1]')
3248         self.wait_online(['veth99:routable', 'veth-peer:routable'])
3249
3250         # link become 'routable' when at least one protocol provide an valid address.
3251         self.wait_address('veth99', r'inet 192.168.5.[0-9]*/24 brd 192.168.5.255 scope global dynamic', ipv='-4')
3252         self.wait_address('veth99', r'inet6 2600::[0-9a-f]*/128 scope global (dynamic noprefixroute|noprefixroute dynamic)', ipv='-6')
3253
3254         time.sleep(3)
3255         output = check_output(*resolvectl_cmd, 'dns', 'veth99', env=env)
3256         print(output)
3257         self.assertRegex(output, '192.168.5.1')
3258         self.assertRegex(output, '2600::1')
3259
3260     def test_dhcp_client_use_dns_no(self):
3261         copy_unit_to_networkd_unit_path('25-veth.netdev', 'dhcp-server-veth-peer.network', 'dhcp-client-use-dns-no.network')
3262
3263         start_networkd()
3264         self.wait_online(['veth-peer:carrier'])
3265         start_dnsmasq('--dhcp-option=option:dns-server,192.168.5.1 --dhcp-option=option6:dns-server,[2600::1]')
3266         self.wait_online(['veth99:routable', 'veth-peer:routable'])
3267
3268         # link become 'routable' when at least one protocol provide an valid address.
3269         self.wait_address('veth99', r'inet 192.168.5.[0-9]*/24 brd 192.168.5.255 scope global dynamic', ipv='-4')
3270         self.wait_address('veth99', r'inet6 2600::[0-9a-f]*/128 scope global (dynamic noprefixroute|noprefixroute dynamic)', ipv='-6')
3271
3272         time.sleep(3)
3273         output = check_output(*resolvectl_cmd, 'dns', 'veth99', env=env)
3274         print(output)
3275         self.assertNotRegex(output, '192.168.5.1')
3276         self.assertNotRegex(output, '2600::1')
3277
3278     def test_dhcp_client_use_dns_ipv4(self):
3279         copy_unit_to_networkd_unit_path('25-veth.netdev', 'dhcp-server-veth-peer.network', 'dhcp-client-use-dns-ipv4.network')
3280
3281         start_networkd()
3282         self.wait_online(['veth-peer:carrier'])
3283         start_dnsmasq('--dhcp-option=option:dns-server,192.168.5.1 --dhcp-option=option6:dns-server,[2600::1]')
3284         self.wait_online(['veth99:routable', 'veth-peer:routable'])
3285
3286         # link become 'routable' when at least one protocol provide an valid address.
3287         self.wait_address('veth99', r'inet 192.168.5.[0-9]*/24 brd 192.168.5.255 scope global dynamic', ipv='-4')
3288         self.wait_address('veth99', r'inet6 2600::[0-9a-f]*/128 scope global (dynamic noprefixroute|noprefixroute dynamic)', ipv='-6')
3289
3290         time.sleep(3)
3291         output = check_output(*resolvectl_cmd, 'dns', 'veth99', env=env)
3292         print(output)
3293         self.assertRegex(output, '192.168.5.1')
3294         self.assertNotRegex(output, '2600::1')
3295
3296     def test_dhcp_client_use_dns_ipv4_and_ra(self):
3297         copy_unit_to_networkd_unit_path('25-veth.netdev', 'dhcp-server-veth-peer.network', 'dhcp-client-use-dns-ipv4-and-ra.network')
3298
3299         start_networkd()
3300         self.wait_online(['veth-peer:carrier'])
3301         start_dnsmasq('--dhcp-option=option:dns-server,192.168.5.1 --dhcp-option=option6:dns-server,[2600::1]')
3302         self.wait_online(['veth99:routable', 'veth-peer:routable'])
3303
3304         # link become 'routable' when at least one protocol provide an valid address.
3305         self.wait_address('veth99', r'inet 192.168.5.[0-9]*/24 brd 192.168.5.255 scope global dynamic', ipv='-4')
3306         self.wait_address('veth99', r'inet6 2600::[0-9a-f]*/128 scope global (dynamic noprefixroute|noprefixroute dynamic)', ipv='-6')
3307
3308         time.sleep(3)
3309         output = check_output(*resolvectl_cmd, 'dns', 'veth99', env=env)
3310         print(output)
3311         self.assertRegex(output, '192.168.5.1')
3312         self.assertRegex(output, '2600::1')
3313
3314     def test_dhcp_client_use_domains(self):
3315         copy_unit_to_networkd_unit_path('25-veth.netdev', 'dhcp-server-veth-peer.network', 'dhcp-client-use-domains.network')
3316
3317         start_networkd()
3318         self.wait_online(['veth-peer:carrier'])
3319         start_dnsmasq('--dhcp-option=option:domain-search,example.com')
3320         self.wait_online(['veth99:routable', 'veth-peer:routable'])
3321
3322         output = check_output(*networkctl_cmd, 'status', 'veth99', env=env)
3323         print(output)
3324         self.assertRegex(output, 'Search Domains: example.com')
3325
3326         time.sleep(3)
3327         output = check_output(*resolvectl_cmd, 'domain', 'veth99', env=env)
3328         print(output)
3329         self.assertRegex(output, 'example.com')
3330
3331 class NetworkdIPv6PrefixTests(unittest.TestCase, Utilities):
3332     links = ['veth99']
3333
3334     units = [
3335         '25-veth.netdev',
3336         'ipv6ra-prefix-client.network',
3337         'ipv6ra-prefix.network'
3338         ]
3339
3340     def setUp(self):
3341         remove_links(self.links)
3342         stop_networkd(show_logs=False)
3343
3344     def tearDown(self):
3345         remove_log_file()
3346         remove_links(self.links)
3347         remove_unit_from_networkd_path(self.units)
3348         stop_networkd(show_logs=True)
3349
3350     def test_ipv6_route_prefix(self):
3351         copy_unit_to_networkd_unit_path('25-veth.netdev', 'ipv6ra-prefix-client.network', 'ipv6ra-prefix.network')
3352
3353         start_networkd()
3354         self.wait_online(['veth99:routable', 'veth-peer:routable'])
3355
3356         output = check_output('ip', '-6', 'route', 'show', 'dev', 'veth-peer')
3357         print(output)
3358         self.assertRegex(output, '2001:db8:0:1::/64 proto ra')
3359
3360 class NetworkdMTUTests(unittest.TestCase, Utilities):
3361     links = ['dummy98']
3362
3363     units = [
3364         '12-dummy.netdev',
3365         '12-dummy-mtu.netdev',
3366         '12-dummy-mtu.link',
3367         '12-dummy.network',
3368         ]
3369
3370     def setUp(self):
3371         remove_links(self.links)
3372         stop_networkd(show_logs=False)
3373
3374     def tearDown(self):
3375         remove_log_file()
3376         remove_links(self.links)
3377         remove_unit_from_networkd_path(self.units)
3378         stop_networkd(show_logs=True)
3379
3380     def check_mtu(self, mtu, ipv6_mtu=None, reset=True):
3381         if not ipv6_mtu:
3382             ipv6_mtu = mtu
3383
3384         # test normal start
3385         start_networkd()
3386         self.wait_online(['dummy98:routable'])
3387         self.assertEqual(read_ipv6_sysctl_attr('dummy98', 'mtu'), ipv6_mtu)
3388         self.assertEqual(read_link_attr('dummy98', 'mtu'), mtu)
3389
3390         # test normal restart
3391         restart_networkd()
3392         self.wait_online(['dummy98:routable'])
3393         self.assertEqual(read_ipv6_sysctl_attr('dummy98', 'mtu'), ipv6_mtu)
3394         self.assertEqual(read_link_attr('dummy98', 'mtu'), mtu)
3395
3396         if reset:
3397             self.reset_check_mtu(mtu, ipv6_mtu)
3398
3399     def reset_check_mtu(self, mtu, ipv6_mtu=None):
3400         ''' test setting mtu/ipv6_mtu with interface already up '''
3401         stop_networkd()
3402
3403         # note - changing the device mtu resets the ipv6 mtu
3404         run('ip link set up mtu 1501 dev dummy98')
3405         run('ip link set up mtu 1500 dev dummy98')
3406         self.assertEqual(read_link_attr('dummy98', 'mtu'), '1500')
3407         self.assertEqual(read_ipv6_sysctl_attr('dummy98', 'mtu'), '1500')
3408
3409         self.check_mtu(mtu, ipv6_mtu, reset=False)
3410
3411     def test_mtu_network(self):
3412         copy_unit_to_networkd_unit_path('12-dummy.netdev', '12-dummy.network.d/mtu.conf')
3413         self.check_mtu('1600')
3414
3415     def test_mtu_netdev(self):
3416         copy_unit_to_networkd_unit_path('12-dummy-mtu.netdev', '12-dummy.network', dropins=False)
3417         # note - MTU set by .netdev happens ONLY at device creation!
3418         self.check_mtu('1600', reset=False)
3419
3420     def test_mtu_link(self):
3421         copy_unit_to_networkd_unit_path('12-dummy.netdev', '12-dummy-mtu.link', '12-dummy.network', dropins=False)
3422         # must reload udev because it only picks up new files after 3 second delay
3423         call('udevadm control --reload')
3424         # note - MTU set by .link happens ONLY at udev processing of device 'add' uevent!
3425         self.check_mtu('1600', reset=False)
3426
3427     def test_ipv6_mtu(self):
3428         ''' set ipv6 mtu without setting device mtu '''
3429         copy_unit_to_networkd_unit_path('12-dummy.netdev', '12-dummy.network.d/ipv6-mtu-1400.conf')
3430         self.check_mtu('1500', '1400')
3431
3432     def test_ipv6_mtu_toolarge(self):
3433         ''' try set ipv6 mtu over device mtu (it shouldn't work) '''
3434         copy_unit_to_networkd_unit_path('12-dummy.netdev', '12-dummy.network.d/ipv6-mtu-1550.conf')
3435         self.check_mtu('1500', '1500')
3436
3437     def test_mtu_network_ipv6_mtu(self):
3438         ''' set ipv6 mtu and set device mtu via network file '''
3439         copy_unit_to_networkd_unit_path('12-dummy.netdev', '12-dummy.network.d/mtu.conf', '12-dummy.network.d/ipv6-mtu-1550.conf')
3440         self.check_mtu('1600', '1550')
3441
3442     def test_mtu_netdev_ipv6_mtu(self):
3443         ''' set ipv6 mtu and set device mtu via netdev file '''
3444         copy_unit_to_networkd_unit_path('12-dummy-mtu.netdev', '12-dummy.network.d/ipv6-mtu-1550.conf')
3445         self.check_mtu('1600', '1550', reset=False)
3446
3447     def test_mtu_link_ipv6_mtu(self):
3448         ''' set ipv6 mtu and set device mtu via link file '''
3449         copy_unit_to_networkd_unit_path('12-dummy.netdev', '12-dummy-mtu.link', '12-dummy.network.d/ipv6-mtu-1550.conf')
3450         # must reload udev because it only picks up new files after 3 second delay
3451         call('udevadm control --reload')
3452         self.check_mtu('1600', '1550', reset=False)
3453
3454
3455 if __name__ == '__main__':
3456     parser = argparse.ArgumentParser()
3457     parser.add_argument('--build-dir', help='Path to build dir', dest='build_dir')
3458     parser.add_argument('--networkd', help='Path to systemd-networkd', dest='networkd_bin')
3459     parser.add_argument('--resolved', help='Path to systemd-resolved', dest='resolved_bin')
3460     parser.add_argument('--wait-online', help='Path to systemd-networkd-wait-online', dest='wait_online_bin')
3461     parser.add_argument('--networkctl', help='Path to networkctl', dest='networkctl_bin')
3462     parser.add_argument('--resolvectl', help='Path to resolvectl', dest='resolvectl_bin')
3463     parser.add_argument('--timedatectl', help='Path to timedatectl', dest='timedatectl_bin')
3464     parser.add_argument('--valgrind', help='Enable valgrind', dest='use_valgrind', type=bool, nargs='?', const=True, default=use_valgrind)
3465     parser.add_argument('--debug', help='Generate debugging logs', dest='enable_debug', type=bool, nargs='?', const=True, default=enable_debug)
3466     parser.add_argument('--asan-options', help='ASAN options', dest='asan_options')
3467     parser.add_argument('--lsan-options', help='LSAN options', dest='lsan_options')
3468     parser.add_argument('--ubsan-options', help='UBSAN options', dest='ubsan_options')
3469     ns, args = parser.parse_known_args(namespace=unittest)
3470
3471     if ns.build_dir:
3472         if ns.networkd_bin or ns.resolved_bin or ns.wait_online_bin or ns.networkctl_bin or ns.resolvectl_bin or ns.timedatectl_bin:
3473             print('WARNING: --networkd, --resolved, --wait-online, --networkctl, --resolvectl, or --timedatectl options are ignored when --build-dir is specified.')
3474         networkd_bin = os.path.join(ns.build_dir, 'systemd-networkd')
3475         resolved_bin = os.path.join(ns.build_dir, 'systemd-resolved')
3476         wait_online_bin = os.path.join(ns.build_dir, 'systemd-networkd-wait-online')
3477         networkctl_bin = os.path.join(ns.build_dir, 'networkctl')
3478         resolvectl_bin = os.path.join(ns.build_dir, 'resolvectl')
3479         timedatectl_bin = os.path.join(ns.build_dir, 'timedatectl')
3480     else:
3481         if ns.networkd_bin:
3482             networkd_bin = ns.networkd_bin
3483         if ns.resolved_bin:
3484             resolved_bin = ns.resolved_bin
3485         if ns.wait_online_bin:
3486             wait_online_bin = ns.wait_online_bin
3487         if ns.networkctl_bin:
3488             networkctl_bin = ns.networkctl_bin
3489         if ns.resolvectl_bin:
3490             resolvectl_bin = ns.resolvectl_bin
3491         if ns.timedatectl_bin:
3492             timedatectl_bin = ns.timedatectl_bin
3493
3494     use_valgrind = ns.use_valgrind
3495     enable_debug = ns.enable_debug
3496     asan_options = ns.asan_options
3497     lsan_options = ns.lsan_options
3498     ubsan_options = ns.ubsan_options
3499
3500     if use_valgrind:
3501         networkctl_cmd = ['valgrind', '--track-origins=yes', '--leak-check=full', '--show-leak-kinds=all', networkctl_bin]
3502         resolvectl_cmd = ['valgrind', '--track-origins=yes', '--leak-check=full', '--show-leak-kinds=all', resolvectl_bin]
3503         timedatectl_cmd = ['valgrind', '--track-origins=yes', '--leak-check=full', '--show-leak-kinds=all', timedatectl_bin]
3504         wait_online_cmd = ['valgrind', '--track-origins=yes', '--leak-check=full', '--show-leak-kinds=all', wait_online_bin]
3505     else:
3506         networkctl_cmd = [networkctl_bin]
3507         resolvectl_cmd = [resolvectl_bin]
3508         timedatectl_cmd = [timedatectl_bin]
3509         wait_online_cmd = [wait_online_bin]
3510
3511     if enable_debug:
3512         env.update({ 'SYSTEMD_LOG_LEVEL' : 'debug' })
3513     if asan_options:
3514         env.update({ 'ASAN_OPTIONS' : asan_options })
3515     if lsan_options:
3516         env.update({ 'LSAN_OPTIONS' : lsan_options })
3517     if ubsan_options:
3518         env.update({ 'UBSAN_OPTIONS' : ubsan_options })
3519
3520     sys.argv[1:] = args
3521     unittest.main(testRunner=unittest.TextTestRunner(stream=sys.stdout,
3522                                                      verbosity=3))