1#!/bin/bash 2# 3# This test is for checking rtnetlink callpaths, and get as much coverage as possible. 4# 5# set -e 6 7ALL_TESTS=" 8 kci_test_polrouting 9 kci_test_route_get 10 kci_test_addrlft 11 kci_test_promote_secondaries 12 kci_test_tc 13 kci_test_gre 14 kci_test_gretap 15 kci_test_ip6gretap 16 kci_test_erspan 17 kci_test_ip6erspan 18 kci_test_bridge 19 kci_test_addrlabel 20 kci_test_ifalias 21 kci_test_vrf 22 kci_test_encap 23 kci_test_macsec 24 kci_test_macsec_vlan 25 kci_test_ipsec 26 kci_test_ipsec_offload 27 kci_test_fdb_get 28 kci_test_fdb_del 29 kci_test_neigh_get 30 kci_test_bridge_parent_id 31 kci_test_address_proto 32 kci_test_enslave_bonding 33 kci_test_mngtmpaddr 34 kci_test_operstate 35" 36 37devdummy="test-dummy0" 38VERBOSE=0 39PAUSE=no 40PAUSE_ON_FAIL=no 41 42source lib.sh 43 44# set global exit status, but never reset nonzero one. 45check_err() 46{ 47 if [ $ret -eq 0 ]; then 48 ret=$1 49 fi 50 [ -n "$2" ] && echo "$2" 51} 52 53# same but inverted -- used when command must fail for test to pass 54check_fail() 55{ 56 if [ $1 -eq 0 ]; then 57 ret=1 58 fi 59} 60 61run_cmd_common() 62{ 63 local cmd="$*" 64 local out 65 if [ "$VERBOSE" = "1" ]; then 66 echo "COMMAND: ${cmd}" 67 fi 68 out=$($cmd 2>&1) 69 rc=$? 70 if [ "$VERBOSE" = "1" -a -n "$out" ]; then 71 echo " $out" 72 fi 73 return $rc 74} 75 76run_cmd() { 77 run_cmd_common "$@" 78 rc=$? 79 check_err $rc 80 return $rc 81} 82run_cmd_fail() 83{ 84 run_cmd_common "$@" 85 rc=$? 86 check_fail $rc 87 return $rc 88} 89 90run_cmd_grep_common() 91{ 92 local find="$1"; shift 93 local cmd="$*" 94 local out 95 if [ "$VERBOSE" = "1" ]; then 96 echo "COMMAND: ${cmd} 2>&1 | grep -q '${find}'" 97 fi 98 out=$($cmd 2>&1 | grep -q "${find}" 2>&1) 99 return $? 100} 101 102run_cmd_grep() { 103 run_cmd_grep_common "$@" 104 rc=$? 105 check_err $rc 106 return $rc 107} 108 109run_cmd_grep_fail() 110{ 111 run_cmd_grep_common "$@" 112 rc=$? 113 check_fail $rc 114 return $rc 115} 116 117end_test() 118{ 119 echo "$*" 120 [ "${VERBOSE}" = "1" ] && echo 121 122 if [[ $ret -ne 0 ]] && [[ "${PAUSE_ON_FAIL}" = "yes" ]]; then 123 echo "Hit enter to continue" 124 read a 125 fi; 126 127 if [ "${PAUSE}" = "yes" ]; then 128 echo "Hit enter to continue" 129 read a 130 fi 131 132} 133 134 135kci_add_dummy() 136{ 137 run_cmd ip link add name "$devdummy" type dummy 138 run_cmd ip link set "$devdummy" up 139} 140 141kci_del_dummy() 142{ 143 run_cmd ip link del dev "$devdummy" 144} 145 146kci_test_netconf() 147{ 148 dev="$1" 149 r=$ret 150 run_cmd ip netconf show dev "$dev" 151 for f in 4 6; do 152 run_cmd ip -$f netconf show dev "$dev" 153 done 154 155 if [ $ret -ne 0 ] ;then 156 end_test "FAIL: ip netconf show $dev" 157 test $r -eq 0 && ret=0 158 return 1 159 fi 160} 161 162# add a bridge with vlans on top 163kci_test_bridge() 164{ 165 devbr="test-br0" 166 vlandev="testbr-vlan1" 167 168 local ret=0 169 run_cmd ip link add name "$devbr" type bridge 170 run_cmd ip link set dev "$devdummy" master "$devbr" 171 run_cmd ip link set "$devbr" up 172 run_cmd ip link add link "$devbr" name "$vlandev" type vlan id 1 173 run_cmd ip addr add dev "$vlandev" 10.200.7.23/30 174 run_cmd ip -6 addr add dev "$vlandev" dead:42::1234/64 175 run_cmd ip -d link 176 run_cmd ip r s t all 177 178 for name in "$devbr" "$vlandev" "$devdummy" ; do 179 kci_test_netconf "$name" 180 done 181 run_cmd ip -6 addr del dev "$vlandev" dead:42::1234/64 182 run_cmd ip link del dev "$vlandev" 183 run_cmd ip link del dev "$devbr" 184 185 if [ $ret -ne 0 ];then 186 end_test "FAIL: bridge setup" 187 return 1 188 fi 189 end_test "PASS: bridge setup" 190 191} 192 193kci_test_gre() 194{ 195 gredev=neta 196 rem=10.42.42.1 197 loc=10.0.0.1 198 199 local ret=0 200 run_cmd ip tunnel add $gredev mode gre remote $rem local $loc ttl 1 201 run_cmd ip link set $gredev up 202 run_cmd ip addr add 10.23.7.10 dev $gredev 203 run_cmd ip route add 10.23.8.0/30 dev $gredev 204 run_cmd ip addr add dev "$devdummy" 10.23.7.11/24 205 run_cmd ip link 206 run_cmd ip addr 207 208 kci_test_netconf "$gredev" 209 run_cmd ip addr del dev "$devdummy" 10.23.7.11/24 210 run_cmd ip link del $gredev 211 212 if [ $ret -ne 0 ];then 213 end_test "FAIL: gre tunnel endpoint" 214 return 1 215 fi 216 end_test "PASS: gre tunnel endpoint" 217} 218 219# tc uses rtnetlink too, for full tc testing 220# please see tools/testing/selftests/tc-testing. 221kci_test_tc() 222{ 223 dev=lo 224 local ret=0 225 226 run_cmd tc qdisc add dev "$dev" root handle 1: htb 227 run_cmd tc class add dev "$dev" parent 1: classid 1:10 htb rate 1mbit 228 run_cmd tc filter add dev "$dev" parent 1:0 prio 5 handle ffe: protocol ip u32 divisor 256 229 run_cmd tc filter add dev "$dev" parent 1:0 prio 5 handle ffd: protocol ip u32 divisor 256 230 run_cmd tc filter add dev "$dev" parent 1:0 prio 5 handle ffc: protocol ip u32 divisor 256 231 run_cmd tc filter add dev "$dev" protocol ip parent 1: prio 5 handle ffe:2:3 u32 ht ffe:2: match ip src 10.0.0.3 flowid 1:10 232 run_cmd tc filter add dev "$dev" protocol ip parent 1: prio 5 handle ffe:2:2 u32 ht ffe:2: match ip src 10.0.0.2 flowid 1:10 233 run_cmd tc filter show dev "$dev" parent 1:0 234 run_cmd tc filter del dev "$dev" protocol ip parent 1: prio 5 handle ffe:2:3 u32 235 run_cmd tc filter show dev "$dev" parent 1:0 236 run_cmd tc qdisc del dev "$dev" root handle 1: htb 237 238 if [ $ret -ne 0 ];then 239 end_test "FAIL: tc htb hierarchy" 240 return 1 241 fi 242 end_test "PASS: tc htb hierarchy" 243 244} 245 246kci_test_polrouting() 247{ 248 local ret=0 249 run_cmd ip rule add fwmark 1 lookup 100 250 run_cmd ip route add local 0.0.0.0/0 dev lo table 100 251 run_cmd ip r s t all 252 run_cmd ip rule del fwmark 1 lookup 100 253 run_cmd ip route del local 0.0.0.0/0 dev lo table 100 254 255 if [ $ret -ne 0 ];then 256 end_test "FAIL: policy route test" 257 return 1 258 fi 259 end_test "PASS: policy routing" 260} 261 262kci_test_route_get() 263{ 264 local hash_policy=$(sysctl -n net.ipv4.fib_multipath_hash_policy) 265 266 local ret=0 267 run_cmd ip route get 127.0.0.1 268 run_cmd ip route get 127.0.0.1 dev "$devdummy" 269 run_cmd ip route get ::1 270 run_cmd ip route get fe80::1 dev "$devdummy" 271 run_cmd ip route get 127.0.0.1 from 127.0.0.1 oif lo tos 0x10 mark 0x1 272 run_cmd ip route get ::1 from ::1 iif lo oif lo tos 0x10 mark 0x1 273 run_cmd ip addr add dev "$devdummy" 10.23.7.11/24 274 run_cmd ip route get 10.23.7.11 from 10.23.7.12 iif "$devdummy" 275 run_cmd ip route add 10.23.8.0/24 \ 276 nexthop via 10.23.7.13 dev "$devdummy" \ 277 nexthop via 10.23.7.14 dev "$devdummy" 278 279 sysctl -wq net.ipv4.fib_multipath_hash_policy=0 280 run_cmd ip route get 10.23.8.11 281 sysctl -wq net.ipv4.fib_multipath_hash_policy=1 282 run_cmd ip route get 10.23.8.11 283 sysctl -wq net.ipv4.fib_multipath_hash_policy="$hash_policy" 284 run_cmd ip route del 10.23.8.0/24 285 run_cmd ip addr del dev "$devdummy" 10.23.7.11/24 286 287 288 if [ $ret -ne 0 ];then 289 end_test "FAIL: route get" 290 return 1 291 fi 292 293 end_test "PASS: route get" 294} 295 296check_addr_not_exist() 297{ 298 dev=$1 299 addr=$2 300 if ip addr show dev $dev | grep -q $addr; then 301 return 1 302 else 303 return 0 304 fi 305} 306 307kci_test_addrlft() 308{ 309 for i in $(seq 10 100) ;do 310 lft=$(((RANDOM%3) + 1)) 311 run_cmd ip addr add 10.23.11.$i/32 dev "$devdummy" preferred_lft $lft valid_lft $((lft+1)) 312 done 313 314 slowwait 5 check_addr_not_exist "$devdummy" "10.23.11." 315 if [ $? -eq 1 ]; then 316 check_err 1 317 end_test "FAIL: preferred_lft addresses remaining" 318 return 319 fi 320 321 end_test "PASS: preferred_lft addresses have expired" 322} 323 324kci_test_promote_secondaries() 325{ 326 promote=$(sysctl -n net.ipv4.conf.$devdummy.promote_secondaries) 327 328 sysctl -q net.ipv4.conf.$devdummy.promote_secondaries=1 329 330 for i in $(seq 2 254);do 331 IP="10.23.11.$i" 332 ip -f inet addr add $IP/16 brd + dev "$devdummy" 333 ifconfig "$devdummy" $IP netmask 255.255.0.0 334 done 335 336 ip addr flush dev "$devdummy" 337 338 [ $promote -eq 0 ] && sysctl -q net.ipv4.conf.$devdummy.promote_secondaries=0 339 340 end_test "PASS: promote_secondaries complete" 341} 342 343kci_test_addrlabel() 344{ 345 local ret=0 346 run_cmd ip addrlabel add prefix dead::/64 dev lo label 1 347 run_cmd_grep "prefix dead::/64 dev lo label 1" ip addrlabel list 348 run_cmd ip addrlabel del prefix dead::/64 dev lo label 1 349 run_cmd ip addrlabel add prefix dead::/64 label 1 350 run_cmd ip addrlabel del prefix dead::/64 label 1 351 352 # concurrent add/delete 353 for i in $(seq 1 1000); do 354 ip addrlabel add prefix 1c3::/64 label 12345 2>/dev/null 355 done & 356 357 for i in $(seq 1 1000); do 358 ip addrlabel del prefix 1c3::/64 label 12345 2>/dev/null 359 done 360 361 wait 362 363 ip addrlabel del prefix 1c3::/64 label 12345 2>/dev/null 364 365 if [ $ret -ne 0 ];then 366 end_test "FAIL: ipv6 addrlabel" 367 return 1 368 fi 369 370 end_test "PASS: ipv6 addrlabel" 371} 372 373kci_test_ifalias() 374{ 375 local ret=0 376 namewant=$(uuidgen) 377 syspathname="/sys/class/net/$devdummy/ifalias" 378 run_cmd ip link set dev "$devdummy" alias "$namewant" 379 380 if [ $ret -ne 0 ]; then 381 end_test "FAIL: cannot set interface alias of $devdummy to $namewant" 382 return 1 383 fi 384 run_cmd_grep "alias $namewant" ip link show "$devdummy" 385 386 if [ -r "$syspathname" ] ; then 387 read namehave < "$syspathname" 388 if [ "$namewant" != "$namehave" ]; then 389 end_test "FAIL: did set ifalias $namewant but got $namehave" 390 return 1 391 fi 392 393 namewant=$(uuidgen) 394 echo "$namewant" > "$syspathname" 395 run_cmd_grep "alias $namewant" ip link show "$devdummy" 396 397 # sysfs interface allows to delete alias again 398 echo "" > "$syspathname" 399 run_cmd_grep_fail "alias $namewant" ip link show "$devdummy" 400 401 for i in $(seq 1 100); do 402 uuidgen > "$syspathname" & 403 done 404 405 wait 406 407 # re-add the alias -- kernel should free mem when dummy dev is removed 408 run_cmd ip link set dev "$devdummy" alias "$namewant" 409 410 fi 411 412 if [ $ret -ne 0 ]; then 413 end_test "FAIL: set interface alias $devdummy to $namewant" 414 return 1 415 fi 416 417 end_test "PASS: set ifalias $namewant for $devdummy" 418} 419 420kci_test_vrf() 421{ 422 vrfname="test-vrf" 423 local ret=0 424 run_cmd ip link show type vrf 425 if [ $? -ne 0 ]; then 426 end_test "SKIP: vrf: iproute2 too old" 427 return $ksft_skip 428 fi 429 run_cmd ip link add "$vrfname" type vrf table 10 430 if [ $ret -ne 0 ];then 431 end_test "FAIL: can't add vrf interface, skipping test" 432 return 0 433 fi 434 run_cmd_grep "$vrfname" ip -br link show type vrf 435 if [ $ret -ne 0 ];then 436 end_test "FAIL: created vrf device not found" 437 return 1 438 fi 439 440 run_cmd ip link set dev "$vrfname" up 441 run_cmd ip link set dev "$devdummy" master "$vrfname" 442 run_cmd ip link del dev "$vrfname" 443 444 if [ $ret -ne 0 ];then 445 end_test "FAIL: vrf" 446 return 1 447 fi 448 449 end_test "PASS: vrf" 450} 451 452kci_test_encap_vxlan() 453{ 454 local ret=0 455 vxlan="test-vxlan0" 456 vlan="test-vlan0" 457 run_cmd ip -netns "$testns" link add "$vxlan" type vxlan id 42 group 239.1.1.1 \ 458 dev "$devdummy" dstport 4789 459 if [ $? -ne 0 ]; then 460 end_test "FAIL: can't add vxlan interface, skipping test" 461 return 0 462 fi 463 464 run_cmd ip -netns "$testns" addr add 10.2.11.49/24 dev "$vxlan" 465 run_cmd ip -netns "$testns" link set up dev "$vxlan" 466 run_cmd ip -netns "$testns" link add link "$vxlan" name "$vlan" type vlan id 1 467 468 # changelink testcases 469 run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan vni 43 470 run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan group ffe5::5 dev "$devdummy" 471 run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan ttl inherit 472 473 run_cmd ip -netns "$testns" link set dev "$vxlan" type vxlan ttl 64 474 run_cmd ip -netns "$testns" link set dev "$vxlan" type vxlan nolearning 475 476 run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan proxy 477 run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan norsc 478 run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan l2miss 479 run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan l3miss 480 run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan external 481 run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan udpcsum 482 run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan udp6zerocsumtx 483 run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan udp6zerocsumrx 484 run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan remcsumtx 485 run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan remcsumrx 486 run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan gbp 487 run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan gpe 488 run_cmd ip -netns "$testns" link del "$vxlan" 489 490 if [ $ret -ne 0 ]; then 491 end_test "FAIL: vxlan" 492 return 1 493 fi 494 end_test "PASS: vxlan" 495} 496 497kci_test_encap_fou() 498{ 499 local ret=0 500 name="test-fou" 501 run_cmd_grep 'Usage: ip fou' ip fou help 502 if [ $? -ne 0 ];then 503 end_test "SKIP: fou: iproute2 too old" 504 return $ksft_skip 505 fi 506 507 if ! /sbin/modprobe -q -n fou; then 508 end_test "SKIP: module fou is not found" 509 return $ksft_skip 510 fi 511 /sbin/modprobe -q fou 512 513 run_cmd ip -netns "$testns" fou add port 7777 ipproto 47 514 if [ $? -ne 0 ];then 515 end_test "FAIL: can't add fou port 7777, skipping test" 516 return 1 517 fi 518 run_cmd ip -netns "$testns" fou add port 8888 ipproto 4 519 run_cmd_fail ip -netns "$testns" fou del port 9999 520 run_cmd ip -netns "$testns" fou del port 7777 521 if [ $ret -ne 0 ]; then 522 end_test "FAIL: fou"s 523 return 1 524 fi 525 526 end_test "PASS: fou" 527} 528 529# test various encap methods, use netns to avoid unwanted interference 530kci_test_encap() 531{ 532 local ret=0 533 setup_ns testns 534 if [ $? -ne 0 ]; then 535 end_test "SKIP encap tests: cannot add net namespace $testns" 536 return $ksft_skip 537 fi 538 run_cmd ip -netns "$testns" link set lo up 539 run_cmd ip -netns "$testns" link add name "$devdummy" type dummy 540 run_cmd ip -netns "$testns" link set "$devdummy" up 541 run_cmd kci_test_encap_vxlan 542 run_cmd kci_test_encap_fou 543 544 ip netns del "$testns" 545 return $ret 546} 547 548kci_test_macsec() 549{ 550 msname="test_macsec0" 551 local ret=0 552 run_cmd_grep "^Usage: ip macsec" ip macsec help 553 if [ $? -ne 0 ]; then 554 end_test "SKIP: macsec: iproute2 too old" 555 return $ksft_skip 556 fi 557 run_cmd ip link add link "$devdummy" "$msname" type macsec port 42 encrypt on 558 if [ $ret -ne 0 ];then 559 end_test "FAIL: can't add macsec interface, skipping test" 560 return 1 561 fi 562 run_cmd ip macsec add "$msname" tx sa 0 pn 1024 on key 01 12345678901234567890123456789012 563 run_cmd ip macsec add "$msname" rx port 1234 address "1c:ed:de:ad:be:ef" 564 run_cmd ip macsec add "$msname" rx port 1234 address "1c:ed:de:ad:be:ef" sa 0 pn 1 on key 00 0123456789abcdef0123456789abcdef 565 run_cmd ip macsec show 566 run_cmd ip link del dev "$msname" 567 568 if [ $ret -ne 0 ];then 569 end_test "FAIL: macsec" 570 return 1 571 fi 572 573 end_test "PASS: macsec" 574} 575 576# Test __dev_set_rx_mode call from dev_uc_add under addr_list_lock spinlock. 577# Make sure __dev_set_promiscuity is not grabbing (sleeping) netdev instance 578# lock. 579# https://lore.kernel.org/netdev/2aff4342b0f5b1539c02ffd8df4c7e58dd9746e7.camel@nvidia.com/ 580kci_test_macsec_vlan() 581{ 582 msname="test_macsec1" 583 vlanname="test_vlan1" 584 local ret=0 585 run_cmd_grep "^Usage: ip macsec" ip macsec help 586 if [ $? -ne 0 ]; then 587 end_test "SKIP: macsec: iproute2 too old" 588 return $ksft_skip 589 fi 590 run_cmd ip link add link "$devdummy" "$msname" type macsec port 42 encrypt on 591 if [ $ret -ne 0 ];then 592 end_test "FAIL: can't add macsec interface, skipping test" 593 return 1 594 fi 595 596 run_cmd ip link set dev "$msname" up 597 ip link add link "$msname" name "$vlanname" type vlan id 1 598 ip link set dev "$vlanname" address 00:11:22:33:44:88 599 ip link set dev "$vlanname" up 600 run_cmd ip link del dev "$vlanname" 601 run_cmd ip link del dev "$msname" 602 603 if [ $ret -ne 0 ];then 604 end_test "FAIL: macsec_vlan" 605 return 1 606 fi 607 608 end_test "PASS: macsec_vlan" 609} 610 611#------------------------------------------------------------------- 612# Example commands 613# ip x s add proto esp src 14.0.0.52 dst 14.0.0.70 \ 614# spi 0x07 mode transport reqid 0x07 replay-window 32 \ 615# aead 'rfc4106(gcm(aes))' 1234567890123456dcba 128 \ 616# sel src 14.0.0.52/24 dst 14.0.0.70/24 617# ip x p add dir out src 14.0.0.52/24 dst 14.0.0.70/24 \ 618# tmpl proto esp src 14.0.0.52 dst 14.0.0.70 \ 619# spi 0x07 mode transport reqid 0x07 620# 621# Subcommands not tested 622# ip x s update 623# ip x s allocspi 624# ip x s deleteall 625# ip x p update 626# ip x p deleteall 627# ip x p set 628#------------------------------------------------------------------- 629kci_test_ipsec() 630{ 631 local ret=0 632 algo="aead rfc4106(gcm(aes)) 0x3132333435363738393031323334353664636261 128" 633 srcip=192.168.123.1 634 dstip=192.168.123.2 635 spi=7 636 637 ip addr add $srcip dev $devdummy 638 639 # flush to be sure there's nothing configured 640 run_cmd ip x s flush ; ip x p flush 641 642 # start the monitor in the background 643 tmpfile=`mktemp /var/run/ipsectestXXX` 644 mpid=`(ip x m > $tmpfile & echo $!) 2>/dev/null` 645 sleep 0.2 646 647 ipsecid="proto esp src $srcip dst $dstip spi 0x07" 648 run_cmd ip x s add $ipsecid \ 649 mode transport reqid 0x07 replay-window 32 \ 650 $algo sel src $srcip/24 dst $dstip/24 651 652 653 lines=`ip x s list | grep $srcip | grep $dstip | wc -l` 654 run_cmd test $lines -eq 2 655 run_cmd_grep "SAD count 1" ip x s count 656 657 lines=`ip x s get $ipsecid | grep $srcip | grep $dstip | wc -l` 658 run_cmd test $lines -eq 2 659 run_cmd ip x s delete $ipsecid 660 661 lines=`ip x s list | wc -l` 662 run_cmd test $lines -eq 0 663 664 ipsecsel="dir out src $srcip/24 dst $dstip/24" 665 run_cmd ip x p add $ipsecsel \ 666 tmpl proto esp src $srcip dst $dstip \ 667 spi 0x07 mode transport reqid 0x07 668 669 670 lines=`ip x p list | grep $srcip | grep $dstip | wc -l` 671 run_cmd test $lines -eq 2 672 673 run_cmd_grep "SPD IN 0 OUT 1 FWD 0" ip x p count 674 675 lines=`ip x p get $ipsecsel | grep $srcip | grep $dstip | wc -l` 676 run_cmd test $lines -eq 2 677 678 run_cmd ip x p delete $ipsecsel 679 680 lines=`ip x p list | wc -l` 681 run_cmd test $lines -eq 0 682 683 # check the monitor results 684 kill $mpid 685 lines=`wc -l $tmpfile | cut "-d " -f1` 686 run_cmd test $lines -eq 20 687 rm -rf $tmpfile 688 689 # clean up any leftovers 690 run_cmd ip x s flush 691 run_cmd ip x p flush 692 ip addr del $srcip/32 dev $devdummy 693 694 if [ $ret -ne 0 ]; then 695 end_test "FAIL: ipsec" 696 return 1 697 fi 698 end_test "PASS: ipsec" 699} 700 701#------------------------------------------------------------------- 702# Example commands 703# ip x s add proto esp src 14.0.0.52 dst 14.0.0.70 \ 704# spi 0x07 mode transport reqid 0x07 replay-window 32 \ 705# aead 'rfc4106(gcm(aes))' 1234567890123456dcba 128 \ 706# sel src 14.0.0.52/24 dst 14.0.0.70/24 707# offload dev sim1 dir out 708# ip x p add dir out src 14.0.0.52/24 dst 14.0.0.70/24 \ 709# tmpl proto esp src 14.0.0.52 dst 14.0.0.70 \ 710# spi 0x07 mode transport reqid 0x07 711# 712#------------------------------------------------------------------- 713kci_test_ipsec_offload() 714{ 715 local ret=0 716 algo="aead rfc4106(gcm(aes)) 0x3132333435363738393031323334353664636261 128" 717 srcip=192.168.123.3 718 dstip=192.168.123.4 719 sysfsd=/sys/kernel/debug/netdevsim/netdevsim0/ports/0/ 720 sysfsf=$sysfsd/ipsec 721 sysfsnet=/sys/bus/netdevsim/devices/netdevsim0/net/ 722 probed=false 723 esp4_offload_probed_default=false 724 725 if lsmod | grep -q esp4_offload; then 726 esp4_offload_probed_default=true 727 fi 728 729 if ! mount | grep -q debugfs; then 730 mount -t debugfs none /sys/kernel/debug/ &> /dev/null 731 fi 732 733 # setup netdevsim since dummydev doesn't have offload support 734 if [ ! -w /sys/bus/netdevsim/new_device ] ; then 735 run_cmd modprobe -q netdevsim 736 if [ $ret -ne 0 ]; then 737 end_test "SKIP: ipsec_offload can't load netdevsim" 738 return $ksft_skip 739 fi 740 probed=true 741 fi 742 743 echo "0" > /sys/bus/netdevsim/new_device 744 while [ ! -d $sysfsnet ] ; do :; done 745 udevadm settle 746 dev=`ls $sysfsnet` 747 748 ip addr add $srcip dev $dev 749 ip link set $dev up 750 if [ ! -d $sysfsd ] ; then 751 end_test "FAIL: ipsec_offload can't create device $dev" 752 return 1 753 fi 754 if [ ! -f $sysfsf ] ; then 755 end_test "FAIL: ipsec_offload netdevsim doesn't support IPsec offload" 756 return 1 757 fi 758 759 # flush to be sure there's nothing configured 760 ip x s flush ; ip x p flush 761 762 # create offloaded SAs, both in and out 763 run_cmd ip x p add dir out src $srcip/24 dst $dstip/24 \ 764 tmpl proto esp src $srcip dst $dstip spi 9 \ 765 mode transport reqid 42 766 767 run_cmd ip x p add dir in src $dstip/24 dst $srcip/24 \ 768 tmpl proto esp src $dstip dst $srcip spi 9 \ 769 mode transport reqid 42 770 771 run_cmd ip x s add proto esp src $srcip dst $dstip spi 9 \ 772 mode transport reqid 42 $algo sel src $srcip/24 dst $dstip/24 \ 773 offload dev $dev dir out 774 775 run_cmd ip x s add proto esp src $dstip dst $srcip spi 9 \ 776 mode transport reqid 42 $algo sel src $dstip/24 dst $srcip/24 \ 777 offload dev $dev dir in 778 779 if [ $ret -ne 0 ]; then 780 end_test "FAIL: ipsec_offload can't create SA" 781 return 1 782 fi 783 784 # does offload show up in ip output 785 lines=`ip x s list | grep -c "crypto offload parameters: dev $dev dir"` 786 if [ $lines -ne 2 ] ; then 787 check_err 1 788 end_test "FAIL: ipsec_offload SA offload missing from list output" 789 fi 790 791 # we didn't create a peer, make sure we can Tx 792 ip neigh add $dstip dev $dev lladdr 00:11:22:33:44:55 793 # use ping to exercise the Tx path 794 ping -I $dev -c 3 -W 1 -i 0 $dstip >/dev/null 795 796 # does driver have correct offload info 797 run_cmd diff $sysfsf - << EOF 798SA count=2 tx=3 799sa[0] tx ipaddr=$dstip 800sa[0] spi=0x00000009 proto=0x32 salt=0x61626364 crypt=1 801sa[0] key=0x34333231 38373635 32313039 36353433 802sa[1] rx ipaddr=$srcip 803sa[1] spi=0x00000009 proto=0x32 salt=0x61626364 crypt=1 804sa[1] key=0x34333231 38373635 32313039 36353433 805EOF 806 if [ $? -ne 0 ] ; then 807 end_test "FAIL: ipsec_offload incorrect driver data" 808 check_err 1 809 fi 810 811 # does offload get removed from driver 812 ip x s flush 813 ip x p flush 814 lines=`grep -c "SA count=0" $sysfsf` 815 if [ $lines -ne 1 ] ; then 816 check_err 1 817 end_test "FAIL: ipsec_offload SA not removed from driver" 818 fi 819 820 # clean up any leftovers 821 ! "$esp4_offload_probed_default" && lsmod | grep -q esp4_offload && rmmod esp4_offload 822 echo 0 > /sys/bus/netdevsim/del_device 823 $probed && rmmod netdevsim 824 825 if [ $ret -ne 0 ]; then 826 end_test "FAIL: ipsec_offload" 827 return 1 828 fi 829 end_test "PASS: ipsec_offload" 830} 831 832kci_test_gretap() 833{ 834 DEV_NS=gretap00 835 local ret=0 836 837 setup_ns testns 838 if [ $? -ne 0 ]; then 839 end_test "SKIP gretap tests: cannot add net namespace $testns" 840 return $ksft_skip 841 fi 842 843 run_cmd_grep "^Usage:" ip link help gretap 844 if [ $? -ne 0 ];then 845 end_test "SKIP: gretap: iproute2 too old" 846 ip netns del "$testns" 847 return $ksft_skip 848 fi 849 850 # test native tunnel 851 run_cmd ip -netns "$testns" link add dev "$DEV_NS" type gretap seq \ 852 key 102 local 172.16.1.100 remote 172.16.1.200 853 854 855 run_cmd ip -netns "$testns" addr add dev "$DEV_NS" 10.1.1.100/24 856 run_cmd ip -netns "$testns" link set dev $DEV_NS up 857 run_cmd ip -netns "$testns" link del "$DEV_NS" 858 859 # test external mode 860 run_cmd ip -netns "$testns" link add dev "$DEV_NS" type gretap external 861 run_cmd ip -netns "$testns" link del "$DEV_NS" 862 863 if [ $ret -ne 0 ]; then 864 end_test "FAIL: gretap" 865 ip netns del "$testns" 866 return 1 867 fi 868 end_test "PASS: gretap" 869 870 ip netns del "$testns" 871} 872 873kci_test_ip6gretap() 874{ 875 DEV_NS=ip6gretap00 876 local ret=0 877 878 setup_ns testns 879 if [ $? -ne 0 ]; then 880 end_test "SKIP ip6gretap tests: cannot add net namespace $testns" 881 return $ksft_skip 882 fi 883 884 run_cmd_grep "^Usage:" ip link help ip6gretap 885 if [ $? -ne 0 ];then 886 end_test "SKIP: ip6gretap: iproute2 too old" 887 ip netns del "$testns" 888 return $ksft_skip 889 fi 890 891 # test native tunnel 892 run_cmd ip -netns "$testns" link add dev "$DEV_NS" type ip6gretap seq \ 893 key 102 local fc00:100::1 remote fc00:100::2 894 895 896 run_cmd ip -netns "$testns" addr add dev "$DEV_NS" fc00:200::1/96 897 run_cmd ip -netns "$testns" link set dev $DEV_NS up 898 run_cmd ip -netns "$testns" link del "$DEV_NS" 899 900 # test external mode 901 run_cmd ip -netns "$testns" link add dev "$DEV_NS" type ip6gretap external 902 run_cmd ip -netns "$testns" link del "$DEV_NS" 903 904 if [ $ret -ne 0 ]; then 905 end_test "FAIL: ip6gretap" 906 ip netns del "$testns" 907 return 1 908 fi 909 end_test "PASS: ip6gretap" 910 911 ip netns del "$testns" 912} 913 914kci_test_erspan() 915{ 916 DEV_NS=erspan00 917 local ret=0 918 run_cmd_grep "^Usage:" ip link help erspan 919 if [ $? -ne 0 ];then 920 end_test "SKIP: erspan: iproute2 too old" 921 return $ksft_skip 922 fi 923 setup_ns testns 924 if [ $? -ne 0 ]; then 925 end_test "SKIP erspan tests: cannot add net namespace $testns" 926 return $ksft_skip 927 fi 928 929 # test native tunnel erspan v1 930 run_cmd ip -netns "$testns" link add dev "$DEV_NS" type erspan seq \ 931 key 102 local 172.16.1.100 remote 172.16.1.200 \ 932 erspan_ver 1 erspan 488 933 934 935 run_cmd ip -netns "$testns" addr add dev "$DEV_NS" 10.1.1.100/24 936 run_cmd ip -netns "$testns" link set dev $DEV_NS up 937 run_cmd ip -netns "$testns" link del "$DEV_NS" 938 939 # test native tunnel erspan v2 940 run_cmd ip -netns "$testns" link add dev "$DEV_NS" type erspan seq \ 941 key 102 local 172.16.1.100 remote 172.16.1.200 \ 942 erspan_ver 2 erspan_dir ingress erspan_hwid 7 943 944 945 run_cmd ip -netns "$testns" addr add dev "$DEV_NS" 10.1.1.100/24 946 run_cmd ip -netns "$testns" link set dev $DEV_NS up 947 run_cmd ip -netns "$testns" link del "$DEV_NS" 948 949 # test external mode 950 run_cmd ip -netns "$testns" link add dev "$DEV_NS" type erspan external 951 run_cmd ip -netns "$testns" link del "$DEV_NS" 952 953 if [ $ret -ne 0 ]; then 954 end_test "FAIL: erspan" 955 ip netns del "$testns" 956 return 1 957 fi 958 end_test "PASS: erspan" 959 960 ip netns del "$testns" 961} 962 963kci_test_ip6erspan() 964{ 965 DEV_NS=ip6erspan00 966 local ret=0 967 run_cmd_grep "^Usage:" ip link help ip6erspan 968 if [ $? -ne 0 ];then 969 end_test "SKIP: ip6erspan: iproute2 too old" 970 return $ksft_skip 971 fi 972 setup_ns testns 973 if [ $? -ne 0 ]; then 974 end_test "SKIP ip6erspan tests: cannot add net namespace $testns" 975 return $ksft_skip 976 fi 977 978 # test native tunnel ip6erspan v1 979 run_cmd ip -netns "$testns" link add dev "$DEV_NS" type ip6erspan seq \ 980 key 102 local fc00:100::1 remote fc00:100::2 \ 981 erspan_ver 1 erspan 488 982 983 984 run_cmd ip -netns "$testns" addr add dev "$DEV_NS" 10.1.1.100/24 985 run_cmd ip -netns "$testns" link set dev $DEV_NS up 986 run_cmd ip -netns "$testns" link del "$DEV_NS" 987 988 # test native tunnel ip6erspan v2 989 run_cmd ip -netns "$testns" link add dev "$DEV_NS" type ip6erspan seq \ 990 key 102 local fc00:100::1 remote fc00:100::2 \ 991 erspan_ver 2 erspan_dir ingress erspan_hwid 7 992 993 994 run_cmd ip -netns "$testns" addr add dev "$DEV_NS" 10.1.1.100/24 995 run_cmd ip -netns "$testns" link set dev $DEV_NS up 996 run_cmd ip -netns "$testns" link del "$DEV_NS" 997 998 # test external mode 999 run_cmd ip -netns "$testns" link add dev "$DEV_NS" \ 1000 type ip6erspan external 1001 1002 run_cmd ip -netns "$testns" link del "$DEV_NS" 1003 1004 if [ $ret -ne 0 ]; then 1005 end_test "FAIL: ip6erspan" 1006 ip netns del "$testns" 1007 return 1 1008 fi 1009 end_test "PASS: ip6erspan" 1010 1011 ip netns del "$testns" 1012} 1013 1014kci_test_fdb_get() 1015{ 1016 brdev="test-br0" 1017 vxlandev="vxlan10" 1018 test_mac=de:ad:be:ef:13:37 1019 localip="10.0.2.2" 1020 dstip="10.0.2.3" 1021 local ret=0 1022 1023 run_cmd_grep 'bridge fdb get' bridge fdb help 1024 if [ $? -ne 0 ];then 1025 end_test "SKIP: fdb get tests: iproute2 too old" 1026 return $ksft_skip 1027 fi 1028 1029 setup_ns testns 1030 if [ $? -ne 0 ]; then 1031 end_test "SKIP fdb get tests: cannot add net namespace $testns" 1032 return $ksft_skip 1033 fi 1034 IP="ip -netns $testns" 1035 BRIDGE="bridge -netns $testns" 1036 run_cmd $IP link add "$vxlandev" type vxlan id 10 local $localip \ 1037 dstport 4789 1038 run_cmd $IP link add name "$brdev" type bridge 1039 run_cmd $IP link set dev "$vxlandev" master "$brdev" 1040 run_cmd $BRIDGE fdb add $test_mac dev "$vxlandev" master 1041 run_cmd $BRIDGE fdb add $test_mac dev "$vxlandev" dst $dstip self 1042 run_cmd_grep "dev $vxlandev master $brdev" $BRIDGE fdb get $test_mac brport "$vxlandev" 1043 run_cmd_grep "dev $vxlandev master $brdev" $BRIDGE fdb get $test_mac br "$brdev" 1044 run_cmd_grep "dev $vxlandev dst $dstip" $BRIDGE fdb get $test_mac dev "$vxlandev" self 1045 1046 ip netns del $testns &>/dev/null 1047 1048 if [ $ret -ne 0 ]; then 1049 end_test "FAIL: bridge fdb get" 1050 return 1 1051 fi 1052 1053 end_test "PASS: bridge fdb get" 1054} 1055 1056kci_test_fdb_del() 1057{ 1058 local test_mac=de:ad:be:ef:13:37 1059 local dummydev="dummy1" 1060 local brdev="test-br0" 1061 local ret=0 1062 1063 run_cmd_grep 'bridge fdb get' bridge fdb help 1064 if [ $? -ne 0 ]; then 1065 end_test "SKIP: fdb del tests: iproute2 too old" 1066 return $ksft_skip 1067 fi 1068 1069 setup_ns testns 1070 if [ $? -ne 0 ]; then 1071 end_test "SKIP fdb del tests: cannot add net namespace $testns" 1072 return $ksft_skip 1073 fi 1074 IP="ip -netns $testns" 1075 BRIDGE="bridge -netns $testns" 1076 run_cmd $IP link add $dummydev type dummy 1077 run_cmd $IP link add name $brdev type bridge vlan_filtering 1 1078 run_cmd $IP link set dev $dummydev master $brdev 1079 run_cmd $BRIDGE fdb add $test_mac dev $dummydev master static vlan 1 1080 run_cmd $BRIDGE vlan del vid 1 dev $dummydev 1081 run_cmd $BRIDGE fdb get $test_mac br $brdev vlan 1 1082 run_cmd $BRIDGE fdb del $test_mac dev $dummydev master vlan 1 1083 run_cmd_fail $BRIDGE fdb get $test_mac br $brdev vlan 1 1084 1085 ip netns del $testns &>/dev/null 1086 1087 if [ $ret -ne 0 ]; then 1088 end_test "FAIL: bridge fdb del" 1089 return 1 1090 fi 1091 1092 end_test "PASS: bridge fdb del" 1093} 1094 1095kci_test_neigh_get() 1096{ 1097 dstmac=de:ad:be:ef:13:37 1098 dstip=10.0.2.4 1099 dstip6=dead::2 1100 local ret=0 1101 1102 run_cmd_grep 'ip neigh get' ip neigh help 1103 if [ $? -ne 0 ];then 1104 end_test "SKIP: fdb get tests: iproute2 too old" 1105 return $ksft_skip 1106 fi 1107 1108 # ipv4 1109 run_cmd ip neigh add $dstip lladdr $dstmac dev "$devdummy" 1110 run_cmd_grep "$dstmac" ip neigh get $dstip dev "$devdummy" 1111 run_cmd ip neigh del $dstip lladdr $dstmac dev "$devdummy" 1112 1113 # ipv4 proxy 1114 run_cmd ip neigh add proxy $dstip dev "$devdummy" 1115 run_cmd_grep "$dstip" ip neigh get proxy $dstip dev "$devdummy" 1116 run_cmd ip neigh del proxy $dstip dev "$devdummy" 1117 1118 # ipv6 1119 run_cmd ip neigh add $dstip6 lladdr $dstmac dev "$devdummy" 1120 run_cmd_grep "$dstmac" ip neigh get $dstip6 dev "$devdummy" 1121 run_cmd ip neigh del $dstip6 lladdr $dstmac dev "$devdummy" 1122 1123 # ipv6 proxy 1124 run_cmd ip neigh add proxy $dstip6 dev "$devdummy" 1125 run_cmd_grep "$dstip6" ip neigh get proxy $dstip6 dev "$devdummy" 1126 run_cmd ip neigh del proxy $dstip6 dev "$devdummy" 1127 1128 if [ $ret -ne 0 ];then 1129 end_test "FAIL: neigh get" 1130 return 1 1131 fi 1132 1133 end_test "PASS: neigh get" 1134} 1135 1136kci_test_bridge_parent_id() 1137{ 1138 local ret=0 1139 sysfsnet=/sys/bus/netdevsim/devices/netdevsim 1140 probed=false 1141 1142 if [ ! -w /sys/bus/netdevsim/new_device ] ; then 1143 run_cmd modprobe -q netdevsim 1144 if [ $ret -ne 0 ]; then 1145 end_test "SKIP: bridge_parent_id can't load netdevsim" 1146 return $ksft_skip 1147 fi 1148 probed=true 1149 fi 1150 1151 echo "10 1" > /sys/bus/netdevsim/new_device 1152 while [ ! -d ${sysfsnet}10 ] ; do :; done 1153 echo "20 1" > /sys/bus/netdevsim/new_device 1154 while [ ! -d ${sysfsnet}20 ] ; do :; done 1155 udevadm settle 1156 dev10=`ls ${sysfsnet}10/net/` 1157 dev20=`ls ${sysfsnet}20/net/` 1158 run_cmd ip link add name test-bond0 type bond mode 802.3ad 1159 run_cmd ip link set dev $dev10 master test-bond0 1160 run_cmd ip link set dev $dev20 master test-bond0 1161 run_cmd ip link add name test-br0 type bridge 1162 run_cmd ip link set dev test-bond0 master test-br0 1163 1164 # clean up any leftovers 1165 ip link del dev test-br0 1166 ip link del dev test-bond0 1167 echo 20 > /sys/bus/netdevsim/del_device 1168 echo 10 > /sys/bus/netdevsim/del_device 1169 $probed && rmmod netdevsim 1170 1171 if [ $ret -ne 0 ]; then 1172 end_test "FAIL: bridge_parent_id" 1173 return 1 1174 fi 1175 end_test "PASS: bridge_parent_id" 1176} 1177 1178address_get_proto() 1179{ 1180 local addr=$1; shift 1181 1182 ip -N -j address show dev "$devdummy" | 1183 jq -e -r --arg addr "${addr%/*}" \ 1184 '.[].addr_info[] | select(.local == $addr) | .protocol' 1185} 1186 1187address_count() 1188{ 1189 ip -N -j address show dev "$devdummy" "$@" | 1190 jq -e -r '[.[].addr_info[] | .local | select(. != null)] | length' 1191} 1192 1193do_test_address_proto() 1194{ 1195 local what=$1; shift 1196 local addr=$1; shift 1197 local addr2=${addr%/*}2/${addr#*/} 1198 local addr3=${addr%/*}3/${addr#*/} 1199 local proto 1200 local count 1201 local ret=0 1202 local err 1203 1204 ip address add dev "$devdummy" "$addr3" 1205 check_err $? 1206 proto=$(address_get_proto "$addr3") 1207 [[ "$proto" == null ]] 1208 check_err $? 1209 1210 ip address add dev "$devdummy" "$addr2" proto 0x99 1211 check_err $? 1212 proto=$(address_get_proto "$addr2") 1213 [[ "$proto" == 0x99 ]] 1214 check_err $? 1215 1216 ip address add dev "$devdummy" "$addr" proto 0xab 1217 check_err $? 1218 proto=$(address_get_proto "$addr") 1219 [[ "$proto" == 0xab ]] 1220 check_err $? 1221 1222 ip address replace dev "$devdummy" "$addr" proto 0x11 1223 proto=$(address_get_proto "$addr") 1224 check_err $? 1225 [[ "$proto" == 0x11 ]] 1226 check_err $? 1227 1228 count=$(address_count) 1229 check_err $? 1230 (( count >= 3 )) # $addr, $addr2 and $addr3 plus any kernel addresses 1231 check_err $? 1232 1233 count=$(address_count proto 0) 1234 check_err $? 1235 (( count == 1 )) # just $addr3 1236 check_err $? 1237 1238 count=$(address_count proto 0x11) 1239 check_err $? 1240 (( count == 2 )) # $addr and $addr3 1241 check_err $? 1242 1243 count=$(address_count proto 0xab) 1244 check_err $? 1245 (( count == 1 )) # just $addr3 1246 check_err $? 1247 1248 ip address del dev "$devdummy" "$addr" 1249 ip address del dev "$devdummy" "$addr2" 1250 ip address del dev "$devdummy" "$addr3" 1251 1252 if [ $ret -ne 0 ]; then 1253 end_test "FAIL: address proto $what" 1254 return 1 1255 fi 1256 end_test "PASS: address proto $what" 1257} 1258 1259kci_test_address_proto() 1260{ 1261 local ret=0 1262 1263 do_test_address_proto IPv4 192.0.2.1/28 1264 check_err $? 1265 1266 do_test_address_proto IPv6 2001:db8:1::1/64 1267 check_err $? 1268 1269 return $ret 1270} 1271 1272kci_test_enslave_bonding() 1273{ 1274 local bond="bond123" 1275 local ret=0 1276 1277 setup_ns testns 1278 if [ $? -ne 0 ]; then 1279 end_test "SKIP bonding tests: cannot add net namespace $testns" 1280 return $ksft_skip 1281 fi 1282 1283 run_cmd ip -netns $testns link add dev $bond type bond mode balance-rr 1284 run_cmd ip -netns $testns link add dev $devdummy type dummy 1285 run_cmd ip -netns $testns link set dev $devdummy up 1286 run_cmd ip -netns $testns link set dev $devdummy master $bond down 1287 if [ $ret -ne 0 ]; then 1288 end_test "FAIL: initially up interface added to a bond and set down" 1289 ip netns del "$testns" 1290 return 1 1291 fi 1292 1293 end_test "PASS: enslave interface in a bond" 1294 ip netns del "$testns" 1295} 1296 1297# Called to validate the addresses on $IFNAME: 1298# 1299# 1. Every `temporary` address must have a matching `mngtmpaddr` 1300# 2. Every `mngtmpaddr` address must have some un`deprecated` `temporary` 1301# 1302# If the mngtmpaddr or tempaddr checking failed, return 0 and stop slowwait 1303validate_mngtmpaddr() 1304{ 1305 local dev=$1 1306 local prefix="" 1307 local addr_list=$(ip -j -n $testns addr show dev ${dev}) 1308 local temp_addrs=$(echo ${addr_list} | \ 1309 jq -r '.[].addr_info[] | select(.temporary == true) | .local') 1310 local mng_prefixes=$(echo ${addr_list} | \ 1311 jq -r '.[].addr_info[] | select(.mngtmpaddr == true) | .local' | \ 1312 cut -d: -f1-4 | tr '\n' ' ') 1313 local undep_prefixes=$(echo ${addr_list} | \ 1314 jq -r '.[].addr_info[] | select(.temporary == true and .deprecated != true) | .local' | \ 1315 cut -d: -f1-4 | tr '\n' ' ') 1316 1317 # 1. All temporary addresses (temp and dep) must have a matching mngtmpaddr 1318 for address in ${temp_addrs}; do 1319 prefix=$(echo ${address} | cut -d: -f1-4) 1320 if [[ ! " ${mng_prefixes} " =~ " $prefix " ]]; then 1321 check_err 1 "FAIL: Temporary $address with no matching mngtmpaddr!"; 1322 return 0 1323 fi 1324 done 1325 1326 # 2. All mngtmpaddr addresses must have a temporary address (not dep) 1327 for prefix in ${mng_prefixes}; do 1328 if [[ ! " ${undep_prefixes} " =~ " $prefix " ]]; then 1329 check_err 1 "FAIL: No undeprecated temporary in $prefix!"; 1330 return 0 1331 fi 1332 done 1333 1334 return 1 1335} 1336 1337kci_test_mngtmpaddr() 1338{ 1339 local ret=0 1340 1341 setup_ns testns 1342 if [ $? -ne 0 ]; then 1343 end_test "SKIP mngtmpaddr tests: cannot add net namespace $testns" 1344 return $ksft_skip 1345 fi 1346 1347 # 1. Create a dummy Ethernet interface 1348 run_cmd ip -n $testns link add ${devdummy} type dummy 1349 run_cmd ip -n $testns link set ${devdummy} up 1350 run_cmd ip netns exec $testns sysctl -w net.ipv6.conf.${devdummy}.use_tempaddr=1 1351 run_cmd ip netns exec $testns sysctl -w net.ipv6.conf.${devdummy}.temp_prefered_lft=10 1352 run_cmd ip netns exec $testns sysctl -w net.ipv6.conf.${devdummy}.temp_valid_lft=25 1353 run_cmd ip netns exec $testns sysctl -w net.ipv6.conf.${devdummy}.max_desync_factor=1 1354 1355 # 2. Create several mngtmpaddr addresses on that interface. 1356 # with temp_*_lft configured to be pretty short (10 and 35 seconds 1357 # for prefer/valid respectively) 1358 for i in $(seq 1 9); do 1359 run_cmd ip -n $testns addr add 2001:db8:7e57:${i}::1/64 mngtmpaddr dev ${devdummy} 1360 done 1361 1362 # 3. Confirm that a preferred temporary address exists for each mngtmpaddr 1363 # address at all times, polling once per second for 30 seconds. 1364 slowwait 30 validate_mngtmpaddr ${devdummy} 1365 1366 # 4. Delete each mngtmpaddr address, one at a time (alternating between 1367 # deleting and merely un-mngtmpaddr-ing), and confirm that the other 1368 # mngtmpaddr addresses still have preferred temporaries. 1369 for i in $(seq 1 9); do 1370 (( $i % 4 == 0 )) && mng_flag="mngtmpaddr" || mng_flag="" 1371 if (( $i % 2 == 0 )); then 1372 run_cmd ip -n $testns addr del 2001:db8:7e57:${i}::1/64 $mng_flag dev ${devdummy} 1373 else 1374 run_cmd ip -n $testns addr change 2001:db8:7e57:${i}::1/64 dev ${devdummy} 1375 fi 1376 # the temp addr should be deleted 1377 validate_mngtmpaddr ${devdummy} 1378 done 1379 1380 if [ $ret -ne 0 ]; then 1381 end_test "FAIL: mngtmpaddr add/remove incorrect" 1382 else 1383 end_test "PASS: mngtmpaddr add/remove correctly" 1384 fi 1385 1386 ip netns del "$testns" 1387 return $ret 1388} 1389 1390kci_test_operstate() 1391{ 1392 local ret=0 1393 1394 # Check that it is possible to set operational state during device 1395 # creation and that it is preserved when the administrative state of 1396 # the device is toggled. 1397 run_cmd ip link add name vx0 up state up type vxlan id 10010 dstport 4789 1398 run_cmd_grep "state UP" ip link show dev vx0 1399 run_cmd ip link set dev vx0 down 1400 run_cmd_grep "state DOWN" ip link show dev vx0 1401 run_cmd ip link set dev vx0 up 1402 run_cmd_grep "state UP" ip link show dev vx0 1403 1404 run_cmd ip link del dev vx0 1405 1406 # Check that it is possible to set the operational state of the device 1407 # after creation. 1408 run_cmd ip link add name vx0 up type vxlan id 10010 dstport 4789 1409 run_cmd_grep "state UNKNOWN" ip link show dev vx0 1410 run_cmd ip link set dev vx0 state up 1411 run_cmd_grep "state UP" ip link show dev vx0 1412 1413 run_cmd ip link del dev vx0 1414 1415 if [ "$ret" -ne 0 ]; then 1416 end_test "FAIL: operstate" 1417 return 1 1418 fi 1419 1420 end_test "PASS: operstate" 1421} 1422 1423kci_test_rtnl() 1424{ 1425 local current_test 1426 local ret=0 1427 1428 kci_add_dummy 1429 if [ $ret -ne 0 ];then 1430 end_test "FAIL: cannot add dummy interface" 1431 return 1 1432 fi 1433 1434 for current_test in ${TESTS:-$ALL_TESTS}; do 1435 $current_test 1436 check_err $? 1437 done 1438 1439 kci_del_dummy 1440 return $ret 1441} 1442 1443usage() 1444{ 1445 cat <<EOF 1446usage: ${0##*/} OPTS 1447 1448 -t <test> Test(s) to run (default: all) 1449 (options: $(echo $ALL_TESTS)) 1450 -v Verbose mode (show commands and output) 1451 -P Pause after every test 1452 -p Pause after every failing test before cleanup (for debugging) 1453EOF 1454} 1455 1456#check for needed privileges 1457if [ "$(id -u)" -ne 0 ];then 1458 end_test "SKIP: Need root privileges" 1459 exit $ksft_skip 1460fi 1461 1462for x in ip tc;do 1463 $x -Version 2>/dev/null >/dev/null 1464 if [ $? -ne 0 ];then 1465 end_test "SKIP: Could not run test without the $x tool" 1466 exit $ksft_skip 1467 fi 1468done 1469 1470while getopts t:hvpP o; do 1471 case $o in 1472 t) TESTS=$OPTARG;; 1473 v) VERBOSE=1;; 1474 p) PAUSE_ON_FAIL=yes;; 1475 P) PAUSE=yes;; 1476 h) usage; exit 0;; 1477 *) usage; exit 1;; 1478 esac 1479done 1480 1481[ $PAUSE = "yes" ] && PAUSE_ON_FAIL="no" 1482 1483kci_test_rtnl 1484 1485exit $? 1486