]> git.ipfire.org Git - thirdparty/nftables.git/commitdiff
tests/shell: skip some tests if kernel lacks netdev egress support
authorFlorian Westphal <fw@strlen.de>
Mon, 18 Sep 2023 10:28:20 +0000 (12:28 +0200)
committerFlorian Westphal <fw@strlen.de>
Mon, 18 Sep 2023 11:08:46 +0000 (13:08 +0200)
Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Thomas Haller <thaller@redhat.com>
tests/shell/features/netdev_egress.nft [new file with mode: 0644]
tests/shell/testcases/chains/0021prio_0
tests/shell/testcases/chains/0042chain_variable_0

diff --git a/tests/shell/features/netdev_egress.nft b/tests/shell/features/netdev_egress.nft
new file mode 100644 (file)
index 0000000..67d706d
--- /dev/null
@@ -0,0 +1,7 @@
+# 42df6e1d221d ("netfilter: Introduce egress hook")
+# v5.16-rc1~159^2~167^2~10
+table netdev t {
+       chain c {
+               type filter hook egress devices = { lo } priority 0; policy accept;
+       }
+}
index d450dc0b6c345915ab040ec2c34b86d8e80d8a2e..ceda1558352040a547c2ef3d4abd5b95fb5b110a 100755 (executable)
@@ -69,7 +69,7 @@ done
 family=netdev
 echo "add table $family x"
 gen_chains $family ingress filter lo
-gen_chains $family egress filter lo
+[ "$NFT_TEST_HAVE_netdev_egress" != n ] && gen_chains $family egress filter lo
 
 family=bridge
 echo "add table $family x"
@@ -83,3 +83,8 @@ gen_chains $family postrouting srcnat
 
 ) >$tmpfile
 $NFT -f $tmpfile
+
+if [ "$NFT_TEST_HAVE_netdev_egress" = n ]; then
+       echo "Ran a modified version of the test due to NFT_TEST_HAVE_netdev_egress=n"
+       exit 77
+fi
index f71b04155e444c4a41112bb92a26c300bf650a84..1ea44e85c71f70f7fe193ea1f920eeeda8a45232 100755 (executable)
@@ -24,6 +24,11 @@ table netdev filter2 {
 
 $NFT -f - <<< $EXPECTED
 
+if [ "$NFT_TEST_HAVE_netdev_egress" = n ] ; then
+       echo "Skip parts of the test due to NFT_TEST_HAVE_netdev_egress=n"
+       exit 77
+fi
+
 EXPECTED="define if_main = { lo, dummy0 }
 define lan_interfaces = { lo }