1#!/bin/bash 2# 3# This test is for checking rtnetlink callpaths, and get as much coverage as possible. 4# 5# set -e 6 7ALL_TESTS=" 8 kci_test_polrouting 9 kci_test_route_get 10 kci_test_addrlft 11 kci_test_promote_secondaries 12 kci_test_tc 13 kci_test_gre 14 kci_test_gretap 15 kci_test_ip6gretap 16 kci_test_erspan 17 kci_test_ip6erspan 18 kci_test_bridge 19 kci_test_addrlabel 20 kci_test_ifalias 21 kci_test_vrf 22 kci_test_encap 23 kci_test_macsec 24 kci_test_macsec_vlan 25 kci_test_ipsec 26 kci_test_ipsec_offload 27 kci_test_fdb_get 28 kci_test_fdb_del 29 kci_test_neigh_get 30 kci_test_bridge_parent_id 31 kci_test_address_proto 32 kci_test_enslave_bonding 33 kci_test_mngtmpaddr 34 kci_test_operstate 35" 36 37devdummy="test-dummy0" 38VERBOSE=0 39PAUSE=no 40PAUSE_ON_FAIL=no 41 42source lib.sh 43 44# set global exit status, but never reset nonzero one. 45check_err() 46{ 47 if [ $ret -eq 0 ]; then 48 ret=$1 49 fi 50 [ -n "$2" ] && echo "$2" 51} 52 53# same but inverted -- used when command must fail for test to pass 54check_fail() 55{ 56 if [ $1 -eq 0 ]; then 57 ret=1 58 fi 59} 60 61run_cmd_common() 62{ 63 local cmd="$*" 64 local out 65 if [ "$VERBOSE" = "1" ]; then 66 echo "COMMAND: ${cmd}" 67 fi 68 out=$($cmd 2>&1) 69 rc=$? 70 if [ "$VERBOSE" = "1" -a -n "$out" ]; then 71 echo " $out" 72 fi 73 return $rc 74} 75 76run_cmd() { 77 run_cmd_common "$@" 78 rc=$? 79 check_err $rc 80 return $rc 81} 82run_cmd_fail() 83{ 84 run_cmd_common "$@" 85 rc=$? 86 check_fail $rc 87 return $rc 88} 89 90run_cmd_grep_common() 91{ 92 local find="$1"; shift 93 local cmd="$*" 94 local out 95 if [ "$VERBOSE" = "1" ]; then 96 echo "COMMAND: ${cmd} 2>&1 | grep -q '${find}'" 97 fi 98 out=$($cmd 2>&1 | grep -q "${find}" 2>&1) 99 return $? 100} 101 102run_cmd_grep() { 103 run_cmd_grep_common "$@" 104 rc=$? 105 check_err $rc 106 return $rc 107} 108 109run_cmd_grep_fail() 110{ 111 run_cmd_grep_common "$@" 112 rc=$? 113 check_fail $rc 114 return $rc 115} 116 117end_test() 118{ 119 echo "$*" 120 [ "${VERBOSE}" = "1" ] && echo 121 122 if [[ $ret -ne 0 ]] && [[ "${PAUSE_ON_FAIL}" = "yes" ]]; then 123 echo "Hit enter to continue" 124 read a 125 fi; 126 127 if [ "${PAUSE}" = "yes" ]; then 128 echo "Hit enter to continue" 129 read a 130 fi 131 132} 133 134 135kci_add_dummy() 136{ 137 run_cmd ip link add name "$devdummy" type dummy 138 run_cmd ip link set "$devdummy" up 139} 140 141kci_del_dummy() 142{ 143 run_cmd ip link del dev "$devdummy" 144} 145 146kci_test_netconf() 147{ 148 dev="$1" 149 r=$ret 150 run_cmd ip netconf show dev "$dev" 151 for f in 4 6; do 152 run_cmd ip -$f netconf show dev "$dev" 153 done 154 155 if [ $ret -ne 0 ] ;then 156 end_test "FAIL: ip netconf show $dev" 157 test $r -eq 0 && ret=0 158 return 1 159 fi 160} 161 162# add a bridge with vlans on top 163kci_test_bridge() 164{ 165 devbr="test-br0" 166 vlandev="testbr-vlan1" 167 168 local ret=0 169 run_cmd ip link add name "$devbr" type bridge 170 run_cmd ip link set dev "$devdummy" master "$devbr" 171 run_cmd ip link set "$devbr" up 172 run_cmd ip link add link "$devbr" name "$vlandev" type vlan id 1 173 run_cmd ip addr add dev "$vlandev" 10.200.7.23/30 174 run_cmd ip -6 addr add dev "$vlandev" dead:42::1234/64 175 run_cmd ip -d link 176 run_cmd ip r s t all 177 178 for name in "$devbr" "$vlandev" "$devdummy" ; do 179 kci_test_netconf "$name" 180 done 181 run_cmd ip -6 addr del dev "$vlandev" dead:42::1234/64 182 run_cmd ip link del dev "$vlandev" 183 run_cmd ip link del dev "$devbr" 184 185 if [ $ret -ne 0 ];then 186 end_test "FAIL: bridge setup" 187 return 1 188 fi 189 end_test "PASS: bridge setup" 190 191} 192 193kci_test_gre() 194{ 195 gredev=neta 196 rem=10.42.42.1 197 loc=10.0.0.1 198 199 local ret=0 200 run_cmd ip tunnel add $gredev mode gre remote $rem local $loc ttl 1 201 run_cmd ip link set $gredev up 202 run_cmd ip addr add 10.23.7.10 dev $gredev 203 run_cmd ip route add 10.23.8.0/30 dev $gredev 204 run_cmd ip addr add dev "$devdummy" 10.23.7.11/24 205 run_cmd ip link 206 run_cmd ip addr 207 208 kci_test_netconf "$gredev" 209 run_cmd ip addr del dev "$devdummy" 10.23.7.11/24 210 run_cmd ip link del $gredev 211 212 if [ $ret -ne 0 ];then 213 end_test "FAIL: gre tunnel endpoint" 214 return 1 215 fi 216 end_test "PASS: gre tunnel endpoint" 217} 218 219# tc uses rtnetlink too, for full tc testing 220# please see tools/testing/selftests/tc-testing. 221kci_test_tc() 222{ 223 dev=lo 224 local ret=0 225 226 run_cmd tc qdisc add dev "$dev" root handle 1: htb 227 run_cmd tc class add dev "$dev" parent 1: classid 1:10 htb rate 1mbit 228 run_cmd tc filter add dev "$dev" parent 1:0 prio 5 handle ffe: protocol ip u32 divisor 256 229 run_cmd tc filter add dev "$dev" parent 1:0 prio 5 handle ffd: protocol ip u32 divisor 256 230 run_cmd tc filter add dev "$dev" parent 1:0 prio 5 handle ffc: protocol ip u32 divisor 256 231 run_cmd tc filter add dev "$dev" protocol ip parent 1: prio 5 handle ffe:2:3 u32 ht ffe:2: match ip src 10.0.0.3 flowid 1:10 232 run_cmd tc filter add dev "$dev" protocol ip parent 1: prio 5 handle ffe:2:2 u32 ht ffe:2: match ip src 10.0.0.2 flowid 1:10 233 run_cmd tc filter show dev "$dev" parent 1:0 234 run_cmd tc filter del dev "$dev" protocol ip parent 1: prio 5 handle ffe:2:3 u32 235 run_cmd tc filter show dev "$dev" parent 1:0 236 run_cmd tc qdisc del dev "$dev" root handle 1: htb 237 238 if [ $ret -ne 0 ];then 239 end_test "FAIL: tc htb hierarchy" 240 return 1 241 fi 242 end_test "PASS: tc htb hierarchy" 243 244} 245 246kci_test_polrouting() 247{ 248 local ret=0 249 run_cmd ip rule add fwmark 1 lookup 100 250 run_cmd ip route add local 0.0.0.0/0 dev lo table 100 251 run_cmd ip r s t all 252 run_cmd ip rule del fwmark 1 lookup 100 253 run_cmd ip route del local 0.0.0.0/0 dev lo table 100 254 255 if [ $ret -ne 0 ];then 256 end_test "FAIL: policy route test" 257 return 1 258 fi 259 end_test "PASS: policy routing" 260} 261 262kci_test_route_get() 263{ 264 local hash_policy=$(sysctl -n net.ipv4.fib_multipath_hash_policy) 265 266 local ret=0 267 run_cmd ip route get 127.0.0.1 268 run_cmd ip route get 127.0.0.1 dev "$devdummy" 269 run_cmd ip route get ::1 270 run_cmd ip route get fe80::1 dev "$devdummy" 271 run_cmd ip route get 127.0.0.1 from 127.0.0.1 oif lo tos 0x10 mark 0x1 272 run_cmd ip route get ::1 from ::1 iif lo oif lo tos 0x10 mark 0x1 273 run_cmd ip addr add dev "$devdummy" 10.23.7.11/24 274 run_cmd ip route get 10.23.7.11 from 10.23.7.12 iif "$devdummy" 275 run_cmd ip route add 10.23.8.0/24 \ 276 nexthop via 10.23.7.13 dev "$devdummy" \ 277 nexthop via 10.23.7.14 dev "$devdummy" 278 279 sysctl -wq net.ipv4.fib_multipath_hash_policy=0 280 run_cmd ip route get 10.23.8.11 281 sysctl -wq net.ipv4.fib_multipath_hash_policy=1 282 run_cmd ip route get 10.23.8.11 283 sysctl -wq net.ipv4.fib_multipath_hash_policy="$hash_policy" 284 run_cmd ip route del 10.23.8.0/24 285 run_cmd ip addr del dev "$devdummy" 10.23.7.11/24 286 287 288 if [ $ret -ne 0 ];then 289 end_test "FAIL: route get" 290 return 1 291 fi 292 293 end_test "PASS: route get" 294} 295 296check_addr_not_exist() 297{ 298 dev=$1 299 addr=$2 300 if ip addr show dev $dev | grep -q $addr; then 301 return 1 302 else 303 return 0 304 fi 305} 306 307kci_test_addrlft() 308{ 309 for i in $(seq 10 100) ;do 310 lft=$(((RANDOM%3) + 1)) 311 run_cmd ip addr add 10.23.11.$i/32 dev "$devdummy" preferred_lft $lft valid_lft $((lft+1)) 312 done 313 314 slowwait 5 check_addr_not_exist "$devdummy" "10.23.11." 315 if [ $? -eq 1 ]; then 316 # troubleshoot the reason for our failure 317 run_cmd ip addr show dev "$devdummy" 318 check_err 1 319 end_test "FAIL: preferred_lft addresses remaining" 320 return 321 fi 322 323 end_test "PASS: preferred_lft addresses have expired" 324} 325 326kci_test_promote_secondaries() 327{ 328 run_cmd ifconfig "$devdummy" 329 if [ $ret -ne 0 ]; then 330 end_test "SKIP: ifconfig not installed" 331 return $ksft_skip 332 fi 333 promote=$(sysctl -n net.ipv4.conf.$devdummy.promote_secondaries) 334 335 sysctl -q net.ipv4.conf.$devdummy.promote_secondaries=1 336 337 for i in $(seq 2 254);do 338 IP="10.23.11.$i" 339 ip -f inet addr add $IP/16 brd + dev "$devdummy" 340 ifconfig "$devdummy" $IP netmask 255.255.0.0 341 done 342 343 ip addr flush dev "$devdummy" 344 345 [ $promote -eq 0 ] && sysctl -q net.ipv4.conf.$devdummy.promote_secondaries=0 346 347 end_test "PASS: promote_secondaries complete" 348} 349 350kci_test_addrlabel() 351{ 352 local ret=0 353 run_cmd ip addrlabel add prefix dead::/64 dev lo label 1 354 run_cmd_grep "prefix dead::/64 dev lo label 1" ip addrlabel list 355 run_cmd ip addrlabel del prefix dead::/64 dev lo label 1 356 run_cmd ip addrlabel add prefix dead::/64 label 1 357 run_cmd ip addrlabel del prefix dead::/64 label 1 358 359 # concurrent add/delete 360 for i in $(seq 1 1000); do 361 ip addrlabel add prefix 1c3::/64 label 12345 2>/dev/null 362 done & 363 364 for i in $(seq 1 1000); do 365 ip addrlabel del prefix 1c3::/64 label 12345 2>/dev/null 366 done 367 368 wait 369 370 ip addrlabel del prefix 1c3::/64 label 12345 2>/dev/null 371 372 if [ $ret -ne 0 ];then 373 end_test "FAIL: ipv6 addrlabel" 374 return 1 375 fi 376 377 end_test "PASS: ipv6 addrlabel" 378} 379 380kci_test_ifalias() 381{ 382 local ret=0 383 namewant=$(uuidgen) 384 syspathname="/sys/class/net/$devdummy/ifalias" 385 run_cmd ip link set dev "$devdummy" alias "$namewant" 386 387 if [ $ret -ne 0 ]; then 388 end_test "FAIL: cannot set interface alias of $devdummy to $namewant" 389 return 1 390 fi 391 run_cmd_grep "alias $namewant" ip link show "$devdummy" 392 393 if [ -r "$syspathname" ] ; then 394 read namehave < "$syspathname" 395 if [ "$namewant" != "$namehave" ]; then 396 end_test "FAIL: did set ifalias $namewant but got $namehave" 397 return 1 398 fi 399 400 namewant=$(uuidgen) 401 echo "$namewant" > "$syspathname" 402 run_cmd_grep "alias $namewant" ip link show "$devdummy" 403 404 # sysfs interface allows to delete alias again 405 echo "" > "$syspathname" 406 run_cmd_grep_fail "alias $namewant" ip link show "$devdummy" 407 408 for i in $(seq 1 100); do 409 uuidgen > "$syspathname" & 410 done 411 412 wait 413 414 # re-add the alias -- kernel should free mem when dummy dev is removed 415 run_cmd ip link set dev "$devdummy" alias "$namewant" 416 417 fi 418 419 if [ $ret -ne 0 ]; then 420 end_test "FAIL: set interface alias $devdummy to $namewant" 421 return 1 422 fi 423 424 end_test "PASS: set ifalias $namewant for $devdummy" 425} 426 427kci_test_vrf() 428{ 429 vrfname="test-vrf" 430 local ret=0 431 run_cmd ip link show type vrf 432 if [ $? -ne 0 ]; then 433 end_test "SKIP: vrf: iproute2 too old" 434 return $ksft_skip 435 fi 436 run_cmd ip link add "$vrfname" type vrf table 10 437 if [ $ret -ne 0 ];then 438 end_test "FAIL: can't add vrf interface, skipping test" 439 return 0 440 fi 441 run_cmd_grep "$vrfname" ip -br link show type vrf 442 if [ $ret -ne 0 ];then 443 end_test "FAIL: created vrf device not found" 444 return 1 445 fi 446 447 run_cmd ip link set dev "$vrfname" up 448 run_cmd ip link set dev "$devdummy" master "$vrfname" 449 run_cmd ip link del dev "$vrfname" 450 451 if [ $ret -ne 0 ];then 452 end_test "FAIL: vrf" 453 return 1 454 fi 455 456 end_test "PASS: vrf" 457} 458 459kci_test_encap_vxlan() 460{ 461 local ret=0 462 vxlan="test-vxlan0" 463 vlan="test-vlan0" 464 run_cmd ip -netns "$testns" link add "$vxlan" type vxlan id 42 group 239.1.1.1 \ 465 dev "$devdummy" dstport 4789 466 if [ $? -ne 0 ]; then 467 end_test "FAIL: can't add vxlan interface, skipping test" 468 return 0 469 fi 470 471 run_cmd ip -netns "$testns" addr add 10.2.11.49/24 dev "$vxlan" 472 run_cmd ip -netns "$testns" link set up dev "$vxlan" 473 run_cmd ip -netns "$testns" link add link "$vxlan" name "$vlan" type vlan id 1 474 475 # changelink testcases 476 run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan vni 43 477 run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan group ffe5::5 dev "$devdummy" 478 run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan ttl inherit 479 480 run_cmd ip -netns "$testns" link set dev "$vxlan" type vxlan ttl 64 481 run_cmd ip -netns "$testns" link set dev "$vxlan" type vxlan nolearning 482 483 run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan proxy 484 run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan norsc 485 run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan l2miss 486 run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan l3miss 487 run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan external 488 run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan udpcsum 489 run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan udp6zerocsumtx 490 run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan udp6zerocsumrx 491 run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan remcsumtx 492 run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan remcsumrx 493 run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan gbp 494 run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan gpe 495 run_cmd ip -netns "$testns" link del "$vxlan" 496 497 if [ $ret -ne 0 ]; then 498 end_test "FAIL: vxlan" 499 return 1 500 fi 501 end_test "PASS: vxlan" 502} 503 504kci_test_encap_fou() 505{ 506 local ret=0 507 name="test-fou" 508 run_cmd_grep 'Usage: ip fou' ip fou help 509 if [ $? -ne 0 ];then 510 end_test "SKIP: fou: iproute2 too old" 511 return $ksft_skip 512 fi 513 514 if ! /sbin/modprobe -q -n fou; then 515 end_test "SKIP: module fou is not found" 516 return $ksft_skip 517 fi 518 /sbin/modprobe -q fou 519 520 run_cmd ip -netns "$testns" fou add port 7777 ipproto 47 521 if [ $? -ne 0 ];then 522 end_test "FAIL: can't add fou port 7777, skipping test" 523 return 1 524 fi 525 run_cmd ip -netns "$testns" fou add port 8888 ipproto 4 526 run_cmd_fail ip -netns "$testns" fou del port 9999 527 run_cmd ip -netns "$testns" fou del port 7777 528 if [ $ret -ne 0 ]; then 529 end_test "FAIL: fou" 530 return 1 531 fi 532 533 end_test "PASS: fou" 534} 535 536# test various encap methods, use netns to avoid unwanted interference 537kci_test_encap() 538{ 539 local ret=0 540 setup_ns testns 541 if [ $? -ne 0 ]; then 542 end_test "SKIP encap tests: cannot add net namespace $testns" 543 return $ksft_skip 544 fi 545 run_cmd ip -netns "$testns" link set lo up 546 run_cmd ip -netns "$testns" link add name "$devdummy" type dummy 547 run_cmd ip -netns "$testns" link set "$devdummy" up 548 run_cmd kci_test_encap_vxlan 549 run_cmd kci_test_encap_fou 550 551 ip netns del "$testns" 552 return $ret 553} 554 555kci_test_macsec() 556{ 557 msname="test_macsec0" 558 local ret=0 559 run_cmd_grep "^Usage: ip macsec" ip macsec help 560 if [ $? -ne 0 ]; then 561 end_test "SKIP: macsec: iproute2 too old" 562 return $ksft_skip 563 fi 564 run_cmd ip link add link "$devdummy" "$msname" type macsec port 42 encrypt on 565 if [ $ret -ne 0 ];then 566 end_test "FAIL: can't add macsec interface, skipping test" 567 return 1 568 fi 569 run_cmd ip macsec add "$msname" tx sa 0 pn 1024 on key 01 12345678901234567890123456789012 570 run_cmd ip macsec add "$msname" rx port 1234 address "1c:ed:de:ad:be:ef" 571 run_cmd ip macsec add "$msname" rx port 1234 address "1c:ed:de:ad:be:ef" sa 0 pn 1 on key 00 0123456789abcdef0123456789abcdef 572 run_cmd ip macsec show 573 run_cmd ip link del dev "$msname" 574 575 if [ $ret -ne 0 ];then 576 end_test "FAIL: macsec" 577 return 1 578 fi 579 580 end_test "PASS: macsec" 581} 582 583# Test __dev_set_rx_mode call from dev_uc_add under addr_list_lock spinlock. 584# Make sure __dev_set_promiscuity is not grabbing (sleeping) netdev instance 585# lock. 586# https://lore.kernel.org/netdev/2aff4342b0f5b1539c02ffd8df4c7e58dd9746e7.camel@nvidia.com/ 587kci_test_macsec_vlan() 588{ 589 msname="test_macsec1" 590 vlanname="test_vlan1" 591 local ret=0 592 run_cmd_grep "^Usage: ip macsec" ip macsec help 593 if [ $? -ne 0 ]; then 594 end_test "SKIP: macsec: iproute2 too old" 595 return $ksft_skip 596 fi 597 run_cmd ip link add link "$devdummy" "$msname" type macsec port 42 encrypt on 598 if [ $ret -ne 0 ];then 599 end_test "FAIL: can't add macsec interface, skipping test" 600 return 1 601 fi 602 603 run_cmd ip link set dev "$msname" up 604 ip link add link "$msname" name "$vlanname" type vlan id 1 605 ip link set dev "$vlanname" address 00:11:22:33:44:88 606 ip link set dev "$vlanname" up 607 run_cmd ip link del dev "$vlanname" 608 run_cmd ip link del dev "$msname" 609 610 if [ $ret -ne 0 ];then 611 end_test "FAIL: macsec_vlan" 612 return 1 613 fi 614 615 end_test "PASS: macsec_vlan" 616} 617 618#------------------------------------------------------------------- 619# Example commands 620# ip x s add proto esp src 14.0.0.52 dst 14.0.0.70 \ 621# spi 0x07 mode transport reqid 0x07 replay-window 32 \ 622# aead 'rfc4106(gcm(aes))' 1234567890123456dcba 128 \ 623# sel src 14.0.0.52/24 dst 14.0.0.70/24 624# ip x p add dir out src 14.0.0.52/24 dst 14.0.0.70/24 \ 625# tmpl proto esp src 14.0.0.52 dst 14.0.0.70 \ 626# spi 0x07 mode transport reqid 0x07 627# 628# Subcommands not tested 629# ip x s update 630# ip x s allocspi 631# ip x s deleteall 632# ip x p update 633# ip x p deleteall 634# ip x p set 635#------------------------------------------------------------------- 636kci_test_ipsec() 637{ 638 local ret=0 639 algo="aead rfc4106(gcm(aes)) 0x3132333435363738393031323334353664636261 128" 640 srcip=192.168.123.1 641 dstip=192.168.123.2 642 spi=7 643 644 ip addr add $srcip dev $devdummy 645 646 # flush to be sure there's nothing configured 647 run_cmd ip x s flush ; ip x p flush 648 649 # start the monitor in the background 650 tmpfile=`mktemp /var/run/ipsectestXXX` 651 mpid=`(ip x m > $tmpfile & echo $!) 2>/dev/null` 652 sleep 0.2 653 654 ipsecid="proto esp src $srcip dst $dstip spi 0x07" 655 run_cmd ip x s add $ipsecid \ 656 mode transport reqid 0x07 replay-window 32 \ 657 $algo sel src $srcip/24 dst $dstip/24 658 659 660 lines=`ip x s list | grep $srcip | grep $dstip | wc -l` 661 run_cmd test $lines -eq 2 662 run_cmd_grep "SAD count 1" ip x s count 663 664 lines=`ip x s get $ipsecid | grep $srcip | grep $dstip | wc -l` 665 run_cmd test $lines -eq 2 666 run_cmd ip x s delete $ipsecid 667 668 lines=`ip x s list | wc -l` 669 run_cmd test $lines -eq 0 670 671 ipsecsel="dir out src $srcip/24 dst $dstip/24" 672 run_cmd ip x p add $ipsecsel \ 673 tmpl proto esp src $srcip dst $dstip \ 674 spi 0x07 mode transport reqid 0x07 675 676 677 lines=`ip x p list | grep $srcip | grep $dstip | wc -l` 678 run_cmd test $lines -eq 2 679 680 run_cmd_grep "SPD IN 0 OUT 1 FWD 0" ip x p count 681 682 lines=`ip x p get $ipsecsel | grep $srcip | grep $dstip | wc -l` 683 run_cmd test $lines -eq 2 684 685 run_cmd ip x p delete $ipsecsel 686 687 lines=`ip x p list | wc -l` 688 run_cmd test $lines -eq 0 689 690 # check the monitor results 691 kill $mpid 692 lines=`wc -l $tmpfile | cut "-d " -f1` 693 run_cmd test $lines -eq 20 694 rm -rf $tmpfile 695 696 # clean up any leftovers 697 run_cmd ip x s flush 698 run_cmd ip x p flush 699 ip addr del $srcip/32 dev $devdummy 700 701 if [ $ret -ne 0 ]; then 702 end_test "FAIL: ipsec" 703 return 1 704 fi 705 end_test "PASS: ipsec" 706} 707 708#------------------------------------------------------------------- 709# Example commands 710# ip x s add proto esp src 14.0.0.52 dst 14.0.0.70 \ 711# spi 0x07 mode transport reqid 0x07 replay-window 32 \ 712# aead 'rfc4106(gcm(aes))' 1234567890123456dcba 128 \ 713# sel src 14.0.0.52/24 dst 14.0.0.70/24 714# offload dev sim1 dir out 715# ip x p add dir out src 14.0.0.52/24 dst 14.0.0.70/24 \ 716# tmpl proto esp src 14.0.0.52 dst 14.0.0.70 \ 717# spi 0x07 mode transport reqid 0x07 718# 719#------------------------------------------------------------------- 720kci_test_ipsec_offload() 721{ 722 local ret=0 723 algo="aead rfc4106(gcm(aes)) 0x3132333435363738393031323334353664636261 128" 724 srcip=192.168.123.3 725 dstip=192.168.123.4 726 sysfsd=/sys/kernel/debug/netdevsim/netdevsim0/ports/0/ 727 sysfsf=$sysfsd/ipsec 728 sysfsnet=/sys/bus/netdevsim/devices/netdevsim0/net/ 729 probed=false 730 esp4_offload_probed_default=false 731 732 if lsmod | grep -q esp4_offload; then 733 esp4_offload_probed_default=true 734 fi 735 736 if ! mount | grep -q debugfs; then 737 mount -t debugfs none /sys/kernel/debug/ &> /dev/null 738 fi 739 740 # setup netdevsim since dummydev doesn't have offload support 741 if [ ! -w /sys/bus/netdevsim/new_device ] ; then 742 run_cmd modprobe -q netdevsim 743 if [ $ret -ne 0 ]; then 744 end_test "SKIP: ipsec_offload can't load netdevsim" 745 return $ksft_skip 746 fi 747 probed=true 748 fi 749 750 echo "0" > /sys/bus/netdevsim/new_device 751 while [ ! -d $sysfsnet ] ; do :; done 752 udevadm settle 753 dev=`ls $sysfsnet` 754 755 ip addr add $srcip dev $dev 756 ip link set $dev up 757 if [ ! -d $sysfsd ] ; then 758 end_test "FAIL: ipsec_offload can't create device $dev" 759 return 1 760 fi 761 if [ ! -f $sysfsf ] ; then 762 end_test "FAIL: ipsec_offload netdevsim doesn't support IPsec offload" 763 return 1 764 fi 765 766 # flush to be sure there's nothing configured 767 ip x s flush ; ip x p flush 768 769 # create offloaded SAs, both in and out 770 run_cmd ip x p add dir out src $srcip/24 dst $dstip/24 \ 771 tmpl proto esp src $srcip dst $dstip spi 9 \ 772 mode transport reqid 42 773 774 run_cmd ip x p add dir in src $dstip/24 dst $srcip/24 \ 775 tmpl proto esp src $dstip dst $srcip spi 9 \ 776 mode transport reqid 42 777 778 run_cmd ip x s add proto esp src $srcip dst $dstip spi 9 \ 779 mode transport reqid 42 $algo sel src $srcip/24 dst $dstip/24 \ 780 offload dev $dev dir out 781 782 run_cmd ip x s add proto esp src $dstip dst $srcip spi 9 \ 783 mode transport reqid 42 $algo sel src $dstip/24 dst $srcip/24 \ 784 offload dev $dev dir in 785 786 if [ $ret -ne 0 ]; then 787 end_test "FAIL: ipsec_offload can't create SA" 788 return 1 789 fi 790 791 # does offload show up in ip output 792 lines=`ip x s list | grep -c "crypto offload parameters: dev $dev dir"` 793 if [ $lines -ne 2 ] ; then 794 check_err 1 795 end_test "FAIL: ipsec_offload SA offload missing from list output" 796 fi 797 798 # we didn't create a peer, make sure we can Tx 799 ip neigh add $dstip dev $dev lladdr 00:11:22:33:44:55 800 # use ping to exercise the Tx path 801 ping -I $dev -c 3 -W 1 -i 0 $dstip >/dev/null 802 803 # does driver have correct offload info 804 run_cmd diff $sysfsf - << EOF 805SA count=2 tx=3 806sa[0] tx ipaddr=$dstip 807sa[0] spi=0x00000009 proto=0x32 salt=0x61626364 crypt=1 808sa[0] key=0x34333231 38373635 32313039 36353433 809sa[1] rx ipaddr=$srcip 810sa[1] spi=0x00000009 proto=0x32 salt=0x61626364 crypt=1 811sa[1] key=0x34333231 38373635 32313039 36353433 812EOF 813 if [ $? -ne 0 ] ; then 814 end_test "FAIL: ipsec_offload incorrect driver data" 815 check_err 1 816 fi 817 818 # does offload get removed from driver 819 ip x s flush 820 ip x p flush 821 lines=`grep -c "SA count=0" $sysfsf` 822 if [ $lines -ne 1 ] ; then 823 check_err 1 824 end_test "FAIL: ipsec_offload SA not removed from driver" 825 fi 826 827 # clean up any leftovers 828 ! "$esp4_offload_probed_default" && lsmod | grep -q esp4_offload && rmmod esp4_offload 829 echo 0 > /sys/bus/netdevsim/del_device 830 $probed && rmmod netdevsim 831 832 if [ $ret -ne 0 ]; then 833 end_test "FAIL: ipsec_offload" 834 return 1 835 fi 836 end_test "PASS: ipsec_offload" 837} 838 839kci_test_gretap() 840{ 841 DEV_NS=gretap00 842 local ret=0 843 844 setup_ns testns 845 if [ $? -ne 0 ]; then 846 end_test "SKIP gretap tests: cannot add net namespace $testns" 847 return $ksft_skip 848 fi 849 850 run_cmd_grep "^Usage:" ip link help gretap 851 if [ $? -ne 0 ];then 852 end_test "SKIP: gretap: iproute2 too old" 853 ip netns del "$testns" 854 return $ksft_skip 855 fi 856 857 # test native tunnel 858 run_cmd ip -netns "$testns" link add dev "$DEV_NS" type gretap seq \ 859 key 102 local 172.16.1.100 remote 172.16.1.200 860 861 862 run_cmd ip -netns "$testns" addr add dev "$DEV_NS" 10.1.1.100/24 863 run_cmd ip -netns "$testns" link set dev $DEV_NS up 864 run_cmd ip -netns "$testns" link del "$DEV_NS" 865 866 # test external mode 867 run_cmd ip -netns "$testns" link add dev "$DEV_NS" type gretap external 868 run_cmd ip -netns "$testns" link del "$DEV_NS" 869 870 if [ $ret -ne 0 ]; then 871 end_test "FAIL: gretap" 872 ip netns del "$testns" 873 return 1 874 fi 875 end_test "PASS: gretap" 876 877 ip netns del "$testns" 878} 879 880kci_test_ip6gretap() 881{ 882 DEV_NS=ip6gretap00 883 local ret=0 884 885 setup_ns testns 886 if [ $? -ne 0 ]; then 887 end_test "SKIP ip6gretap tests: cannot add net namespace $testns" 888 return $ksft_skip 889 fi 890 891 run_cmd_grep "^Usage:" ip link help ip6gretap 892 if [ $? -ne 0 ];then 893 end_test "SKIP: ip6gretap: iproute2 too old" 894 ip netns del "$testns" 895 return $ksft_skip 896 fi 897 898 # test native tunnel 899 run_cmd ip -netns "$testns" link add dev "$DEV_NS" type ip6gretap seq \ 900 key 102 local fc00:100::1 remote fc00:100::2 901 902 903 run_cmd ip -netns "$testns" addr add dev "$DEV_NS" fc00:200::1/96 904 run_cmd ip -netns "$testns" link set dev $DEV_NS up 905 run_cmd ip -netns "$testns" link del "$DEV_NS" 906 907 # test external mode 908 run_cmd ip -netns "$testns" link add dev "$DEV_NS" type ip6gretap external 909 run_cmd ip -netns "$testns" link del "$DEV_NS" 910 911 if [ $ret -ne 0 ]; then 912 end_test "FAIL: ip6gretap" 913 ip netns del "$testns" 914 return 1 915 fi 916 end_test "PASS: ip6gretap" 917 918 ip netns del "$testns" 919} 920 921kci_test_erspan() 922{ 923 DEV_NS=erspan00 924 local ret=0 925 run_cmd_grep "^Usage:" ip link help erspan 926 if [ $? -ne 0 ];then 927 end_test "SKIP: erspan: iproute2 too old" 928 return $ksft_skip 929 fi 930 setup_ns testns 931 if [ $? -ne 0 ]; then 932 end_test "SKIP erspan tests: cannot add net namespace $testns" 933 return $ksft_skip 934 fi 935 936 # test native tunnel erspan v1 937 run_cmd ip -netns "$testns" link add dev "$DEV_NS" type erspan seq \ 938 key 102 local 172.16.1.100 remote 172.16.1.200 \ 939 erspan_ver 1 erspan 488 940 941 942 run_cmd ip -netns "$testns" addr add dev "$DEV_NS" 10.1.1.100/24 943 run_cmd ip -netns "$testns" link set dev $DEV_NS up 944 run_cmd ip -netns "$testns" link del "$DEV_NS" 945 946 # test native tunnel erspan v2 947 run_cmd ip -netns "$testns" link add dev "$DEV_NS" type erspan seq \ 948 key 102 local 172.16.1.100 remote 172.16.1.200 \ 949 erspan_ver 2 erspan_dir ingress erspan_hwid 7 950 951 952 run_cmd ip -netns "$testns" addr add dev "$DEV_NS" 10.1.1.100/24 953 run_cmd ip -netns "$testns" link set dev $DEV_NS up 954 run_cmd ip -netns "$testns" link del "$DEV_NS" 955 956 # test external mode 957 run_cmd ip -netns "$testns" link add dev "$DEV_NS" type erspan external 958 run_cmd ip -netns "$testns" link del "$DEV_NS" 959 960 if [ $ret -ne 0 ]; then 961 end_test "FAIL: erspan" 962 ip netns del "$testns" 963 return 1 964 fi 965 end_test "PASS: erspan" 966 967 ip netns del "$testns" 968} 969 970kci_test_ip6erspan() 971{ 972 DEV_NS=ip6erspan00 973 local ret=0 974 run_cmd_grep "^Usage:" ip link help ip6erspan 975 if [ $? -ne 0 ];then 976 end_test "SKIP: ip6erspan: iproute2 too old" 977 return $ksft_skip 978 fi 979 setup_ns testns 980 if [ $? -ne 0 ]; then 981 end_test "SKIP ip6erspan tests: cannot add net namespace $testns" 982 return $ksft_skip 983 fi 984 985 # test native tunnel ip6erspan v1 986 run_cmd ip -netns "$testns" link add dev "$DEV_NS" type ip6erspan seq \ 987 key 102 local fc00:100::1 remote fc00:100::2 \ 988 erspan_ver 1 erspan 488 989 990 991 run_cmd ip -netns "$testns" addr add dev "$DEV_NS" 10.1.1.100/24 992 run_cmd ip -netns "$testns" link set dev $DEV_NS up 993 run_cmd ip -netns "$testns" link del "$DEV_NS" 994 995 # test native tunnel ip6erspan v2 996 run_cmd ip -netns "$testns" link add dev "$DEV_NS" type ip6erspan seq \ 997 key 102 local fc00:100::1 remote fc00:100::2 \ 998 erspan_ver 2 erspan_dir ingress erspan_hwid 7 999 1000 1001 run_cmd ip -netns "$testns" addr add dev "$DEV_NS" 10.1.1.100/24 1002 run_cmd ip -netns "$testns" link set dev $DEV_NS up 1003 run_cmd ip -netns "$testns" link del "$DEV_NS" 1004 1005 # test external mode 1006 run_cmd ip -netns "$testns" link add dev "$DEV_NS" \ 1007 type ip6erspan external 1008 1009 run_cmd ip -netns "$testns" link del "$DEV_NS" 1010 1011 if [ $ret -ne 0 ]; then 1012 end_test "FAIL: ip6erspan" 1013 ip netns del "$testns" 1014 return 1 1015 fi 1016 end_test "PASS: ip6erspan" 1017 1018 ip netns del "$testns" 1019} 1020 1021kci_test_fdb_get() 1022{ 1023 brdev="test-br0" 1024 vxlandev="vxlan10" 1025 test_mac=de:ad:be:ef:13:37 1026 localip="10.0.2.2" 1027 dstip="10.0.2.3" 1028 local ret=0 1029 1030 run_cmd_grep 'bridge fdb get' bridge fdb help 1031 if [ $? -ne 0 ];then 1032 end_test "SKIP: fdb get tests: iproute2 too old" 1033 return $ksft_skip 1034 fi 1035 1036 setup_ns testns 1037 if [ $? -ne 0 ]; then 1038 end_test "SKIP fdb get tests: cannot add net namespace $testns" 1039 return $ksft_skip 1040 fi 1041 IP="ip -netns $testns" 1042 BRIDGE="bridge -netns $testns" 1043 run_cmd $IP link add "$vxlandev" type vxlan id 10 local $localip \ 1044 dstport 4789 1045 run_cmd $IP link add name "$brdev" type bridge 1046 run_cmd $IP link set dev "$vxlandev" master "$brdev" 1047 run_cmd $BRIDGE fdb add $test_mac dev "$vxlandev" master 1048 run_cmd $BRIDGE fdb add $test_mac dev "$vxlandev" dst $dstip self 1049 run_cmd_grep "dev $vxlandev master $brdev" $BRIDGE fdb get $test_mac brport "$vxlandev" 1050 run_cmd_grep "dev $vxlandev master $brdev" $BRIDGE fdb get $test_mac br "$brdev" 1051 run_cmd_grep "dev $vxlandev dst $dstip" $BRIDGE fdb get $test_mac dev "$vxlandev" self 1052 1053 ip netns del $testns &>/dev/null 1054 1055 if [ $ret -ne 0 ]; then 1056 end_test "FAIL: bridge fdb get" 1057 return 1 1058 fi 1059 1060 end_test "PASS: bridge fdb get" 1061} 1062 1063kci_test_fdb_del() 1064{ 1065 local test_mac=de:ad:be:ef:13:37 1066 local dummydev="dummy1" 1067 local brdev="test-br0" 1068 local ret=0 1069 1070 run_cmd_grep 'bridge fdb get' bridge fdb help 1071 if [ $? -ne 0 ]; then 1072 end_test "SKIP: fdb del tests: iproute2 too old" 1073 return $ksft_skip 1074 fi 1075 1076 setup_ns testns 1077 if [ $? -ne 0 ]; then 1078 end_test "SKIP fdb del tests: cannot add net namespace $testns" 1079 return $ksft_skip 1080 fi 1081 IP="ip -netns $testns" 1082 BRIDGE="bridge -netns $testns" 1083 run_cmd $IP link add $dummydev type dummy 1084 run_cmd $IP link add name $brdev type bridge vlan_filtering 1 1085 run_cmd $IP link set dev $dummydev master $brdev 1086 run_cmd $BRIDGE fdb add $test_mac dev $dummydev master static vlan 1 1087 run_cmd $BRIDGE vlan del vid 1 dev $dummydev 1088 run_cmd $BRIDGE fdb get $test_mac br $brdev vlan 1 1089 run_cmd $BRIDGE fdb del $test_mac dev $dummydev master vlan 1 1090 run_cmd_fail $BRIDGE fdb get $test_mac br $brdev vlan 1 1091 1092 ip netns del $testns &>/dev/null 1093 1094 if [ $ret -ne 0 ]; then 1095 end_test "FAIL: bridge fdb del" 1096 return 1 1097 fi 1098 1099 end_test "PASS: bridge fdb del" 1100} 1101 1102kci_test_neigh_get() 1103{ 1104 dstmac=de:ad:be:ef:13:37 1105 dstip=10.0.2.4 1106 dstip6=dead::2 1107 local ret=0 1108 1109 run_cmd_grep 'ip neigh get' ip neigh help 1110 if [ $? -ne 0 ];then 1111 end_test "SKIP: fdb get tests: iproute2 too old" 1112 return $ksft_skip 1113 fi 1114 1115 # ipv4 1116 run_cmd ip neigh add $dstip lladdr $dstmac dev "$devdummy" 1117 run_cmd_grep "$dstmac" ip neigh get $dstip dev "$devdummy" 1118 run_cmd ip neigh del $dstip lladdr $dstmac dev "$devdummy" 1119 1120 # ipv4 proxy 1121 run_cmd ip neigh add proxy $dstip dev "$devdummy" 1122 run_cmd_grep "$dstip" ip neigh get proxy $dstip dev "$devdummy" 1123 run_cmd ip neigh del proxy $dstip dev "$devdummy" 1124 1125 # ipv6 1126 run_cmd ip neigh add $dstip6 lladdr $dstmac dev "$devdummy" 1127 run_cmd_grep "$dstmac" ip neigh get $dstip6 dev "$devdummy" 1128 run_cmd ip neigh del $dstip6 lladdr $dstmac dev "$devdummy" 1129 1130 # ipv6 proxy 1131 run_cmd ip neigh add proxy $dstip6 dev "$devdummy" 1132 run_cmd_grep "$dstip6" ip neigh get proxy $dstip6 dev "$devdummy" 1133 run_cmd ip neigh del proxy $dstip6 dev "$devdummy" 1134 1135 if [ $ret -ne 0 ];then 1136 end_test "FAIL: neigh get" 1137 return 1 1138 fi 1139 1140 end_test "PASS: neigh get" 1141} 1142 1143kci_test_bridge_parent_id() 1144{ 1145 local ret=0 1146 sysfsnet=/sys/bus/netdevsim/devices/netdevsim 1147 probed=false 1148 1149 if [ ! -w /sys/bus/netdevsim/new_device ] ; then 1150 run_cmd modprobe -q netdevsim 1151 if [ $ret -ne 0 ]; then 1152 end_test "SKIP: bridge_parent_id can't load netdevsim" 1153 return $ksft_skip 1154 fi 1155 probed=true 1156 fi 1157 1158 echo "10 1" > /sys/bus/netdevsim/new_device 1159 while [ ! -d ${sysfsnet}10 ] ; do :; done 1160 echo "20 1" > /sys/bus/netdevsim/new_device 1161 while [ ! -d ${sysfsnet}20 ] ; do :; done 1162 udevadm settle 1163 dev10=`ls ${sysfsnet}10/net/` 1164 dev20=`ls ${sysfsnet}20/net/` 1165 run_cmd ip link add name test-bond0 type bond mode 802.3ad 1166 run_cmd ip link set dev $dev10 master test-bond0 1167 run_cmd ip link set dev $dev20 master test-bond0 1168 run_cmd ip link add name test-br0 type bridge 1169 run_cmd ip link set dev test-bond0 master test-br0 1170 1171 # clean up any leftovers 1172 ip link del dev test-br0 1173 ip link del dev test-bond0 1174 echo 20 > /sys/bus/netdevsim/del_device 1175 echo 10 > /sys/bus/netdevsim/del_device 1176 $probed && rmmod netdevsim 1177 1178 if [ $ret -ne 0 ]; then 1179 end_test "FAIL: bridge_parent_id" 1180 return 1 1181 fi 1182 end_test "PASS: bridge_parent_id" 1183} 1184 1185address_get_proto() 1186{ 1187 local addr=$1; shift 1188 1189 ip -N -j address show dev "$devdummy" | 1190 jq -e -r --arg addr "${addr%/*}" \ 1191 '.[].addr_info[] | select(.local == $addr) | .protocol' 1192} 1193 1194address_count() 1195{ 1196 ip -N -j address show dev "$devdummy" "$@" | 1197 jq -e -r '[.[].addr_info[] | .local | select(. != null)] | length' 1198} 1199 1200do_test_address_proto() 1201{ 1202 local what=$1; shift 1203 local addr=$1; shift 1204 local addr2=${addr%/*}2/${addr#*/} 1205 local addr3=${addr%/*}3/${addr#*/} 1206 local proto 1207 local count 1208 local ret=0 1209 local err 1210 1211 run_cmd_grep 'proto' ip address help 1212 if [ $? -ne 0 ];then 1213 end_test "SKIP: addr proto ${what}: iproute2 too old" 1214 return $ksft_skip 1215 fi 1216 1217 ip address add dev "$devdummy" "$addr3" 1218 check_err $? 1219 proto=$(address_get_proto "$addr3") 1220 [[ "$proto" == null ]] 1221 check_err $? 1222 1223 ip address add dev "$devdummy" "$addr2" proto 0x99 1224 check_err $? 1225 proto=$(address_get_proto "$addr2") 1226 [[ "$proto" == 0x99 ]] 1227 check_err $? 1228 1229 ip address add dev "$devdummy" "$addr" proto 0xab 1230 check_err $? 1231 proto=$(address_get_proto "$addr") 1232 [[ "$proto" == 0xab ]] 1233 check_err $? 1234 1235 ip address replace dev "$devdummy" "$addr" proto 0x11 1236 proto=$(address_get_proto "$addr") 1237 check_err $? 1238 [[ "$proto" == 0x11 ]] 1239 check_err $? 1240 1241 count=$(address_count) 1242 check_err $? 1243 (( count >= 3 )) # $addr, $addr2 and $addr3 plus any kernel addresses 1244 check_err $? 1245 1246 count=$(address_count proto 0) 1247 check_err $? 1248 (( count == 1 )) # just $addr3 1249 check_err $? 1250 1251 count=$(address_count proto 0x11) 1252 check_err $? 1253 (( count == 2 )) # $addr and $addr3 1254 check_err $? 1255 1256 count=$(address_count proto 0xab) 1257 check_err $? 1258 (( count == 1 )) # just $addr3 1259 check_err $? 1260 1261 ip address del dev "$devdummy" "$addr" 1262 ip address del dev "$devdummy" "$addr2" 1263 ip address del dev "$devdummy" "$addr3" 1264 1265 if [ $ret -ne 0 ]; then 1266 end_test "FAIL: address proto $what" 1267 return 1 1268 fi 1269 end_test "PASS: address proto $what" 1270} 1271 1272kci_test_address_proto() 1273{ 1274 local ret=0 1275 1276 do_test_address_proto IPv4 192.0.2.1/28 1277 check_err $? 1278 1279 do_test_address_proto IPv6 2001:db8:1::1/64 1280 check_err $? 1281 1282 return $ret 1283} 1284 1285kci_test_enslave_bonding() 1286{ 1287 local bond="bond123" 1288 local ret=0 1289 1290 setup_ns testns 1291 if [ $? -ne 0 ]; then 1292 end_test "SKIP bonding tests: cannot add net namespace $testns" 1293 return $ksft_skip 1294 fi 1295 1296 run_cmd ip -netns $testns link add dev $bond type bond mode balance-rr 1297 run_cmd ip -netns $testns link add dev $devdummy type dummy 1298 run_cmd ip -netns $testns link set dev $devdummy up 1299 run_cmd ip -netns $testns link set dev $devdummy master $bond down 1300 if [ $ret -ne 0 ]; then 1301 end_test "FAIL: initially up interface added to a bond and set down" 1302 ip netns del "$testns" 1303 return 1 1304 fi 1305 1306 end_test "PASS: enslave interface in a bond" 1307 ip netns del "$testns" 1308} 1309 1310# Called to validate the addresses on $IFNAME: 1311# 1312# 1. Every `temporary` address must have a matching `mngtmpaddr` 1313# 2. Every `mngtmpaddr` address must have some un`deprecated` `temporary` 1314# 1315# If the mngtmpaddr or tempaddr checking failed, return 0 and stop slowwait 1316validate_mngtmpaddr() 1317{ 1318 local dev=$1 1319 local prefix="" 1320 local addr_list=$(ip -j -n $testns addr show dev ${dev}) 1321 local temp_addrs=$(echo ${addr_list} | \ 1322 jq -r '.[].addr_info[] | select(.temporary == true) | .local') 1323 local mng_prefixes=$(echo ${addr_list} | \ 1324 jq -r '.[].addr_info[] | select(.mngtmpaddr == true) | .local' | \ 1325 cut -d: -f1-4 | tr '\n' ' ') 1326 local undep_prefixes=$(echo ${addr_list} | \ 1327 jq -r '.[].addr_info[] | select(.temporary == true and .deprecated != true) | .local' | \ 1328 cut -d: -f1-4 | tr '\n' ' ') 1329 1330 # 1. All temporary addresses (temp and dep) must have a matching mngtmpaddr 1331 for address in ${temp_addrs}; do 1332 prefix=$(echo ${address} | cut -d: -f1-4) 1333 if [[ ! " ${mng_prefixes} " =~ " $prefix " ]]; then 1334 check_err 1 "FAIL: Temporary $address with no matching mngtmpaddr!"; 1335 return 0 1336 fi 1337 done 1338 1339 # 2. All mngtmpaddr addresses must have a temporary address (not dep) 1340 for prefix in ${mng_prefixes}; do 1341 if [[ ! " ${undep_prefixes} " =~ " $prefix " ]]; then 1342 check_err 1 "FAIL: No undeprecated temporary in $prefix!"; 1343 return 0 1344 fi 1345 done 1346 1347 return 1 1348} 1349 1350kci_test_mngtmpaddr() 1351{ 1352 local ret=0 1353 1354 setup_ns testns 1355 if [ $? -ne 0 ]; then 1356 end_test "SKIP mngtmpaddr tests: cannot add net namespace $testns" 1357 return $ksft_skip 1358 fi 1359 1360 # 1. Create a dummy Ethernet interface 1361 run_cmd ip -n $testns link add ${devdummy} type dummy 1362 run_cmd ip -n $testns link set ${devdummy} up 1363 run_cmd ip netns exec $testns sysctl -w net.ipv6.conf.${devdummy}.use_tempaddr=1 1364 run_cmd ip netns exec $testns sysctl -w net.ipv6.conf.${devdummy}.temp_prefered_lft=10 1365 run_cmd ip netns exec $testns sysctl -w net.ipv6.conf.${devdummy}.temp_valid_lft=25 1366 run_cmd ip netns exec $testns sysctl -w net.ipv6.conf.${devdummy}.max_desync_factor=1 1367 1368 # 2. Create several mngtmpaddr addresses on that interface. 1369 # with temp_*_lft configured to be pretty short (10 and 35 seconds 1370 # for prefer/valid respectively) 1371 for i in $(seq 1 9); do 1372 run_cmd ip -n $testns addr add 2001:db8:7e57:${i}::1/64 mngtmpaddr dev ${devdummy} 1373 done 1374 1375 # 3. Confirm that a preferred temporary address exists for each mngtmpaddr 1376 # address at all times, polling once per second for 30 seconds. 1377 slowwait 30 validate_mngtmpaddr ${devdummy} 1378 1379 # 4. Delete each mngtmpaddr address, one at a time (alternating between 1380 # deleting and merely un-mngtmpaddr-ing), and confirm that the other 1381 # mngtmpaddr addresses still have preferred temporaries. 1382 for i in $(seq 1 9); do 1383 (( $i % 4 == 0 )) && mng_flag="mngtmpaddr" || mng_flag="" 1384 if (( $i % 2 == 0 )); then 1385 run_cmd ip -n $testns addr del 2001:db8:7e57:${i}::1/64 $mng_flag dev ${devdummy} 1386 else 1387 run_cmd ip -n $testns addr change 2001:db8:7e57:${i}::1/64 dev ${devdummy} 1388 fi 1389 # the temp addr should be deleted 1390 validate_mngtmpaddr ${devdummy} 1391 done 1392 1393 if [ $ret -ne 0 ]; then 1394 end_test "FAIL: mngtmpaddr add/remove incorrect" 1395 else 1396 end_test "PASS: mngtmpaddr add/remove correctly" 1397 fi 1398 1399 ip netns del "$testns" 1400 return $ret 1401} 1402 1403kci_test_operstate() 1404{ 1405 local ret=0 1406 1407 # Check that it is possible to set operational state during device 1408 # creation and that it is preserved when the administrative state of 1409 # the device is toggled. 1410 run_cmd ip link add name vx0 up state up type vxlan id 10010 dstport 4789 1411 run_cmd_grep "state UP" ip link show dev vx0 1412 run_cmd ip link set dev vx0 down 1413 run_cmd_grep "state DOWN" ip link show dev vx0 1414 run_cmd ip link set dev vx0 up 1415 run_cmd_grep "state UP" ip link show dev vx0 1416 1417 run_cmd ip link del dev vx0 1418 1419 # Check that it is possible to set the operational state of the device 1420 # after creation. 1421 run_cmd ip link add name vx0 up type vxlan id 10010 dstport 4789 1422 run_cmd_grep "state UNKNOWN" ip link show dev vx0 1423 run_cmd ip link set dev vx0 state up 1424 run_cmd_grep "state UP" ip link show dev vx0 1425 1426 run_cmd ip link del dev vx0 1427 1428 if [ "$ret" -ne 0 ]; then 1429 end_test "FAIL: operstate" 1430 return 1 1431 fi 1432 1433 end_test "PASS: operstate" 1434} 1435 1436kci_test_rtnl() 1437{ 1438 local current_test 1439 local ret=0 1440 1441 kci_add_dummy 1442 if [ $ret -ne 0 ];then 1443 end_test "FAIL: cannot add dummy interface" 1444 return 1 1445 fi 1446 1447 for current_test in ${TESTS:-$ALL_TESTS}; do 1448 $current_test 1449 check_err $? 1450 done 1451 1452 kci_del_dummy 1453 return $ret 1454} 1455 1456usage() 1457{ 1458 cat <<EOF 1459usage: ${0##*/} OPTS 1460 1461 -t <test> Test(s) to run (default: all) 1462 (options: $(echo $ALL_TESTS)) 1463 -v Verbose mode (show commands and output) 1464 -P Pause after every test 1465 -p Pause after every failing test before cleanup (for debugging) 1466EOF 1467} 1468 1469#check for needed privileges 1470if [ "$(id -u)" -ne 0 ];then 1471 end_test "SKIP: Need root privileges" 1472 exit $ksft_skip 1473fi 1474 1475for x in ip tc;do 1476 $x -Version 2>/dev/null >/dev/null 1477 if [ $? -ne 0 ];then 1478 end_test "SKIP: Could not run test without the $x tool" 1479 exit $ksft_skip 1480 fi 1481done 1482 1483while getopts t:hvpP o; do 1484 case $o in 1485 t) TESTS=$OPTARG;; 1486 v) VERBOSE=1;; 1487 p) PAUSE_ON_FAIL=yes;; 1488 P) PAUSE=yes;; 1489 h) usage; exit 0;; 1490 *) usage; exit 1;; 1491 esac 1492done 1493 1494[ $PAUSE = "yes" ] && PAUSE_ON_FAIL="no" 1495 1496kci_test_rtnl 1497 1498exit $? 1499