]> git.ipfire.org Git - thirdparty/kernel/linux.git/commitdiff
selftests: ovpn: add nftables config dependencies for test-mark
authorRalf Lici <ralf@mandelbit.com>
Tue, 24 Mar 2026 07:48:57 +0000 (08:48 +0100)
committerAntonio Quartulli <antonio@openvpn.net>
Fri, 17 Apr 2026 08:54:03 +0000 (10:54 +0200)
test-mark.sh installs nftables rules in an inet/filter output chain and
verifies packet drops via nft counters. In vmksft this can fail when the
nftables core is not enabled by the ovpn selftest config.

Add the missing kernel options required by this test:
- CONFIG_NETFILTER
- CONFIG_NF_TABLES
- CONFIG_NF_TABLES_INET

Fixes: 7b80d8a33500 ("selftests: ovpn: add test for the FW mark feature")
Reported-by: Jakub Kicinski <kuba@kernel.org>
Closes: https://lore.kernel.org/all/20260319124114.42f91f72@kernel.org/
Signed-off-by: Ralf Lici <ralf@mandelbit.com>
Signed-off-by: Antonio Quartulli <antonio@openvpn.net>
tools/testing/selftests/net/ovpn/config

index 42699740936dba727eca36c9c804cf459897ce55..d6cf033d555e70876383b600159892b2ee353343 100644 (file)
@@ -5,6 +5,9 @@ CONFIG_CRYPTO_GCM=y
 CONFIG_DST_CACHE=y
 CONFIG_INET=y
 CONFIG_NET=y
+CONFIG_NETFILTER=y
 CONFIG_NET_UDP_TUNNEL=y
+CONFIG_NF_TABLES=m
+CONFIG_NF_TABLES_INET=y
 CONFIG_OVPN=m
 CONFIG_STREAM_PARSER=y