1#!/bin/bash 2# 3# This test is for checking rtnetlink callpaths, and get as much coverage as possible. 4# 5# set -e 6 7ALL_TESTS=" 8 kci_test_polrouting 9 kci_test_route_get 10 kci_test_addrlft 11 kci_test_addrlft_route_cleanup 12 kci_test_promote_secondaries 13 kci_test_tc 14 kci_test_gre 15 kci_test_gretap 16 kci_test_ip6gretap 17 kci_test_erspan 18 kci_test_ip6erspan 19 kci_test_bridge 20 kci_test_addrlabel 21 kci_test_ifalias 22 kci_test_vrf 23 kci_test_encap 24 kci_test_macsec 25 kci_test_macsec_vlan 26 kci_test_team_bridge_macvlan 27 kci_test_ipsec 28 kci_test_ipsec_offload 29 kci_test_fdb_get 30 kci_test_fdb_del 31 kci_test_neigh_get 32 kci_test_neigh_update 33 kci_test_bridge_parent_id 34 kci_test_address_proto 35 kci_test_enslave_bonding 36 kci_test_mngtmpaddr 37 kci_test_operstate 38" 39 40devdummy="test-dummy0" 41VERBOSE=0 42PAUSE=no 43PAUSE_ON_FAIL=no 44 45source lib.sh 46 47# set global exit status, but never reset nonzero one. 48check_err() 49{ 50 if [ $ret -eq 0 ]; then 51 ret=$1 52 fi 53 [ -n "$2" ] && echo "$2" 54} 55 56# same but inverted -- used when command must fail for test to pass 57check_fail() 58{ 59 if [ $1 -eq 0 ]; then 60 ret=1 61 fi 62} 63 64run_cmd_common() 65{ 66 local cmd="$*" 67 local out 68 if [ "$VERBOSE" = "1" ]; then 69 echo "COMMAND: ${cmd}" 70 fi 71 out=$($cmd 2>&1) 72 rc=$? 73 if [ "$VERBOSE" = "1" -a -n "$out" ]; then 74 echo " $out" 75 fi 76 return $rc 77} 78 79run_cmd() { 80 run_cmd_common "$@" 81 rc=$? 82 check_err $rc 83 return $rc 84} 85run_cmd_fail() 86{ 87 run_cmd_common "$@" 88 rc=$? 89 check_fail $rc 90 return $rc 91} 92 93run_cmd_grep_common() 94{ 95 local find="$1"; shift 96 local cmd="$*" 97 local out 98 if [ "$VERBOSE" = "1" ]; then 99 echo "COMMAND: ${cmd} 2>&1 | grep -q '${find}'" 100 fi 101 out=$($cmd 2>&1 | grep -q "${find}" 2>&1) 102 return $? 103} 104 105run_cmd_grep() { 106 run_cmd_grep_common "$@" 107 rc=$? 108 check_err $rc 109 return $rc 110} 111 112run_cmd_grep_fail() 113{ 114 run_cmd_grep_common "$@" 115 rc=$? 116 check_fail $rc 117 return $rc 118} 119 120end_test() 121{ 122 echo "$*" 123 [ "${VERBOSE}" = "1" ] && echo 124 125 if [[ $ret -ne 0 ]] && [[ "${PAUSE_ON_FAIL}" = "yes" ]]; then 126 echo "Hit enter to continue" 127 read a 128 fi; 129 130 if [ "${PAUSE}" = "yes" ]; then 131 echo "Hit enter to continue" 132 read a 133 fi 134 135} 136 137 138kci_add_dummy() 139{ 140 run_cmd ip link add name "$devdummy" type dummy 141 run_cmd ip link set "$devdummy" up 142} 143 144kci_del_dummy() 145{ 146 run_cmd ip link del dev "$devdummy" 147} 148 149kci_test_netconf() 150{ 151 dev="$1" 152 r=$ret 153 run_cmd ip netconf show dev "$dev" 154 for f in 4 6; do 155 run_cmd ip -$f netconf show dev "$dev" 156 done 157 158 if [ $ret -ne 0 ] ;then 159 end_test "FAIL: ip netconf show $dev" 160 test $r -eq 0 && ret=0 161 return 1 162 fi 163} 164 165# add a bridge with vlans on top 166kci_test_bridge() 167{ 168 devbr="test-br0" 169 vlandev="testbr-vlan1" 170 171 local ret=0 172 run_cmd ip link add name "$devbr" type bridge 173 run_cmd ip link set dev "$devdummy" master "$devbr" 174 run_cmd ip link set "$devbr" up 175 run_cmd ip link add link "$devbr" name "$vlandev" type vlan id 1 176 run_cmd ip addr add dev "$vlandev" 10.200.7.23/30 177 run_cmd ip -6 addr add dev "$vlandev" dead:42::1234/64 178 run_cmd ip -d link 179 run_cmd ip r s t all 180 181 for name in "$devbr" "$vlandev" "$devdummy" ; do 182 kci_test_netconf "$name" 183 done 184 run_cmd ip -6 addr del dev "$vlandev" dead:42::1234/64 185 run_cmd ip link del dev "$vlandev" 186 run_cmd ip link del dev "$devbr" 187 188 if [ $ret -ne 0 ];then 189 end_test "FAIL: bridge setup" 190 return 1 191 fi 192 end_test "PASS: bridge setup" 193 194} 195 196kci_test_gre() 197{ 198 gredev=neta 199 rem=10.42.42.1 200 loc=10.0.0.1 201 202 local ret=0 203 run_cmd ip tunnel add $gredev mode gre remote $rem local $loc ttl 1 204 run_cmd ip link set $gredev up 205 run_cmd ip addr add 10.23.7.10 dev $gredev 206 run_cmd ip route add 10.23.8.0/30 dev $gredev 207 run_cmd ip addr add dev "$devdummy" 10.23.7.11/24 208 run_cmd ip link 209 run_cmd ip addr 210 211 kci_test_netconf "$gredev" 212 run_cmd ip addr del dev "$devdummy" 10.23.7.11/24 213 run_cmd ip link del $gredev 214 215 if [ $ret -ne 0 ];then 216 end_test "FAIL: gre tunnel endpoint" 217 return 1 218 fi 219 end_test "PASS: gre tunnel endpoint" 220} 221 222# tc uses rtnetlink too, for full tc testing 223# please see tools/testing/selftests/tc-testing. 224kci_test_tc() 225{ 226 dev=lo 227 local ret=0 228 229 run_cmd tc qdisc add dev "$dev" root handle 1: htb 230 run_cmd tc class add dev "$dev" parent 1: classid 1:10 htb rate 1mbit 231 run_cmd tc filter add dev "$dev" parent 1:0 prio 5 handle ffe: protocol ip u32 divisor 256 232 run_cmd tc filter add dev "$dev" parent 1:0 prio 5 handle ffd: protocol ip u32 divisor 256 233 run_cmd tc filter add dev "$dev" parent 1:0 prio 5 handle ffc: protocol ip u32 divisor 256 234 run_cmd tc filter add dev "$dev" protocol ip parent 1: prio 5 handle ffe:2:3 u32 ht ffe:2: match ip src 10.0.0.3 flowid 1:10 235 run_cmd tc filter add dev "$dev" protocol ip parent 1: prio 5 handle ffe:2:2 u32 ht ffe:2: match ip src 10.0.0.2 flowid 1:10 236 run_cmd tc filter show dev "$dev" parent 1:0 237 run_cmd tc filter del dev "$dev" protocol ip parent 1: prio 5 handle ffe:2:3 u32 238 run_cmd tc filter show dev "$dev" parent 1:0 239 run_cmd tc qdisc del dev "$dev" root handle 1: htb 240 241 if [ $ret -ne 0 ];then 242 end_test "FAIL: tc htb hierarchy" 243 return 1 244 fi 245 end_test "PASS: tc htb hierarchy" 246 247} 248 249kci_test_polrouting() 250{ 251 local ret=0 252 run_cmd ip rule add fwmark 1 lookup 100 253 run_cmd ip route add local 0.0.0.0/0 dev lo table 100 254 run_cmd ip r s t all 255 run_cmd ip rule del fwmark 1 lookup 100 256 run_cmd ip route del local 0.0.0.0/0 dev lo table 100 257 258 if [ $ret -ne 0 ];then 259 end_test "FAIL: policy route test" 260 return 1 261 fi 262 end_test "PASS: policy routing" 263} 264 265kci_test_route_get() 266{ 267 local hash_policy=$(sysctl -n net.ipv4.fib_multipath_hash_policy) 268 269 local ret=0 270 run_cmd ip route get 127.0.0.1 271 run_cmd ip route get 127.0.0.1 dev "$devdummy" 272 run_cmd ip route get ::1 273 run_cmd ip route get fe80::1 dev "$devdummy" 274 run_cmd ip route get 127.0.0.1 from 127.0.0.1 oif lo tos 0x10 mark 0x1 275 run_cmd ip route get ::1 from ::1 iif lo oif lo tos 0x10 mark 0x1 276 run_cmd ip addr add dev "$devdummy" 10.23.7.11/24 277 run_cmd ip route get 10.23.7.11 from 10.23.7.12 iif "$devdummy" 278 run_cmd ip route add 10.23.8.0/24 \ 279 nexthop via 10.23.7.13 dev "$devdummy" \ 280 nexthop via 10.23.7.14 dev "$devdummy" 281 282 sysctl -wq net.ipv4.fib_multipath_hash_policy=0 283 run_cmd ip route get 10.23.8.11 284 sysctl -wq net.ipv4.fib_multipath_hash_policy=1 285 run_cmd ip route get 10.23.8.11 286 sysctl -wq net.ipv4.fib_multipath_hash_policy="$hash_policy" 287 run_cmd ip route del 10.23.8.0/24 288 run_cmd ip addr del dev "$devdummy" 10.23.7.11/24 289 290 291 if [ $ret -ne 0 ];then 292 end_test "FAIL: route get" 293 return 1 294 fi 295 296 end_test "PASS: route get" 297} 298 299check_addr_not_exist() 300{ 301 dev=$1 302 addr=$2 303 if ip addr show dev $dev | grep -q $addr; then 304 return 1 305 else 306 return 0 307 fi 308} 309 310kci_test_addrlft() 311{ 312 for i in $(seq 10 100) ;do 313 lft=$(((RANDOM%3) + 1)) 314 run_cmd ip addr add 10.23.11.$i/32 dev "$devdummy" preferred_lft $lft valid_lft $((lft+1)) 315 done 316 317 slowwait 5 check_addr_not_exist "$devdummy" "10.23.11." 318 if [ $? -eq 1 ]; then 319 # troubleshoot the reason for our failure 320 run_cmd ip addr show dev "$devdummy" 321 check_err 1 322 end_test "FAIL: preferred_lft addresses remaining" 323 return 324 fi 325 326 end_test "PASS: preferred_lft addresses have expired" 327} 328 329kci_test_addrlft_route_cleanup() 330{ 331 local ret=0 332 local test_addr="2001:db8:99::1/64" 333 local test_prefix="2001:db8:99::/64" 334 335 run_cmd ip -6 addr add $test_addr dev "$devdummy" valid_lft 300 preferred_lft 300 336 run_cmd_grep "$test_prefix proto kernel" ip -6 route show dev "$devdummy" 337 run_cmd ip -6 addr del $test_addr dev "$devdummy" 338 run_cmd_grep_fail "$test_prefix" ip -6 route show dev "$devdummy" 339 340 if [ $ret -ne 0 ]; then 341 end_test "FAIL: route not cleaned up when address with valid_lft deleted" 342 return 1 343 fi 344 345 end_test "PASS: route cleaned up when address with valid_lft deleted" 346} 347 348kci_test_promote_secondaries() 349{ 350 run_cmd ifconfig "$devdummy" 351 if [ $ret -ne 0 ]; then 352 end_test "SKIP: ifconfig not installed" 353 return $ksft_skip 354 fi 355 promote=$(sysctl -n net.ipv4.conf.$devdummy.promote_secondaries) 356 357 sysctl -q net.ipv4.conf.$devdummy.promote_secondaries=1 358 359 for i in $(seq 2 254);do 360 IP="10.23.11.$i" 361 ip -f inet addr add $IP/16 brd + dev "$devdummy" 362 ifconfig "$devdummy" $IP netmask 255.255.0.0 363 done 364 365 ip addr flush dev "$devdummy" 366 367 [ $promote -eq 0 ] && sysctl -q net.ipv4.conf.$devdummy.promote_secondaries=0 368 369 end_test "PASS: promote_secondaries complete" 370} 371 372kci_test_addrlabel() 373{ 374 local ret=0 375 run_cmd ip addrlabel add prefix dead::/64 dev lo label 1 376 run_cmd_grep "prefix dead::/64 dev lo label 1" ip addrlabel list 377 run_cmd ip addrlabel del prefix dead::/64 dev lo label 1 378 run_cmd ip addrlabel add prefix dead::/64 label 1 379 run_cmd ip addrlabel del prefix dead::/64 label 1 380 381 # concurrent add/delete 382 for i in $(seq 1 1000); do 383 ip addrlabel add prefix 1c3::/64 label 12345 2>/dev/null 384 done & 385 386 for i in $(seq 1 1000); do 387 ip addrlabel del prefix 1c3::/64 label 12345 2>/dev/null 388 done 389 390 wait 391 392 ip addrlabel del prefix 1c3::/64 label 12345 2>/dev/null 393 394 if [ $ret -ne 0 ];then 395 end_test "FAIL: ipv6 addrlabel" 396 return 1 397 fi 398 399 end_test "PASS: ipv6 addrlabel" 400} 401 402kci_test_ifalias() 403{ 404 local ret=0 405 namewant=$(uuidgen) 406 syspathname="/sys/class/net/$devdummy/ifalias" 407 run_cmd ip link set dev "$devdummy" alias "$namewant" 408 409 if [ $ret -ne 0 ]; then 410 end_test "FAIL: cannot set interface alias of $devdummy to $namewant" 411 return 1 412 fi 413 run_cmd_grep "alias $namewant" ip link show "$devdummy" 414 415 if [ -r "$syspathname" ] ; then 416 read namehave < "$syspathname" 417 if [ "$namewant" != "$namehave" ]; then 418 end_test "FAIL: did set ifalias $namewant but got $namehave" 419 return 1 420 fi 421 422 namewant=$(uuidgen) 423 echo "$namewant" > "$syspathname" 424 run_cmd_grep "alias $namewant" ip link show "$devdummy" 425 426 # sysfs interface allows to delete alias again 427 echo "" > "$syspathname" 428 run_cmd_grep_fail "alias $namewant" ip link show "$devdummy" 429 430 for i in $(seq 1 100); do 431 uuidgen > "$syspathname" & 432 done 433 434 wait 435 436 # re-add the alias -- kernel should free mem when dummy dev is removed 437 run_cmd ip link set dev "$devdummy" alias "$namewant" 438 439 fi 440 441 if [ $ret -ne 0 ]; then 442 end_test "FAIL: set interface alias $devdummy to $namewant" 443 return 1 444 fi 445 446 end_test "PASS: set ifalias $namewant for $devdummy" 447} 448 449kci_test_vrf() 450{ 451 vrfname="test-vrf" 452 local ret=0 453 run_cmd ip link show type vrf 454 if [ $? -ne 0 ]; then 455 end_test "SKIP: vrf: iproute2 too old" 456 return $ksft_skip 457 fi 458 run_cmd ip link add "$vrfname" type vrf table 10 459 if [ $ret -ne 0 ];then 460 end_test "FAIL: can't add vrf interface, skipping test" 461 return 0 462 fi 463 run_cmd_grep "$vrfname" ip -br link show type vrf 464 if [ $ret -ne 0 ];then 465 end_test "FAIL: created vrf device not found" 466 return 1 467 fi 468 469 run_cmd ip link set dev "$vrfname" up 470 run_cmd ip link set dev "$devdummy" master "$vrfname" 471 run_cmd ip link del dev "$vrfname" 472 473 if [ $ret -ne 0 ];then 474 end_test "FAIL: vrf" 475 return 1 476 fi 477 478 end_test "PASS: vrf" 479} 480 481kci_test_encap_vxlan() 482{ 483 local ret=0 484 vxlan="test-vxlan0" 485 vlan="test-vlan0" 486 run_cmd ip -netns "$testns" link add "$vxlan" type vxlan id 42 group 239.1.1.1 \ 487 dev "$devdummy" dstport 4789 488 if [ $? -ne 0 ]; then 489 end_test "FAIL: can't add vxlan interface, skipping test" 490 return 0 491 fi 492 493 run_cmd ip -netns "$testns" addr add 10.2.11.49/24 dev "$vxlan" 494 run_cmd ip -netns "$testns" link set up dev "$vxlan" 495 run_cmd ip -netns "$testns" link add link "$vxlan" name "$vlan" type vlan id 1 496 497 # changelink testcases 498 run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan vni 43 499 run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan group ffe5::5 dev "$devdummy" 500 run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan ttl inherit 501 502 run_cmd ip -netns "$testns" link set dev "$vxlan" type vxlan ttl 64 503 run_cmd ip -netns "$testns" link set dev "$vxlan" type vxlan nolearning 504 505 run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan proxy 506 run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan norsc 507 run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan l2miss 508 run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan l3miss 509 run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan external 510 run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan udpcsum 511 run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan udp6zerocsumtx 512 run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan udp6zerocsumrx 513 run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan remcsumtx 514 run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan remcsumrx 515 run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan gbp 516 run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan gpe 517 run_cmd ip -netns "$testns" link del "$vxlan" 518 519 if [ $ret -ne 0 ]; then 520 end_test "FAIL: vxlan" 521 return 1 522 fi 523 end_test "PASS: vxlan" 524} 525 526kci_test_encap_fou() 527{ 528 local ret=0 529 name="test-fou" 530 run_cmd_grep 'Usage: ip fou' ip fou help 531 if [ $? -ne 0 ];then 532 end_test "SKIP: fou: iproute2 too old" 533 return $ksft_skip 534 fi 535 536 if ! /sbin/modprobe -q -n fou; then 537 end_test "SKIP: module fou is not found" 538 return $ksft_skip 539 fi 540 /sbin/modprobe -q fou 541 542 run_cmd ip -netns "$testns" fou add port 7777 ipproto 47 543 if [ $? -ne 0 ];then 544 end_test "FAIL: can't add fou port 7777, skipping test" 545 return 1 546 fi 547 run_cmd ip -netns "$testns" fou add port 8888 ipproto 4 548 run_cmd_fail ip -netns "$testns" fou del port 9999 549 run_cmd ip -netns "$testns" fou del port 7777 550 if [ $ret -ne 0 ]; then 551 end_test "FAIL: fou" 552 return 1 553 fi 554 555 end_test "PASS: fou" 556} 557 558# test various encap methods, use netns to avoid unwanted interference 559kci_test_encap() 560{ 561 local ret=0 562 setup_ns testns 563 if [ $? -ne 0 ]; then 564 end_test "SKIP encap tests: cannot add net namespace $testns" 565 return $ksft_skip 566 fi 567 run_cmd ip -netns "$testns" link set lo up 568 run_cmd ip -netns "$testns" link add name "$devdummy" type dummy 569 run_cmd ip -netns "$testns" link set "$devdummy" up 570 run_cmd kci_test_encap_vxlan 571 run_cmd kci_test_encap_fou 572 573 ip netns del "$testns" 574 return $ret 575} 576 577kci_test_macsec() 578{ 579 msname="test_macsec0" 580 local ret=0 581 run_cmd_grep "^Usage: ip macsec" ip macsec help 582 if [ $? -ne 0 ]; then 583 end_test "SKIP: macsec: iproute2 too old" 584 return $ksft_skip 585 fi 586 run_cmd ip link add link "$devdummy" "$msname" type macsec port 42 encrypt on 587 if [ $ret -ne 0 ];then 588 end_test "FAIL: can't add macsec interface, skipping test" 589 return 1 590 fi 591 run_cmd ip macsec add "$msname" tx sa 0 pn 1024 on key 01 12345678901234567890123456789012 592 run_cmd ip macsec add "$msname" rx port 1234 address "1c:ed:de:ad:be:ef" 593 run_cmd ip macsec add "$msname" rx port 1234 address "1c:ed:de:ad:be:ef" sa 0 pn 1 on key 00 0123456789abcdef0123456789abcdef 594 run_cmd ip macsec show 595 run_cmd ip link del dev "$msname" 596 597 if [ $ret -ne 0 ];then 598 end_test "FAIL: macsec" 599 return 1 600 fi 601 602 end_test "PASS: macsec" 603} 604 605# Test __dev_set_rx_mode call from dev_uc_add under addr_list_lock spinlock. 606# Make sure __dev_set_promiscuity is not grabbing (sleeping) netdev instance 607# lock. 608# https://lore.kernel.org/netdev/2aff4342b0f5b1539c02ffd8df4c7e58dd9746e7.camel@nvidia.com/ 609kci_test_macsec_vlan() 610{ 611 msname="test_macsec1" 612 vlanname="test_vlan1" 613 local ret=0 614 run_cmd_grep "^Usage: ip macsec" ip macsec help 615 if [ $? -ne 0 ]; then 616 end_test "SKIP: macsec: iproute2 too old" 617 return $ksft_skip 618 fi 619 run_cmd ip link add link "$devdummy" "$msname" type macsec port 42 encrypt on 620 if [ $ret -ne 0 ];then 621 end_test "FAIL: can't add macsec interface, skipping test" 622 return 1 623 fi 624 625 run_cmd ip link set dev "$msname" up 626 ip link add link "$msname" name "$vlanname" type vlan id 1 627 ip link set dev "$vlanname" address 00:11:22:33:44:88 628 ip link set dev "$vlanname" up 629 run_cmd ip link del dev "$vlanname" 630 run_cmd ip link del dev "$msname" 631 632 if [ $ret -ne 0 ];then 633 end_test "FAIL: macsec_vlan" 634 return 1 635 fi 636 637 end_test "PASS: macsec_vlan" 638} 639 640# Test ndo_change_rx_flags call from dev_uc_add under addr_list_lock spinlock. 641# When we are flipping the promisc, make sure it runs on the work queue. 642# 643# https://lore.kernel.org/netdev/20260214033859.43857-1-jiayuan.chen@linux.dev/ 644# With (more conventional) macvlan instead of macsec. 645# macvlan -> bridge -> team -> dummy 646kci_test_team_bridge_macvlan() 647{ 648 local vlan="test_macv1" 649 local bridge="test_br1" 650 local team="test_team1" 651 local dummy="test_dummy1" 652 local ret=0 653 654 run_cmd ip link add $team type team 655 if [ $ret -ne 0 ]; then 656 end_test "SKIP: team_bridge_macvlan: can't add team interface" 657 return $ksft_skip 658 fi 659 660 run_cmd ip link add $dummy type dummy 661 run_cmd ip link set $dummy master $team 662 run_cmd ip link set $team up 663 run_cmd ip link add $bridge type bridge vlan_filtering 1 664 run_cmd ip link set $bridge up 665 run_cmd ip link set $team master $bridge 666 run_cmd ip link add link $bridge name $vlan \ 667 address 00:aa:bb:cc:dd:ee type macvlan mode bridge 668 run_cmd ip link set $vlan up 669 670 run_cmd ip link del $vlan 671 run_cmd ip link del $bridge 672 run_cmd ip link del $team 673 run_cmd ip link del $dummy 674 675 if [ $ret -ne 0 ]; then 676 end_test "FAIL: team_bridge_macvlan" 677 return 1 678 fi 679 680 end_test "PASS: team_bridge_macvlan" 681} 682 683#------------------------------------------------------------------- 684# Example commands 685# ip x s add proto esp src 14.0.0.52 dst 14.0.0.70 \ 686# spi 0x07 mode transport reqid 0x07 replay-window 32 \ 687# aead 'rfc4106(gcm(aes))' 1234567890123456dcba 128 \ 688# sel src 14.0.0.52/24 dst 14.0.0.70/24 689# ip x p add dir out src 14.0.0.52/24 dst 14.0.0.70/24 \ 690# tmpl proto esp src 14.0.0.52 dst 14.0.0.70 \ 691# spi 0x07 mode transport reqid 0x07 692# 693# Subcommands not tested 694# ip x s update 695# ip x s allocspi 696# ip x s deleteall 697# ip x p update 698# ip x p deleteall 699# ip x p set 700#------------------------------------------------------------------- 701kci_test_ipsec() 702{ 703 local ret=0 704 algo="aead rfc4106(gcm(aes)) 0x3132333435363738393031323334353664636261 128" 705 srcip=192.168.123.1 706 dstip=192.168.123.2 707 spi=7 708 709 ip addr add $srcip dev $devdummy 710 711 # flush to be sure there's nothing configured 712 run_cmd ip x s flush ; ip x p flush 713 714 # start the monitor in the background 715 tmpfile=`mktemp /var/run/ipsectestXXX` 716 mpid=`(ip x m > $tmpfile & echo $!) 2>/dev/null` 717 sleep 0.2 718 719 ipsecid="proto esp src $srcip dst $dstip spi 0x07" 720 run_cmd ip x s add $ipsecid \ 721 mode transport reqid 0x07 replay-window 32 \ 722 $algo sel src $srcip/24 dst $dstip/24 723 724 725 lines=`ip x s list | grep $srcip | grep $dstip | wc -l` 726 run_cmd test $lines -eq 2 727 run_cmd_grep "SAD count 1" ip x s count 728 729 lines=`ip x s get $ipsecid | grep $srcip | grep $dstip | wc -l` 730 run_cmd test $lines -eq 2 731 run_cmd ip x s delete $ipsecid 732 733 lines=`ip x s list | wc -l` 734 run_cmd test $lines -eq 0 735 736 ipsecsel="dir out src $srcip/24 dst $dstip/24" 737 run_cmd ip x p add $ipsecsel \ 738 tmpl proto esp src $srcip dst $dstip \ 739 spi 0x07 mode transport reqid 0x07 740 741 742 lines=`ip x p list | grep $srcip | grep $dstip | wc -l` 743 run_cmd test $lines -eq 2 744 745 run_cmd_grep "SPD IN 0 OUT 1 FWD 0" ip x p count 746 747 lines=`ip x p get $ipsecsel | grep $srcip | grep $dstip | wc -l` 748 run_cmd test $lines -eq 2 749 750 run_cmd ip x p delete $ipsecsel 751 752 lines=`ip x p list | wc -l` 753 run_cmd test $lines -eq 0 754 755 # check the monitor results 756 kill $mpid 757 lines=`wc -l $tmpfile | cut "-d " -f1` 758 run_cmd test $lines -eq 20 759 rm -rf $tmpfile 760 761 # clean up any leftovers 762 run_cmd ip x s flush 763 run_cmd ip x p flush 764 ip addr del $srcip/32 dev $devdummy 765 766 if [ $ret -ne 0 ]; then 767 end_test "FAIL: ipsec" 768 return 1 769 fi 770 end_test "PASS: ipsec" 771} 772 773#------------------------------------------------------------------- 774# Example commands 775# ip x s add proto esp src 14.0.0.52 dst 14.0.0.70 \ 776# spi 0x07 mode transport reqid 0x07 replay-window 32 \ 777# aead 'rfc4106(gcm(aes))' 1234567890123456dcba 128 \ 778# sel src 14.0.0.52/24 dst 14.0.0.70/24 779# offload dev sim1 dir out 780# ip x p add dir out src 14.0.0.52/24 dst 14.0.0.70/24 \ 781# tmpl proto esp src 14.0.0.52 dst 14.0.0.70 \ 782# spi 0x07 mode transport reqid 0x07 783# 784#------------------------------------------------------------------- 785kci_test_ipsec_offload() 786{ 787 local ret=0 788 algo="aead rfc4106(gcm(aes)) 0x3132333435363738393031323334353664636261 128" 789 srcip=192.168.123.3 790 dstip=192.168.123.4 791 sysfsd=/sys/kernel/debug/netdevsim/netdevsim0/ports/0/ 792 sysfsf=$sysfsd/ipsec 793 sysfsnet=/sys/bus/netdevsim/devices/netdevsim0/net/ 794 probed=false 795 esp4_offload_probed_default=false 796 797 if lsmod | grep -q esp4_offload; then 798 esp4_offload_probed_default=true 799 fi 800 801 if ! mount | grep -q debugfs; then 802 mount -t debugfs none /sys/kernel/debug/ &> /dev/null 803 fi 804 805 # setup netdevsim since dummydev doesn't have offload support 806 if [ ! -w /sys/bus/netdevsim/new_device ] ; then 807 run_cmd modprobe -q netdevsim 808 if [ $ret -ne 0 ]; then 809 end_test "SKIP: ipsec_offload can't load netdevsim" 810 return $ksft_skip 811 fi 812 probed=true 813 fi 814 815 echo "0" > /sys/bus/netdevsim/new_device 816 while [ ! -d $sysfsnet ] ; do :; done 817 udevadm settle 818 dev=`ls $sysfsnet` 819 820 ip addr add $srcip dev $dev 821 ip link set $dev up 822 if [ ! -d $sysfsd ] ; then 823 end_test "FAIL: ipsec_offload can't create device $dev" 824 return 1 825 fi 826 if [ ! -f $sysfsf ] ; then 827 end_test "FAIL: ipsec_offload netdevsim doesn't support IPsec offload" 828 return 1 829 fi 830 831 # flush to be sure there's nothing configured 832 ip x s flush ; ip x p flush 833 834 # create offloaded SAs, both in and out 835 run_cmd ip x p add dir out src $srcip/24 dst $dstip/24 \ 836 tmpl proto esp src $srcip dst $dstip spi 9 \ 837 mode transport reqid 42 838 839 run_cmd ip x p add dir in src $dstip/24 dst $srcip/24 \ 840 tmpl proto esp src $dstip dst $srcip spi 9 \ 841 mode transport reqid 42 842 843 run_cmd ip x s add proto esp src $srcip dst $dstip spi 9 \ 844 mode transport reqid 42 $algo sel src $srcip/24 dst $dstip/24 \ 845 offload dev $dev dir out 846 847 run_cmd ip x s add proto esp src $dstip dst $srcip spi 9 \ 848 mode transport reqid 42 $algo sel src $dstip/24 dst $srcip/24 \ 849 offload dev $dev dir in 850 851 if [ $ret -ne 0 ]; then 852 end_test "FAIL: ipsec_offload can't create SA" 853 return 1 854 fi 855 856 # does offload show up in ip output 857 lines=`ip x s list | grep -c "crypto offload parameters: dev $dev dir"` 858 if [ $lines -ne 2 ] ; then 859 check_err 1 860 end_test "FAIL: ipsec_offload SA offload missing from list output" 861 fi 862 863 # we didn't create a peer, make sure we can Tx 864 ip neigh add $dstip dev $dev lladdr 00:11:22:33:44:55 865 # use ping to exercise the Tx path 866 ping -I $dev -c 3 -W 1 -i 0 $dstip >/dev/null 867 868 # does driver have correct offload info 869 run_cmd diff $sysfsf - << EOF 870SA count=2 tx=3 871sa[0] tx ipaddr=$dstip 872sa[0] spi=0x00000009 proto=0x32 salt=0x61626364 crypt=1 873sa[0] key=0x34333231 38373635 32313039 36353433 874sa[1] rx ipaddr=$srcip 875sa[1] spi=0x00000009 proto=0x32 salt=0x61626364 crypt=1 876sa[1] key=0x34333231 38373635 32313039 36353433 877EOF 878 if [ $? -ne 0 ] ; then 879 end_test "FAIL: ipsec_offload incorrect driver data" 880 check_err 1 881 fi 882 883 # does offload get removed from driver 884 ip x s flush 885 ip x p flush 886 lines=`grep -c "SA count=0" $sysfsf` 887 if [ $lines -ne 1 ] ; then 888 check_err 1 889 end_test "FAIL: ipsec_offload SA not removed from driver" 890 fi 891 892 # clean up any leftovers 893 ! "$esp4_offload_probed_default" && lsmod | grep -q esp4_offload && rmmod esp4_offload 894 echo 0 > /sys/bus/netdevsim/del_device 895 $probed && rmmod netdevsim 896 897 if [ $ret -ne 0 ]; then 898 end_test "FAIL: ipsec_offload" 899 return 1 900 fi 901 end_test "PASS: ipsec_offload" 902} 903 904kci_test_gretap() 905{ 906 DEV_NS=gretap00 907 local ret=0 908 909 setup_ns testns 910 if [ $? -ne 0 ]; then 911 end_test "SKIP gretap tests: cannot add net namespace $testns" 912 return $ksft_skip 913 fi 914 915 run_cmd_grep "^Usage:" ip link help gretap 916 if [ $? -ne 0 ];then 917 end_test "SKIP: gretap: iproute2 too old" 918 ip netns del "$testns" 919 return $ksft_skip 920 fi 921 922 # test native tunnel 923 run_cmd ip -netns "$testns" link add dev "$DEV_NS" type gretap seq \ 924 key 102 local 172.16.1.100 remote 172.16.1.200 925 926 927 run_cmd ip -netns "$testns" addr add dev "$DEV_NS" 10.1.1.100/24 928 run_cmd ip -netns "$testns" link set dev $DEV_NS up 929 run_cmd ip -netns "$testns" link del "$DEV_NS" 930 931 # test external mode 932 run_cmd ip -netns "$testns" link add dev "$DEV_NS" type gretap external 933 run_cmd ip -netns "$testns" link del "$DEV_NS" 934 935 if [ $ret -ne 0 ]; then 936 end_test "FAIL: gretap" 937 ip netns del "$testns" 938 return 1 939 fi 940 end_test "PASS: gretap" 941 942 ip netns del "$testns" 943} 944 945kci_test_ip6gretap() 946{ 947 DEV_NS=ip6gretap00 948 local ret=0 949 950 setup_ns testns 951 if [ $? -ne 0 ]; then 952 end_test "SKIP ip6gretap tests: cannot add net namespace $testns" 953 return $ksft_skip 954 fi 955 956 run_cmd_grep "^Usage:" ip link help ip6gretap 957 if [ $? -ne 0 ];then 958 end_test "SKIP: ip6gretap: iproute2 too old" 959 ip netns del "$testns" 960 return $ksft_skip 961 fi 962 963 # test native tunnel 964 run_cmd ip -netns "$testns" link add dev "$DEV_NS" type ip6gretap seq \ 965 key 102 local fc00:100::1 remote fc00:100::2 966 967 968 run_cmd ip -netns "$testns" addr add dev "$DEV_NS" fc00:200::1/96 969 run_cmd ip -netns "$testns" link set dev $DEV_NS up 970 run_cmd ip -netns "$testns" link del "$DEV_NS" 971 972 # test external mode 973 run_cmd ip -netns "$testns" link add dev "$DEV_NS" type ip6gretap external 974 run_cmd ip -netns "$testns" link del "$DEV_NS" 975 976 if [ $ret -ne 0 ]; then 977 end_test "FAIL: ip6gretap" 978 ip netns del "$testns" 979 return 1 980 fi 981 end_test "PASS: ip6gretap" 982 983 ip netns del "$testns" 984} 985 986kci_test_erspan() 987{ 988 DEV_NS=erspan00 989 local ret=0 990 run_cmd_grep "^Usage:" ip link help erspan 991 if [ $? -ne 0 ];then 992 end_test "SKIP: erspan: iproute2 too old" 993 return $ksft_skip 994 fi 995 setup_ns testns 996 if [ $? -ne 0 ]; then 997 end_test "SKIP erspan tests: cannot add net namespace $testns" 998 return $ksft_skip 999 fi 1000 1001 # test native tunnel erspan v1 1002 run_cmd ip -netns "$testns" link add dev "$DEV_NS" type erspan seq \ 1003 key 102 local 172.16.1.100 remote 172.16.1.200 \ 1004 erspan_ver 1 erspan 488 1005 1006 1007 run_cmd ip -netns "$testns" addr add dev "$DEV_NS" 10.1.1.100/24 1008 run_cmd ip -netns "$testns" link set dev $DEV_NS up 1009 run_cmd ip -netns "$testns" link del "$DEV_NS" 1010 1011 # test native tunnel erspan v2 1012 run_cmd ip -netns "$testns" link add dev "$DEV_NS" type erspan seq \ 1013 key 102 local 172.16.1.100 remote 172.16.1.200 \ 1014 erspan_ver 2 erspan_dir ingress erspan_hwid 7 1015 1016 1017 run_cmd ip -netns "$testns" addr add dev "$DEV_NS" 10.1.1.100/24 1018 run_cmd ip -netns "$testns" link set dev $DEV_NS up 1019 run_cmd ip -netns "$testns" link del "$DEV_NS" 1020 1021 # test external mode 1022 run_cmd ip -netns "$testns" link add dev "$DEV_NS" type erspan external 1023 run_cmd ip -netns "$testns" link del "$DEV_NS" 1024 1025 if [ $ret -ne 0 ]; then 1026 end_test "FAIL: erspan" 1027 ip netns del "$testns" 1028 return 1 1029 fi 1030 end_test "PASS: erspan" 1031 1032 ip netns del "$testns" 1033} 1034 1035kci_test_ip6erspan() 1036{ 1037 DEV_NS=ip6erspan00 1038 local ret=0 1039 run_cmd_grep "^Usage:" ip link help ip6erspan 1040 if [ $? -ne 0 ];then 1041 end_test "SKIP: ip6erspan: iproute2 too old" 1042 return $ksft_skip 1043 fi 1044 setup_ns testns 1045 if [ $? -ne 0 ]; then 1046 end_test "SKIP ip6erspan tests: cannot add net namespace $testns" 1047 return $ksft_skip 1048 fi 1049 1050 # test native tunnel ip6erspan v1 1051 run_cmd ip -netns "$testns" link add dev "$DEV_NS" type ip6erspan seq \ 1052 key 102 local fc00:100::1 remote fc00:100::2 \ 1053 erspan_ver 1 erspan 488 1054 1055 1056 run_cmd ip -netns "$testns" addr add dev "$DEV_NS" 10.1.1.100/24 1057 run_cmd ip -netns "$testns" link set dev $DEV_NS up 1058 run_cmd ip -netns "$testns" link del "$DEV_NS" 1059 1060 # test native tunnel ip6erspan v2 1061 run_cmd ip -netns "$testns" link add dev "$DEV_NS" type ip6erspan seq \ 1062 key 102 local fc00:100::1 remote fc00:100::2 \ 1063 erspan_ver 2 erspan_dir ingress erspan_hwid 7 1064 1065 1066 run_cmd ip -netns "$testns" addr add dev "$DEV_NS" 10.1.1.100/24 1067 run_cmd ip -netns "$testns" link set dev $DEV_NS up 1068 run_cmd ip -netns "$testns" link del "$DEV_NS" 1069 1070 # test external mode 1071 run_cmd ip -netns "$testns" link add dev "$DEV_NS" \ 1072 type ip6erspan external 1073 1074 run_cmd ip -netns "$testns" link del "$DEV_NS" 1075 1076 if [ $ret -ne 0 ]; then 1077 end_test "FAIL: ip6erspan" 1078 ip netns del "$testns" 1079 return 1 1080 fi 1081 end_test "PASS: ip6erspan" 1082 1083 ip netns del "$testns" 1084} 1085 1086kci_test_fdb_get() 1087{ 1088 brdev="test-br0" 1089 vxlandev="vxlan10" 1090 test_mac=de:ad:be:ef:13:37 1091 localip="10.0.2.2" 1092 dstip="10.0.2.3" 1093 local ret=0 1094 1095 run_cmd_grep 'bridge fdb get' bridge fdb help 1096 if [ $? -ne 0 ];then 1097 end_test "SKIP: fdb get tests: iproute2 too old" 1098 return $ksft_skip 1099 fi 1100 1101 setup_ns testns 1102 if [ $? -ne 0 ]; then 1103 end_test "SKIP fdb get tests: cannot add net namespace $testns" 1104 return $ksft_skip 1105 fi 1106 IP="ip -netns $testns" 1107 BRIDGE="bridge -netns $testns" 1108 run_cmd $IP link add "$vxlandev" type vxlan id 10 local $localip \ 1109 dstport 4789 1110 run_cmd $IP link add name "$brdev" type bridge 1111 run_cmd $IP link set dev "$vxlandev" master "$brdev" 1112 run_cmd $BRIDGE fdb add $test_mac dev "$vxlandev" master 1113 run_cmd $BRIDGE fdb add $test_mac dev "$vxlandev" dst $dstip self 1114 run_cmd_grep "dev $vxlandev master $brdev" $BRIDGE fdb get $test_mac brport "$vxlandev" 1115 run_cmd_grep "dev $vxlandev master $brdev" $BRIDGE fdb get $test_mac br "$brdev" 1116 run_cmd_grep "dev $vxlandev dst $dstip" $BRIDGE fdb get $test_mac dev "$vxlandev" self 1117 1118 ip netns del $testns &>/dev/null 1119 1120 if [ $ret -ne 0 ]; then 1121 end_test "FAIL: bridge fdb get" 1122 return 1 1123 fi 1124 1125 end_test "PASS: bridge fdb get" 1126} 1127 1128kci_test_fdb_del() 1129{ 1130 local test_mac=de:ad:be:ef:13:37 1131 local dummydev="dummy1" 1132 local brdev="test-br0" 1133 local ret=0 1134 1135 run_cmd_grep 'bridge fdb get' bridge fdb help 1136 if [ $? -ne 0 ]; then 1137 end_test "SKIP: fdb del tests: iproute2 too old" 1138 return $ksft_skip 1139 fi 1140 1141 setup_ns testns 1142 if [ $? -ne 0 ]; then 1143 end_test "SKIP fdb del tests: cannot add net namespace $testns" 1144 return $ksft_skip 1145 fi 1146 IP="ip -netns $testns" 1147 BRIDGE="bridge -netns $testns" 1148 run_cmd $IP link add $dummydev type dummy 1149 run_cmd $IP link add name $brdev type bridge vlan_filtering 1 1150 run_cmd $IP link set dev $dummydev master $brdev 1151 run_cmd $BRIDGE fdb add $test_mac dev $dummydev master static vlan 1 1152 run_cmd $BRIDGE vlan del vid 1 dev $dummydev 1153 run_cmd $BRIDGE fdb get $test_mac br $brdev vlan 1 1154 run_cmd $BRIDGE fdb del $test_mac dev $dummydev master vlan 1 1155 run_cmd_fail $BRIDGE fdb get $test_mac br $brdev vlan 1 1156 1157 ip netns del $testns &>/dev/null 1158 1159 if [ $ret -ne 0 ]; then 1160 end_test "FAIL: bridge fdb del" 1161 return 1 1162 fi 1163 1164 end_test "PASS: bridge fdb del" 1165} 1166 1167kci_test_neigh_get() 1168{ 1169 dstmac=de:ad:be:ef:13:37 1170 dstip=10.0.2.4 1171 dstip6=dead::2 1172 local ret=0 1173 1174 run_cmd_grep 'ip neigh get' ip neigh help 1175 if [ $? -ne 0 ];then 1176 end_test "SKIP: fdb get tests: iproute2 too old" 1177 return $ksft_skip 1178 fi 1179 1180 # ipv4 1181 run_cmd ip neigh add $dstip lladdr $dstmac dev "$devdummy" 1182 run_cmd_grep "$dstmac" ip neigh get $dstip dev "$devdummy" 1183 run_cmd ip neigh del $dstip lladdr $dstmac dev "$devdummy" 1184 1185 # ipv4 proxy 1186 run_cmd ip neigh add proxy $dstip dev "$devdummy" 1187 run_cmd_grep "$dstip" ip neigh get proxy $dstip dev "$devdummy" 1188 run_cmd ip neigh del proxy $dstip dev "$devdummy" 1189 1190 # ipv6 1191 run_cmd ip neigh add $dstip6 lladdr $dstmac dev "$devdummy" 1192 run_cmd_grep "$dstmac" ip neigh get $dstip6 dev "$devdummy" 1193 run_cmd ip neigh del $dstip6 lladdr $dstmac dev "$devdummy" 1194 1195 # ipv6 proxy 1196 run_cmd ip neigh add proxy $dstip6 dev "$devdummy" 1197 run_cmd_grep "$dstip6" ip neigh get proxy $dstip6 dev "$devdummy" 1198 run_cmd ip neigh del proxy $dstip6 dev "$devdummy" 1199 1200 if [ $ret -ne 0 ];then 1201 end_test "FAIL: neigh get" 1202 return 1 1203 fi 1204 1205 end_test "PASS: neigh get" 1206} 1207 1208kci_test_neigh_update() 1209{ 1210 dstip=10.0.2.4 1211 dstmac=de:ad:be:ef:13:37 1212 local ret=0 1213 1214 for proxy in "" "proxy" ; do 1215 # add a neighbour entry without any flags 1216 run_cmd ip neigh add $proxy $dstip dev "$devdummy" lladdr $dstmac nud permanent 1217 run_cmd_grep $dstip ip neigh show $proxy 1218 run_cmd_grep_fail "$dstip dev $devdummy .*\(managed\|use\|router\|extern\)" ip neigh show $proxy 1219 1220 # set the extern_learn flag, but no other 1221 run_cmd ip neigh change $proxy $dstip dev "$devdummy" extern_learn 1222 run_cmd_grep "$dstip dev $devdummy .* extern_learn" ip neigh show $proxy 1223 run_cmd_grep_fail "$dstip dev $devdummy .* \(managed\|use\|router\)" ip neigh show $proxy 1224 1225 # flags are reset when not provided 1226 run_cmd ip neigh change $proxy $dstip dev "$devdummy" 1227 run_cmd_grep $dstip ip neigh show $proxy 1228 run_cmd_grep_fail "$dstip dev $devdummy .* extern_learn" ip neigh show $proxy 1229 1230 # add a protocol 1231 run_cmd ip neigh change $proxy $dstip dev "$devdummy" protocol boot 1232 run_cmd_grep "$dstip dev $devdummy .* proto boot" ip neigh show $proxy 1233 1234 # protocol is retained when not provided 1235 run_cmd ip neigh change $proxy $dstip dev "$devdummy" 1236 run_cmd_grep "$dstip dev $devdummy .* proto boot" ip neigh show $proxy 1237 1238 # change protocol 1239 run_cmd ip neigh change $proxy $dstip dev "$devdummy" protocol static 1240 run_cmd_grep "$dstip dev $devdummy .* proto static" ip neigh show $proxy 1241 1242 # also check an extended flag for non-proxy neighs 1243 if [ "$proxy" = "" ]; then 1244 run_cmd ip neigh change $proxy $dstip dev "$devdummy" managed 1245 run_cmd_grep "$dstip dev $devdummy managed" ip neigh show $proxy 1246 1247 run_cmd ip neigh change $proxy $dstip dev "$devdummy" lladdr $dstmac 1248 run_cmd_grep_fail "$dstip dev $devdummy managed" ip neigh show $proxy 1249 fi 1250 1251 run_cmd ip neigh del $proxy $dstip dev "$devdummy" 1252 done 1253 1254 if [ $ret -ne 0 ];then 1255 end_test "FAIL: neigh update" 1256 return 1 1257 fi 1258 1259 end_test "PASS: neigh update" 1260} 1261 1262kci_test_bridge_parent_id() 1263{ 1264 local ret=0 1265 sysfsnet=/sys/bus/netdevsim/devices/netdevsim 1266 probed=false 1267 1268 if [ ! -w /sys/bus/netdevsim/new_device ] ; then 1269 run_cmd modprobe -q netdevsim 1270 if [ $ret -ne 0 ]; then 1271 end_test "SKIP: bridge_parent_id can't load netdevsim" 1272 return $ksft_skip 1273 fi 1274 probed=true 1275 fi 1276 1277 echo "10 1" > /sys/bus/netdevsim/new_device 1278 while [ ! -d ${sysfsnet}10 ] ; do :; done 1279 echo "20 1" > /sys/bus/netdevsim/new_device 1280 while [ ! -d ${sysfsnet}20 ] ; do :; done 1281 udevadm settle 1282 dev10=`ls ${sysfsnet}10/net/` 1283 dev20=`ls ${sysfsnet}20/net/` 1284 run_cmd ip link add name test-bond0 type bond mode 802.3ad 1285 run_cmd ip link set dev $dev10 master test-bond0 1286 run_cmd ip link set dev $dev20 master test-bond0 1287 run_cmd ip link add name test-br0 type bridge 1288 run_cmd ip link set dev test-bond0 master test-br0 1289 1290 # clean up any leftovers 1291 ip link del dev test-br0 1292 ip link del dev test-bond0 1293 echo 20 > /sys/bus/netdevsim/del_device 1294 echo 10 > /sys/bus/netdevsim/del_device 1295 $probed && rmmod netdevsim 1296 1297 if [ $ret -ne 0 ]; then 1298 end_test "FAIL: bridge_parent_id" 1299 return 1 1300 fi 1301 end_test "PASS: bridge_parent_id" 1302} 1303 1304address_get_proto() 1305{ 1306 local addr=$1; shift 1307 1308 ip -N -j address show dev "$devdummy" | 1309 jq -e -r --arg addr "${addr%/*}" \ 1310 '.[].addr_info[] | select(.local == $addr) | .protocol' 1311} 1312 1313address_count() 1314{ 1315 ip -N -j address show dev "$devdummy" "$@" | 1316 jq -e -r '[.[].addr_info[] | .local | select(. != null)] | length' 1317} 1318 1319do_test_address_proto() 1320{ 1321 local what=$1; shift 1322 local addr=$1; shift 1323 local addr2=${addr%/*}2/${addr#*/} 1324 local addr3=${addr%/*}3/${addr#*/} 1325 local proto 1326 local count 1327 local ret=0 1328 local err 1329 1330 run_cmd_grep 'proto' ip address help 1331 if [ $? -ne 0 ];then 1332 end_test "SKIP: addr proto ${what}: iproute2 too old" 1333 return $ksft_skip 1334 fi 1335 1336 ip address add dev "$devdummy" "$addr3" 1337 check_err $? 1338 proto=$(address_get_proto "$addr3") 1339 [[ "$proto" == null ]] 1340 check_err $? 1341 1342 ip address add dev "$devdummy" "$addr2" proto 0x99 1343 check_err $? 1344 proto=$(address_get_proto "$addr2") 1345 [[ "$proto" == 0x99 ]] 1346 check_err $? 1347 1348 ip address add dev "$devdummy" "$addr" proto 0xab 1349 check_err $? 1350 proto=$(address_get_proto "$addr") 1351 [[ "$proto" == 0xab ]] 1352 check_err $? 1353 1354 ip address replace dev "$devdummy" "$addr" proto 0x11 1355 proto=$(address_get_proto "$addr") 1356 check_err $? 1357 [[ "$proto" == 0x11 ]] 1358 check_err $? 1359 1360 count=$(address_count) 1361 check_err $? 1362 (( count >= 3 )) # $addr, $addr2 and $addr3 plus any kernel addresses 1363 check_err $? 1364 1365 count=$(address_count proto 0) 1366 check_err $? 1367 (( count == 1 )) # just $addr3 1368 check_err $? 1369 1370 count=$(address_count proto 0x11) 1371 check_err $? 1372 (( count == 2 )) # $addr and $addr3 1373 check_err $? 1374 1375 count=$(address_count proto 0xab) 1376 check_err $? 1377 (( count == 1 )) # just $addr3 1378 check_err $? 1379 1380 ip address del dev "$devdummy" "$addr" 1381 ip address del dev "$devdummy" "$addr2" 1382 ip address del dev "$devdummy" "$addr3" 1383 1384 if [ $ret -ne 0 ]; then 1385 end_test "FAIL: address proto $what" 1386 return 1 1387 fi 1388 end_test "PASS: address proto $what" 1389} 1390 1391kci_test_address_proto() 1392{ 1393 local ret=0 1394 1395 do_test_address_proto IPv4 192.0.2.1/28 1396 check_err $? 1397 1398 do_test_address_proto IPv6 2001:db8:1::1/64 1399 check_err $? 1400 1401 return $ret 1402} 1403 1404kci_test_enslave_bonding() 1405{ 1406 local bond="bond123" 1407 local ret=0 1408 1409 setup_ns testns 1410 if [ $? -ne 0 ]; then 1411 end_test "SKIP bonding tests: cannot add net namespace $testns" 1412 return $ksft_skip 1413 fi 1414 1415 run_cmd ip -netns $testns link add dev $bond type bond mode balance-rr 1416 run_cmd ip -netns $testns link add dev $devdummy type dummy 1417 run_cmd ip -netns $testns link set dev $devdummy up 1418 run_cmd ip -netns $testns link set dev $devdummy master $bond down 1419 if [ $ret -ne 0 ]; then 1420 end_test "FAIL: initially up interface added to a bond and set down" 1421 ip netns del "$testns" 1422 return 1 1423 fi 1424 1425 end_test "PASS: enslave interface in a bond" 1426 ip netns del "$testns" 1427} 1428 1429# Called to validate the addresses on $IFNAME: 1430# 1431# 1. Every `temporary` address must have a matching `mngtmpaddr` 1432# 2. Every `mngtmpaddr` address must have some un`deprecated` `temporary` 1433# 1434# If the mngtmpaddr or tempaddr checking failed, return 0 and stop slowwait 1435validate_mngtmpaddr() 1436{ 1437 local dev=$1 1438 local prefix="" 1439 local addr_list=$(ip -j -n $testns addr show dev ${dev}) 1440 local temp_addrs=$(echo ${addr_list} | \ 1441 jq -r '.[].addr_info[] | select(.temporary == true) | .local') 1442 local mng_prefixes=$(echo ${addr_list} | \ 1443 jq -r '.[].addr_info[] | select(.mngtmpaddr == true) | .local' | \ 1444 cut -d: -f1-4 | tr '\n' ' ') 1445 local undep_prefixes=$(echo ${addr_list} | \ 1446 jq -r '.[].addr_info[] | select(.temporary == true and .deprecated != true) | .local' | \ 1447 cut -d: -f1-4 | tr '\n' ' ') 1448 1449 # 1. All temporary addresses (temp and dep) must have a matching mngtmpaddr 1450 for address in ${temp_addrs}; do 1451 prefix=$(echo ${address} | cut -d: -f1-4) 1452 if [[ ! " ${mng_prefixes} " =~ " $prefix " ]]; then 1453 check_err 1 "FAIL: Temporary $address with no matching mngtmpaddr!"; 1454 return 0 1455 fi 1456 done 1457 1458 # 2. All mngtmpaddr addresses must have a temporary address (not dep) 1459 for prefix in ${mng_prefixes}; do 1460 if [[ ! " ${undep_prefixes} " =~ " $prefix " ]]; then 1461 check_err 1 "FAIL: No undeprecated temporary in $prefix!"; 1462 return 0 1463 fi 1464 done 1465 1466 return 1 1467} 1468 1469kci_test_mngtmpaddr() 1470{ 1471 local ret=0 1472 1473 setup_ns testns 1474 if [ $? -ne 0 ]; then 1475 end_test "SKIP mngtmpaddr tests: cannot add net namespace $testns" 1476 return $ksft_skip 1477 fi 1478 1479 # 1. Create a dummy Ethernet interface 1480 run_cmd ip -n $testns link add ${devdummy} type dummy 1481 run_cmd ip -n $testns link set ${devdummy} up 1482 run_cmd ip netns exec $testns sysctl -w net.ipv6.conf.${devdummy}.use_tempaddr=1 1483 run_cmd ip netns exec $testns sysctl -w net.ipv6.conf.${devdummy}.temp_prefered_lft=10 1484 run_cmd ip netns exec $testns sysctl -w net.ipv6.conf.${devdummy}.temp_valid_lft=25 1485 run_cmd ip netns exec $testns sysctl -w net.ipv6.conf.${devdummy}.max_desync_factor=1 1486 1487 # 2. Create several mngtmpaddr addresses on that interface. 1488 # with temp_*_lft configured to be pretty short (10 and 35 seconds 1489 # for prefer/valid respectively) 1490 for i in $(seq 1 9); do 1491 run_cmd ip -n $testns addr add 2001:db8:7e57:${i}::1/64 mngtmpaddr dev ${devdummy} 1492 done 1493 1494 # 3. Confirm that a preferred temporary address exists for each mngtmpaddr 1495 # address at all times, polling once per second for 30 seconds. 1496 slowwait 30 validate_mngtmpaddr ${devdummy} 1497 1498 # 4. Delete each mngtmpaddr address, one at a time (alternating between 1499 # deleting and merely un-mngtmpaddr-ing), and confirm that the other 1500 # mngtmpaddr addresses still have preferred temporaries. 1501 for i in $(seq 1 9); do 1502 (( $i % 4 == 0 )) && mng_flag="mngtmpaddr" || mng_flag="" 1503 if (( $i % 2 == 0 )); then 1504 run_cmd ip -n $testns addr del 2001:db8:7e57:${i}::1/64 $mng_flag dev ${devdummy} 1505 else 1506 run_cmd ip -n $testns addr change 2001:db8:7e57:${i}::1/64 dev ${devdummy} 1507 fi 1508 # the temp addr should be deleted 1509 validate_mngtmpaddr ${devdummy} 1510 done 1511 1512 if [ $ret -ne 0 ]; then 1513 end_test "FAIL: mngtmpaddr add/remove incorrect" 1514 else 1515 end_test "PASS: mngtmpaddr add/remove correctly" 1516 fi 1517 1518 ip netns del "$testns" 1519 return $ret 1520} 1521 1522kci_test_operstate() 1523{ 1524 local ret=0 1525 1526 # Check that it is possible to set operational state during device 1527 # creation and that it is preserved when the administrative state of 1528 # the device is toggled. 1529 run_cmd ip link add name vx0 up state up type vxlan id 10010 dstport 4789 1530 run_cmd_grep "state UP" ip link show dev vx0 1531 run_cmd ip link set dev vx0 down 1532 run_cmd_grep "state DOWN" ip link show dev vx0 1533 run_cmd ip link set dev vx0 up 1534 run_cmd_grep "state UP" ip link show dev vx0 1535 1536 run_cmd ip link del dev vx0 1537 1538 # Check that it is possible to set the operational state of the device 1539 # after creation. 1540 run_cmd ip link add name vx0 up type vxlan id 10010 dstport 4789 1541 run_cmd_grep "state UNKNOWN" ip link show dev vx0 1542 run_cmd ip link set dev vx0 state up 1543 run_cmd_grep "state UP" ip link show dev vx0 1544 1545 run_cmd ip link del dev vx0 1546 1547 if [ "$ret" -ne 0 ]; then 1548 end_test "FAIL: operstate" 1549 return 1 1550 fi 1551 1552 end_test "PASS: operstate" 1553} 1554 1555kci_test_rtnl() 1556{ 1557 local current_test 1558 local ret=0 1559 1560 kci_add_dummy 1561 if [ $ret -ne 0 ];then 1562 end_test "FAIL: cannot add dummy interface" 1563 return 1 1564 fi 1565 1566 for current_test in ${TESTS:-$ALL_TESTS}; do 1567 $current_test 1568 check_err $? 1569 done 1570 1571 kci_del_dummy 1572 return $ret 1573} 1574 1575usage() 1576{ 1577 cat <<EOF 1578usage: ${0##*/} OPTS 1579 1580 -t <test> Test(s) to run (default: all) 1581 (options: $(echo $ALL_TESTS)) 1582 -v Verbose mode (show commands and output) 1583 -P Pause after every test 1584 -p Pause after every failing test before cleanup (for debugging) 1585EOF 1586} 1587 1588require_command jq 1589 1590#check for needed privileges 1591if [ "$(id -u)" -ne 0 ];then 1592 end_test "SKIP: Need root privileges" 1593 exit $ksft_skip 1594fi 1595 1596for x in ip tc;do 1597 $x -Version 2>/dev/null >/dev/null 1598 if [ $? -ne 0 ];then 1599 end_test "SKIP: Could not run test without the $x tool" 1600 exit $ksft_skip 1601 fi 1602done 1603 1604while getopts t:hvpP o; do 1605 case $o in 1606 t) TESTS=$OPTARG;; 1607 v) VERBOSE=1;; 1608 p) PAUSE_ON_FAIL=yes;; 1609 P) PAUSE=yes;; 1610 h) usage; exit 0;; 1611 *) usage; exit 1;; 1612 esac 1613done 1614 1615[ $PAUSE = "yes" ] && PAUSE_ON_FAIL="no" 1616 1617kci_test_rtnl 1618 1619exit $? 1620