From: Pablo Neira Ayuso <pablo@netfilter.org>
Date: Mon, 28 Oct 2024 22:17:14 +0000 (+0100)
Subject: tests: shell: move device to different namespace
X-Git-Tag: v1.1.2~127
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=0373ca62be3c11a58bd462ee0689718ad25142b6;p=thirdparty%2Fnftables.git

tests: shell: move device to different namespace

This actually triggers a UNREGISTER event, it is similar to existing
tests, but add this test to improve coverage for this scenario.

Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
---

diff --git a/tests/shell/testcases/chains/netdev_move_device b/tests/shell/testcases/chains/netdev_move_device
new file mode 100755
index 00000000..762ca598
--- /dev/null
+++ b/tests/shell/testcases/chains/netdev_move_device
@@ -0,0 +1,39 @@
+#!/bin/bash
+
+set -e
+
+rnd=$(mktemp -u XXXXXXXX)
+ns1="nft1-$rnd"
+
+cleanup() {
+	ip netns del "$ns1"
+	ip link del d0 &>/dev/null || :
+}
+trap 'cleanup' EXIT
+
+RULESET="table netdev x {
+	chain x {}
+	chain w {
+		ip daddr 8.7.6.0/24 counter
+	}
+	chain y {
+		type filter hook ingress device d0 priority 0;
+		ip saddr { 1.2.3.4, 2.3.4.5 } counter
+		ip daddr vmap { 5.4.3.0/24 : jump w, 8.9.0.0/24 : jump x }
+	}
+}"
+
+ip link add d0 type dummy
+$NFT -f - <<< $RULESET
+
+ip netns add $ns1
+# move device to $ns1 triggers UNREGISTER event
+ip link set d0 netns $ns1
+
+cleanup
+$NFT delete table netdev x
+
+# a simple test that also triggers UNREGISTER event
+ip netns add $ns1
+ip -netns $ns1 link add d0 type dummy
+ip netns exec $ns1 $NFT -f - <<< $RULESET