xref: /linux/tools/testing/selftests/net/rtnetlink.sh (revision 8b5a19b4ff6a2096225d88cf24cfeef03edc1bed)
1#!/bin/bash
2#
3# This test is for checking rtnetlink callpaths, and get as much coverage as possible.
4#
5# set -e
6
7ALL_TESTS="
8	kci_test_polrouting
9	kci_test_route_get
10	kci_test_addrlft
11	kci_test_promote_secondaries
12	kci_test_tc
13	kci_test_gre
14	kci_test_gretap
15	kci_test_ip6gretap
16	kci_test_erspan
17	kci_test_ip6erspan
18	kci_test_bridge
19	kci_test_addrlabel
20	kci_test_ifalias
21	kci_test_vrf
22	kci_test_encap
23	kci_test_macsec
24	kci_test_ipsec
25	kci_test_ipsec_offload
26	kci_test_fdb_get
27	kci_test_fdb_del
28	kci_test_neigh_get
29	kci_test_bridge_parent_id
30	kci_test_address_proto
31	kci_test_enslave_bonding
32	kci_test_mngtmpaddr
33	kci_test_operstate
34"
35
36devdummy="test-dummy0"
37VERBOSE=0
38PAUSE=no
39PAUSE_ON_FAIL=no
40
41source lib.sh
42
43# set global exit status, but never reset nonzero one.
44check_err()
45{
46	if [ $ret -eq 0 ]; then
47		ret=$1
48	fi
49	[ -n "$2" ] && echo "$2"
50}
51
52# same but inverted -- used when command must fail for test to pass
53check_fail()
54{
55	if [ $1 -eq 0 ]; then
56		ret=1
57	fi
58}
59
60run_cmd_common()
61{
62	local cmd="$*"
63	local out
64	if [ "$VERBOSE" = "1" ]; then
65		echo "COMMAND: ${cmd}"
66	fi
67	out=$($cmd 2>&1)
68	rc=$?
69	if [ "$VERBOSE" = "1" -a -n "$out" ]; then
70		echo "    $out"
71	fi
72	return $rc
73}
74
75run_cmd() {
76	run_cmd_common "$@"
77	rc=$?
78	check_err $rc
79	return $rc
80}
81run_cmd_fail()
82{
83	run_cmd_common "$@"
84	rc=$?
85	check_fail $rc
86	return $rc
87}
88
89run_cmd_grep_common()
90{
91	local find="$1"; shift
92	local cmd="$*"
93	local out
94	if [ "$VERBOSE" = "1" ]; then
95		echo "COMMAND: ${cmd} 2>&1 | grep -q '${find}'"
96	fi
97	out=$($cmd 2>&1 | grep -q "${find}" 2>&1)
98	return $?
99}
100
101run_cmd_grep() {
102	run_cmd_grep_common "$@"
103	rc=$?
104	check_err $rc
105	return $rc
106}
107
108run_cmd_grep_fail()
109{
110	run_cmd_grep_common "$@"
111	rc=$?
112	check_fail $rc
113	return $rc
114}
115
116end_test()
117{
118	echo "$*"
119	[ "${VERBOSE}" = "1" ] && echo
120
121	if [[ $ret -ne 0 ]] && [[ "${PAUSE_ON_FAIL}" = "yes" ]]; then
122		echo "Hit enter to continue"
123		read a
124	fi;
125
126	if [ "${PAUSE}" = "yes" ]; then
127		echo "Hit enter to continue"
128		read a
129	fi
130
131}
132
133
134kci_add_dummy()
135{
136	run_cmd ip link add name "$devdummy" type dummy
137	run_cmd ip link set "$devdummy" up
138}
139
140kci_del_dummy()
141{
142	run_cmd ip link del dev "$devdummy"
143}
144
145kci_test_netconf()
146{
147	dev="$1"
148	r=$ret
149	run_cmd ip netconf show dev "$dev"
150	for f in 4 6; do
151		run_cmd ip -$f netconf show dev "$dev"
152	done
153
154	if [ $ret -ne 0 ] ;then
155		end_test "FAIL: ip netconf show $dev"
156		test $r -eq 0 && ret=0
157		return 1
158	fi
159}
160
161# add a bridge with vlans on top
162kci_test_bridge()
163{
164	devbr="test-br0"
165	vlandev="testbr-vlan1"
166
167	local ret=0
168	run_cmd ip link add name "$devbr" type bridge
169	run_cmd ip link set dev "$devdummy" master "$devbr"
170	run_cmd ip link set "$devbr" up
171	run_cmd ip link add link "$devbr" name "$vlandev" type vlan id 1
172	run_cmd ip addr add dev "$vlandev" 10.200.7.23/30
173	run_cmd ip -6 addr add dev "$vlandev" dead:42::1234/64
174	run_cmd ip -d link
175	run_cmd ip r s t all
176
177	for name in "$devbr" "$vlandev" "$devdummy" ; do
178		kci_test_netconf "$name"
179	done
180	run_cmd ip -6 addr del dev "$vlandev" dead:42::1234/64
181	run_cmd ip link del dev "$vlandev"
182	run_cmd ip link del dev "$devbr"
183
184	if [ $ret -ne 0 ];then
185		end_test "FAIL: bridge setup"
186		return 1
187	fi
188	end_test "PASS: bridge setup"
189
190}
191
192kci_test_gre()
193{
194	gredev=neta
195	rem=10.42.42.1
196	loc=10.0.0.1
197
198	local ret=0
199	run_cmd ip tunnel add $gredev mode gre remote $rem local $loc ttl 1
200	run_cmd ip link set $gredev up
201	run_cmd ip addr add 10.23.7.10 dev $gredev
202	run_cmd ip route add 10.23.8.0/30 dev $gredev
203	run_cmd ip addr add dev "$devdummy" 10.23.7.11/24
204	run_cmd ip link
205	run_cmd ip addr
206
207	kci_test_netconf "$gredev"
208	run_cmd ip addr del dev "$devdummy" 10.23.7.11/24
209	run_cmd ip link del $gredev
210
211	if [ $ret -ne 0 ];then
212		end_test "FAIL: gre tunnel endpoint"
213		return 1
214	fi
215	end_test "PASS: gre tunnel endpoint"
216}
217
218# tc uses rtnetlink too, for full tc testing
219# please see tools/testing/selftests/tc-testing.
220kci_test_tc()
221{
222	dev=lo
223	local ret=0
224
225	run_cmd tc qdisc add dev "$dev" root handle 1: htb
226	run_cmd tc class add dev "$dev" parent 1: classid 1:10 htb rate 1mbit
227	run_cmd tc filter add dev "$dev" parent 1:0 prio 5 handle ffe: protocol ip u32 divisor 256
228	run_cmd tc filter add dev "$dev" parent 1:0 prio 5 handle ffd: protocol ip u32 divisor 256
229	run_cmd tc filter add dev "$dev" parent 1:0 prio 5 handle ffc: protocol ip u32 divisor 256
230	run_cmd tc filter add dev "$dev" protocol ip parent 1: prio 5 handle ffe:2:3 u32 ht ffe:2: match ip src 10.0.0.3 flowid 1:10
231	run_cmd tc filter add dev "$dev" protocol ip parent 1: prio 5 handle ffe:2:2 u32 ht ffe:2: match ip src 10.0.0.2 flowid 1:10
232	run_cmd tc filter show dev "$dev" parent  1:0
233	run_cmd tc filter del dev "$dev" protocol ip parent 1: prio 5 handle ffe:2:3 u32
234	run_cmd tc filter show dev "$dev" parent  1:0
235	run_cmd tc qdisc del dev "$dev" root handle 1: htb
236
237	if [ $ret -ne 0 ];then
238		end_test "FAIL: tc htb hierarchy"
239		return 1
240	fi
241	end_test "PASS: tc htb hierarchy"
242
243}
244
245kci_test_polrouting()
246{
247	local ret=0
248	run_cmd ip rule add fwmark 1 lookup 100
249	run_cmd ip route add local 0.0.0.0/0 dev lo table 100
250	run_cmd ip r s t all
251	run_cmd ip rule del fwmark 1 lookup 100
252	run_cmd ip route del local 0.0.0.0/0 dev lo table 100
253
254	if [ $ret -ne 0 ];then
255		end_test "FAIL: policy route test"
256		return 1
257	fi
258	end_test "PASS: policy routing"
259}
260
261kci_test_route_get()
262{
263	local hash_policy=$(sysctl -n net.ipv4.fib_multipath_hash_policy)
264
265	local ret=0
266	run_cmd ip route get 127.0.0.1
267	run_cmd ip route get 127.0.0.1 dev "$devdummy"
268	run_cmd ip route get ::1
269	run_cmd ip route get fe80::1 dev "$devdummy"
270	run_cmd ip route get 127.0.0.1 from 127.0.0.1 oif lo tos 0x10 mark 0x1
271	run_cmd ip route get ::1 from ::1 iif lo oif lo tos 0x10 mark 0x1
272	run_cmd ip addr add dev "$devdummy" 10.23.7.11/24
273	run_cmd ip route get 10.23.7.11 from 10.23.7.12 iif "$devdummy"
274	run_cmd ip route add 10.23.8.0/24 \
275		nexthop via 10.23.7.13 dev "$devdummy" \
276		nexthop via 10.23.7.14 dev "$devdummy"
277
278	sysctl -wq net.ipv4.fib_multipath_hash_policy=0
279	run_cmd ip route get 10.23.8.11
280	sysctl -wq net.ipv4.fib_multipath_hash_policy=1
281	run_cmd ip route get 10.23.8.11
282	sysctl -wq net.ipv4.fib_multipath_hash_policy="$hash_policy"
283	run_cmd ip route del 10.23.8.0/24
284	run_cmd ip addr del dev "$devdummy" 10.23.7.11/24
285
286
287	if [ $ret -ne 0 ];then
288		end_test "FAIL: route get"
289		return 1
290	fi
291
292	end_test "PASS: route get"
293}
294
295check_addr_not_exist()
296{
297	dev=$1
298	addr=$2
299	if ip addr show dev $dev | grep -q $addr; then
300		return 1
301	else
302		return 0
303	fi
304}
305
306kci_test_addrlft()
307{
308	for i in $(seq 10 100) ;do
309		lft=$(((RANDOM%3) + 1))
310		run_cmd ip addr add 10.23.11.$i/32 dev "$devdummy" preferred_lft $lft valid_lft $((lft+1))
311	done
312
313	slowwait 5 check_addr_not_exist "$devdummy" "10.23.11."
314	if [ $? -eq 1 ]; then
315		check_err 1
316		end_test "FAIL: preferred_lft addresses remaining"
317		return
318	fi
319
320	end_test "PASS: preferred_lft addresses have expired"
321}
322
323kci_test_promote_secondaries()
324{
325	promote=$(sysctl -n net.ipv4.conf.$devdummy.promote_secondaries)
326
327	sysctl -q net.ipv4.conf.$devdummy.promote_secondaries=1
328
329	for i in $(seq 2 254);do
330		IP="10.23.11.$i"
331		ip -f inet addr add $IP/16 brd + dev "$devdummy"
332		ifconfig "$devdummy" $IP netmask 255.255.0.0
333	done
334
335	ip addr flush dev "$devdummy"
336
337	[ $promote -eq 0 ] && sysctl -q net.ipv4.conf.$devdummy.promote_secondaries=0
338
339	end_test "PASS: promote_secondaries complete"
340}
341
342kci_test_addrlabel()
343{
344	local ret=0
345	run_cmd ip addrlabel add prefix dead::/64 dev lo label 1
346	run_cmd_grep "prefix dead::/64 dev lo label 1" ip addrlabel list
347	run_cmd ip addrlabel del prefix dead::/64 dev lo label 1
348	run_cmd ip addrlabel add prefix dead::/64 label 1
349	run_cmd ip addrlabel del prefix dead::/64 label 1
350
351	# concurrent add/delete
352	for i in $(seq 1 1000); do
353		ip addrlabel add prefix 1c3::/64 label 12345 2>/dev/null
354	done &
355
356	for i in $(seq 1 1000); do
357		ip addrlabel del prefix 1c3::/64 label 12345 2>/dev/null
358	done
359
360	wait
361
362	ip addrlabel del prefix 1c3::/64 label 12345 2>/dev/null
363
364	if [ $ret -ne 0 ];then
365		end_test "FAIL: ipv6 addrlabel"
366		return 1
367	fi
368
369	end_test "PASS: ipv6 addrlabel"
370}
371
372kci_test_ifalias()
373{
374	local ret=0
375	namewant=$(uuidgen)
376	syspathname="/sys/class/net/$devdummy/ifalias"
377	run_cmd ip link set dev "$devdummy" alias "$namewant"
378
379	if [ $ret -ne 0 ]; then
380		end_test "FAIL: cannot set interface alias of $devdummy to $namewant"
381		return 1
382	fi
383	run_cmd_grep "alias $namewant" ip link show "$devdummy"
384
385	if [ -r "$syspathname" ] ; then
386		read namehave < "$syspathname"
387		if [ "$namewant" != "$namehave" ]; then
388			end_test "FAIL: did set ifalias $namewant but got $namehave"
389			return 1
390		fi
391
392		namewant=$(uuidgen)
393		echo "$namewant" > "$syspathname"
394	        run_cmd_grep "alias $namewant" ip link show "$devdummy"
395
396		# sysfs interface allows to delete alias again
397		echo "" > "$syspathname"
398	        run_cmd_grep_fail "alias $namewant" ip link show "$devdummy"
399
400		for i in $(seq 1 100); do
401			uuidgen > "$syspathname" &
402		done
403
404		wait
405
406		# re-add the alias -- kernel should free mem when dummy dev is removed
407		run_cmd ip link set dev "$devdummy" alias "$namewant"
408
409	fi
410
411	if [ $ret -ne 0 ]; then
412		end_test "FAIL: set interface alias $devdummy to $namewant"
413		return 1
414	fi
415
416	end_test "PASS: set ifalias $namewant for $devdummy"
417}
418
419kci_test_vrf()
420{
421	vrfname="test-vrf"
422	local ret=0
423	run_cmd ip link show type vrf
424	if [ $? -ne 0 ]; then
425		end_test "SKIP: vrf: iproute2 too old"
426		return $ksft_skip
427	fi
428	run_cmd ip link add "$vrfname" type vrf table 10
429	if [ $ret -ne 0 ];then
430		end_test "FAIL: can't add vrf interface, skipping test"
431		return 0
432	fi
433	run_cmd_grep "$vrfname" ip -br link show type vrf
434	if [ $ret -ne 0 ];then
435		end_test "FAIL: created vrf device not found"
436		return 1
437	fi
438
439	run_cmd ip link set dev "$vrfname" up
440	run_cmd ip link set dev "$devdummy" master "$vrfname"
441	run_cmd ip link del dev "$vrfname"
442
443	if [ $ret -ne 0 ];then
444		end_test "FAIL: vrf"
445		return 1
446	fi
447
448	end_test "PASS: vrf"
449}
450
451kci_test_encap_vxlan()
452{
453	local ret=0
454	vxlan="test-vxlan0"
455	vlan="test-vlan0"
456	run_cmd ip -netns "$testns" link add "$vxlan" type vxlan id 42 group 239.1.1.1 \
457		dev "$devdummy" dstport 4789
458	if [ $? -ne 0 ]; then
459		end_test "FAIL: can't add vxlan interface, skipping test"
460		return 0
461	fi
462
463	run_cmd ip -netns "$testns" addr add 10.2.11.49/24 dev "$vxlan"
464	run_cmd ip -netns "$testns" link set up dev "$vxlan"
465	run_cmd ip -netns "$testns" link add link "$vxlan" name "$vlan" type vlan id 1
466
467	# changelink testcases
468	run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan vni 43
469	run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan group ffe5::5 dev "$devdummy"
470	run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan ttl inherit
471
472	run_cmd ip -netns "$testns" link set dev "$vxlan" type vxlan ttl 64
473	run_cmd ip -netns "$testns" link set dev "$vxlan" type vxlan nolearning
474
475	run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan proxy
476	run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan norsc
477	run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan l2miss
478	run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan l3miss
479	run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan external
480	run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan udpcsum
481	run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan udp6zerocsumtx
482	run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan udp6zerocsumrx
483	run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan remcsumtx
484	run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan remcsumrx
485	run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan gbp
486	run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan gpe
487	run_cmd ip -netns "$testns" link del "$vxlan"
488
489	if [ $ret -ne 0 ]; then
490		end_test "FAIL: vxlan"
491		return 1
492	fi
493	end_test "PASS: vxlan"
494}
495
496kci_test_encap_fou()
497{
498	local ret=0
499	name="test-fou"
500	run_cmd_grep 'Usage: ip fou' ip fou help
501	if [ $? -ne 0 ];then
502		end_test "SKIP: fou: iproute2 too old"
503		return $ksft_skip
504	fi
505
506	if ! /sbin/modprobe -q -n fou; then
507		end_test "SKIP: module fou is not found"
508		return $ksft_skip
509	fi
510	/sbin/modprobe -q fou
511
512	run_cmd ip -netns "$testns" fou add port 7777 ipproto 47
513	if [ $? -ne 0 ];then
514		end_test "FAIL: can't add fou port 7777, skipping test"
515		return 1
516	fi
517	run_cmd ip -netns "$testns" fou add port 8888 ipproto 4
518	run_cmd_fail ip -netns "$testns" fou del port 9999
519	run_cmd ip -netns "$testns" fou del port 7777
520	if [ $ret -ne 0 ]; then
521		end_test "FAIL: fou"s
522		return 1
523	fi
524
525	end_test "PASS: fou"
526}
527
528# test various encap methods, use netns to avoid unwanted interference
529kci_test_encap()
530{
531	local ret=0
532	setup_ns testns
533	if [ $? -ne 0 ]; then
534		end_test "SKIP encap tests: cannot add net namespace $testns"
535		return $ksft_skip
536	fi
537	run_cmd ip -netns "$testns" link set lo up
538	run_cmd ip -netns "$testns" link add name "$devdummy" type dummy
539	run_cmd ip -netns "$testns" link set "$devdummy" up
540	run_cmd kci_test_encap_vxlan
541	run_cmd kci_test_encap_fou
542
543	ip netns del "$testns"
544	return $ret
545}
546
547kci_test_macsec()
548{
549	msname="test_macsec0"
550	local ret=0
551	run_cmd_grep "^Usage: ip macsec" ip macsec help
552	if [ $? -ne 0 ]; then
553		end_test "SKIP: macsec: iproute2 too old"
554		return $ksft_skip
555	fi
556	run_cmd ip link add link "$devdummy" "$msname" type macsec port 42 encrypt on
557	if [ $ret -ne 0 ];then
558		end_test "FAIL: can't add macsec interface, skipping test"
559		return 1
560	fi
561	run_cmd ip macsec add "$msname" tx sa 0 pn 1024 on key 01 12345678901234567890123456789012
562	run_cmd ip macsec add "$msname" rx port 1234 address "1c:ed:de:ad:be:ef"
563	run_cmd ip macsec add "$msname" rx port 1234 address "1c:ed:de:ad:be:ef" sa 0 pn 1 on key 00 0123456789abcdef0123456789abcdef
564	run_cmd ip macsec show
565	run_cmd ip link del dev "$msname"
566
567	if [ $ret -ne 0 ];then
568		end_test "FAIL: macsec"
569		return 1
570	fi
571
572	end_test "PASS: macsec"
573}
574
575#-------------------------------------------------------------------
576# Example commands
577#   ip x s add proto esp src 14.0.0.52 dst 14.0.0.70 \
578#            spi 0x07 mode transport reqid 0x07 replay-window 32 \
579#            aead 'rfc4106(gcm(aes))' 1234567890123456dcba 128 \
580#            sel src 14.0.0.52/24 dst 14.0.0.70/24
581#   ip x p add dir out src 14.0.0.52/24 dst 14.0.0.70/24 \
582#            tmpl proto esp src 14.0.0.52 dst 14.0.0.70 \
583#            spi 0x07 mode transport reqid 0x07
584#
585# Subcommands not tested
586#    ip x s update
587#    ip x s allocspi
588#    ip x s deleteall
589#    ip x p update
590#    ip x p deleteall
591#    ip x p set
592#-------------------------------------------------------------------
593kci_test_ipsec()
594{
595	local ret=0
596	algo="aead rfc4106(gcm(aes)) 0x3132333435363738393031323334353664636261 128"
597	srcip=192.168.123.1
598	dstip=192.168.123.2
599	spi=7
600
601	ip addr add $srcip dev $devdummy
602
603	# flush to be sure there's nothing configured
604	run_cmd ip x s flush ; ip x p flush
605
606	# start the monitor in the background
607	tmpfile=`mktemp /var/run/ipsectestXXX`
608	mpid=`(ip x m > $tmpfile & echo $!) 2>/dev/null`
609	sleep 0.2
610
611	ipsecid="proto esp src $srcip dst $dstip spi 0x07"
612	run_cmd ip x s add $ipsecid \
613            mode transport reqid 0x07 replay-window 32 \
614            $algo sel src $srcip/24 dst $dstip/24
615
616
617	lines=`ip x s list | grep $srcip | grep $dstip | wc -l`
618	run_cmd test $lines -eq 2
619	run_cmd_grep "SAD count 1" ip x s count
620
621	lines=`ip x s get $ipsecid | grep $srcip | grep $dstip | wc -l`
622	run_cmd test $lines -eq 2
623	run_cmd ip x s delete $ipsecid
624
625	lines=`ip x s list | wc -l`
626	run_cmd test $lines -eq 0
627
628	ipsecsel="dir out src $srcip/24 dst $dstip/24"
629	run_cmd ip x p add $ipsecsel \
630		    tmpl proto esp src $srcip dst $dstip \
631		    spi 0x07 mode transport reqid 0x07
632
633
634	lines=`ip x p list | grep $srcip | grep $dstip | wc -l`
635	run_cmd test $lines -eq 2
636
637	run_cmd_grep "SPD IN  0 OUT 1 FWD 0" ip x p count
638
639	lines=`ip x p get $ipsecsel | grep $srcip | grep $dstip | wc -l`
640	run_cmd test $lines -eq 2
641
642	run_cmd ip x p delete $ipsecsel
643
644	lines=`ip x p list | wc -l`
645	run_cmd test $lines -eq 0
646
647	# check the monitor results
648	kill $mpid
649	lines=`wc -l $tmpfile | cut "-d " -f1`
650	run_cmd test $lines -eq 20
651	rm -rf $tmpfile
652
653	# clean up any leftovers
654	run_cmd ip x s flush
655	run_cmd ip x p flush
656	ip addr del $srcip/32 dev $devdummy
657
658	if [ $ret -ne 0 ]; then
659		end_test "FAIL: ipsec"
660		return 1
661	fi
662	end_test "PASS: ipsec"
663}
664
665#-------------------------------------------------------------------
666# Example commands
667#   ip x s add proto esp src 14.0.0.52 dst 14.0.0.70 \
668#            spi 0x07 mode transport reqid 0x07 replay-window 32 \
669#            aead 'rfc4106(gcm(aes))' 1234567890123456dcba 128 \
670#            sel src 14.0.0.52/24 dst 14.0.0.70/24
671#            offload dev sim1 dir out
672#   ip x p add dir out src 14.0.0.52/24 dst 14.0.0.70/24 \
673#            tmpl proto esp src 14.0.0.52 dst 14.0.0.70 \
674#            spi 0x07 mode transport reqid 0x07
675#
676#-------------------------------------------------------------------
677kci_test_ipsec_offload()
678{
679	local ret=0
680	algo="aead rfc4106(gcm(aes)) 0x3132333435363738393031323334353664636261 128"
681	srcip=192.168.123.3
682	dstip=192.168.123.4
683	sysfsd=/sys/kernel/debug/netdevsim/netdevsim0/ports/0/
684	sysfsf=$sysfsd/ipsec
685	sysfsnet=/sys/bus/netdevsim/devices/netdevsim0/net/
686	probed=false
687
688	if ! mount | grep -q debugfs; then
689		mount -t debugfs none /sys/kernel/debug/ &> /dev/null
690	fi
691
692	# setup netdevsim since dummydev doesn't have offload support
693	if [ ! -w /sys/bus/netdevsim/new_device ] ; then
694		run_cmd modprobe -q netdevsim
695		if [ $ret -ne 0 ]; then
696			end_test "SKIP: ipsec_offload can't load netdevsim"
697			return $ksft_skip
698		fi
699		probed=true
700	fi
701
702	echo "0" > /sys/bus/netdevsim/new_device
703	while [ ! -d $sysfsnet ] ; do :; done
704	udevadm settle
705	dev=`ls $sysfsnet`
706
707	ip addr add $srcip dev $dev
708	ip link set $dev up
709	if [ ! -d $sysfsd ] ; then
710		end_test "FAIL: ipsec_offload can't create device $dev"
711		return 1
712	fi
713	if [ ! -f $sysfsf ] ; then
714		end_test "FAIL: ipsec_offload netdevsim doesn't support IPsec offload"
715		return 1
716	fi
717
718	# flush to be sure there's nothing configured
719	ip x s flush ; ip x p flush
720
721	# create offloaded SAs, both in and out
722	run_cmd ip x p add dir out src $srcip/24 dst $dstip/24 \
723	    tmpl proto esp src $srcip dst $dstip spi 9 \
724	    mode transport reqid 42
725
726	run_cmd ip x p add dir in src $dstip/24 dst $srcip/24 \
727	    tmpl proto esp src $dstip dst $srcip spi 9 \
728	    mode transport reqid 42
729
730	run_cmd ip x s add proto esp src $srcip dst $dstip spi 9 \
731	    mode transport reqid 42 $algo sel src $srcip/24 dst $dstip/24 \
732	    offload dev $dev dir out
733
734	run_cmd ip x s add proto esp src $dstip dst $srcip spi 9 \
735	    mode transport reqid 42 $algo sel src $dstip/24 dst $srcip/24 \
736	    offload dev $dev dir in
737
738	if [ $ret -ne 0 ]; then
739		end_test "FAIL: ipsec_offload can't create SA"
740		return 1
741	fi
742
743	# does offload show up in ip output
744	lines=`ip x s list | grep -c "crypto offload parameters: dev $dev dir"`
745	if [ $lines -ne 2 ] ; then
746		check_err 1
747		end_test "FAIL: ipsec_offload SA offload missing from list output"
748	fi
749
750	# we didn't create a peer, make sure we can Tx
751	ip neigh add $dstip dev $dev lladdr 00:11:22:33:44:55
752	# use ping to exercise the Tx path
753	ping -I $dev -c 3 -W 1 -i 0 $dstip >/dev/null
754
755	# does driver have correct offload info
756	run_cmd diff $sysfsf - << EOF
757SA count=2 tx=3
758sa[0] tx ipaddr=$dstip
759sa[0]    spi=0x00000009 proto=0x32 salt=0x61626364 crypt=1
760sa[0]    key=0x34333231 38373635 32313039 36353433
761sa[1] rx ipaddr=$srcip
762sa[1]    spi=0x00000009 proto=0x32 salt=0x61626364 crypt=1
763sa[1]    key=0x34333231 38373635 32313039 36353433
764EOF
765	if [ $? -ne 0 ] ; then
766		end_test "FAIL: ipsec_offload incorrect driver data"
767		check_err 1
768	fi
769
770	# does offload get removed from driver
771	ip x s flush
772	ip x p flush
773	lines=`grep -c "SA count=0" $sysfsf`
774	if [ $lines -ne 1 ] ; then
775		check_err 1
776		end_test "FAIL: ipsec_offload SA not removed from driver"
777	fi
778
779	# clean up any leftovers
780	echo 0 > /sys/bus/netdevsim/del_device
781	$probed && rmmod netdevsim
782
783	if [ $ret -ne 0 ]; then
784		end_test "FAIL: ipsec_offload"
785		return 1
786	fi
787	end_test "PASS: ipsec_offload"
788}
789
790kci_test_gretap()
791{
792	DEV_NS=gretap00
793	local ret=0
794
795	setup_ns testns
796	if [ $? -ne 0 ]; then
797		end_test "SKIP gretap tests: cannot add net namespace $testns"
798		return $ksft_skip
799	fi
800
801	run_cmd_grep "^Usage:" ip link help gretap
802	if [ $? -ne 0 ];then
803		end_test "SKIP: gretap: iproute2 too old"
804		ip netns del "$testns"
805		return $ksft_skip
806	fi
807
808	# test native tunnel
809	run_cmd ip -netns "$testns" link add dev "$DEV_NS" type gretap seq \
810		key 102 local 172.16.1.100 remote 172.16.1.200
811
812
813	run_cmd ip -netns "$testns" addr add dev "$DEV_NS" 10.1.1.100/24
814	run_cmd ip -netns "$testns" link set dev $DEV_NS up
815	run_cmd ip -netns "$testns" link del "$DEV_NS"
816
817	# test external mode
818	run_cmd ip -netns "$testns" link add dev "$DEV_NS" type gretap external
819	run_cmd ip -netns "$testns" link del "$DEV_NS"
820
821	if [ $ret -ne 0 ]; then
822		end_test "FAIL: gretap"
823		ip netns del "$testns"
824		return 1
825	fi
826	end_test "PASS: gretap"
827
828	ip netns del "$testns"
829}
830
831kci_test_ip6gretap()
832{
833	DEV_NS=ip6gretap00
834	local ret=0
835
836	setup_ns testns
837	if [ $? -ne 0 ]; then
838		end_test "SKIP ip6gretap tests: cannot add net namespace $testns"
839		return $ksft_skip
840	fi
841
842	run_cmd_grep "^Usage:" ip link help ip6gretap
843	if [ $? -ne 0 ];then
844		end_test "SKIP: ip6gretap: iproute2 too old"
845		ip netns del "$testns"
846		return $ksft_skip
847	fi
848
849	# test native tunnel
850	run_cmd ip -netns "$testns" link add dev "$DEV_NS" type ip6gretap seq \
851		key 102 local fc00:100::1 remote fc00:100::2
852
853
854	run_cmd ip -netns "$testns" addr add dev "$DEV_NS" fc00:200::1/96
855	run_cmd ip -netns "$testns" link set dev $DEV_NS up
856	run_cmd ip -netns "$testns" link del "$DEV_NS"
857
858	# test external mode
859	run_cmd ip -netns "$testns" link add dev "$DEV_NS" type ip6gretap external
860	run_cmd ip -netns "$testns" link del "$DEV_NS"
861
862	if [ $ret -ne 0 ]; then
863		end_test "FAIL: ip6gretap"
864		ip netns del "$testns"
865		return 1
866	fi
867	end_test "PASS: ip6gretap"
868
869	ip netns del "$testns"
870}
871
872kci_test_erspan()
873{
874	DEV_NS=erspan00
875	local ret=0
876	run_cmd_grep "^Usage:" ip link help erspan
877	if [ $? -ne 0 ];then
878		end_test "SKIP: erspan: iproute2 too old"
879		return $ksft_skip
880	fi
881	setup_ns testns
882	if [ $? -ne 0 ]; then
883		end_test "SKIP erspan tests: cannot add net namespace $testns"
884		return $ksft_skip
885	fi
886
887	# test native tunnel erspan v1
888	run_cmd ip -netns "$testns" link add dev "$DEV_NS" type erspan seq \
889		key 102 local 172.16.1.100 remote 172.16.1.200 \
890		erspan_ver 1 erspan 488
891
892
893	run_cmd ip -netns "$testns" addr add dev "$DEV_NS" 10.1.1.100/24
894	run_cmd ip -netns "$testns" link set dev $DEV_NS up
895	run_cmd ip -netns "$testns" link del "$DEV_NS"
896
897	# test native tunnel erspan v2
898	run_cmd ip -netns "$testns" link add dev "$DEV_NS" type erspan seq \
899		key 102 local 172.16.1.100 remote 172.16.1.200 \
900		erspan_ver 2 erspan_dir ingress erspan_hwid 7
901
902
903	run_cmd ip -netns "$testns" addr add dev "$DEV_NS" 10.1.1.100/24
904	run_cmd ip -netns "$testns" link set dev $DEV_NS up
905	run_cmd ip -netns "$testns" link del "$DEV_NS"
906
907	# test external mode
908	run_cmd ip -netns "$testns" link add dev "$DEV_NS" type erspan external
909	run_cmd ip -netns "$testns" link del "$DEV_NS"
910
911	if [ $ret -ne 0 ]; then
912		end_test "FAIL: erspan"
913		ip netns del "$testns"
914		return 1
915	fi
916	end_test "PASS: erspan"
917
918	ip netns del "$testns"
919}
920
921kci_test_ip6erspan()
922{
923	DEV_NS=ip6erspan00
924	local ret=0
925	run_cmd_grep "^Usage:" ip link help ip6erspan
926	if [ $? -ne 0 ];then
927		end_test "SKIP: ip6erspan: iproute2 too old"
928		return $ksft_skip
929	fi
930	setup_ns testns
931	if [ $? -ne 0 ]; then
932		end_test "SKIP ip6erspan tests: cannot add net namespace $testns"
933		return $ksft_skip
934	fi
935
936	# test native tunnel ip6erspan v1
937	run_cmd ip -netns "$testns" link add dev "$DEV_NS" type ip6erspan seq \
938		key 102 local fc00:100::1 remote fc00:100::2 \
939		erspan_ver 1 erspan 488
940
941
942	run_cmd ip -netns "$testns" addr add dev "$DEV_NS" 10.1.1.100/24
943	run_cmd ip -netns "$testns" link set dev $DEV_NS up
944	run_cmd ip -netns "$testns" link del "$DEV_NS"
945
946	# test native tunnel ip6erspan v2
947	run_cmd ip -netns "$testns" link add dev "$DEV_NS" type ip6erspan seq \
948		key 102 local fc00:100::1 remote fc00:100::2 \
949		erspan_ver 2 erspan_dir ingress erspan_hwid 7
950
951
952	run_cmd ip -netns "$testns" addr add dev "$DEV_NS" 10.1.1.100/24
953	run_cmd ip -netns "$testns" link set dev $DEV_NS up
954	run_cmd ip -netns "$testns" link del "$DEV_NS"
955
956	# test external mode
957	run_cmd ip -netns "$testns" link add dev "$DEV_NS" \
958		type ip6erspan external
959
960	run_cmd ip -netns "$testns" link del "$DEV_NS"
961
962	if [ $ret -ne 0 ]; then
963		end_test "FAIL: ip6erspan"
964		ip netns del "$testns"
965		return 1
966	fi
967	end_test "PASS: ip6erspan"
968
969	ip netns del "$testns"
970}
971
972kci_test_fdb_get()
973{
974	brdev="test-br0"
975	vxlandev="vxlan10"
976	test_mac=de:ad:be:ef:13:37
977	localip="10.0.2.2"
978	dstip="10.0.2.3"
979	local ret=0
980
981	run_cmd_grep 'bridge fdb get' bridge fdb help
982	if [ $? -ne 0 ];then
983		end_test "SKIP: fdb get tests: iproute2 too old"
984		return $ksft_skip
985	fi
986
987	setup_ns testns
988	if [ $? -ne 0 ]; then
989		end_test "SKIP fdb get tests: cannot add net namespace $testns"
990		return $ksft_skip
991	fi
992	IP="ip -netns $testns"
993	BRIDGE="bridge -netns $testns"
994	run_cmd $IP link add "$vxlandev" type vxlan id 10 local $localip \
995                dstport 4789
996	run_cmd $IP link add name "$brdev" type bridge
997	run_cmd $IP link set dev "$vxlandev" master "$brdev"
998	run_cmd $BRIDGE fdb add $test_mac dev "$vxlandev" master
999	run_cmd $BRIDGE fdb add $test_mac dev "$vxlandev" dst $dstip self
1000	run_cmd_grep "dev $vxlandev master $brdev" $BRIDGE fdb get $test_mac brport "$vxlandev"
1001	run_cmd_grep "dev $vxlandev master $brdev" $BRIDGE fdb get $test_mac br "$brdev"
1002	run_cmd_grep "dev $vxlandev dst $dstip" $BRIDGE fdb get $test_mac dev "$vxlandev" self
1003
1004	ip netns del $testns &>/dev/null
1005
1006	if [ $ret -ne 0 ]; then
1007		end_test "FAIL: bridge fdb get"
1008		return 1
1009	fi
1010
1011	end_test "PASS: bridge fdb get"
1012}
1013
1014kci_test_fdb_del()
1015{
1016	local test_mac=de:ad:be:ef:13:37
1017	local dummydev="dummy1"
1018	local brdev="test-br0"
1019	local ret=0
1020
1021	run_cmd_grep 'bridge fdb get' bridge fdb help
1022	if [ $? -ne 0 ]; then
1023		end_test "SKIP: fdb del tests: iproute2 too old"
1024		return $ksft_skip
1025	fi
1026
1027	setup_ns testns
1028	if [ $? -ne 0 ]; then
1029		end_test "SKIP fdb del tests: cannot add net namespace $testns"
1030		return $ksft_skip
1031	fi
1032	IP="ip -netns $testns"
1033	BRIDGE="bridge -netns $testns"
1034	run_cmd $IP link add $dummydev type dummy
1035	run_cmd $IP link add name $brdev type bridge vlan_filtering 1
1036	run_cmd $IP link set dev $dummydev master $brdev
1037	run_cmd $BRIDGE fdb add $test_mac dev $dummydev master static vlan 1
1038	run_cmd $BRIDGE vlan del vid 1 dev $dummydev
1039	run_cmd $BRIDGE fdb get $test_mac br $brdev vlan 1
1040	run_cmd $BRIDGE fdb del $test_mac dev $dummydev master vlan 1
1041	run_cmd_fail $BRIDGE fdb get $test_mac br $brdev vlan 1
1042
1043	ip netns del $testns &>/dev/null
1044
1045	if [ $ret -ne 0 ]; then
1046		end_test "FAIL: bridge fdb del"
1047		return 1
1048	fi
1049
1050	end_test "PASS: bridge fdb del"
1051}
1052
1053kci_test_neigh_get()
1054{
1055	dstmac=de:ad:be:ef:13:37
1056	dstip=10.0.2.4
1057	dstip6=dead::2
1058	local ret=0
1059
1060	run_cmd_grep 'ip neigh get' ip neigh help
1061	if [ $? -ne 0 ];then
1062		end_test "SKIP: fdb get tests: iproute2 too old"
1063		return $ksft_skip
1064	fi
1065
1066	# ipv4
1067	run_cmd ip neigh add $dstip lladdr $dstmac dev "$devdummy"
1068	run_cmd_grep "$dstmac" ip neigh get $dstip dev "$devdummy"
1069	run_cmd ip neigh del $dstip lladdr $dstmac dev "$devdummy"
1070
1071	# ipv4 proxy
1072	run_cmd ip neigh add proxy $dstip dev "$devdummy"
1073	run_cmd_grep "$dstip" ip neigh get proxy $dstip dev "$devdummy"
1074	run_cmd ip neigh del proxy $dstip dev "$devdummy"
1075
1076	# ipv6
1077	run_cmd ip neigh add $dstip6 lladdr $dstmac dev "$devdummy"
1078	run_cmd_grep "$dstmac" ip neigh get $dstip6 dev "$devdummy"
1079	run_cmd ip neigh del $dstip6 lladdr $dstmac dev "$devdummy"
1080
1081	# ipv6 proxy
1082	run_cmd ip neigh add proxy $dstip6 dev "$devdummy"
1083	run_cmd_grep "$dstip6" ip neigh get proxy $dstip6 dev "$devdummy"
1084	run_cmd ip neigh del proxy $dstip6 dev "$devdummy"
1085
1086	if [ $ret -ne 0 ];then
1087		end_test "FAIL: neigh get"
1088		return 1
1089	fi
1090
1091	end_test "PASS: neigh get"
1092}
1093
1094kci_test_bridge_parent_id()
1095{
1096	local ret=0
1097	sysfsnet=/sys/bus/netdevsim/devices/netdevsim
1098	probed=false
1099
1100	if [ ! -w /sys/bus/netdevsim/new_device ] ; then
1101		run_cmd modprobe -q netdevsim
1102		if [ $ret -ne 0 ]; then
1103			end_test "SKIP: bridge_parent_id can't load netdevsim"
1104			return $ksft_skip
1105		fi
1106		probed=true
1107	fi
1108
1109	echo "10 1" > /sys/bus/netdevsim/new_device
1110	while [ ! -d ${sysfsnet}10 ] ; do :; done
1111	echo "20 1" > /sys/bus/netdevsim/new_device
1112	while [ ! -d ${sysfsnet}20 ] ; do :; done
1113	udevadm settle
1114	dev10=`ls ${sysfsnet}10/net/`
1115	dev20=`ls ${sysfsnet}20/net/`
1116	run_cmd ip link add name test-bond0 type bond mode 802.3ad
1117	run_cmd ip link set dev $dev10 master test-bond0
1118	run_cmd ip link set dev $dev20 master test-bond0
1119	run_cmd ip link add name test-br0 type bridge
1120	run_cmd ip link set dev test-bond0 master test-br0
1121
1122	# clean up any leftovers
1123	ip link del dev test-br0
1124	ip link del dev test-bond0
1125	echo 20 > /sys/bus/netdevsim/del_device
1126	echo 10 > /sys/bus/netdevsim/del_device
1127	$probed && rmmod netdevsim
1128
1129	if [ $ret -ne 0 ]; then
1130		end_test "FAIL: bridge_parent_id"
1131		return 1
1132	fi
1133	end_test "PASS: bridge_parent_id"
1134}
1135
1136address_get_proto()
1137{
1138	local addr=$1; shift
1139
1140	ip -N -j address show dev "$devdummy" |
1141	    jq -e -r --arg addr "${addr%/*}" \
1142	       '.[].addr_info[] | select(.local == $addr) | .protocol'
1143}
1144
1145address_count()
1146{
1147	ip -N -j address show dev "$devdummy" "$@" |
1148	    jq -e -r '[.[].addr_info[] | .local | select(. != null)] | length'
1149}
1150
1151do_test_address_proto()
1152{
1153	local what=$1; shift
1154	local addr=$1; shift
1155	local addr2=${addr%/*}2/${addr#*/}
1156	local addr3=${addr%/*}3/${addr#*/}
1157	local proto
1158	local count
1159	local ret=0
1160	local err
1161
1162	ip address add dev "$devdummy" "$addr3"
1163	check_err $?
1164	proto=$(address_get_proto "$addr3")
1165	[[ "$proto" == null ]]
1166	check_err $?
1167
1168	ip address add dev "$devdummy" "$addr2" proto 0x99
1169	check_err $?
1170	proto=$(address_get_proto "$addr2")
1171	[[ "$proto" == 0x99 ]]
1172	check_err $?
1173
1174	ip address add dev "$devdummy" "$addr" proto 0xab
1175	check_err $?
1176	proto=$(address_get_proto "$addr")
1177	[[ "$proto" == 0xab ]]
1178	check_err $?
1179
1180	ip address replace dev "$devdummy" "$addr" proto 0x11
1181	proto=$(address_get_proto "$addr")
1182	check_err $?
1183	[[ "$proto" == 0x11 ]]
1184	check_err $?
1185
1186	count=$(address_count)
1187	check_err $?
1188	(( count >= 3 )) # $addr, $addr2 and $addr3 plus any kernel addresses
1189	check_err $?
1190
1191	count=$(address_count proto 0)
1192	check_err $?
1193	(( count == 1 )) # just $addr3
1194	check_err $?
1195
1196	count=$(address_count proto 0x11)
1197	check_err $?
1198	(( count == 2 )) # $addr and $addr3
1199	check_err $?
1200
1201	count=$(address_count proto 0xab)
1202	check_err $?
1203	(( count == 1 )) # just $addr3
1204	check_err $?
1205
1206	ip address del dev "$devdummy" "$addr"
1207	ip address del dev "$devdummy" "$addr2"
1208	ip address del dev "$devdummy" "$addr3"
1209
1210	if [ $ret -ne 0 ]; then
1211		end_test "FAIL: address proto $what"
1212		return 1
1213	fi
1214	end_test "PASS: address proto $what"
1215}
1216
1217kci_test_address_proto()
1218{
1219	local ret=0
1220
1221	do_test_address_proto IPv4 192.0.2.1/28
1222	check_err $?
1223
1224	do_test_address_proto IPv6 2001:db8:1::1/64
1225	check_err $?
1226
1227	return $ret
1228}
1229
1230kci_test_enslave_bonding()
1231{
1232	local bond="bond123"
1233	local ret=0
1234
1235	setup_ns testns
1236	if [ $? -ne 0 ]; then
1237		end_test "SKIP bonding tests: cannot add net namespace $testns"
1238		return $ksft_skip
1239	fi
1240
1241	run_cmd ip -netns $testns link add dev $bond type bond mode balance-rr
1242	run_cmd ip -netns $testns link add dev $devdummy type dummy
1243	run_cmd ip -netns $testns link set dev $devdummy up
1244	run_cmd ip -netns $testns link set dev $devdummy master $bond down
1245	if [ $ret -ne 0 ]; then
1246		end_test "FAIL: initially up interface added to a bond and set down"
1247		ip netns del "$testns"
1248		return 1
1249	fi
1250
1251	end_test "PASS: enslave interface in a bond"
1252	ip netns del "$testns"
1253}
1254
1255# Called to validate the addresses on $IFNAME:
1256#
1257# 1. Every `temporary` address must have a matching `mngtmpaddr`
1258# 2. Every `mngtmpaddr` address must have some un`deprecated` `temporary`
1259#
1260# If the mngtmpaddr or tempaddr checking failed, return 0 and stop slowwait
1261validate_mngtmpaddr()
1262{
1263	local dev=$1
1264	local prefix=""
1265	local addr_list=$(ip -j -n $testns addr show dev ${dev})
1266	local temp_addrs=$(echo ${addr_list} | \
1267		jq -r '.[].addr_info[] | select(.temporary == true) | .local')
1268	local mng_prefixes=$(echo ${addr_list} | \
1269		jq -r '.[].addr_info[] | select(.mngtmpaddr == true) | .local' | \
1270		cut -d: -f1-4 | tr '\n' ' ')
1271	local undep_prefixes=$(echo ${addr_list} | \
1272		jq -r '.[].addr_info[] | select(.temporary == true and .deprecated != true) | .local' | \
1273		cut -d: -f1-4 | tr '\n' ' ')
1274
1275	# 1. All temporary addresses (temp and dep) must have a matching mngtmpaddr
1276	for address in ${temp_addrs}; do
1277		prefix=$(echo ${address} | cut -d: -f1-4)
1278		if [[ ! " ${mng_prefixes} " =~ " $prefix " ]]; then
1279			check_err 1 "FAIL: Temporary $address with no matching mngtmpaddr!";
1280			return 0
1281		fi
1282	done
1283
1284	# 2. All mngtmpaddr addresses must have a temporary address (not dep)
1285	for prefix in ${mng_prefixes}; do
1286		if [[ ! " ${undep_prefixes} " =~ " $prefix " ]]; then
1287			check_err 1 "FAIL: No undeprecated temporary in $prefix!";
1288			return 0
1289		fi
1290	done
1291
1292	return 1
1293}
1294
1295kci_test_mngtmpaddr()
1296{
1297	local ret=0
1298
1299	setup_ns testns
1300	if [ $? -ne 0 ]; then
1301		end_test "SKIP mngtmpaddr tests: cannot add net namespace $testns"
1302		return $ksft_skip
1303	fi
1304
1305	# 1. Create a dummy Ethernet interface
1306	run_cmd ip -n $testns link add ${devdummy} type dummy
1307	run_cmd ip -n $testns link set ${devdummy} up
1308	run_cmd ip netns exec $testns sysctl -w net.ipv6.conf.${devdummy}.use_tempaddr=1
1309	run_cmd ip netns exec $testns sysctl -w net.ipv6.conf.${devdummy}.temp_prefered_lft=10
1310	run_cmd ip netns exec $testns sysctl -w net.ipv6.conf.${devdummy}.temp_valid_lft=25
1311	run_cmd ip netns exec $testns sysctl -w net.ipv6.conf.${devdummy}.max_desync_factor=1
1312
1313	# 2. Create several mngtmpaddr addresses on that interface.
1314	# with temp_*_lft configured to be pretty short (10 and 35 seconds
1315	# for prefer/valid respectively)
1316	for i in $(seq 1 9); do
1317		run_cmd ip -n $testns addr add 2001:db8:7e57:${i}::1/64 mngtmpaddr dev ${devdummy}
1318	done
1319
1320	# 3. Confirm that a preferred temporary address exists for each mngtmpaddr
1321	# address at all times, polling once per second for 30 seconds.
1322	slowwait 30 validate_mngtmpaddr ${devdummy}
1323
1324	# 4. Delete each mngtmpaddr address, one at a time (alternating between
1325	# deleting and merely un-mngtmpaddr-ing), and confirm that the other
1326	# mngtmpaddr addresses still have preferred temporaries.
1327	for i in $(seq 1 9); do
1328		(( $i % 4 == 0 )) && mng_flag="mngtmpaddr" || mng_flag=""
1329		if (( $i % 2 == 0 )); then
1330			run_cmd ip -n $testns addr del 2001:db8:7e57:${i}::1/64 $mng_flag dev ${devdummy}
1331		else
1332			run_cmd ip -n $testns addr change 2001:db8:7e57:${i}::1/64 dev ${devdummy}
1333		fi
1334		# the temp addr should be deleted
1335		validate_mngtmpaddr ${devdummy}
1336	done
1337
1338	if [ $ret -ne 0 ]; then
1339		end_test "FAIL: mngtmpaddr add/remove incorrect"
1340	else
1341		end_test "PASS: mngtmpaddr add/remove correctly"
1342	fi
1343
1344	ip netns del "$testns"
1345	return $ret
1346}
1347
1348kci_test_operstate()
1349{
1350	local ret=0
1351
1352	# Check that it is possible to set operational state during device
1353	# creation and that it is preserved when the administrative state of
1354	# the device is toggled.
1355	run_cmd ip link add name vx0 up state up type vxlan id 10010 dstport 4789
1356	run_cmd_grep "state UP" ip link show dev vx0
1357	run_cmd ip link set dev vx0 down
1358	run_cmd_grep "state DOWN" ip link show dev vx0
1359	run_cmd ip link set dev vx0 up
1360	run_cmd_grep "state UP" ip link show dev vx0
1361
1362	run_cmd ip link del dev vx0
1363
1364	# Check that it is possible to set the operational state of the device
1365	# after creation.
1366	run_cmd ip link add name vx0 up type vxlan id 10010 dstport 4789
1367	run_cmd_grep "state UNKNOWN" ip link show dev vx0
1368	run_cmd ip link set dev vx0 state up
1369	run_cmd_grep "state UP" ip link show dev vx0
1370
1371	run_cmd ip link del dev vx0
1372
1373	if [ "$ret" -ne 0 ]; then
1374		end_test "FAIL: operstate"
1375		return 1
1376	fi
1377
1378	end_test "PASS: operstate"
1379}
1380
1381kci_test_rtnl()
1382{
1383	local current_test
1384	local ret=0
1385
1386	kci_add_dummy
1387	if [ $ret -ne 0 ];then
1388		end_test "FAIL: cannot add dummy interface"
1389		return 1
1390	fi
1391
1392	for current_test in ${TESTS:-$ALL_TESTS}; do
1393		$current_test
1394		check_err $?
1395	done
1396
1397	kci_del_dummy
1398	return $ret
1399}
1400
1401usage()
1402{
1403	cat <<EOF
1404usage: ${0##*/} OPTS
1405
1406        -t <test>   Test(s) to run (default: all)
1407                    (options: $(echo $ALL_TESTS))
1408        -v          Verbose mode (show commands and output)
1409        -P          Pause after every test
1410        -p          Pause after every failing test before cleanup (for debugging)
1411EOF
1412}
1413
1414#check for needed privileges
1415if [ "$(id -u)" -ne 0 ];then
1416	end_test "SKIP: Need root privileges"
1417	exit $ksft_skip
1418fi
1419
1420for x in ip tc;do
1421	$x -Version 2>/dev/null >/dev/null
1422	if [ $? -ne 0 ];then
1423		end_test "SKIP: Could not run test without the $x tool"
1424		exit $ksft_skip
1425	fi
1426done
1427
1428while getopts t:hvpP o; do
1429	case $o in
1430		t) TESTS=$OPTARG;;
1431		v) VERBOSE=1;;
1432		p) PAUSE_ON_FAIL=yes;;
1433		P) PAUSE=yes;;
1434		h) usage; exit 0;;
1435		*) usage; exit 1;;
1436	esac
1437done
1438
1439[ $PAUSE = "yes" ] && PAUSE_ON_FAIL="no"
1440
1441kci_test_rtnl
1442
1443exit $?
1444