Linux kernel mirror (for testing)
git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
kernel
os
linux
1#!/bin/bash
2#
3# This test is for checking rtnetlink callpaths, and get as much coverage as possible.
4#
5# set -e
6
7ALL_TESTS="
8 kci_test_polrouting
9 kci_test_route_get
10 kci_test_addrlft
11 kci_test_addrlft_route_cleanup
12 kci_test_promote_secondaries
13 kci_test_tc
14 kci_test_gre
15 kci_test_gretap
16 kci_test_ip6gretap
17 kci_test_erspan
18 kci_test_ip6erspan
19 kci_test_bridge
20 kci_test_addrlabel
21 kci_test_ifalias
22 kci_test_vrf
23 kci_test_encap
24 kci_test_macsec
25 kci_test_macsec_vlan
26 kci_test_team_bridge_macvlan
27 kci_test_ipsec
28 kci_test_ipsec_offload
29 kci_test_fdb_get
30 kci_test_fdb_del
31 kci_test_neigh_get
32 kci_test_neigh_update
33 kci_test_bridge_parent_id
34 kci_test_address_proto
35 kci_test_enslave_bonding
36 kci_test_mngtmpaddr
37 kci_test_operstate
38"
39
40devdummy="test-dummy0"
41VERBOSE=0
42PAUSE=no
43PAUSE_ON_FAIL=no
44
45source lib.sh
46
47# set global exit status, but never reset nonzero one.
48check_err()
49{
50 if [ $ret -eq 0 ]; then
51 ret=$1
52 fi
53 [ -n "$2" ] && echo "$2"
54}
55
56# same but inverted -- used when command must fail for test to pass
57check_fail()
58{
59 if [ $1 -eq 0 ]; then
60 ret=1
61 fi
62}
63
64run_cmd_common()
65{
66 local cmd="$*"
67 local out
68 if [ "$VERBOSE" = "1" ]; then
69 echo "COMMAND: ${cmd}"
70 fi
71 out=$($cmd 2>&1)
72 rc=$?
73 if [ "$VERBOSE" = "1" -a -n "$out" ]; then
74 echo " $out"
75 fi
76 return $rc
77}
78
79run_cmd() {
80 run_cmd_common "$@"
81 rc=$?
82 check_err $rc
83 return $rc
84}
85run_cmd_fail()
86{
87 run_cmd_common "$@"
88 rc=$?
89 check_fail $rc
90 return $rc
91}
92
93run_cmd_grep_common()
94{
95 local find="$1"; shift
96 local cmd="$*"
97 local out
98 if [ "$VERBOSE" = "1" ]; then
99 echo "COMMAND: ${cmd} 2>&1 | grep -q '${find}'"
100 fi
101 out=$($cmd 2>&1 | grep -q "${find}" 2>&1)
102 return $?
103}
104
105run_cmd_grep() {
106 run_cmd_grep_common "$@"
107 rc=$?
108 check_err $rc
109 return $rc
110}
111
112run_cmd_grep_fail()
113{
114 run_cmd_grep_common "$@"
115 rc=$?
116 check_fail $rc
117 return $rc
118}
119
120end_test()
121{
122 echo "$*"
123 [ "${VERBOSE}" = "1" ] && echo
124
125 if [[ $ret -ne 0 ]] && [[ "${PAUSE_ON_FAIL}" = "yes" ]]; then
126 echo "Hit enter to continue"
127 read a
128 fi;
129
130 if [ "${PAUSE}" = "yes" ]; then
131 echo "Hit enter to continue"
132 read a
133 fi
134
135}
136
137
138kci_add_dummy()
139{
140 run_cmd ip link add name "$devdummy" type dummy
141 run_cmd ip link set "$devdummy" up
142}
143
144kci_del_dummy()
145{
146 run_cmd ip link del dev "$devdummy"
147}
148
149kci_test_netconf()
150{
151 dev="$1"
152 r=$ret
153 run_cmd ip netconf show dev "$dev"
154 for f in 4 6; do
155 run_cmd ip -$f netconf show dev "$dev"
156 done
157
158 if [ $ret -ne 0 ] ;then
159 end_test "FAIL: ip netconf show $dev"
160 test $r -eq 0 && ret=0
161 return 1
162 fi
163}
164
165# add a bridge with vlans on top
166kci_test_bridge()
167{
168 devbr="test-br0"
169 vlandev="testbr-vlan1"
170
171 local ret=0
172 run_cmd ip link add name "$devbr" type bridge
173 run_cmd ip link set dev "$devdummy" master "$devbr"
174 run_cmd ip link set "$devbr" up
175 run_cmd ip link add link "$devbr" name "$vlandev" type vlan id 1
176 run_cmd ip addr add dev "$vlandev" 10.200.7.23/30
177 run_cmd ip -6 addr add dev "$vlandev" dead:42::1234/64
178 run_cmd ip -d link
179 run_cmd ip r s t all
180
181 for name in "$devbr" "$vlandev" "$devdummy" ; do
182 kci_test_netconf "$name"
183 done
184 run_cmd ip -6 addr del dev "$vlandev" dead:42::1234/64
185 run_cmd ip link del dev "$vlandev"
186 run_cmd ip link del dev "$devbr"
187
188 if [ $ret -ne 0 ];then
189 end_test "FAIL: bridge setup"
190 return 1
191 fi
192 end_test "PASS: bridge setup"
193
194}
195
196kci_test_gre()
197{
198 gredev=neta
199 rem=10.42.42.1
200 loc=10.0.0.1
201
202 local ret=0
203 run_cmd ip tunnel add $gredev mode gre remote $rem local $loc ttl 1
204 run_cmd ip link set $gredev up
205 run_cmd ip addr add 10.23.7.10 dev $gredev
206 run_cmd ip route add 10.23.8.0/30 dev $gredev
207 run_cmd ip addr add dev "$devdummy" 10.23.7.11/24
208 run_cmd ip link
209 run_cmd ip addr
210
211 kci_test_netconf "$gredev"
212 run_cmd ip addr del dev "$devdummy" 10.23.7.11/24
213 run_cmd ip link del $gredev
214
215 if [ $ret -ne 0 ];then
216 end_test "FAIL: gre tunnel endpoint"
217 return 1
218 fi
219 end_test "PASS: gre tunnel endpoint"
220}
221
222# tc uses rtnetlink too, for full tc testing
223# please see tools/testing/selftests/tc-testing.
224kci_test_tc()
225{
226 dev=lo
227 local ret=0
228
229 run_cmd tc qdisc add dev "$dev" root handle 1: htb
230 run_cmd tc class add dev "$dev" parent 1: classid 1:10 htb rate 1mbit
231 run_cmd tc filter add dev "$dev" parent 1:0 prio 5 handle ffe: protocol ip u32 divisor 256
232 run_cmd tc filter add dev "$dev" parent 1:0 prio 5 handle ffd: protocol ip u32 divisor 256
233 run_cmd tc filter add dev "$dev" parent 1:0 prio 5 handle ffc: protocol ip u32 divisor 256
234 run_cmd tc filter add dev "$dev" protocol ip parent 1: prio 5 handle ffe:2:3 u32 ht ffe:2: match ip src 10.0.0.3 flowid 1:10
235 run_cmd tc filter add dev "$dev" protocol ip parent 1: prio 5 handle ffe:2:2 u32 ht ffe:2: match ip src 10.0.0.2 flowid 1:10
236 run_cmd tc filter show dev "$dev" parent 1:0
237 run_cmd tc filter del dev "$dev" protocol ip parent 1: prio 5 handle ffe:2:3 u32
238 run_cmd tc filter show dev "$dev" parent 1:0
239 run_cmd tc qdisc del dev "$dev" root handle 1: htb
240
241 if [ $ret -ne 0 ];then
242 end_test "FAIL: tc htb hierarchy"
243 return 1
244 fi
245 end_test "PASS: tc htb hierarchy"
246
247}
248
249kci_test_polrouting()
250{
251 local ret=0
252 run_cmd ip rule add fwmark 1 lookup 100
253 run_cmd ip route add local 0.0.0.0/0 dev lo table 100
254 run_cmd ip r s t all
255 run_cmd ip rule del fwmark 1 lookup 100
256 run_cmd ip route del local 0.0.0.0/0 dev lo table 100
257
258 if [ $ret -ne 0 ];then
259 end_test "FAIL: policy route test"
260 return 1
261 fi
262 end_test "PASS: policy routing"
263}
264
265kci_test_route_get()
266{
267 local hash_policy=$(sysctl -n net.ipv4.fib_multipath_hash_policy)
268
269 local ret=0
270 run_cmd ip route get 127.0.0.1
271 run_cmd ip route get 127.0.0.1 dev "$devdummy"
272 run_cmd ip route get ::1
273 run_cmd ip route get fe80::1 dev "$devdummy"
274 run_cmd ip route get 127.0.0.1 from 127.0.0.1 oif lo tos 0x10 mark 0x1
275 run_cmd ip route get ::1 from ::1 iif lo oif lo tos 0x10 mark 0x1
276 run_cmd ip addr add dev "$devdummy" 10.23.7.11/24
277 run_cmd ip route get 10.23.7.11 from 10.23.7.12 iif "$devdummy"
278 run_cmd ip route add 10.23.8.0/24 \
279 nexthop via 10.23.7.13 dev "$devdummy" \
280 nexthop via 10.23.7.14 dev "$devdummy"
281
282 sysctl -wq net.ipv4.fib_multipath_hash_policy=0
283 run_cmd ip route get 10.23.8.11
284 sysctl -wq net.ipv4.fib_multipath_hash_policy=1
285 run_cmd ip route get 10.23.8.11
286 sysctl -wq net.ipv4.fib_multipath_hash_policy="$hash_policy"
287 run_cmd ip route del 10.23.8.0/24
288 run_cmd ip addr del dev "$devdummy" 10.23.7.11/24
289
290
291 if [ $ret -ne 0 ];then
292 end_test "FAIL: route get"
293 return 1
294 fi
295
296 end_test "PASS: route get"
297}
298
299check_addr_not_exist()
300{
301 dev=$1
302 addr=$2
303 if ip addr show dev $dev | grep -q $addr; then
304 return 1
305 else
306 return 0
307 fi
308}
309
310kci_test_addrlft()
311{
312 for i in $(seq 10 100) ;do
313 lft=$(((RANDOM%3) + 1))
314 run_cmd ip addr add 10.23.11.$i/32 dev "$devdummy" preferred_lft $lft valid_lft $((lft+1))
315 done
316
317 slowwait 5 check_addr_not_exist "$devdummy" "10.23.11."
318 if [ $? -eq 1 ]; then
319 # troubleshoot the reason for our failure
320 run_cmd ip addr show dev "$devdummy"
321 check_err 1
322 end_test "FAIL: preferred_lft addresses remaining"
323 return
324 fi
325
326 end_test "PASS: preferred_lft addresses have expired"
327}
328
329kci_test_addrlft_route_cleanup()
330{
331 local ret=0
332 local test_addr="2001:db8:99::1/64"
333 local test_prefix="2001:db8:99::/64"
334
335 run_cmd ip -6 addr add $test_addr dev "$devdummy" valid_lft 300 preferred_lft 300
336 run_cmd_grep "$test_prefix proto kernel" ip -6 route show dev "$devdummy"
337 run_cmd ip -6 addr del $test_addr dev "$devdummy"
338 run_cmd_grep_fail "$test_prefix" ip -6 route show dev "$devdummy"
339
340 if [ $ret -ne 0 ]; then
341 end_test "FAIL: route not cleaned up when address with valid_lft deleted"
342 return 1
343 fi
344
345 end_test "PASS: route cleaned up when address with valid_lft deleted"
346}
347
348kci_test_promote_secondaries()
349{
350 run_cmd ifconfig "$devdummy"
351 if [ $ret -ne 0 ]; then
352 end_test "SKIP: ifconfig not installed"
353 return $ksft_skip
354 fi
355 promote=$(sysctl -n net.ipv4.conf.$devdummy.promote_secondaries)
356
357 sysctl -q net.ipv4.conf.$devdummy.promote_secondaries=1
358
359 for i in $(seq 2 254);do
360 IP="10.23.11.$i"
361 ip -f inet addr add $IP/16 brd + dev "$devdummy"
362 ifconfig "$devdummy" $IP netmask 255.255.0.0
363 done
364
365 ip addr flush dev "$devdummy"
366
367 [ $promote -eq 0 ] && sysctl -q net.ipv4.conf.$devdummy.promote_secondaries=0
368
369 end_test "PASS: promote_secondaries complete"
370}
371
372kci_test_addrlabel()
373{
374 local ret=0
375 run_cmd ip addrlabel add prefix dead::/64 dev lo label 1
376 run_cmd_grep "prefix dead::/64 dev lo label 1" ip addrlabel list
377 run_cmd ip addrlabel del prefix dead::/64 dev lo label 1
378 run_cmd ip addrlabel add prefix dead::/64 label 1
379 run_cmd ip addrlabel del prefix dead::/64 label 1
380
381 # concurrent add/delete
382 for i in $(seq 1 1000); do
383 ip addrlabel add prefix 1c3::/64 label 12345 2>/dev/null
384 done &
385
386 for i in $(seq 1 1000); do
387 ip addrlabel del prefix 1c3::/64 label 12345 2>/dev/null
388 done
389
390 wait
391
392 ip addrlabel del prefix 1c3::/64 label 12345 2>/dev/null
393
394 if [ $ret -ne 0 ];then
395 end_test "FAIL: ipv6 addrlabel"
396 return 1
397 fi
398
399 end_test "PASS: ipv6 addrlabel"
400}
401
402kci_test_ifalias()
403{
404 local ret=0
405 namewant=$(uuidgen)
406 syspathname="/sys/class/net/$devdummy/ifalias"
407 run_cmd ip link set dev "$devdummy" alias "$namewant"
408
409 if [ $ret -ne 0 ]; then
410 end_test "FAIL: cannot set interface alias of $devdummy to $namewant"
411 return 1
412 fi
413 run_cmd_grep "alias $namewant" ip link show "$devdummy"
414
415 if [ -r "$syspathname" ] ; then
416 read namehave < "$syspathname"
417 if [ "$namewant" != "$namehave" ]; then
418 end_test "FAIL: did set ifalias $namewant but got $namehave"
419 return 1
420 fi
421
422 namewant=$(uuidgen)
423 echo "$namewant" > "$syspathname"
424 run_cmd_grep "alias $namewant" ip link show "$devdummy"
425
426 # sysfs interface allows to delete alias again
427 echo "" > "$syspathname"
428 run_cmd_grep_fail "alias $namewant" ip link show "$devdummy"
429
430 for i in $(seq 1 100); do
431 uuidgen > "$syspathname" &
432 done
433
434 wait
435
436 # re-add the alias -- kernel should free mem when dummy dev is removed
437 run_cmd ip link set dev "$devdummy" alias "$namewant"
438
439 fi
440
441 if [ $ret -ne 0 ]; then
442 end_test "FAIL: set interface alias $devdummy to $namewant"
443 return 1
444 fi
445
446 end_test "PASS: set ifalias $namewant for $devdummy"
447}
448
449kci_test_vrf()
450{
451 vrfname="test-vrf"
452 local ret=0
453 run_cmd ip link show type vrf
454 if [ $? -ne 0 ]; then
455 end_test "SKIP: vrf: iproute2 too old"
456 return $ksft_skip
457 fi
458 run_cmd ip link add "$vrfname" type vrf table 10
459 if [ $ret -ne 0 ];then
460 end_test "FAIL: can't add vrf interface, skipping test"
461 return 0
462 fi
463 run_cmd_grep "$vrfname" ip -br link show type vrf
464 if [ $ret -ne 0 ];then
465 end_test "FAIL: created vrf device not found"
466 return 1
467 fi
468
469 run_cmd ip link set dev "$vrfname" up
470 run_cmd ip link set dev "$devdummy" master "$vrfname"
471 run_cmd ip link del dev "$vrfname"
472
473 if [ $ret -ne 0 ];then
474 end_test "FAIL: vrf"
475 return 1
476 fi
477
478 end_test "PASS: vrf"
479}
480
481kci_test_encap_vxlan()
482{
483 local ret=0
484 vxlan="test-vxlan0"
485 vlan="test-vlan0"
486 run_cmd ip -netns "$testns" link add "$vxlan" type vxlan id 42 group 239.1.1.1 \
487 dev "$devdummy" dstport 4789
488 if [ $? -ne 0 ]; then
489 end_test "FAIL: can't add vxlan interface, skipping test"
490 return 0
491 fi
492
493 run_cmd ip -netns "$testns" addr add 10.2.11.49/24 dev "$vxlan"
494 run_cmd ip -netns "$testns" link set up dev "$vxlan"
495 run_cmd ip -netns "$testns" link add link "$vxlan" name "$vlan" type vlan id 1
496
497 # changelink testcases
498 run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan vni 43
499 run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan group ffe5::5 dev "$devdummy"
500 run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan ttl inherit
501
502 run_cmd ip -netns "$testns" link set dev "$vxlan" type vxlan ttl 64
503 run_cmd ip -netns "$testns" link set dev "$vxlan" type vxlan nolearning
504
505 run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan proxy
506 run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan norsc
507 run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan l2miss
508 run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan l3miss
509 run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan external
510 run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan udpcsum
511 run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan udp6zerocsumtx
512 run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan udp6zerocsumrx
513 run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan remcsumtx
514 run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan remcsumrx
515 run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan gbp
516 run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan gpe
517 run_cmd ip -netns "$testns" link del "$vxlan"
518
519 if [ $ret -ne 0 ]; then
520 end_test "FAIL: vxlan"
521 return 1
522 fi
523 end_test "PASS: vxlan"
524}
525
526kci_test_encap_fou()
527{
528 local ret=0
529 name="test-fou"
530 run_cmd_grep 'Usage: ip fou' ip fou help
531 if [ $? -ne 0 ];then
532 end_test "SKIP: fou: iproute2 too old"
533 return $ksft_skip
534 fi
535
536 if ! /sbin/modprobe -q -n fou; then
537 end_test "SKIP: module fou is not found"
538 return $ksft_skip
539 fi
540 /sbin/modprobe -q fou
541
542 run_cmd ip -netns "$testns" fou add port 7777 ipproto 47
543 if [ $? -ne 0 ];then
544 end_test "FAIL: can't add fou port 7777, skipping test"
545 return 1
546 fi
547 run_cmd ip -netns "$testns" fou add port 8888 ipproto 4
548 run_cmd_fail ip -netns "$testns" fou del port 9999
549 run_cmd ip -netns "$testns" fou del port 7777
550 if [ $ret -ne 0 ]; then
551 end_test "FAIL: fou"
552 return 1
553 fi
554
555 end_test "PASS: fou"
556}
557
558# test various encap methods, use netns to avoid unwanted interference
559kci_test_encap()
560{
561 local ret=0
562 setup_ns testns
563 if [ $? -ne 0 ]; then
564 end_test "SKIP encap tests: cannot add net namespace $testns"
565 return $ksft_skip
566 fi
567 run_cmd ip -netns "$testns" link set lo up
568 run_cmd ip -netns "$testns" link add name "$devdummy" type dummy
569 run_cmd ip -netns "$testns" link set "$devdummy" up
570 run_cmd kci_test_encap_vxlan
571 run_cmd kci_test_encap_fou
572
573 ip netns del "$testns"
574 return $ret
575}
576
577kci_test_macsec()
578{
579 msname="test_macsec0"
580 local ret=0
581 run_cmd_grep "^Usage: ip macsec" ip macsec help
582 if [ $? -ne 0 ]; then
583 end_test "SKIP: macsec: iproute2 too old"
584 return $ksft_skip
585 fi
586 run_cmd ip link add link "$devdummy" "$msname" type macsec port 42 encrypt on
587 if [ $ret -ne 0 ];then
588 end_test "FAIL: can't add macsec interface, skipping test"
589 return 1
590 fi
591 run_cmd ip macsec add "$msname" tx sa 0 pn 1024 on key 01 12345678901234567890123456789012
592 run_cmd ip macsec add "$msname" rx port 1234 address "1c:ed:de:ad:be:ef"
593 run_cmd ip macsec add "$msname" rx port 1234 address "1c:ed:de:ad:be:ef" sa 0 pn 1 on key 00 0123456789abcdef0123456789abcdef
594 run_cmd ip macsec show
595 run_cmd ip link del dev "$msname"
596
597 if [ $ret -ne 0 ];then
598 end_test "FAIL: macsec"
599 return 1
600 fi
601
602 end_test "PASS: macsec"
603}
604
605# Test __dev_set_rx_mode call from dev_uc_add under addr_list_lock spinlock.
606# Make sure __dev_set_promiscuity is not grabbing (sleeping) netdev instance
607# lock.
608# https://lore.kernel.org/netdev/2aff4342b0f5b1539c02ffd8df4c7e58dd9746e7.camel@nvidia.com/
609kci_test_macsec_vlan()
610{
611 msname="test_macsec1"
612 vlanname="test_vlan1"
613 local ret=0
614 run_cmd_grep "^Usage: ip macsec" ip macsec help
615 if [ $? -ne 0 ]; then
616 end_test "SKIP: macsec: iproute2 too old"
617 return $ksft_skip
618 fi
619 run_cmd ip link add link "$devdummy" "$msname" type macsec port 42 encrypt on
620 if [ $ret -ne 0 ];then
621 end_test "FAIL: can't add macsec interface, skipping test"
622 return 1
623 fi
624
625 run_cmd ip link set dev "$msname" up
626 ip link add link "$msname" name "$vlanname" type vlan id 1
627 ip link set dev "$vlanname" address 00:11:22:33:44:88
628 ip link set dev "$vlanname" up
629 run_cmd ip link del dev "$vlanname"
630 run_cmd ip link del dev "$msname"
631
632 if [ $ret -ne 0 ];then
633 end_test "FAIL: macsec_vlan"
634 return 1
635 fi
636
637 end_test "PASS: macsec_vlan"
638}
639
640# Test ndo_change_rx_flags call from dev_uc_add under addr_list_lock spinlock.
641# When we are flipping the promisc, make sure it runs on the work queue.
642#
643# https://lore.kernel.org/netdev/20260214033859.43857-1-jiayuan.chen@linux.dev/
644# With (more conventional) macvlan instead of macsec.
645# macvlan -> bridge -> team -> dummy
646kci_test_team_bridge_macvlan()
647{
648 local vlan="test_macv1"
649 local bridge="test_br1"
650 local team="test_team1"
651 local dummy="test_dummy1"
652 local ret=0
653
654 run_cmd ip link add $team type team
655 if [ $ret -ne 0 ]; then
656 end_test "SKIP: team_bridge_macvlan: can't add team interface"
657 return $ksft_skip
658 fi
659
660 run_cmd ip link add $dummy type dummy
661 run_cmd ip link set $dummy master $team
662 run_cmd ip link set $team up
663 run_cmd ip link add $bridge type bridge vlan_filtering 1
664 run_cmd ip link set $bridge up
665 run_cmd ip link set $team master $bridge
666 run_cmd ip link add link $bridge name $vlan \
667 address 00:aa:bb:cc:dd:ee type macvlan mode bridge
668 run_cmd ip link set $vlan up
669
670 run_cmd ip link del $vlan
671 run_cmd ip link del $bridge
672 run_cmd ip link del $team
673 run_cmd ip link del $dummy
674
675 if [ $ret -ne 0 ]; then
676 end_test "FAIL: team_bridge_macvlan"
677 return 1
678 fi
679
680 end_test "PASS: team_bridge_macvlan"
681}
682
683#-------------------------------------------------------------------
684# Example commands
685# ip x s add proto esp src 14.0.0.52 dst 14.0.0.70 \
686# spi 0x07 mode transport reqid 0x07 replay-window 32 \
687# aead 'rfc4106(gcm(aes))' 1234567890123456dcba 128 \
688# sel src 14.0.0.52/24 dst 14.0.0.70/24
689# ip x p add dir out src 14.0.0.52/24 dst 14.0.0.70/24 \
690# tmpl proto esp src 14.0.0.52 dst 14.0.0.70 \
691# spi 0x07 mode transport reqid 0x07
692#
693# Subcommands not tested
694# ip x s update
695# ip x s allocspi
696# ip x s deleteall
697# ip x p update
698# ip x p deleteall
699# ip x p set
700#-------------------------------------------------------------------
701kci_test_ipsec()
702{
703 local ret=0
704 algo="aead rfc4106(gcm(aes)) 0x3132333435363738393031323334353664636261 128"
705 srcip=192.168.123.1
706 dstip=192.168.123.2
707 spi=7
708
709 ip addr add $srcip dev $devdummy
710
711 # flush to be sure there's nothing configured
712 run_cmd ip x s flush ; ip x p flush
713
714 # start the monitor in the background
715 tmpfile=`mktemp /var/run/ipsectestXXX`
716 mpid=`(ip x m > $tmpfile & echo $!) 2>/dev/null`
717 sleep 0.2
718
719 ipsecid="proto esp src $srcip dst $dstip spi 0x07"
720 run_cmd ip x s add $ipsecid \
721 mode transport reqid 0x07 replay-window 32 \
722 $algo sel src $srcip/24 dst $dstip/24
723
724
725 lines=`ip x s list | grep $srcip | grep $dstip | wc -l`
726 run_cmd test $lines -eq 2
727 run_cmd_grep "SAD count 1" ip x s count
728
729 lines=`ip x s get $ipsecid | grep $srcip | grep $dstip | wc -l`
730 run_cmd test $lines -eq 2
731 run_cmd ip x s delete $ipsecid
732
733 lines=`ip x s list | wc -l`
734 run_cmd test $lines -eq 0
735
736 ipsecsel="dir out src $srcip/24 dst $dstip/24"
737 run_cmd ip x p add $ipsecsel \
738 tmpl proto esp src $srcip dst $dstip \
739 spi 0x07 mode transport reqid 0x07
740
741
742 lines=`ip x p list | grep $srcip | grep $dstip | wc -l`
743 run_cmd test $lines -eq 2
744
745 run_cmd_grep "SPD IN 0 OUT 1 FWD 0" ip x p count
746
747 lines=`ip x p get $ipsecsel | grep $srcip | grep $dstip | wc -l`
748 run_cmd test $lines -eq 2
749
750 run_cmd ip x p delete $ipsecsel
751
752 lines=`ip x p list | wc -l`
753 run_cmd test $lines -eq 0
754
755 # check the monitor results
756 kill $mpid
757 lines=`wc -l $tmpfile | cut "-d " -f1`
758 run_cmd test $lines -eq 20
759 rm -rf $tmpfile
760
761 # clean up any leftovers
762 run_cmd ip x s flush
763 run_cmd ip x p flush
764 ip addr del $srcip/32 dev $devdummy
765
766 if [ $ret -ne 0 ]; then
767 end_test "FAIL: ipsec"
768 return 1
769 fi
770 end_test "PASS: ipsec"
771}
772
773#-------------------------------------------------------------------
774# Example commands
775# ip x s add proto esp src 14.0.0.52 dst 14.0.0.70 \
776# spi 0x07 mode transport reqid 0x07 replay-window 32 \
777# aead 'rfc4106(gcm(aes))' 1234567890123456dcba 128 \
778# sel src 14.0.0.52/24 dst 14.0.0.70/24
779# offload dev sim1 dir out
780# ip x p add dir out src 14.0.0.52/24 dst 14.0.0.70/24 \
781# tmpl proto esp src 14.0.0.52 dst 14.0.0.70 \
782# spi 0x07 mode transport reqid 0x07
783#
784#-------------------------------------------------------------------
785kci_test_ipsec_offload()
786{
787 local ret=0
788 algo="aead rfc4106(gcm(aes)) 0x3132333435363738393031323334353664636261 128"
789 srcip=192.168.123.3
790 dstip=192.168.123.4
791 sysfsd=/sys/kernel/debug/netdevsim/netdevsim0/ports/0/
792 sysfsf=$sysfsd/ipsec
793 sysfsnet=/sys/bus/netdevsim/devices/netdevsim0/net/
794 probed=false
795 esp4_offload_probed_default=false
796
797 if lsmod | grep -q esp4_offload; then
798 esp4_offload_probed_default=true
799 fi
800
801 if ! mount | grep -q debugfs; then
802 mount -t debugfs none /sys/kernel/debug/ &> /dev/null
803 fi
804
805 # setup netdevsim since dummydev doesn't have offload support
806 if [ ! -w /sys/bus/netdevsim/new_device ] ; then
807 run_cmd modprobe -q netdevsim
808 if [ $ret -ne 0 ]; then
809 end_test "SKIP: ipsec_offload can't load netdevsim"
810 return $ksft_skip
811 fi
812 probed=true
813 fi
814
815 echo "0" > /sys/bus/netdevsim/new_device
816 while [ ! -d $sysfsnet ] ; do :; done
817 udevadm settle
818 dev=`ls $sysfsnet`
819
820 ip addr add $srcip dev $dev
821 ip link set $dev up
822 if [ ! -d $sysfsd ] ; then
823 end_test "FAIL: ipsec_offload can't create device $dev"
824 return 1
825 fi
826 if [ ! -f $sysfsf ] ; then
827 end_test "FAIL: ipsec_offload netdevsim doesn't support IPsec offload"
828 return 1
829 fi
830
831 # flush to be sure there's nothing configured
832 ip x s flush ; ip x p flush
833
834 # create offloaded SAs, both in and out
835 run_cmd ip x p add dir out src $srcip/24 dst $dstip/24 \
836 tmpl proto esp src $srcip dst $dstip spi 9 \
837 mode transport reqid 42
838
839 run_cmd ip x p add dir in src $dstip/24 dst $srcip/24 \
840 tmpl proto esp src $dstip dst $srcip spi 9 \
841 mode transport reqid 42
842
843 run_cmd ip x s add proto esp src $srcip dst $dstip spi 9 \
844 mode transport reqid 42 $algo sel src $srcip/24 dst $dstip/24 \
845 offload dev $dev dir out
846
847 run_cmd ip x s add proto esp src $dstip dst $srcip spi 9 \
848 mode transport reqid 42 $algo sel src $dstip/24 dst $srcip/24 \
849 offload dev $dev dir in
850
851 if [ $ret -ne 0 ]; then
852 end_test "FAIL: ipsec_offload can't create SA"
853 return 1
854 fi
855
856 # does offload show up in ip output
857 lines=`ip x s list | grep -c "crypto offload parameters: dev $dev dir"`
858 if [ $lines -ne 2 ] ; then
859 check_err 1
860 end_test "FAIL: ipsec_offload SA offload missing from list output"
861 fi
862
863 # we didn't create a peer, make sure we can Tx
864 ip neigh add $dstip dev $dev lladdr 00:11:22:33:44:55
865 # use ping to exercise the Tx path
866 ping -I $dev -c 3 -W 1 -i 0 $dstip >/dev/null
867
868 # does driver have correct offload info
869 run_cmd diff $sysfsf - << EOF
870SA count=2 tx=3
871sa[0] tx ipaddr=$dstip
872sa[0] spi=0x00000009 proto=0x32 salt=0x61626364 crypt=1
873sa[0] key=0x34333231 38373635 32313039 36353433
874sa[1] rx ipaddr=$srcip
875sa[1] spi=0x00000009 proto=0x32 salt=0x61626364 crypt=1
876sa[1] key=0x34333231 38373635 32313039 36353433
877EOF
878 if [ $? -ne 0 ] ; then
879 end_test "FAIL: ipsec_offload incorrect driver data"
880 check_err 1
881 fi
882
883 # does offload get removed from driver
884 ip x s flush
885 ip x p flush
886 lines=`grep -c "SA count=0" $sysfsf`
887 if [ $lines -ne 1 ] ; then
888 check_err 1
889 end_test "FAIL: ipsec_offload SA not removed from driver"
890 fi
891
892 # clean up any leftovers
893 ! "$esp4_offload_probed_default" && lsmod | grep -q esp4_offload && rmmod esp4_offload
894 echo 0 > /sys/bus/netdevsim/del_device
895 $probed && rmmod netdevsim
896
897 if [ $ret -ne 0 ]; then
898 end_test "FAIL: ipsec_offload"
899 return 1
900 fi
901 end_test "PASS: ipsec_offload"
902}
903
904kci_test_gretap()
905{
906 DEV_NS=gretap00
907 local ret=0
908
909 setup_ns testns
910 if [ $? -ne 0 ]; then
911 end_test "SKIP gretap tests: cannot add net namespace $testns"
912 return $ksft_skip
913 fi
914
915 run_cmd_grep "^Usage:" ip link help gretap
916 if [ $? -ne 0 ];then
917 end_test "SKIP: gretap: iproute2 too old"
918 ip netns del "$testns"
919 return $ksft_skip
920 fi
921
922 # test native tunnel
923 run_cmd ip -netns "$testns" link add dev "$DEV_NS" type gretap seq \
924 key 102 local 172.16.1.100 remote 172.16.1.200
925
926
927 run_cmd ip -netns "$testns" addr add dev "$DEV_NS" 10.1.1.100/24
928 run_cmd ip -netns "$testns" link set dev $DEV_NS up
929 run_cmd ip -netns "$testns" link del "$DEV_NS"
930
931 # test external mode
932 run_cmd ip -netns "$testns" link add dev "$DEV_NS" type gretap external
933 run_cmd ip -netns "$testns" link del "$DEV_NS"
934
935 if [ $ret -ne 0 ]; then
936 end_test "FAIL: gretap"
937 ip netns del "$testns"
938 return 1
939 fi
940 end_test "PASS: gretap"
941
942 ip netns del "$testns"
943}
944
945kci_test_ip6gretap()
946{
947 DEV_NS=ip6gretap00
948 local ret=0
949
950 setup_ns testns
951 if [ $? -ne 0 ]; then
952 end_test "SKIP ip6gretap tests: cannot add net namespace $testns"
953 return $ksft_skip
954 fi
955
956 run_cmd_grep "^Usage:" ip link help ip6gretap
957 if [ $? -ne 0 ];then
958 end_test "SKIP: ip6gretap: iproute2 too old"
959 ip netns del "$testns"
960 return $ksft_skip
961 fi
962
963 # test native tunnel
964 run_cmd ip -netns "$testns" link add dev "$DEV_NS" type ip6gretap seq \
965 key 102 local fc00:100::1 remote fc00:100::2
966
967
968 run_cmd ip -netns "$testns" addr add dev "$DEV_NS" fc00:200::1/96
969 run_cmd ip -netns "$testns" link set dev $DEV_NS up
970 run_cmd ip -netns "$testns" link del "$DEV_NS"
971
972 # test external mode
973 run_cmd ip -netns "$testns" link add dev "$DEV_NS" type ip6gretap external
974 run_cmd ip -netns "$testns" link del "$DEV_NS"
975
976 if [ $ret -ne 0 ]; then
977 end_test "FAIL: ip6gretap"
978 ip netns del "$testns"
979 return 1
980 fi
981 end_test "PASS: ip6gretap"
982
983 ip netns del "$testns"
984}
985
986kci_test_erspan()
987{
988 DEV_NS=erspan00
989 local ret=0
990 run_cmd_grep "^Usage:" ip link help erspan
991 if [ $? -ne 0 ];then
992 end_test "SKIP: erspan: iproute2 too old"
993 return $ksft_skip
994 fi
995 setup_ns testns
996 if [ $? -ne 0 ]; then
997 end_test "SKIP erspan tests: cannot add net namespace $testns"
998 return $ksft_skip
999 fi
1000
1001 # test native tunnel erspan v1
1002 run_cmd ip -netns "$testns" link add dev "$DEV_NS" type erspan seq \
1003 key 102 local 172.16.1.100 remote 172.16.1.200 \
1004 erspan_ver 1 erspan 488
1005
1006
1007 run_cmd ip -netns "$testns" addr add dev "$DEV_NS" 10.1.1.100/24
1008 run_cmd ip -netns "$testns" link set dev $DEV_NS up
1009 run_cmd ip -netns "$testns" link del "$DEV_NS"
1010
1011 # test native tunnel erspan v2
1012 run_cmd ip -netns "$testns" link add dev "$DEV_NS" type erspan seq \
1013 key 102 local 172.16.1.100 remote 172.16.1.200 \
1014 erspan_ver 2 erspan_dir ingress erspan_hwid 7
1015
1016
1017 run_cmd ip -netns "$testns" addr add dev "$DEV_NS" 10.1.1.100/24
1018 run_cmd ip -netns "$testns" link set dev $DEV_NS up
1019 run_cmd ip -netns "$testns" link del "$DEV_NS"
1020
1021 # test external mode
1022 run_cmd ip -netns "$testns" link add dev "$DEV_NS" type erspan external
1023 run_cmd ip -netns "$testns" link del "$DEV_NS"
1024
1025 if [ $ret -ne 0 ]; then
1026 end_test "FAIL: erspan"
1027 ip netns del "$testns"
1028 return 1
1029 fi
1030 end_test "PASS: erspan"
1031
1032 ip netns del "$testns"
1033}
1034
1035kci_test_ip6erspan()
1036{
1037 DEV_NS=ip6erspan00
1038 local ret=0
1039 run_cmd_grep "^Usage:" ip link help ip6erspan
1040 if [ $? -ne 0 ];then
1041 end_test "SKIP: ip6erspan: iproute2 too old"
1042 return $ksft_skip
1043 fi
1044 setup_ns testns
1045 if [ $? -ne 0 ]; then
1046 end_test "SKIP ip6erspan tests: cannot add net namespace $testns"
1047 return $ksft_skip
1048 fi
1049
1050 # test native tunnel ip6erspan v1
1051 run_cmd ip -netns "$testns" link add dev "$DEV_NS" type ip6erspan seq \
1052 key 102 local fc00:100::1 remote fc00:100::2 \
1053 erspan_ver 1 erspan 488
1054
1055
1056 run_cmd ip -netns "$testns" addr add dev "$DEV_NS" 10.1.1.100/24
1057 run_cmd ip -netns "$testns" link set dev $DEV_NS up
1058 run_cmd ip -netns "$testns" link del "$DEV_NS"
1059
1060 # test native tunnel ip6erspan v2
1061 run_cmd ip -netns "$testns" link add dev "$DEV_NS" type ip6erspan seq \
1062 key 102 local fc00:100::1 remote fc00:100::2 \
1063 erspan_ver 2 erspan_dir ingress erspan_hwid 7
1064
1065
1066 run_cmd ip -netns "$testns" addr add dev "$DEV_NS" 10.1.1.100/24
1067 run_cmd ip -netns "$testns" link set dev $DEV_NS up
1068 run_cmd ip -netns "$testns" link del "$DEV_NS"
1069
1070 # test external mode
1071 run_cmd ip -netns "$testns" link add dev "$DEV_NS" \
1072 type ip6erspan external
1073
1074 run_cmd ip -netns "$testns" link del "$DEV_NS"
1075
1076 if [ $ret -ne 0 ]; then
1077 end_test "FAIL: ip6erspan"
1078 ip netns del "$testns"
1079 return 1
1080 fi
1081 end_test "PASS: ip6erspan"
1082
1083 ip netns del "$testns"
1084}
1085
1086kci_test_fdb_get()
1087{
1088 brdev="test-br0"
1089 vxlandev="vxlan10"
1090 test_mac=de:ad:be:ef:13:37
1091 localip="10.0.2.2"
1092 dstip="10.0.2.3"
1093 local ret=0
1094
1095 run_cmd_grep 'bridge fdb get' bridge fdb help
1096 if [ $? -ne 0 ];then
1097 end_test "SKIP: fdb get tests: iproute2 too old"
1098 return $ksft_skip
1099 fi
1100
1101 setup_ns testns
1102 if [ $? -ne 0 ]; then
1103 end_test "SKIP fdb get tests: cannot add net namespace $testns"
1104 return $ksft_skip
1105 fi
1106 IP="ip -netns $testns"
1107 BRIDGE="bridge -netns $testns"
1108 run_cmd $IP link add "$vxlandev" type vxlan id 10 local $localip \
1109 dstport 4789
1110 run_cmd $IP link add name "$brdev" type bridge
1111 run_cmd $IP link set dev "$vxlandev" master "$brdev"
1112 run_cmd $BRIDGE fdb add $test_mac dev "$vxlandev" master
1113 run_cmd $BRIDGE fdb add $test_mac dev "$vxlandev" dst $dstip self
1114 run_cmd_grep "dev $vxlandev master $brdev" $BRIDGE fdb get $test_mac brport "$vxlandev"
1115 run_cmd_grep "dev $vxlandev master $brdev" $BRIDGE fdb get $test_mac br "$brdev"
1116 run_cmd_grep "dev $vxlandev dst $dstip" $BRIDGE fdb get $test_mac dev "$vxlandev" self
1117
1118 ip netns del $testns &>/dev/null
1119
1120 if [ $ret -ne 0 ]; then
1121 end_test "FAIL: bridge fdb get"
1122 return 1
1123 fi
1124
1125 end_test "PASS: bridge fdb get"
1126}
1127
1128kci_test_fdb_del()
1129{
1130 local test_mac=de:ad:be:ef:13:37
1131 local dummydev="dummy1"
1132 local brdev="test-br0"
1133 local ret=0
1134
1135 run_cmd_grep 'bridge fdb get' bridge fdb help
1136 if [ $? -ne 0 ]; then
1137 end_test "SKIP: fdb del tests: iproute2 too old"
1138 return $ksft_skip
1139 fi
1140
1141 setup_ns testns
1142 if [ $? -ne 0 ]; then
1143 end_test "SKIP fdb del tests: cannot add net namespace $testns"
1144 return $ksft_skip
1145 fi
1146 IP="ip -netns $testns"
1147 BRIDGE="bridge -netns $testns"
1148 run_cmd $IP link add $dummydev type dummy
1149 run_cmd $IP link add name $brdev type bridge vlan_filtering 1
1150 run_cmd $IP link set dev $dummydev master $brdev
1151 run_cmd $BRIDGE fdb add $test_mac dev $dummydev master static vlan 1
1152 run_cmd $BRIDGE vlan del vid 1 dev $dummydev
1153 run_cmd $BRIDGE fdb get $test_mac br $brdev vlan 1
1154 run_cmd $BRIDGE fdb del $test_mac dev $dummydev master vlan 1
1155 run_cmd_fail $BRIDGE fdb get $test_mac br $brdev vlan 1
1156
1157 ip netns del $testns &>/dev/null
1158
1159 if [ $ret -ne 0 ]; then
1160 end_test "FAIL: bridge fdb del"
1161 return 1
1162 fi
1163
1164 end_test "PASS: bridge fdb del"
1165}
1166
1167kci_test_neigh_get()
1168{
1169 dstmac=de:ad:be:ef:13:37
1170 dstip=10.0.2.4
1171 dstip6=dead::2
1172 local ret=0
1173
1174 run_cmd_grep 'ip neigh get' ip neigh help
1175 if [ $? -ne 0 ];then
1176 end_test "SKIP: fdb get tests: iproute2 too old"
1177 return $ksft_skip
1178 fi
1179
1180 # ipv4
1181 run_cmd ip neigh add $dstip lladdr $dstmac dev "$devdummy"
1182 run_cmd_grep "$dstmac" ip neigh get $dstip dev "$devdummy"
1183 run_cmd ip neigh del $dstip lladdr $dstmac dev "$devdummy"
1184
1185 # ipv4 proxy
1186 run_cmd ip neigh add proxy $dstip dev "$devdummy"
1187 run_cmd_grep "$dstip" ip neigh get proxy $dstip dev "$devdummy"
1188 run_cmd ip neigh del proxy $dstip dev "$devdummy"
1189
1190 # ipv6
1191 run_cmd ip neigh add $dstip6 lladdr $dstmac dev "$devdummy"
1192 run_cmd_grep "$dstmac" ip neigh get $dstip6 dev "$devdummy"
1193 run_cmd ip neigh del $dstip6 lladdr $dstmac dev "$devdummy"
1194
1195 # ipv6 proxy
1196 run_cmd ip neigh add proxy $dstip6 dev "$devdummy"
1197 run_cmd_grep "$dstip6" ip neigh get proxy $dstip6 dev "$devdummy"
1198 run_cmd ip neigh del proxy $dstip6 dev "$devdummy"
1199
1200 if [ $ret -ne 0 ];then
1201 end_test "FAIL: neigh get"
1202 return 1
1203 fi
1204
1205 end_test "PASS: neigh get"
1206}
1207
1208kci_test_neigh_update()
1209{
1210 dstip=10.0.2.4
1211 dstmac=de:ad:be:ef:13:37
1212 local ret=0
1213
1214 for proxy in "" "proxy" ; do
1215 # add a neighbour entry without any flags
1216 run_cmd ip neigh add $proxy $dstip dev "$devdummy" lladdr $dstmac nud permanent
1217 run_cmd_grep $dstip ip neigh show $proxy
1218 run_cmd_grep_fail "$dstip dev $devdummy .*\(managed\|use\|router\|extern\)" ip neigh show $proxy
1219
1220 # set the extern_learn flag, but no other
1221 run_cmd ip neigh change $proxy $dstip dev "$devdummy" extern_learn
1222 run_cmd_grep "$dstip dev $devdummy .* extern_learn" ip neigh show $proxy
1223 run_cmd_grep_fail "$dstip dev $devdummy .* \(managed\|use\|router\)" ip neigh show $proxy
1224
1225 # flags are reset when not provided
1226 run_cmd ip neigh change $proxy $dstip dev "$devdummy"
1227 run_cmd_grep $dstip ip neigh show $proxy
1228 run_cmd_grep_fail "$dstip dev $devdummy .* extern_learn" ip neigh show $proxy
1229
1230 # add a protocol
1231 run_cmd ip neigh change $proxy $dstip dev "$devdummy" protocol boot
1232 run_cmd_grep "$dstip dev $devdummy .* proto boot" ip neigh show $proxy
1233
1234 # protocol is retained when not provided
1235 run_cmd ip neigh change $proxy $dstip dev "$devdummy"
1236 run_cmd_grep "$dstip dev $devdummy .* proto boot" ip neigh show $proxy
1237
1238 # change protocol
1239 run_cmd ip neigh change $proxy $dstip dev "$devdummy" protocol static
1240 run_cmd_grep "$dstip dev $devdummy .* proto static" ip neigh show $proxy
1241
1242 # also check an extended flag for non-proxy neighs
1243 if [ "$proxy" = "" ]; then
1244 run_cmd ip neigh change $proxy $dstip dev "$devdummy" managed
1245 run_cmd_grep "$dstip dev $devdummy managed" ip neigh show $proxy
1246
1247 run_cmd ip neigh change $proxy $dstip dev "$devdummy" lladdr $dstmac
1248 run_cmd_grep_fail "$dstip dev $devdummy managed" ip neigh show $proxy
1249 fi
1250
1251 run_cmd ip neigh del $proxy $dstip dev "$devdummy"
1252 done
1253
1254 if [ $ret -ne 0 ];then
1255 end_test "FAIL: neigh update"
1256 return 1
1257 fi
1258
1259 end_test "PASS: neigh update"
1260}
1261
1262kci_test_bridge_parent_id()
1263{
1264 local ret=0
1265 sysfsnet=/sys/bus/netdevsim/devices/netdevsim
1266 probed=false
1267
1268 if [ ! -w /sys/bus/netdevsim/new_device ] ; then
1269 run_cmd modprobe -q netdevsim
1270 if [ $ret -ne 0 ]; then
1271 end_test "SKIP: bridge_parent_id can't load netdevsim"
1272 return $ksft_skip
1273 fi
1274 probed=true
1275 fi
1276
1277 echo "10 1" > /sys/bus/netdevsim/new_device
1278 while [ ! -d ${sysfsnet}10 ] ; do :; done
1279 echo "20 1" > /sys/bus/netdevsim/new_device
1280 while [ ! -d ${sysfsnet}20 ] ; do :; done
1281 udevadm settle
1282 dev10=`ls ${sysfsnet}10/net/`
1283 dev20=`ls ${sysfsnet}20/net/`
1284 run_cmd ip link add name test-bond0 type bond mode 802.3ad
1285 run_cmd ip link set dev $dev10 master test-bond0
1286 run_cmd ip link set dev $dev20 master test-bond0
1287 run_cmd ip link add name test-br0 type bridge
1288 run_cmd ip link set dev test-bond0 master test-br0
1289
1290 # clean up any leftovers
1291 ip link del dev test-br0
1292 ip link del dev test-bond0
1293 echo 20 > /sys/bus/netdevsim/del_device
1294 echo 10 > /sys/bus/netdevsim/del_device
1295 $probed && rmmod netdevsim
1296
1297 if [ $ret -ne 0 ]; then
1298 end_test "FAIL: bridge_parent_id"
1299 return 1
1300 fi
1301 end_test "PASS: bridge_parent_id"
1302}
1303
1304address_get_proto()
1305{
1306 local addr=$1; shift
1307
1308 ip -N -j address show dev "$devdummy" |
1309 jq -e -r --arg addr "${addr%/*}" \
1310 '.[].addr_info[] | select(.local == $addr) | .protocol'
1311}
1312
1313address_count()
1314{
1315 ip -N -j address show dev "$devdummy" "$@" |
1316 jq -e -r '[.[].addr_info[] | .local | select(. != null)] | length'
1317}
1318
1319do_test_address_proto()
1320{
1321 local what=$1; shift
1322 local addr=$1; shift
1323 local addr2=${addr%/*}2/${addr#*/}
1324 local addr3=${addr%/*}3/${addr#*/}
1325 local proto
1326 local count
1327 local ret=0
1328 local err
1329
1330 run_cmd_grep 'proto' ip address help
1331 if [ $? -ne 0 ];then
1332 end_test "SKIP: addr proto ${what}: iproute2 too old"
1333 return $ksft_skip
1334 fi
1335
1336 ip address add dev "$devdummy" "$addr3"
1337 check_err $?
1338 proto=$(address_get_proto "$addr3")
1339 [[ "$proto" == null ]]
1340 check_err $?
1341
1342 ip address add dev "$devdummy" "$addr2" proto 0x99
1343 check_err $?
1344 proto=$(address_get_proto "$addr2")
1345 [[ "$proto" == 0x99 ]]
1346 check_err $?
1347
1348 ip address add dev "$devdummy" "$addr" proto 0xab
1349 check_err $?
1350 proto=$(address_get_proto "$addr")
1351 [[ "$proto" == 0xab ]]
1352 check_err $?
1353
1354 ip address replace dev "$devdummy" "$addr" proto 0x11
1355 proto=$(address_get_proto "$addr")
1356 check_err $?
1357 [[ "$proto" == 0x11 ]]
1358 check_err $?
1359
1360 count=$(address_count)
1361 check_err $?
1362 (( count >= 3 )) # $addr, $addr2 and $addr3 plus any kernel addresses
1363 check_err $?
1364
1365 count=$(address_count proto 0)
1366 check_err $?
1367 (( count == 1 )) # just $addr3
1368 check_err $?
1369
1370 count=$(address_count proto 0x11)
1371 check_err $?
1372 (( count == 2 )) # $addr and $addr3
1373 check_err $?
1374
1375 count=$(address_count proto 0xab)
1376 check_err $?
1377 (( count == 1 )) # just $addr3
1378 check_err $?
1379
1380 ip address del dev "$devdummy" "$addr"
1381 ip address del dev "$devdummy" "$addr2"
1382 ip address del dev "$devdummy" "$addr3"
1383
1384 if [ $ret -ne 0 ]; then
1385 end_test "FAIL: address proto $what"
1386 return 1
1387 fi
1388 end_test "PASS: address proto $what"
1389}
1390
1391kci_test_address_proto()
1392{
1393 local ret=0
1394
1395 do_test_address_proto IPv4 192.0.2.1/28
1396 check_err $?
1397
1398 do_test_address_proto IPv6 2001:db8:1::1/64
1399 check_err $?
1400
1401 return $ret
1402}
1403
1404kci_test_enslave_bonding()
1405{
1406 local bond="bond123"
1407 local ret=0
1408
1409 setup_ns testns
1410 if [ $? -ne 0 ]; then
1411 end_test "SKIP bonding tests: cannot add net namespace $testns"
1412 return $ksft_skip
1413 fi
1414
1415 run_cmd ip -netns $testns link add dev $bond type bond mode balance-rr
1416 run_cmd ip -netns $testns link add dev $devdummy type dummy
1417 run_cmd ip -netns $testns link set dev $devdummy up
1418 run_cmd ip -netns $testns link set dev $devdummy master $bond down
1419 if [ $ret -ne 0 ]; then
1420 end_test "FAIL: initially up interface added to a bond and set down"
1421 ip netns del "$testns"
1422 return 1
1423 fi
1424
1425 end_test "PASS: enslave interface in a bond"
1426 ip netns del "$testns"
1427}
1428
1429# Called to validate the addresses on $IFNAME:
1430#
1431# 1. Every `temporary` address must have a matching `mngtmpaddr`
1432# 2. Every `mngtmpaddr` address must have some un`deprecated` `temporary`
1433#
1434# If the mngtmpaddr or tempaddr checking failed, return 0 and stop slowwait
1435validate_mngtmpaddr()
1436{
1437 local dev=$1
1438 local prefix=""
1439 local addr_list=$(ip -j -n $testns addr show dev ${dev})
1440 local temp_addrs=$(echo ${addr_list} | \
1441 jq -r '.[].addr_info[] | select(.temporary == true) | .local')
1442 local mng_prefixes=$(echo ${addr_list} | \
1443 jq -r '.[].addr_info[] | select(.mngtmpaddr == true) | .local' | \
1444 cut -d: -f1-4 | tr '\n' ' ')
1445 local undep_prefixes=$(echo ${addr_list} | \
1446 jq -r '.[].addr_info[] | select(.temporary == true and .deprecated != true) | .local' | \
1447 cut -d: -f1-4 | tr '\n' ' ')
1448
1449 # 1. All temporary addresses (temp and dep) must have a matching mngtmpaddr
1450 for address in ${temp_addrs}; do
1451 prefix=$(echo ${address} | cut -d: -f1-4)
1452 if [[ ! " ${mng_prefixes} " =~ " $prefix " ]]; then
1453 check_err 1 "FAIL: Temporary $address with no matching mngtmpaddr!";
1454 return 0
1455 fi
1456 done
1457
1458 # 2. All mngtmpaddr addresses must have a temporary address (not dep)
1459 for prefix in ${mng_prefixes}; do
1460 if [[ ! " ${undep_prefixes} " =~ " $prefix " ]]; then
1461 check_err 1 "FAIL: No undeprecated temporary in $prefix!";
1462 return 0
1463 fi
1464 done
1465
1466 return 1
1467}
1468
1469kci_test_mngtmpaddr()
1470{
1471 local ret=0
1472
1473 setup_ns testns
1474 if [ $? -ne 0 ]; then
1475 end_test "SKIP mngtmpaddr tests: cannot add net namespace $testns"
1476 return $ksft_skip
1477 fi
1478
1479 # 1. Create a dummy Ethernet interface
1480 run_cmd ip -n $testns link add ${devdummy} type dummy
1481 run_cmd ip -n $testns link set ${devdummy} up
1482 run_cmd ip netns exec $testns sysctl -w net.ipv6.conf.${devdummy}.use_tempaddr=1
1483 run_cmd ip netns exec $testns sysctl -w net.ipv6.conf.${devdummy}.temp_prefered_lft=10
1484 run_cmd ip netns exec $testns sysctl -w net.ipv6.conf.${devdummy}.temp_valid_lft=25
1485 run_cmd ip netns exec $testns sysctl -w net.ipv6.conf.${devdummy}.max_desync_factor=1
1486
1487 # 2. Create several mngtmpaddr addresses on that interface.
1488 # with temp_*_lft configured to be pretty short (10 and 35 seconds
1489 # for prefer/valid respectively)
1490 for i in $(seq 1 9); do
1491 run_cmd ip -n $testns addr add 2001:db8:7e57:${i}::1/64 mngtmpaddr dev ${devdummy}
1492 done
1493
1494 # 3. Confirm that a preferred temporary address exists for each mngtmpaddr
1495 # address at all times, polling once per second for 30 seconds.
1496 slowwait 30 validate_mngtmpaddr ${devdummy}
1497
1498 # 4. Delete each mngtmpaddr address, one at a time (alternating between
1499 # deleting and merely un-mngtmpaddr-ing), and confirm that the other
1500 # mngtmpaddr addresses still have preferred temporaries.
1501 for i in $(seq 1 9); do
1502 (( $i % 4 == 0 )) && mng_flag="mngtmpaddr" || mng_flag=""
1503 if (( $i % 2 == 0 )); then
1504 run_cmd ip -n $testns addr del 2001:db8:7e57:${i}::1/64 $mng_flag dev ${devdummy}
1505 else
1506 run_cmd ip -n $testns addr change 2001:db8:7e57:${i}::1/64 dev ${devdummy}
1507 fi
1508 # the temp addr should be deleted
1509 validate_mngtmpaddr ${devdummy}
1510 done
1511
1512 if [ $ret -ne 0 ]; then
1513 end_test "FAIL: mngtmpaddr add/remove incorrect"
1514 else
1515 end_test "PASS: mngtmpaddr add/remove correctly"
1516 fi
1517
1518 ip netns del "$testns"
1519 return $ret
1520}
1521
1522kci_test_operstate()
1523{
1524 local ret=0
1525
1526 # Check that it is possible to set operational state during device
1527 # creation and that it is preserved when the administrative state of
1528 # the device is toggled.
1529 run_cmd ip link add name vx0 up state up type vxlan id 10010 dstport 4789
1530 run_cmd_grep "state UP" ip link show dev vx0
1531 run_cmd ip link set dev vx0 down
1532 run_cmd_grep "state DOWN" ip link show dev vx0
1533 run_cmd ip link set dev vx0 up
1534 run_cmd_grep "state UP" ip link show dev vx0
1535
1536 run_cmd ip link del dev vx0
1537
1538 # Check that it is possible to set the operational state of the device
1539 # after creation.
1540 run_cmd ip link add name vx0 up type vxlan id 10010 dstport 4789
1541 run_cmd_grep "state UNKNOWN" ip link show dev vx0
1542 run_cmd ip link set dev vx0 state up
1543 run_cmd_grep "state UP" ip link show dev vx0
1544
1545 run_cmd ip link del dev vx0
1546
1547 if [ "$ret" -ne 0 ]; then
1548 end_test "FAIL: operstate"
1549 return 1
1550 fi
1551
1552 end_test "PASS: operstate"
1553}
1554
1555kci_test_rtnl()
1556{
1557 local current_test
1558 local ret=0
1559
1560 kci_add_dummy
1561 if [ $ret -ne 0 ];then
1562 end_test "FAIL: cannot add dummy interface"
1563 return 1
1564 fi
1565
1566 for current_test in ${TESTS:-$ALL_TESTS}; do
1567 $current_test
1568 check_err $?
1569 done
1570
1571 kci_del_dummy
1572 return $ret
1573}
1574
1575usage()
1576{
1577 cat <<EOF
1578usage: ${0##*/} OPTS
1579
1580 -t <test> Test(s) to run (default: all)
1581 (options: $(echo $ALL_TESTS))
1582 -v Verbose mode (show commands and output)
1583 -P Pause after every test
1584 -p Pause after every failing test before cleanup (for debugging)
1585EOF
1586}
1587
1588require_command jq
1589
1590#check for needed privileges
1591if [ "$(id -u)" -ne 0 ];then
1592 end_test "SKIP: Need root privileges"
1593 exit $ksft_skip
1594fi
1595
1596for x in ip tc;do
1597 $x -Version 2>/dev/null >/dev/null
1598 if [ $? -ne 0 ];then
1599 end_test "SKIP: Could not run test without the $x tool"
1600 exit $ksft_skip
1601 fi
1602done
1603
1604while getopts t:hvpP o; do
1605 case $o in
1606 t) TESTS=$OPTARG;;
1607 v) VERBOSE=1;;
1608 p) PAUSE_ON_FAIL=yes;;
1609 P) PAUSE=yes;;
1610 h) usage; exit 0;;
1611 *) usage; exit 1;;
1612 esac
1613done
1614
1615[ $PAUSE = "yes" ] && PAUSE_ON_FAIL="no"
1616
1617kci_test_rtnl
1618
1619exit $?