From: Pablo Neira Ayuso <pablo@netfilter.org>
Date: Wed, 12 Jun 2024 22:42:41 +0000 (+0200)
Subject: tests: shell: skip ipsec tests if kernel does not support it
X-Git-Tag: v1.1.0~25
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=58cd3ad4fdf57d4ca568649001b89375ac51dbd5;p=thirdparty%2Fnftables.git

tests: shell: skip ipsec tests if kernel does not support it

Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
---

diff --git a/tests/shell/features/ipsec.nft b/tests/shell/features/ipsec.nft
new file mode 100644
index 00000000..e7252271
--- /dev/null
+++ b/tests/shell/features/ipsec.nft
@@ -0,0 +1,7 @@
+# 6c47260250fc ("netfilter: nf_tables: add xfrm expression")
+# v4.20-rc1~14^2~125^2~25
+table ip x {
+	chain y {
+		ipsec in reqid 23
+	}
+}
diff --git a/tests/shell/testcases/maps/typeof_maps_0 b/tests/shell/testcases/maps/typeof_maps_0
index 98517fd5..764206d2 100755
--- a/tests/shell/testcases/maps/typeof_maps_0
+++ b/tests/shell/testcases/maps/typeof_maps_0
@@ -4,6 +4,8 @@
 # without typeof, this is 'type string' and 'type integer',
 # but neither could be used because it lacks size information.
 
+# NFT_TEST_REQUIRES(NFT_TEST_HAVE_ipsec)
+
 set -e
 
 die() {