diff options
Diffstat (limited to '')
333 files changed, 10373 insertions, 0 deletions
diff --git a/test/test-network-generator-conversion.sh b/test/test-network-generator-conversion.sh new file mode 100755 index 0000000..c0e74c1 --- /dev/null +++ b/test/test-network-generator-conversion.sh @@ -0,0 +1,300 @@ +#!/usr/bin/env bash +# SPDX-License-Identifier: LGPL-2.1-or-later +# shellcheck disable=SC2235 +set -eux +set -o pipefail + +# TODO/FIXME: +# - we should probably have something like "udevadm verify" but for .network files +# (networkctl verify?) so we can check that all directives are in correct sections +# - according to dracut.cmdline(7) <peer> address can also be followed by /CIDR, +# but this doesn't seem to work with sd-network-generator + +if [[ -n "${1:-}" ]]; then + GENERATOR_BIN=$1 +elif [[ -x /usr/lib/systemd/systemd-network-generator ]]; then + GENERATOR_BIN=/usr/lib/systemd/systemd-network-generator +elif [[ -x /lib/systemd/systemd-network-generator ]]; then + GENERATOR_BIN=/lib/systemd/systemd-network-generator +else + exit 1 +fi + +# See: https://github.com/systemd/systemd/pull/29888#issuecomment-1796187440 +unset NOTIFY_SOCKET + +WORK_DIR="$(mktemp --directory --tmpdir "test-network-generator-conversion.XXXXXX")" +# shellcheck disable=SC2064 +trap "rm -rf '$WORK_DIR'" EXIT + +# Convert octal netmask to CIDR notation (e.g. 255.255.255.0 => 24) +netmask_to_cidr() ( + set +x + + local netmask="${1:?}" + local x bits=0 + + # shellcheck disable=SC2086 + x="0$(printf "%o" ${netmask//./ })" + while [[ "$x" -gt 0 ]]; do + ((bits += x % 2)) + ((x >>= 1)) + done + + echo "$bits" +) + +run_network_generator() { + local stderr + + rm -rf "${WORK_DIR:?}"/* + stderr="$WORK_DIR/stderr" + if ! "$GENERATOR_BIN" --root "$WORK_DIR" 2>"$stderr"; then + echo >&2 "Generator failed when parsing $SYSTEMD_PROC_CMDLINE" + cat "$stderr" + return 1 + fi + + if [[ -s "$stderr" ]]; then + echo >&2 "Generator generated unexpected messages on stderr" + cat "$stderr" + return 1 + fi + + ls -l "$WORK_DIR/run/systemd/network/" + + rm -f "$stderr" + return 0 +} + +check_dhcp() { + local dhcp="${1:?}" + local network_file="${2:?}" + + case "$dhcp" in + dhcp) + grep -q "^DHCP=ipv4$" "$network_file" + ;; + dhcp6) + grep -q "^DHCP=ipv6$" "$network_file" + ;; + on|any) + grep -q "^DHCP=yes$" "$network_file" + ;; + none|off) + grep -q "^DHCP=no$" "$network_file" + ;; + auto6|ibft) + grep -q "^DHCP=no$" "$network_file" + ;; + either6) + grep -q "^DHCP=ipv6$" "$network_file" + ;; + link6) + grep -q "^DHCP=no$" "$network_file" + ;; + *) + echo >&2 "Invalid assignment $cmdline" + return 1 + esac + + return 0 +} + +# Check the shortest ip= variant, i.e.: +# ip={dhcp|on|any|dhcp6|auto6|either6|link6} +# +# Note: +# - dracut also supports single-dhcp +check_one_dhcp() { + local cmdline="${1:?}" + local dhcp="${cmdline#ip=}" + local network_file + + SYSTEMD_LOG_LEVEL=debug SYSTEMD_PROC_CMDLINE="$cmdline" run_network_generator + network_file="${WORK_DIR:?}/run/systemd/network/91-default.network" + cat "$network_file" + + check_dhcp "$dhcp" "$network_file" + + return 0 +} + +# Similar to the previous one, but with slightly more fields: +# ip=<interface>:{dhcp|on|any|dhcp6|auto6|link6}[:[<mtu>][:<macaddr>]] +# +# Same notes apply as well. +check_one_interface_dhcp() { + local cmdline="${1:?}" + local ifname dhcp mtu mac network_file + + IFS=":" read -r ifname dhcp mtu mac <<< "${cmdline#ip=}" + + SYSTEMD_LOG_LEVEL=debug SYSTEMD_PROC_CMDLINE="$cmdline" run_network_generator + network_file="${WORK_DIR:?}/run/systemd/network/90-$ifname.network" + cat "$network_file" + + grep -q "^Name=$ifname$" "$network_file" + check_dhcp "$dhcp" "$network_file" + [[ -n "$mtu" ]] && grep -q "^MTUBytes=$mtu$" "$network_file" + [[ -n "$mac" ]] && grep -q "^MACAddress=$mac$" "$network_file" + + return 0 +} + +# Check the "long" ip= formats, i.e: +# ip=<client-IP>:[<peer>]:<gateway-IP>:<netmask>:<client_hostname>:<interface>:{none|off|dhcp|on|any|dhcp6|auto6|ibft}[:[<mtu>][:<macaddr>] +# ip=<client-IP>:[<peer>]:<gateway-IP>:<netmask>:<client_hostname>:<interface>:{none|off|dhcp|on|any|dhcp6|auto6|ibft}[:[<dns1>][:<dns2>]] +check_one_long() { + local cmdline="${1:?}" + local ip peer gateway netmask hostname ifname dhcp arg1 arg2 network_file cidr stderr tmp + + # To make parsing a bit easier when IPv6 is involved, replace all colons between [] with #, ... + tmp="$(echo "${cmdline#ip=}" | sed -re ':l; s/(\[[^]:]*):/\1#/; tl')" + # ... drop the now unnecessary [] and split the string into colon separated fields as usual, ... + IFS=":" read -r ip peer gateway netmask hostname ifname dhcp arg1 arg2 <<<"${tmp//[\[\]]}" + # ... and then replace # back to colons for fields that might contain an IPv6 address. + ip="${ip//#/:}" + peer="${peer//#/:}" + gateway="${gateway//#/:}" + arg1="${arg1//#/:}" + arg2="${arg2//#/:}" + + SYSTEMD_LOG_LEVEL=debug SYSTEMD_PROC_CMDLINE="$cmdline" run_network_generator + + if [[ -n "$ifname" ]]; then + network_file="${WORK_DIR:?}/run/systemd/network/90-$ifname.network" + grep -q "^Name=$ifname$" "$network_file" + else + network_file="${WORK_DIR:?}/run/systemd/network/91-default.network" + grep -q "^Kind=!\*$" "$network_file" + fi + + cat "$network_file" + + if [[ -n "$ip" && -n "$netmask" ]]; then + # The "ip" and "netmask" fields are merged together into an IP/CIDR value + if [[ "$netmask" =~ ^[0-9]+$ ]]; then + cidr="$netmask" + else + cidr="$(netmask_to_cidr "$netmask")" + fi + + grep -q "^Address=$ip/$cidr$" "$network_file" + else + (! grep -q "^Address=" "$network_file") + fi + # If the "dhcp" field is empty, it defaults to "off" + [[ -z "$dhcp" ]] && dhcp="off" + [[ -n "$peer" ]] && grep -q "^Peer=$peer$" "$network_file" + [[ -n "$gateway" ]] && grep -q "^Gateway=$gateway$" "$network_file" + [[ -n "$hostname" ]] && grep -q "^Hostname=$hostname$" "$network_file" + check_dhcp "$dhcp" "$network_file" + + # If the first optional argument is empty, assume the first variant + # See: https://github.com/dracutdevs/dracut/blob/4d594210d6ef4f04a9dbadacea73e9461ded352d/modules.d/40network/net-lib.sh#L533 + if [[ -z "$arg1" || "$arg1" =~ ^[0-9]+$ ]]; then + # => [:[<mtu>][:<macaddr>] + [[ -n "$arg1" ]] && grep -q "^MTUBytes=$arg1$" "$network_file" + [[ -n "$arg2" ]] && grep -q "^MACAddress=$arg2$" "$network_file" + else + # => [:[<dns1>][:<dns2>]] + grep -q "^DNS=$arg1$" "$network_file" + [[ -n "$arg2" ]] && grep -q "^DNS=$arg2$" "$network_file" + fi + + return 0 +} + +# Check if the generated .network files match the expected stored ones +TEST_DATA="$(dirname "$0")/testdata/test-network-generator-conversion" +for f in "$TEST_DATA"/test-*.input; do + fname="${f##*/}" + out="$(mktemp --directory "${WORK_DIR:?}/${fname%%.input}.XXX")" + + # shellcheck disable=SC2046 + "$GENERATOR_BIN" --root "$out" -- $(cat "$f") + + if ! diff -u "$out/run/systemd/network" "${f%.input}.expected"; then + echo "**** Unexpected output for $f" + exit 1 + fi + + rm -rf "${out:?}" +done + +# Now generate bunch of .network units on the fly and check if they contain expected +# directives & values + +# ip={dhcp|on|any|dhcp6|auto6|either6|link6} +for dhcp in dhcp on any dhcp6 auto6 either6 link6 off none ibft; do + check_one_dhcp "ip=$dhcp" +done + +# ip=<interface>:{dhcp|on|any|dhcp6|auto6|link6}[:[<mtu>][:<macaddr>]] +COMMAND_LINES=( + "ip=foo:dhcp" + "ip=bar:dhcp6" + "ip=baz1:any:666" + "ip=baz1:any:128:52:54:00:a7:8f:ac" +) +for cmdline in "${COMMAND_LINES[@]}"; do + check_one_interface_dhcp "$cmdline" +done + +# ip=<client-IP>:[<peer>]:<gateway-IP>:<netmask>:<client_hostname>:<interface>:{none|off|dhcp|on|any|dhcp6|auto6|ibft}[:[<mtu>][:<macaddr>] +# ip=<client-IP>:[<peer>]:<gateway-IP>:<netmask>:<client_hostname>:<interface>:{none|off|dhcp|on|any|dhcp6|auto6|ibft}[:[<dns1>][:<dns2>]] +COMMAND_LINES=( + "ip=1.2.3.4:2.3.4.5:1.2.3.1:255.255.255.0:hello-world.local:dummy99:off" + "ip=1.2.3.4:2.3.4.5:1.2.3.1:24:hello-world.local:dummy99:off" + "ip=1.2.3.4:2.3.4.5:1.2.3.1:255.255.255.0:hello-world.local:dummy99:off:123" + "ip=1.2.3.4:2.3.4.5:1.2.3.1:255.255.255.0:hello-world.local:dummy99:off:123:52:54:00:a7:8f:ac" + "ip=1.2.3.4:2.3.4.5:1.2.3.1:255.255.255.0:hello-world.local:dummy99:off::52:54:00:a7:8f:ac" + "ip=1.2.3.4:2.3.4.5:1.2.3.1:255.255.255.0:hello-world.local:dummy99:off::" + "ip=1.2.3.4:2.3.4.5:1.2.3.1:255.255.255.0:hello-world.local:dummy99:off:1.2.3.2" + "ip=1.2.3.4:2.3.4.5:1.2.3.1:255.255.255.0:hello-world.local:dummy99:off:1.2.3.2:1.2.3.3" + "ip=192.168.0.2::192.168.0.1:255.255.128.0::foo1:off" + "ip=192.168.0.2::192.168.0.1:17::foo1:off" + "ip=10.0.0.1:::255.255.255.0::foo99:off" + "ip=[fdef:c400:bd01:1096::2]::[fdef:c400:bd01:1096::1]:64::ipv6:off" + "ip=[fdef:c400:bd01:1096::2]:[fdef:c400:bd01:1096::99]::64::ipv6:off" + "ip=[fdef:c400:bd01:1096::2]::[fdef:c400:bd01:1096::1]:64::ipv6:off:666" + "ip=[fdef:c400:bd01:1096::2]::[fdef:c400:bd01:1096::1]:64::ipv6:off:666:52:54:00:a7:8f:ac" + "ip=[fdef:c400:bd01:1096::2]::[fdef:c400:bd01:1096::1]:64::ipv6:off::52:54:00:a7:8f:ac" + "ip=[fdef:c400:bd01:1096::2]::[fdef:c400:bd01:1096::1]:64::ipv6:off::" + "ip=[fdef:c400:bd01:1096::2]::[fdef:c400:bd01:1096::1]:64::ipv6:off:[fdef:c400:bd01:1096::aaaa]" + "ip=[fdef:c400:bd01:1096::2]::[fdef:c400:bd01:1096::1]:64::ipv6:off:[fdef:c400:bd01:1096::aaaa]:[fdef:c400:bd01:1096::bbbb]" + "ip=:::::dhcp99:any" + "ip=:::::dhcp99:dhcp6:666" + "ip=:::::dhcp99:dhcp6:666:52:54:00:a7:8f:ac" + "ip=:::::dhcp99:dhcp6:10.0.0.128" + "ip=:::::dhcp99:dhcp6:10.0.0.128:10.0.0.129" + "ip=:::::dhcp99:dhcp6:10.0.0.128:[fdef:c400:bd01:1096::bbbb]" + "ip=::::::any" + "ip=::::::ibft" +) +for cmdline in "${COMMAND_LINES[@]}"; do + check_one_long "$cmdline" +done + +INVALID_COMMAND_LINES=( + "ip=foo" + "ip=:::::::" + "ip=:::::::foo" + "ip=10.0.0:::255.255.255.0::foo99:off" + "ip=10.0.0.1:::255.255.255::foo99:off" + "ip=10.0.0.1:::255.255.255.0:invalid_hostname:foo99:off" + "ip=10.0.0.1:::255.255.255.0::verylonginterfacename:off" + "ip=:::::dhcp99:dhcp6:4294967296" + "ip=:::::dhcp99:dhcp6:-1" + "ip=:::::dhcp99:dhcp6:666:52:54:00" + "ip=fdef:c400:bd01:1096::2::[fdef:c400:bd01:1096::1]:64::ipv6:off:[fdef:c400:bd01:1096::aaaa]" + "ip=[fdef:c400:bd01:1096::2]::[fdef:c400:bd01:1096::1]:64::ipv6:off:foo" + "ip=[fdef:c400:bd01:1096::2]::[fdef:c400:bd01:1096::1]:64::ipv6:off:[fdef:c400:bd01:1096::aaaa]:foo" + "ip=[fdef:c400:bd01:1096::2]::[fdef:c400:bd01:1096::1]:64::ipv6:off:[fdef:c400:bd01:1096::aaaa]:[fdef:c400:bd01:1096::bbbb]:" + "ip=:::::dhcp99:dhcp6:10.0.0.128:10.0.0.129:" + "ip=:::::dhcp99:dhcp6:10.0.0.128:[fdef:c400:bd01:1096::bbbb]:" +) +for cmdline in "${INVALID_COMMAND_LINES[@]}"; do + (! SYSTEMD_LOG_LEVEL=debug SYSTEMD_PROC_CMDLINE="$cmdline" "$GENERATOR_BIN" --root "$WORK_DIR") +done diff --git a/test/test-network-generator-conversion/.gitattributes b/test/test-network-generator-conversion/.gitattributes new file mode 100644 index 0000000..6df434f --- /dev/null +++ b/test/test-network-generator-conversion/.gitattributes @@ -0,0 +1 @@ +* generated diff --git a/test/test-network-generator-conversion/test-01-dhcp.expected/91-default.network b/test/test-network-generator-conversion/test-01-dhcp.expected/91-default.network new file mode 100644 index 0000000..657cde7 --- /dev/null +++ b/test/test-network-generator-conversion/test-01-dhcp.expected/91-default.network @@ -0,0 +1,12 @@ +# Automatically generated by systemd-network-generator + +[Match] +Kind=!* +Type=!loopback + +[Link] + +[Network] +DHCP=ipv4 + +[DHCP] diff --git a/test/test-network-generator-conversion/test-01-dhcp.input b/test/test-network-generator-conversion/test-01-dhcp.input new file mode 100644 index 0000000..e55893e --- /dev/null +++ b/test/test-network-generator-conversion/test-01-dhcp.input @@ -0,0 +1 @@ +ip=dhcp diff --git a/test/test-network-generator-conversion/test-02-bridge.expected/90-bridge99.netdev b/test/test-network-generator-conversion/test-02-bridge.expected/90-bridge99.netdev new file mode 100644 index 0000000..97c2248 --- /dev/null +++ b/test/test-network-generator-conversion/test-02-bridge.expected/90-bridge99.netdev @@ -0,0 +1,5 @@ +# Automatically generated by systemd-network-generator + +[NetDev] +Kind=bridge +Name=bridge99 diff --git a/test/test-network-generator-conversion/test-02-bridge.expected/90-bridge99.network b/test/test-network-generator-conversion/test-02-bridge.expected/90-bridge99.network new file mode 100644 index 0000000..f8d19ba --- /dev/null +++ b/test/test-network-generator-conversion/test-02-bridge.expected/90-bridge99.network @@ -0,0 +1,13 @@ +# Automatically generated by systemd-network-generator + +[Match] +Name=bridge99 + +[Link] +MACAddress=00:11:22:33:44:55 +MTUBytes=1530 + +[Network] +DHCP=ipv4 + +[DHCP] diff --git a/test/test-network-generator-conversion/test-02-bridge.expected/90-eth0.network b/test/test-network-generator-conversion/test-02-bridge.expected/90-eth0.network new file mode 100644 index 0000000..8842b57 --- /dev/null +++ b/test/test-network-generator-conversion/test-02-bridge.expected/90-eth0.network @@ -0,0 +1,21 @@ +# Automatically generated by systemd-network-generator + +[Match] +Name=eth0 + +[Link] + +[Network] +DHCP=no +DNS=10.10.10.10 +DNS=10.10.10.11 +Bridge=bridge99 + +[DHCP] +Hostname=hogehoge + +[Address] +Address=192.168.0.10/24 + +[Route] +Gateway=192.168.0.1 diff --git a/test/test-network-generator-conversion/test-02-bridge.expected/90-eth1.network b/test/test-network-generator-conversion/test-02-bridge.expected/90-eth1.network new file mode 100644 index 0000000..feff4f5 --- /dev/null +++ b/test/test-network-generator-conversion/test-02-bridge.expected/90-eth1.network @@ -0,0 +1,21 @@ +# Automatically generated by systemd-network-generator + +[Match] +Name=eth1 + +[Link] + +[Network] +DHCP=no +DNS=10.10.10.10 +DNS=10.10.10.11 +Bridge=bridge99 + +[DHCP] +Hostname=hogehoge + +[Address] +Address=192.168.0.11/24 + +[Route] +Gateway=192.168.0.1 diff --git a/test/test-network-generator-conversion/test-02-bridge.input b/test/test-network-generator-conversion/test-02-bridge.input new file mode 100644 index 0000000..0c863fc --- /dev/null +++ b/test/test-network-generator-conversion/test-02-bridge.input @@ -0,0 +1,4 @@ +ip=192.168.0.10::192.168.0.1:255.255.255.0:hogehoge:eth0:off:10.10.10.10:10.10.10.11 +ip=192.168.0.11::192.168.0.1:255.255.255.0:hogehoge:eth1:off:10.10.10.10:10.10.10.11 +ip=bridge99:dhcp:1530:00:11:22:33:44:55 +bridge=bridge99:eth0,eth1 diff --git a/test/test-network-generator-conversion/test-03-issue-14319.expected/90-enp3s0.network b/test/test-network-generator-conversion/test-03-issue-14319.expected/90-enp3s0.network new file mode 100644 index 0000000..28ccfdd --- /dev/null +++ b/test/test-network-generator-conversion/test-03-issue-14319.expected/90-enp3s0.network @@ -0,0 +1,17 @@ +# Automatically generated by systemd-network-generator + +[Match] +Name=enp3s0 + +[Link] + +[Network] +DHCP=no + +[DHCP] + +[Address] +Address=10.99.37.44/16 + +[Route] +Gateway=10.99.10.1 diff --git a/test/test-network-generator-conversion/test-03-issue-14319.input b/test/test-network-generator-conversion/test-03-issue-14319.input new file mode 100644 index 0000000..3be7520 --- /dev/null +++ b/test/test-network-generator-conversion/test-03-issue-14319.input @@ -0,0 +1 @@ +root=/dev/nfs nfsroot=10.99.37.240:/srv/netroot,v3,tcp ip=10.99.37.44::10.99.10.1:255.255.0.0::enp3s0:off diff --git a/test/test-network/.gitattributes b/test/test-network/.gitattributes new file mode 100644 index 0000000..e99a2c3 --- /dev/null +++ b/test/test-network/.gitattributes @@ -0,0 +1 @@ +/conf/*.key generated diff --git a/test/test-network/conf/00-debug-net.rules b/test/test-network/conf/00-debug-net.rules new file mode 100644 index 0000000..5146b90 --- /dev/null +++ b/test/test-network/conf/00-debug-net.rules @@ -0,0 +1,2 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +SUBSYSTEM=="net", OPTIONS="log_level=debug" diff --git a/test/test-network/conf/10-dropin-test.netdev b/test/test-network/conf/10-dropin-test.netdev new file mode 100644 index 0000000..074ab17 --- /dev/null +++ b/test/test-network/conf/10-dropin-test.netdev @@ -0,0 +1,5 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[NetDev] +Name=hoge +Kind=dummy +MACAddress=00:50:56:c0:00:18 diff --git a/test/test-network/conf/10-dropin-test.netdev.d/mac.conf b/test/test-network/conf/10-dropin-test.netdev.d/mac.conf new file mode 100644 index 0000000..0b3f765 --- /dev/null +++ b/test/test-network/conf/10-dropin-test.netdev.d/mac.conf @@ -0,0 +1,2 @@ +[NetDev] +MACAddress=00:50:56:c0:00:28 diff --git a/test/test-network/conf/10-dropin-test.netdev.d/name.conf b/test/test-network/conf/10-dropin-test.netdev.d/name.conf new file mode 100644 index 0000000..9905932 --- /dev/null +++ b/test/test-network/conf/10-dropin-test.netdev.d/name.conf @@ -0,0 +1,2 @@ +[NetDev] +Name=dropin-test diff --git a/test/test-network/conf/11-dummy-mtu.netdev b/test/test-network/conf/11-dummy-mtu.netdev new file mode 100644 index 0000000..877231d --- /dev/null +++ b/test/test-network/conf/11-dummy-mtu.netdev @@ -0,0 +1,5 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[NetDev] +Name=test1 +Kind=dummy +MTUBytes=1600 diff --git a/test/test-network/conf/11-dummy.netdev b/test/test-network/conf/11-dummy.netdev new file mode 100644 index 0000000..86af17f --- /dev/null +++ b/test/test-network/conf/11-dummy.netdev @@ -0,0 +1,4 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[NetDev] +Name=test1 +Kind=dummy diff --git a/test/test-network/conf/11-dummy.network b/test/test-network/conf/11-dummy.network new file mode 100644 index 0000000..0a4511b --- /dev/null +++ b/test/test-network/conf/11-dummy.network @@ -0,0 +1,6 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=test1 + +[Network] +IPv6AcceptRA=no diff --git a/test/test-network/conf/12-dummy-mtu.link b/test/test-network/conf/12-dummy-mtu.link new file mode 100644 index 0000000..cd08d0f --- /dev/null +++ b/test/test-network/conf/12-dummy-mtu.link @@ -0,0 +1,6 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +OriginalName=dummy98 + +[Link] +MTUBytes=1600 diff --git a/test/test-network/conf/12-dummy-mtu.netdev b/test/test-network/conf/12-dummy-mtu.netdev new file mode 100644 index 0000000..1320b38 --- /dev/null +++ b/test/test-network/conf/12-dummy-mtu.netdev @@ -0,0 +1,5 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[NetDev] +Name=dummy98 +Kind=dummy +MTUBytes=1600 diff --git a/test/test-network/conf/12-dummy-no-address.network b/test/test-network/conf/12-dummy-no-address.network new file mode 100644 index 0000000..fef18c2 --- /dev/null +++ b/test/test-network/conf/12-dummy-no-address.network @@ -0,0 +1,6 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=dummy98 + +[Network] +IPv6AcceptRA=no diff --git a/test/test-network/conf/12-dummy-rename-to-altname.link b/test/test-network/conf/12-dummy-rename-to-altname.link new file mode 100644 index 0000000..bef4bf3 --- /dev/null +++ b/test/test-network/conf/12-dummy-rename-to-altname.link @@ -0,0 +1,7 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +OriginalName=dummy98 + +[Link] +Name=dummyalt +AlternativeName=dummyalt hogehogehogehogehogehoge diff --git a/test/test-network/conf/12-dummy.link b/test/test-network/conf/12-dummy.link new file mode 100644 index 0000000..b00ed4c --- /dev/null +++ b/test/test-network/conf/12-dummy.link @@ -0,0 +1,6 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +OriginalName=dummy98 + +[Link] +AlternativeName=hogehogehogehogehogehoge diff --git a/test/test-network/conf/12-dummy.netdev b/test/test-network/conf/12-dummy.netdev new file mode 100644 index 0000000..d0b0eca --- /dev/null +++ b/test/test-network/conf/12-dummy.netdev @@ -0,0 +1,4 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[NetDev] +Name=dummy98 +Kind=dummy diff --git a/test/test-network/conf/12-dummy.network b/test/test-network/conf/12-dummy.network new file mode 100644 index 0000000..6643be1 --- /dev/null +++ b/test/test-network/conf/12-dummy.network @@ -0,0 +1,8 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=dummy98 + +[Network] +IPv6AcceptRA=no +Address=10.1.2.3/16 +Address=2001:db8:0:f101::15/64 diff --git a/test/test-network/conf/12-dummy.network.d/ipv6-mtu-1400.conf b/test/test-network/conf/12-dummy.network.d/ipv6-mtu-1400.conf new file mode 100644 index 0000000..7a2eb53 --- /dev/null +++ b/test/test-network/conf/12-dummy.network.d/ipv6-mtu-1400.conf @@ -0,0 +1,2 @@ +[Network] +IPv6MTUBytes=1400 diff --git a/test/test-network/conf/12-dummy.network.d/ipv6-mtu-1550.conf b/test/test-network/conf/12-dummy.network.d/ipv6-mtu-1550.conf new file mode 100644 index 0000000..6a88073 --- /dev/null +++ b/test/test-network/conf/12-dummy.network.d/ipv6-mtu-1550.conf @@ -0,0 +1,2 @@ +[Network] +IPv6MTUBytes=1550 diff --git a/test/test-network/conf/12-dummy.network.d/mtu.conf b/test/test-network/conf/12-dummy.network.d/mtu.conf new file mode 100644 index 0000000..6e7da63 --- /dev/null +++ b/test/test-network/conf/12-dummy.network.d/mtu.conf @@ -0,0 +1,2 @@ +[Link] +MTUBytes=1600 diff --git a/test/test-network/conf/13-dummy.netdev b/test/test-network/conf/13-dummy.netdev new file mode 100644 index 0000000..5f34b2f --- /dev/null +++ b/test/test-network/conf/13-dummy.netdev @@ -0,0 +1,4 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[NetDev] +Name=dummy99 +Kind=dummy diff --git a/test/test-network/conf/13-not-match-udev-property.network b/test/test-network/conf/13-not-match-udev-property.network new file mode 100644 index 0000000..a7d9fe9 --- /dev/null +++ b/test/test-network/conf/13-not-match-udev-property.network @@ -0,0 +1,7 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=dummy98 +Property=INTERFACE=hoge + +[Network] +IPv6AcceptRA=false diff --git a/test/test-network/conf/14-match-udev-property.network b/test/test-network/conf/14-match-udev-property.network new file mode 100644 index 0000000..23b222a --- /dev/null +++ b/test/test-network/conf/14-match-udev-property.network @@ -0,0 +1,8 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=dummy98 +Property=INTERFACE=dummy98 + +[Network] +IPv6AcceptRA=false +Address=10.1.2.3/16 diff --git a/test/test-network/conf/15-name-conflict-test.netdev b/test/test-network/conf/15-name-conflict-test.netdev new file mode 100644 index 0000000..4b9feb1 --- /dev/null +++ b/test/test-network/conf/15-name-conflict-test.netdev @@ -0,0 +1,5 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[NetDev] +Name=dropin-test +Kind=dummy +MACAddress=00:50:56:c0:00:38 diff --git a/test/test-network/conf/21-bond-802.3ad.netdev b/test/test-network/conf/21-bond-802.3ad.netdev new file mode 100644 index 0000000..ccb8228 --- /dev/null +++ b/test/test-network/conf/21-bond-802.3ad.netdev @@ -0,0 +1,8 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[NetDev] +Name=bond99 +Kind=bond + +[Bond] +Mode=802.3ad +TransmitHashPolicy=layer3+4 diff --git a/test/test-network/conf/21-bond-802.3ad.network b/test/test-network/conf/21-bond-802.3ad.network new file mode 100644 index 0000000..9bed020 --- /dev/null +++ b/test/test-network/conf/21-bond-802.3ad.network @@ -0,0 +1,8 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=bond99 + +[Network] +VLAN=vlan99 +BindCarrier=test1 dummy98 +LinkLocalAddressing=no diff --git a/test/test-network/conf/21-dummy-bond-slave.network b/test/test-network/conf/21-dummy-bond-slave.network new file mode 100644 index 0000000..4c7c9d7 --- /dev/null +++ b/test/test-network/conf/21-dummy-bond-slave.network @@ -0,0 +1,7 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=test1 +Name=dummy98 + +[Network] +Bond=bond99 diff --git a/test/test-network/conf/21-macvlan.netdev b/test/test-network/conf/21-macvlan.netdev new file mode 100644 index 0000000..fdc81ea --- /dev/null +++ b/test/test-network/conf/21-macvlan.netdev @@ -0,0 +1,5 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[NetDev] +Name=macvlan99 +Kind=macvlan +MTUBytes=2000 diff --git a/test/test-network/conf/21-macvtap.netdev b/test/test-network/conf/21-macvtap.netdev new file mode 100644 index 0000000..9655925 --- /dev/null +++ b/test/test-network/conf/21-macvtap.netdev @@ -0,0 +1,4 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[NetDev] +Name=macvtap99 +Kind=macvtap diff --git a/test/test-network/conf/21-vlan-on-bond.netdev b/test/test-network/conf/21-vlan-on-bond.netdev new file mode 100644 index 0000000..caa217a --- /dev/null +++ b/test/test-network/conf/21-vlan-on-bond.netdev @@ -0,0 +1,7 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[NetDev] +Name=vlan99 +Kind=vlan + +[VLAN] +Id=20 diff --git a/test/test-network/conf/21-vlan-on-bond.network b/test/test-network/conf/21-vlan-on-bond.network new file mode 100644 index 0000000..6536b7b --- /dev/null +++ b/test/test-network/conf/21-vlan-on-bond.network @@ -0,0 +1,8 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=vlan99 + +[Network] +IPv6AcceptRA=false +Address=192.168.23.5/24 +LinkLocalAddressing=yes diff --git a/test/test-network/conf/21-vlan-test1.network b/test/test-network/conf/21-vlan-test1.network new file mode 100644 index 0000000..d7c0378 --- /dev/null +++ b/test/test-network/conf/21-vlan-test1.network @@ -0,0 +1,3 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=test1 diff --git a/test/test-network/conf/21-vlan-test1.network.d/override.conf b/test/test-network/conf/21-vlan-test1.network.d/override.conf new file mode 100644 index 0000000..06307ff --- /dev/null +++ b/test/test-network/conf/21-vlan-test1.network.d/override.conf @@ -0,0 +1,5 @@ +[Network] +VLAN=vlan99 +Address=192.168.24.5/24 +Address=192.168.25.5/24 +IPv6AcceptRA=false diff --git a/test/test-network/conf/21-vlan.netdev b/test/test-network/conf/21-vlan.netdev new file mode 100644 index 0000000..0d28187 --- /dev/null +++ b/test/test-network/conf/21-vlan.netdev @@ -0,0 +1,4 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[NetDev] +Name=vlan99 +Kind=vlan diff --git a/test/test-network/conf/21-vlan.netdev.d/override.conf b/test/test-network/conf/21-vlan.netdev.d/override.conf new file mode 100644 index 0000000..c71077d --- /dev/null +++ b/test/test-network/conf/21-vlan.netdev.d/override.conf @@ -0,0 +1,11 @@ +[NetDev] +MTUBytes=2000 + +[VLAN] +Id=99 +GVRP=yes +MVRP=yes +LooseBinding=yes +ReorderHeader=yes +EgressQOSMaps=0-1 1-3 10-3 6-6 7-7 +IngressQOSMaps=15-13 20-100 diff --git a/test/test-network/conf/21-vlan.network b/test/test-network/conf/21-vlan.network new file mode 100644 index 0000000..6536b7b --- /dev/null +++ b/test/test-network/conf/21-vlan.network @@ -0,0 +1,8 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=vlan99 + +[Network] +IPv6AcceptRA=false +Address=192.168.23.5/24 +LinkLocalAddressing=yes diff --git a/test/test-network/conf/23-active-slave.network b/test/test-network/conf/23-active-slave.network new file mode 100644 index 0000000..944eff5 --- /dev/null +++ b/test/test-network/conf/23-active-slave.network @@ -0,0 +1,7 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=dummy98 + +[Network] +Bond=bond199 +ActiveSlave=true diff --git a/test/test-network/conf/23-bond199.network b/test/test-network/conf/23-bond199.network new file mode 100644 index 0000000..9f4879f --- /dev/null +++ b/test/test-network/conf/23-bond199.network @@ -0,0 +1,6 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=bond199 + +[Network] +IPv6AcceptRA=no diff --git a/test/test-network/conf/23-emit-lldp.network b/test/test-network/conf/23-emit-lldp.network new file mode 100644 index 0000000..11b86bc --- /dev/null +++ b/test/test-network/conf/23-emit-lldp.network @@ -0,0 +1,7 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=veth-peer + +[Network] +IPv6AcceptRA=no +EmitLLDP=yes diff --git a/test/test-network/conf/23-keep-master.network b/test/test-network/conf/23-keep-master.network new file mode 100644 index 0000000..2ffb9ba --- /dev/null +++ b/test/test-network/conf/23-keep-master.network @@ -0,0 +1,22 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=dummy98 + +[Network] +LinkLocalAddressing=no +IPv6AcceptRA=no +KeepMaster=true +ActiveSlave=true + +[Bridge] +Cost=400 +HairPin = true +FastLeave = true +UnicastFlood = true +MulticastFlood = false +MulticastToUnicast = true +NeighborSuppression = true +Learning = false +Priority = 23 +UseBPDU = true +AllowPortToBeRoot=true diff --git a/test/test-network/conf/23-primary-slave.network b/test/test-network/conf/23-primary-slave.network new file mode 100644 index 0000000..bf84572 --- /dev/null +++ b/test/test-network/conf/23-primary-slave.network @@ -0,0 +1,7 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=dummy98 + +[Network] +Bond=bond199 +PrimarySlave=true diff --git a/test/test-network/conf/24-keep-configuration-static.network b/test/test-network/conf/24-keep-configuration-static.network new file mode 100644 index 0000000..5123f31 --- /dev/null +++ b/test/test-network/conf/24-keep-configuration-static.network @@ -0,0 +1,7 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=dummy98 + +[Network] +IPv6AcceptRA=no +KeepConfiguration=static diff --git a/test/test-network/conf/24-lldp.network b/test/test-network/conf/24-lldp.network new file mode 100644 index 0000000..d5352e2 --- /dev/null +++ b/test/test-network/conf/24-lldp.network @@ -0,0 +1,7 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=veth99 + +[Network] +IPv6AcceptRA=no +LLDP=yes diff --git a/test/test-network/conf/24-search-domain.network b/test/test-network/conf/24-search-domain.network new file mode 100644 index 0000000..91c4814 --- /dev/null +++ b/test/test-network/conf/24-search-domain.network @@ -0,0 +1,9 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=dummy98 + +[Network] +IPv6AcceptRA=no +Address=192.168.42.100/24 +DNS=192.168.42.1 +Domains= one two three four five six seven eight nine ten diff --git a/test/test-network/conf/25-6rd-tunnel.netdev b/test/test-network/conf/25-6rd-tunnel.netdev new file mode 100644 index 0000000..85f5e0d --- /dev/null +++ b/test/test-network/conf/25-6rd-tunnel.netdev @@ -0,0 +1,8 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[NetDev] +Name=sittun99 +Kind=sit + +[Tunnel] +Local=10.65.223.238 +IPv6RapidDeploymentPrefix=2602::/24 diff --git a/test/test-network/conf/25-6rd.network b/test/test-network/conf/25-6rd.network new file mode 100644 index 0000000..0caa396 --- /dev/null +++ b/test/test-network/conf/25-6rd.network @@ -0,0 +1,7 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=dummy98 + +[Network] +IPv6AcceptRA=no +Tunnel=sittun99 diff --git a/test/test-network/conf/25-activation-policy.network b/test/test-network/conf/25-activation-policy.network new file mode 100644 index 0000000..401d355 --- /dev/null +++ b/test/test-network/conf/25-activation-policy.network @@ -0,0 +1,9 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=test1 +Name=vlan99 + +[Network] +Address=192.168.10.30/24 +Gateway=192.168.10.1 +IPv6AcceptRA=no diff --git a/test/test-network/conf/25-activation-policy.network.d/always-down.conf b/test/test-network/conf/25-activation-policy.network.d/always-down.conf new file mode 100644 index 0000000..edfd12e --- /dev/null +++ b/test/test-network/conf/25-activation-policy.network.d/always-down.conf @@ -0,0 +1,2 @@ +[Link] +ActivationPolicy=always-down diff --git a/test/test-network/conf/25-activation-policy.network.d/always-up.conf b/test/test-network/conf/25-activation-policy.network.d/always-up.conf new file mode 100644 index 0000000..b8e0fff --- /dev/null +++ b/test/test-network/conf/25-activation-policy.network.d/always-up.conf @@ -0,0 +1,2 @@ +[Link] +ActivationPolicy=always-up diff --git a/test/test-network/conf/25-activation-policy.network.d/bound.conf b/test/test-network/conf/25-activation-policy.network.d/bound.conf new file mode 100644 index 0000000..c6d73f0 --- /dev/null +++ b/test/test-network/conf/25-activation-policy.network.d/bound.conf @@ -0,0 +1,5 @@ +[Link] +ActivationPolicy=bound + +[Network] +BindCarrier=dummy98 diff --git a/test/test-network/conf/25-activation-policy.network.d/down.conf b/test/test-network/conf/25-activation-policy.network.d/down.conf new file mode 100644 index 0000000..65af49f --- /dev/null +++ b/test/test-network/conf/25-activation-policy.network.d/down.conf @@ -0,0 +1,2 @@ +[Link] +ActivationPolicy=down diff --git a/test/test-network/conf/25-activation-policy.network.d/manual.conf b/test/test-network/conf/25-activation-policy.network.d/manual.conf new file mode 100644 index 0000000..8b81ccc --- /dev/null +++ b/test/test-network/conf/25-activation-policy.network.d/manual.conf @@ -0,0 +1,2 @@ +[Link] +ActivationPolicy=manual diff --git a/test/test-network/conf/25-activation-policy.network.d/required-no.conf b/test/test-network/conf/25-activation-policy.network.d/required-no.conf new file mode 100644 index 0000000..b97b85a --- /dev/null +++ b/test/test-network/conf/25-activation-policy.network.d/required-no.conf @@ -0,0 +1,2 @@ +[Link] +RequiredForOnline=no diff --git a/test/test-network/conf/25-activation-policy.network.d/required-yes.conf b/test/test-network/conf/25-activation-policy.network.d/required-yes.conf new file mode 100644 index 0000000..84e0f05 --- /dev/null +++ b/test/test-network/conf/25-activation-policy.network.d/required-yes.conf @@ -0,0 +1,2 @@ +[Link] +RequiredForOnline=yes diff --git a/test/test-network/conf/25-activation-policy.network.d/up.conf b/test/test-network/conf/25-activation-policy.network.d/up.conf new file mode 100644 index 0000000..537380b --- /dev/null +++ b/test/test-network/conf/25-activation-policy.network.d/up.conf @@ -0,0 +1,2 @@ +[Link] +ActivationPolicy=up diff --git a/test/test-network/conf/25-address-ipv4acd-veth99.network b/test/test-network/conf/25-address-ipv4acd-veth99.network new file mode 100644 index 0000000..2abe2f7 --- /dev/null +++ b/test/test-network/conf/25-address-ipv4acd-veth99.network @@ -0,0 +1,10 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=veth99 + +[Network] +IPv6AcceptRA=no + +[Address] +Address=192.168.100.11/24 +DuplicateAddressDetection=ipv4 diff --git a/test/test-network/conf/25-address-ipv4acd-veth99.network.d/conflict-address.conf b/test/test-network/conf/25-address-ipv4acd-veth99.network.d/conflict-address.conf new file mode 100644 index 0000000..cec39e4 --- /dev/null +++ b/test/test-network/conf/25-address-ipv4acd-veth99.network.d/conflict-address.conf @@ -0,0 +1,3 @@ +[Address] +Address=192.168.100.10/24 +DuplicateAddressDetection=ipv4 diff --git a/test/test-network/conf/25-address-link-section.network b/test/test-network/conf/25-address-link-section.network new file mode 100644 index 0000000..644b23f --- /dev/null +++ b/test/test-network/conf/25-address-link-section.network @@ -0,0 +1,9 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=dummy98 + +[Link] +MACAddress=00:01:02:aa:bb:cc + +[Network] +IPv6AcceptRA=no diff --git a/test/test-network/conf/25-address-peer-ipv4.network b/test/test-network/conf/25-address-peer-ipv4.network new file mode 100644 index 0000000..0108d43 --- /dev/null +++ b/test/test-network/conf/25-address-peer-ipv4.network @@ -0,0 +1,10 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=dummy98 + +[Network] +IPv6AcceptRA=no + +[Address] +Address=100.64.0.1/32 +Peer=100.64.0.2/32 diff --git a/test/test-network/conf/25-address-static.network b/test/test-network/conf/25-address-static.network new file mode 100644 index 0000000..6d2baa3 --- /dev/null +++ b/test/test-network/conf/25-address-static.network @@ -0,0 +1,368 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=dummy98 + +[Network] +IPv6AcceptRA=no +Address=10.1.2.3/16 +Address=10.1.2.4/16 +Address=10.2.2.4/16 +Address=2001:db8:0:f101::15/64 +Address=2001:db8:0:f101::16/64 +Address=2001:db8:0:f102::15/64 +# these lines are ignored +Address=hogehoge +Address=foofoo + +[Address] +Address=10.3.2.3/16 +Label=32 + +[Address] +Address=10.4.2.3/16 +Peer=10.4.2.4/16 +Label=33 + +[Address] +Address=0.0.0.0/24 +Label=34 + +[Address] +Address=0.0.0.0/16 +Label=35 + +[Address] +# this section must be ignored +Peer=hoge +Address=10.10.0.1/16 +Label=30 + +[Address] +# this section must be ignored +Label=30 +Peer=hoge +Address=10.10.0.2/16 + +[Address] +# address and peer must be in the same family +Address=10.10.0.3/16 +Peer=2001:db8:0:f103::10/128 + +[Address] +Address=2001:db8:0:f102::16/64 + +[Address] +Address=2001:db8:0:f103::20/128 +Peer=2001:db8:0:f103::10/128 + +[Address] +Address=::/64 + +[Network] +# this will later deduped by the following section +Address=10.7.8.9/16 + +[Address] +Address=10.7.8.9/16 +PreferredLifetime=0 +Scope=link + +[Address] +# this will also deduped +Address=2001:0db8:1:f101::1/64 +PreferredLifetime=infinity + +[Address] +Address=2001:0db8:1:f101::1/64 +PreferredLifetime=0 + +[Address] +Address=10.8.8.1/16 +Broadcast=yes +Broadcast= +Broadcast=no + +[Address] +Address=10.8.8.2/16 +Broadcast=10.8.8.128 + +[Address] +# Invalid broadcast +Address=10.8.8.2/16 +Broadcast=::1 + +[Address] +# broadcast cannot set for IPv6 address +Address=2001:0db8:1:f101::2/64 +Broadcast=::1 + +[Address] +Address=10.9.0.1/16 +RouteMetric=128 + +[Address] +# invalid metric +Address=10.9.0.1/16 +RouteMetric=hoge + +# test for ENOBUFS issue #17012 +[Network] +Address=10.3.3.1/16 +Address=10.3.3.2/16 +Address=10.3.3.3/16 +Address=10.3.3.4/16 +Address=10.3.3.5/16 +Address=10.3.3.6/16 +Address=10.3.3.7/16 +Address=10.3.3.8/16 +Address=10.3.3.9/16 +Address=10.3.3.10/16 +Address=10.3.3.11/16 +Address=10.3.3.12/16 +Address=10.3.3.13/16 +Address=10.3.3.14/16 +Address=10.3.3.15/16 +Address=10.3.3.16/16 +Address=10.3.3.17/16 +Address=10.3.3.18/16 +Address=10.3.3.19/16 +Address=10.3.3.20/16 +Address=10.3.3.21/16 +Address=10.3.3.22/16 +Address=10.3.3.23/16 +Address=10.3.3.24/16 +Address=10.3.3.25/16 +Address=10.3.3.26/16 +Address=10.3.3.27/16 +Address=10.3.3.28/16 +Address=10.3.3.29/16 +Address=10.3.3.30/16 +Address=10.3.3.31/16 +Address=10.3.3.32/16 +Address=10.3.3.33/16 +Address=10.3.3.34/16 +Address=10.3.3.35/16 +Address=10.3.3.36/16 +Address=10.3.3.37/16 +Address=10.3.3.38/16 +Address=10.3.3.39/16 +Address=10.3.3.40/16 +Address=10.3.3.41/16 +Address=10.3.3.42/16 +Address=10.3.3.43/16 +Address=10.3.3.44/16 +Address=10.3.3.45/16 +Address=10.3.3.46/16 +Address=10.3.3.47/16 +Address=10.3.3.48/16 +Address=10.3.3.49/16 +Address=10.3.3.50/16 +Address=10.3.3.51/16 +Address=10.3.3.52/16 +Address=10.3.3.53/16 +Address=10.3.3.54/16 +Address=10.3.3.55/16 +Address=10.3.3.56/16 +Address=10.3.3.57/16 +Address=10.3.3.58/16 +Address=10.3.3.59/16 +Address=10.3.3.60/16 +Address=10.3.3.61/16 +Address=10.3.3.62/16 +Address=10.3.3.63/16 +Address=10.3.3.64/16 +Address=10.3.3.65/16 +Address=10.3.3.66/16 +Address=10.3.3.67/16 +Address=10.3.3.68/16 +Address=10.3.3.69/16 +Address=10.3.3.70/16 +Address=10.3.3.71/16 +Address=10.3.3.72/16 +Address=10.3.3.73/16 +Address=10.3.3.74/16 +Address=10.3.3.75/16 +Address=10.3.3.76/16 +Address=10.3.3.77/16 +Address=10.3.3.78/16 +Address=10.3.3.79/16 +Address=10.3.3.80/16 +Address=10.3.3.81/16 +Address=10.3.3.82/16 +Address=10.3.3.83/16 +Address=10.3.3.84/16 +Address=10.3.3.85/16 +Address=10.3.3.86/16 +Address=10.3.3.87/16 +Address=10.3.3.88/16 +Address=10.3.3.89/16 +Address=10.3.3.90/16 +Address=10.3.3.91/16 +Address=10.3.3.92/16 +Address=10.3.3.93/16 +Address=10.3.3.94/16 +Address=10.3.3.95/16 +Address=10.3.3.96/16 +Address=10.3.3.97/16 +Address=10.3.3.98/16 +Address=10.3.3.99/16 +Address=10.3.3.100/16 +Address=10.3.3.101/16 +Address=10.3.3.102/16 +Address=10.3.3.103/16 +Address=10.3.3.104/16 +Address=10.3.3.105/16 +Address=10.3.3.106/16 +Address=10.3.3.107/16 +Address=10.3.3.108/16 +Address=10.3.3.109/16 +Address=10.3.3.110/16 +Address=10.3.3.111/16 +Address=10.3.3.112/16 +Address=10.3.3.113/16 +Address=10.3.3.114/16 +Address=10.3.3.115/16 +Address=10.3.3.116/16 +Address=10.3.3.117/16 +Address=10.3.3.118/16 +Address=10.3.3.119/16 +Address=10.3.3.120/16 +Address=10.3.3.121/16 +Address=10.3.3.122/16 +Address=10.3.3.123/16 +Address=10.3.3.124/16 +Address=10.3.3.125/16 +Address=10.3.3.126/16 +Address=10.3.3.127/16 +Address=10.3.3.128/16 +Address=10.3.3.129/16 +Address=10.3.3.130/16 +Address=10.3.3.131/16 +Address=10.3.3.132/16 +Address=10.3.3.133/16 +Address=10.3.3.134/16 +Address=10.3.3.135/16 +Address=10.3.3.136/16 +Address=10.3.3.137/16 +Address=10.3.3.138/16 +Address=10.3.3.139/16 +Address=10.3.3.140/16 +Address=10.3.3.141/16 +Address=10.3.3.142/16 +Address=10.3.3.143/16 +Address=10.3.3.144/16 +Address=10.3.3.145/16 +Address=10.3.3.146/16 +Address=10.3.3.147/16 +Address=10.3.3.148/16 +Address=10.3.3.149/16 +Address=10.3.3.150/16 +Address=10.3.3.151/16 +Address=10.3.3.152/16 +Address=10.3.3.153/16 +Address=10.3.3.154/16 +Address=10.3.3.155/16 +Address=10.3.3.156/16 +Address=10.3.3.157/16 +Address=10.3.3.158/16 +Address=10.3.3.159/16 +Address=10.3.3.160/16 +Address=10.3.3.161/16 +Address=10.3.3.162/16 +Address=10.3.3.163/16 +Address=10.3.3.164/16 +Address=10.3.3.165/16 +Address=10.3.3.166/16 +Address=10.3.3.167/16 +Address=10.3.3.168/16 +Address=10.3.3.169/16 +Address=10.3.3.170/16 +Address=10.3.3.171/16 +Address=10.3.3.172/16 +Address=10.3.3.173/16 +Address=10.3.3.174/16 +Address=10.3.3.175/16 +Address=10.3.3.176/16 +Address=10.3.3.177/16 +Address=10.3.3.178/16 +Address=10.3.3.179/16 +Address=10.3.3.180/16 +Address=10.3.3.181/16 +Address=10.3.3.182/16 +Address=10.3.3.183/16 +Address=10.3.3.184/16 +Address=10.3.3.185/16 +Address=10.3.3.186/16 +Address=10.3.3.187/16 +Address=10.3.3.188/16 +Address=10.3.3.189/16 +Address=10.3.3.190/16 +Address=10.3.3.191/16 +Address=10.3.3.192/16 +Address=10.3.3.193/16 +Address=10.3.3.194/16 +Address=10.3.3.195/16 +Address=10.3.3.196/16 +Address=10.3.3.197/16 +Address=10.3.3.198/16 +Address=10.3.3.199/16 +Address=10.3.3.200/16 +Address=10.3.3.201/16 +Address=10.3.3.202/16 +Address=10.3.3.203/16 +Address=10.3.3.204/16 +Address=10.3.3.205/16 +Address=10.3.3.206/16 +Address=10.3.3.207/16 +Address=10.3.3.208/16 +Address=10.3.3.209/16 +Address=10.3.3.210/16 +Address=10.3.3.211/16 +Address=10.3.3.212/16 +Address=10.3.3.213/16 +Address=10.3.3.214/16 +Address=10.3.3.215/16 +Address=10.3.3.216/16 +Address=10.3.3.217/16 +Address=10.3.3.218/16 +Address=10.3.3.219/16 +Address=10.3.3.220/16 +Address=10.3.3.221/16 +Address=10.3.3.222/16 +Address=10.3.3.223/16 +Address=10.3.3.224/16 +Address=10.3.3.225/16 +Address=10.3.3.226/16 +Address=10.3.3.227/16 +Address=10.3.3.228/16 +Address=10.3.3.229/16 +Address=10.3.3.230/16 +Address=10.3.3.231/16 +Address=10.3.3.232/16 +Address=10.3.3.233/16 +Address=10.3.3.234/16 +Address=10.3.3.235/16 +Address=10.3.3.236/16 +Address=10.3.3.237/16 +Address=10.3.3.238/16 +Address=10.3.3.239/16 +Address=10.3.3.240/16 +Address=10.3.3.241/16 +Address=10.3.3.242/16 +Address=10.3.3.243/16 +Address=10.3.3.244/16 +Address=10.3.3.245/16 +Address=10.3.3.246/16 +Address=10.3.3.247/16 +Address=10.3.3.248/16 +Address=10.3.3.249/16 +Address=10.3.3.250/16 +Address=10.3.3.251/16 +Address=10.3.3.252/16 +Address=10.3.3.253/16 +Address=10.3.3.254/16 + +[Address] +Address=10.4.3.2/24 +# just a random label which should exist +NetLabel=system_u:object_r:root_t:s0 diff --git a/test/test-network/conf/25-agent-client-peer.network b/test/test-network/conf/25-agent-client-peer.network new file mode 100644 index 0000000..e31108b --- /dev/null +++ b/test/test-network/conf/25-agent-client-peer.network @@ -0,0 +1,15 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=client-peer + +[Network] +Address=192.168.6.2/24 +DHCPServer=yes +IPForward=ipv4 +IPv6AcceptRA=no + +[DHCPServer] +RelayTarget=192.168.5.1 +BindToInterface=no +RelayAgentCircuitId=string:sample_circuit_id +RelayAgentRemoteId=string:sample_remote_id diff --git a/test/test-network/conf/25-agent-client.network b/test/test-network/conf/25-agent-client.network new file mode 100644 index 0000000..cfa7e5a --- /dev/null +++ b/test/test-network/conf/25-agent-client.network @@ -0,0 +1,8 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=client + +[Network] +DHCP=yes +IPForward=ipv4 +IPv6AcceptRA=no diff --git a/test/test-network/conf/25-agent-server-peer.network b/test/test-network/conf/25-agent-server-peer.network new file mode 100644 index 0000000..1f6fa4b --- /dev/null +++ b/test/test-network/conf/25-agent-server-peer.network @@ -0,0 +1,8 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=server-peer + +[Network] +Address=192.168.5.2/24 +IPForward=ipv4 +IPv6AcceptRA=no diff --git a/test/test-network/conf/25-agent-server.network b/test/test-network/conf/25-agent-server.network new file mode 100644 index 0000000..905508f --- /dev/null +++ b/test/test-network/conf/25-agent-server.network @@ -0,0 +1,16 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=server + +[Network] +Address=192.168.5.1/24 +IPForward=ipv4 +DHCPServer=yes +IPv6AcceptRA=no + +[DHCPServer] +BindToInterface=no +PoolOffset=150 +PoolSize=1 +DNS=192.168.5.1 +NTP=192.168.5.1 diff --git a/test/test-network/conf/25-agent-veth-client.netdev b/test/test-network/conf/25-agent-veth-client.netdev new file mode 100644 index 0000000..e52e43a --- /dev/null +++ b/test/test-network/conf/25-agent-veth-client.netdev @@ -0,0 +1,9 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[NetDev] +Name=client +Kind=veth +MACAddress=12:34:56:78:9a:bc + +[Peer] +Name=client-peer +MACAddress=12:34:56:78:9a:bd diff --git a/test/test-network/conf/25-agent-veth-server.netdev b/test/test-network/conf/25-agent-veth-server.netdev new file mode 100644 index 0000000..1427024 --- /dev/null +++ b/test/test-network/conf/25-agent-veth-server.netdev @@ -0,0 +1,9 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[NetDev] +Name=server +Kind=veth +MACAddress=12:34:56:78:9b:bc + +[Peer] +Name=server-peer +MACAddress=12:34:56:78:9b:bd diff --git a/test/test-network/conf/25-bareudp.netdev b/test/test-network/conf/25-bareudp.netdev new file mode 100644 index 0000000..4fd9242 --- /dev/null +++ b/test/test-network/conf/25-bareudp.netdev @@ -0,0 +1,8 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[NetDev] +Kind=bareudp +Name=bareudp99 + +[BareUDP] +DestinationPort=1000 +EtherType=ipv4 diff --git a/test/test-network/conf/25-batadv.netdev b/test/test-network/conf/25-batadv.netdev new file mode 100644 index 0000000..06d51b0 --- /dev/null +++ b/test/test-network/conf/25-batadv.netdev @@ -0,0 +1,15 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[NetDev] +Name=batadv99 +Kind=batadv +Description=Batman test + +[BatmanAdvanced] +GatewayMode=server +RoutingAlgorithm=batman-iv +DistributedArpTable=1 +Fragmentation=0 +HopPenalty=10 +OriginatorIntervalSec=1000ms +GatewayBandwidthDown=205M +GatewayBandwidthUp=2G diff --git a/test/test-network/conf/25-bind-carrier.network b/test/test-network/conf/25-bind-carrier.network new file mode 100644 index 0000000..81517f4 --- /dev/null +++ b/test/test-network/conf/25-bind-carrier.network @@ -0,0 +1,9 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=test1 + +[Network] +BindCarrier=dummy99 dummy98 +Address=192.168.10.30/24 +Gateway=192.168.10.1 +IPv6AcceptRA=no diff --git a/test/test-network/conf/25-bond-active-backup-slave.netdev b/test/test-network/conf/25-bond-active-backup-slave.netdev new file mode 100644 index 0000000..6de5497 --- /dev/null +++ b/test/test-network/conf/25-bond-active-backup-slave.netdev @@ -0,0 +1,7 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[NetDev] +Name=bond199 +Kind=bond + +[Bond] +Mode=active-backup diff --git a/test/test-network/conf/25-bond-balanced-tlb.netdev b/test/test-network/conf/25-bond-balanced-tlb.netdev new file mode 100644 index 0000000..67829f3 --- /dev/null +++ b/test/test-network/conf/25-bond-balanced-tlb.netdev @@ -0,0 +1,8 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[NetDev] +Name=bond98 +Kind=bond + +[Bond] +Mode=balance-tlb +DynamicTransmitLoadBalancing=true diff --git a/test/test-network/conf/25-bond-slave.network b/test/test-network/conf/25-bond-slave.network new file mode 100644 index 0000000..12228a3 --- /dev/null +++ b/test/test-network/conf/25-bond-slave.network @@ -0,0 +1,13 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=dummy98 test1 + +[Network] +Bond=bond99 + +# Settings below should be ignored +IPv6AcceptRA=yes +LinkLocalAddressing=yes +DHCP=yes +Address=192.168.25.3/24 +Gateway=192.168.25.1 diff --git a/test/test-network/conf/25-bond.netdev b/test/test-network/conf/25-bond.netdev new file mode 100644 index 0000000..ff0222a --- /dev/null +++ b/test/test-network/conf/25-bond.netdev @@ -0,0 +1,19 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[NetDev] +Name=bond99 +Kind=bond + +[Bond] +Mode=802.3ad +TransmitHashPolicy=layer3+4 +MIIMonitorSec=1s +LACPTransmitRate=fast +UpDelaySec=2s +DownDelaySec=2s +ResendIGMP=4 +MinLinks=1 +AdActorSystemPriority=1218 +AdUserPortKey=811 +AdActorSystem=00:11:22:33:44:55 +# feed the sanitizer +AdActorSystem=00:11:22:33:44:55 diff --git a/test/test-network/conf/25-bond99.network b/test/test-network/conf/25-bond99.network new file mode 100644 index 0000000..09da6a0 --- /dev/null +++ b/test/test-network/conf/25-bond99.network @@ -0,0 +1,7 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=bond99 + +[Network] +IPv6AcceptRA=no +Address=192.168.123.45/24 diff --git a/test/test-network/conf/25-bridge-configure-without-carrier.network b/test/test-network/conf/25-bridge-configure-without-carrier.network new file mode 100644 index 0000000..6a8d491 --- /dev/null +++ b/test/test-network/conf/25-bridge-configure-without-carrier.network @@ -0,0 +1,7 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=bridge99 + +[Network] +IPv6AcceptRA=no +ConfigureWithoutCarrier=yes diff --git a/test/test-network/conf/25-bridge.netdev b/test/test-network/conf/25-bridge.netdev new file mode 100644 index 0000000..d9d6f6e --- /dev/null +++ b/test/test-network/conf/25-bridge.netdev @@ -0,0 +1,19 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[NetDev] +Name=bridge99 +Kind=bridge + +[Bridge] +HelloTimeSec=9 +MaxAgeSec=9 +AgeingTimeSec=9 +ForwardDelaySec=9 +Priority=9 +#GroupForwardMask=9 # This interferes other other settings +DefaultPVID=9 +MulticastQuerier=yes +MulticastSnooping=yes +VLANFiltering=yes +VLANProtocol=802.1ad +STP=true +MulticastIGMPVersion=3 diff --git a/test/test-network/conf/25-bridge.network b/test/test-network/conf/25-bridge.network new file mode 100644 index 0000000..c718892 --- /dev/null +++ b/test/test-network/conf/25-bridge.network @@ -0,0 +1,6 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=bridge99 + +[Network] +IPv6AcceptRA=no diff --git a/test/test-network/conf/25-bridge99-ignore-carrier-loss.network b/test/test-network/conf/25-bridge99-ignore-carrier-loss.network new file mode 100644 index 0000000..1c1b342 --- /dev/null +++ b/test/test-network/conf/25-bridge99-ignore-carrier-loss.network @@ -0,0 +1,14 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=bridge99 + +[Network] +Address=192.168.0.15/24 +Gateway=192.168.0.1 +IPv6AcceptRA=no +IgnoreCarrierLoss=true +ConfigureWithoutCarrier=true + +[RoutingPolicyRule] +To=8.8.8.8 +Table=100 diff --git a/test/test-network/conf/25-bridge99.network b/test/test-network/conf/25-bridge99.network new file mode 100644 index 0000000..dbeb04e --- /dev/null +++ b/test/test-network/conf/25-bridge99.network @@ -0,0 +1,11 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=bridge99 + +[Link] +MTUBytes=9000 + +[Network] +Address=192.168.0.15/24 +Gateway=192.168.0.1 +IPv6AcceptRA=no diff --git a/test/test-network/conf/25-dhcp-client-allow-list.network b/test/test-network/conf/25-dhcp-client-allow-list.network new file mode 100644 index 0000000..b8a49a0 --- /dev/null +++ b/test/test-network/conf/25-dhcp-client-allow-list.network @@ -0,0 +1,12 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=veth99 + +[Network] +DHCP=ipv4 +IPv6AcceptRA=false + +[DHCPv4] +# DenyList= will be ignored +AllowList=192.168.5.0/24 192.168.6.0/24 +DenyList=192.168.5.0/24 diff --git a/test/test-network/conf/25-dhcp-client-anonymize.network b/test/test-network/conf/25-dhcp-client-anonymize.network new file mode 100644 index 0000000..fb356ce --- /dev/null +++ b/test/test-network/conf/25-dhcp-client-anonymize.network @@ -0,0 +1,17 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=veth99 + +[Network] +DHCP=ipv4 +IPv6AcceptRA=false + +[DHCPv4] +Anonymize=true +UseMTU=true +UseRoutes=true +SendHostname=true +UseHostname=true +Hostname=test-hostname +ClientIdentifier=mac +VendorClassIdentifier=SusantVendorTest diff --git a/test/test-network/conf/25-dhcp-client-gateway-onlink-implicit.network b/test/test-network/conf/25-dhcp-client-gateway-onlink-implicit.network new file mode 100644 index 0000000..e133051 --- /dev/null +++ b/test/test-network/conf/25-dhcp-client-gateway-onlink-implicit.network @@ -0,0 +1,15 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=veth99 + +[Network] +DHCP=ipv4 +IPv6AcceptRA=no + +[Route] +Gateway=192.168.0.1 +Destination=10.0.0.0/8 + +[Route] +Gateway=192.168.0.1 +Destination=192.168.100.0/24 diff --git a/test/test-network/conf/25-dhcp-client-ipv4-only.network b/test/test-network/conf/25-dhcp-client-ipv4-only.network new file mode 100644 index 0000000..bd8843b --- /dev/null +++ b/test/test-network/conf/25-dhcp-client-ipv4-only.network @@ -0,0 +1,44 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=veth99 + +[Network] +DHCP=ipv4 +IPv6AcceptRA=no +Address=192.168.5.250 + +[DHCPv4] +UseDomains=yes +UseMTU=yes +UseRoutes=yes +RoutesToDNS=yes +RouteTable=211 +RouteMetric=24 +UseHostname=yes +Hostname=test-hostname +SendOption=12:string:test +SendHostname=yes +ClientIdentifier=mac +VendorClassIdentifier=FooBarVendorTest +Label=test-label +ListenPort=5555 +SendDecline=yes +# DenyList= will be ignored +AllowList=192.168.5.0/24 192.168.6.0/24 +DenyList=192.168.5.0/24 +# just a random label which should exist +NetLabel=system_u:object_r:root_t:s0 + +[Route] +Destination=192.168.5.0/24 + +[Route] +Destination=192.168.6.0/24 + +[Route] +Destination=192.168.7.0/24 + +[Route] +Gateway=_dhcp4 +Destination=10.0.0.0/8 +Table=211 diff --git a/test/test-network/conf/25-dhcp-client-ipv4-use-routes-use-gateway.network b/test/test-network/conf/25-dhcp-client-ipv4-use-routes-use-gateway.network new file mode 100644 index 0000000..43702d5 --- /dev/null +++ b/test/test-network/conf/25-dhcp-client-ipv4-use-routes-use-gateway.network @@ -0,0 +1,7 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=veth99 + +[Network] +DHCP=ipv4 +IPv6AcceptRA=false diff --git a/test/test-network/conf/25-dhcp-client-ipv4-use-routes-use-gateway.network.d/use-dns-and-ntp-routes-False.conf b/test/test-network/conf/25-dhcp-client-ipv4-use-routes-use-gateway.network.d/use-dns-and-ntp-routes-False.conf new file mode 100644 index 0000000..76383ab --- /dev/null +++ b/test/test-network/conf/25-dhcp-client-ipv4-use-routes-use-gateway.network.d/use-dns-and-ntp-routes-False.conf @@ -0,0 +1,3 @@ +[DHCPv4] +RoutesToDNS=no +RoutesToNTP=no diff --git a/test/test-network/conf/25-dhcp-client-ipv4-use-routes-use-gateway.network.d/use-dns-and-ntp-routes-True.conf b/test/test-network/conf/25-dhcp-client-ipv4-use-routes-use-gateway.network.d/use-dns-and-ntp-routes-True.conf new file mode 100644 index 0000000..6d6b1ed --- /dev/null +++ b/test/test-network/conf/25-dhcp-client-ipv4-use-routes-use-gateway.network.d/use-dns-and-ntp-routes-True.conf @@ -0,0 +1,3 @@ +[DHCPv4] +RoutesToDNS=yes +RoutesToNTP=yes diff --git a/test/test-network/conf/25-dhcp-client-ipv4-use-routes-use-gateway.network.d/use-gateway-False.conf b/test/test-network/conf/25-dhcp-client-ipv4-use-routes-use-gateway.network.d/use-gateway-False.conf new file mode 100644 index 0000000..78d0493 --- /dev/null +++ b/test/test-network/conf/25-dhcp-client-ipv4-use-routes-use-gateway.network.d/use-gateway-False.conf @@ -0,0 +1,2 @@ +[DHCPv4] +UseGateway=no diff --git a/test/test-network/conf/25-dhcp-client-ipv4-use-routes-use-gateway.network.d/use-gateway-True.conf b/test/test-network/conf/25-dhcp-client-ipv4-use-routes-use-gateway.network.d/use-gateway-True.conf new file mode 100644 index 0000000..f6f597b --- /dev/null +++ b/test/test-network/conf/25-dhcp-client-ipv4-use-routes-use-gateway.network.d/use-gateway-True.conf @@ -0,0 +1,2 @@ +[DHCPv4] +UseGateway=yes diff --git a/test/test-network/conf/25-dhcp-client-ipv4-use-routes-use-gateway.network.d/use-routes-False.conf b/test/test-network/conf/25-dhcp-client-ipv4-use-routes-use-gateway.network.d/use-routes-False.conf new file mode 100644 index 0000000..38fa983 --- /dev/null +++ b/test/test-network/conf/25-dhcp-client-ipv4-use-routes-use-gateway.network.d/use-routes-False.conf @@ -0,0 +1,2 @@ +[DHCPv4] +UseRoutes=no diff --git a/test/test-network/conf/25-dhcp-client-ipv4-use-routes-use-gateway.network.d/use-routes-True.conf b/test/test-network/conf/25-dhcp-client-ipv4-use-routes-use-gateway.network.d/use-routes-True.conf new file mode 100644 index 0000000..3b2d0ab --- /dev/null +++ b/test/test-network/conf/25-dhcp-client-ipv4-use-routes-use-gateway.network.d/use-routes-True.conf @@ -0,0 +1,2 @@ +[DHCPv4] +UseRoutes=yes diff --git a/test/test-network/conf/25-dhcp-client-ipv6-only.network b/test/test-network/conf/25-dhcp-client-ipv6-only.network new file mode 100644 index 0000000..eb5bd02 --- /dev/null +++ b/test/test-network/conf/25-dhcp-client-ipv6-only.network @@ -0,0 +1,11 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=veth99 + +[Network] +DHCP=ipv6 +IPv6Token=::1a:2b:3c:4d + +[Route] +Gateway=_ipv6ra +Destination=2001:1234:5:9fff:ff:ff:ff:ff/128 diff --git a/test/test-network/conf/25-dhcp-client-keep-configuration-dhcp-on-stop.network b/test/test-network/conf/25-dhcp-client-keep-configuration-dhcp-on-stop.network new file mode 100644 index 0000000..9a737f3 --- /dev/null +++ b/test/test-network/conf/25-dhcp-client-keep-configuration-dhcp-on-stop.network @@ -0,0 +1,8 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=veth99 + +[Network] +DHCP=ipv4 +IPv6AcceptRA=false +KeepConfiguration=dhcp-on-stop diff --git a/test/test-network/conf/25-dhcp-client-keep-configuration-dhcp.network b/test/test-network/conf/25-dhcp-client-keep-configuration-dhcp.network new file mode 100644 index 0000000..c72af56 --- /dev/null +++ b/test/test-network/conf/25-dhcp-client-keep-configuration-dhcp.network @@ -0,0 +1,8 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=veth99 + +[Network] +DHCP=ipv4 +IPv6AcceptRA=false +KeepConfiguration=dhcp diff --git a/test/test-network/conf/25-dhcp-client-static-lease.network b/test/test-network/conf/25-dhcp-client-static-lease.network new file mode 100644 index 0000000..f9405f8 --- /dev/null +++ b/test/test-network/conf/25-dhcp-client-static-lease.network @@ -0,0 +1,10 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=veth99 + +[Network] +IPv6AcceptRA=no +DHCP=ipv4 + +[DHCPv4] +ClientIdentifier=mac diff --git a/test/test-network/conf/25-dhcp-client-timezone-router.network b/test/test-network/conf/25-dhcp-client-timezone-router.network new file mode 100644 index 0000000..ae04827 --- /dev/null +++ b/test/test-network/conf/25-dhcp-client-timezone-router.network @@ -0,0 +1,11 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=veth99 + +[Network] +IPv6AcceptRA=false +DHCP=ipv4 + +[DHCPv4] +UseRoutes=true +UseTimezone=true diff --git a/test/test-network/conf/25-dhcp-client-use-dns-ipv4-and-ra.network b/test/test-network/conf/25-dhcp-client-use-dns-ipv4-and-ra.network new file mode 100644 index 0000000..b11a578 --- /dev/null +++ b/test/test-network/conf/25-dhcp-client-use-dns-ipv4-and-ra.network @@ -0,0 +1,12 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=veth99 + +[Network] +DHCP=ipv4 + +[DHCPv4] +UseDNS=yes + +[IPv6AcceptRA] +UseDNS=yes diff --git a/test/test-network/conf/25-dhcp-client-use-dns-ipv4.network b/test/test-network/conf/25-dhcp-client-use-dns-ipv4.network new file mode 100644 index 0000000..5fbda20 --- /dev/null +++ b/test/test-network/conf/25-dhcp-client-use-dns-ipv4.network @@ -0,0 +1,15 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=veth99 + +[Network] +DHCP=ipv4 + +[DHCPv4] +UseDNS=yes + +[DHCPv6] +UseDNS=no + +[IPv6AcceptRA] +UseDNS=no diff --git a/test/test-network/conf/25-dhcp-client-use-dns-no.network b/test/test-network/conf/25-dhcp-client-use-dns-no.network new file mode 100644 index 0000000..9b651c1 --- /dev/null +++ b/test/test-network/conf/25-dhcp-client-use-dns-no.network @@ -0,0 +1,15 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=veth99 + +[Network] +DHCP=yes + +[DHCPv4] +UseDNS=no + +[DHCPv6] +UseDNS=no + +[IPv6AcceptRA] +UseDNS=no diff --git a/test/test-network/conf/25-dhcp-client-use-dns-yes.network b/test/test-network/conf/25-dhcp-client-use-dns-yes.network new file mode 100644 index 0000000..787a84d --- /dev/null +++ b/test/test-network/conf/25-dhcp-client-use-dns-yes.network @@ -0,0 +1,15 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=veth99 + +[Network] +DHCP=yes + +[DHCPv4] +UseDNS=yes + +[DHCPv6] +UseDNS=yes + +[IPv6AcceptRA] +UseDNS=no diff --git a/test/test-network/conf/25-dhcp-client-vrf.network b/test/test-network/conf/25-dhcp-client-vrf.network new file mode 100644 index 0000000..98388eb --- /dev/null +++ b/test/test-network/conf/25-dhcp-client-vrf.network @@ -0,0 +1,8 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=veth99 + +[Network] +DHCP=yes +IPv6AcceptRA=yes +VRF=vrf99 diff --git a/test/test-network/conf/25-dhcp-client-with-ipv4ll.network b/test/test-network/conf/25-dhcp-client-with-ipv4ll.network new file mode 100644 index 0000000..6ea9aff --- /dev/null +++ b/test/test-network/conf/25-dhcp-client-with-ipv4ll.network @@ -0,0 +1,9 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=veth99 + +[Network] +DHCP=ipv4 +LinkLocalAddressing=yes +IPv6AcceptRA=no +IPv4LLStartAddress=169.254.133.11 diff --git a/test/test-network/conf/25-dhcp-client-with-static-address.network b/test/test-network/conf/25-dhcp-client-with-static-address.network new file mode 100644 index 0000000..7c9d949 --- /dev/null +++ b/test/test-network/conf/25-dhcp-client-with-static-address.network @@ -0,0 +1,8 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=veth99 + +[Network] +DHCP=ipv4 +IPv6AcceptRA=no +Address=192.168.5.250 diff --git a/test/test-network/conf/25-dhcp-client.network b/test/test-network/conf/25-dhcp-client.network new file mode 100644 index 0000000..c633839 --- /dev/null +++ b/test/test-network/conf/25-dhcp-client.network @@ -0,0 +1,6 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=veth99 + +[Network] +DHCP=yes diff --git a/test/test-network/conf/25-dhcp-pd-downstream-dummy97.network b/test/test-network/conf/25-dhcp-pd-downstream-dummy97.network new file mode 100644 index 0000000..e3e41a0 --- /dev/null +++ b/test/test-network/conf/25-dhcp-pd-downstream-dummy97.network @@ -0,0 +1,16 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=dummy97 + +[Network] +IPv6PrivacyExtensions=yes +IPv6AcceptRA=no +DHCP=no +DHCPPrefixDelegation=yes + +[DHCPPrefixDelegation] +UplinkInterface=veth99 +SubnetId=1 +Announce=no +Token=eui64 +Token=::1a:2b:3c:4d diff --git a/test/test-network/conf/25-dhcp-pd-downstream-dummy98.network b/test/test-network/conf/25-dhcp-pd-downstream-dummy98.network new file mode 100644 index 0000000..2babc43 --- /dev/null +++ b/test/test-network/conf/25-dhcp-pd-downstream-dummy98.network @@ -0,0 +1,18 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=dummy98 + +[Network] +IPv6PrivacyExtensions=yes +IPv6AcceptRA=no +DHCP=no +DHCPPrefixDelegation=yes + +[DHCPPrefixDelegation] +UplinkInterface=veth99 +SubnetId=0 +Announce=no +Token=eui64 +Token=::1a:2b:3c:4d +# just a random label which should exist +NetLabel=system_u:object_r:root_t:s0 diff --git a/test/test-network/conf/25-dhcp-pd-downstream-dummy99.network b/test/test-network/conf/25-dhcp-pd-downstream-dummy99.network new file mode 100644 index 0000000..01c1d55 --- /dev/null +++ b/test/test-network/conf/25-dhcp-pd-downstream-dummy99.network @@ -0,0 +1,14 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=dummy99 + +[Network] +IPv6PrivacyExtensions=yes +IPv6AcceptRA=no +DHCP=no +DHCPPrefixDelegation=yes + +[DHCPPrefixDelegation] +UplinkInterface=veth99 +Assign=no +Announce=no diff --git a/test/test-network/conf/25-dhcp-pd-downstream-test1.network b/test/test-network/conf/25-dhcp-pd-downstream-test1.network new file mode 100644 index 0000000..a8720c3 --- /dev/null +++ b/test/test-network/conf/25-dhcp-pd-downstream-test1.network @@ -0,0 +1,16 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=test1 + +[Network] +IPv6PrivacyExtensions=yes +IPv6AcceptRA=no +DHCP=no +DHCPPrefixDelegation=yes + +[DHCPPrefixDelegation] +UplinkInterface=veth99 +SubnetId=0 +Announce=no +Token=eui64 +Token=::1a:2b:3c:4d diff --git a/test/test-network/conf/25-dhcp-pd-downstream-veth97-peer.network b/test/test-network/conf/25-dhcp-pd-downstream-veth97-peer.network new file mode 100644 index 0000000..555fefa --- /dev/null +++ b/test/test-network/conf/25-dhcp-pd-downstream-veth97-peer.network @@ -0,0 +1,11 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=veth97-peer + +[Network] +IPv6PrivacyExtensions=yes +IPv6AcceptRA=yes + +[IPv6AcceptRA] +Token=eui64 +Token=::1a:2b:3c:4e diff --git a/test/test-network/conf/25-dhcp-pd-downstream-veth97.network b/test/test-network/conf/25-dhcp-pd-downstream-veth97.network new file mode 100644 index 0000000..daf1e9d --- /dev/null +++ b/test/test-network/conf/25-dhcp-pd-downstream-veth97.network @@ -0,0 +1,20 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=veth97 + +[Network] +IPv6PrivacyExtensions=yes +IPv6AcceptRA=no +DHCP=no +DHCPPrefixDelegation=yes +IPv6SendRA=yes + +[DHCPPrefixDelegation] +SubnetId=8 +Announce=yes +Token=eui64 +Token=::1a:2b:3c:4d + +[IPv6SendRA] +EmitDNS=no +EmitDomains=no diff --git a/test/test-network/conf/25-dhcp-pd-downstream-veth98-peer.network b/test/test-network/conf/25-dhcp-pd-downstream-veth98-peer.network new file mode 100644 index 0000000..db0aec1 --- /dev/null +++ b/test/test-network/conf/25-dhcp-pd-downstream-veth98-peer.network @@ -0,0 +1,11 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=veth98-peer + +[Network] +IPv6PrivacyExtensions=yes +IPv6AcceptRA=yes + +[IPv6AcceptRA] +Token=eui64 +Token=::1a:2b:3c:4e diff --git a/test/test-network/conf/25-dhcp-pd-downstream-veth98.network b/test/test-network/conf/25-dhcp-pd-downstream-veth98.network new file mode 100644 index 0000000..ef37700 --- /dev/null +++ b/test/test-network/conf/25-dhcp-pd-downstream-veth98.network @@ -0,0 +1,21 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=veth98 + +[Network] +IPv6PrivacyExtensions=yes +IPv6AcceptRA=no +DHCP=no +DHCPPrefixDelegation=yes +IPv6SendRA=yes + +[DHCPPrefixDelegation] +UplinkInterface=veth99 +SubnetId=9 +Announce=yes +Token=eui64 +Token=::1a:2b:3c:4d + +[IPv6SendRA] +EmitDNS=no +EmitDomains=no diff --git a/test/test-network/conf/25-dhcp-server-downstream.network b/test/test-network/conf/25-dhcp-server-downstream.network new file mode 100644 index 0000000..3eb931f --- /dev/null +++ b/test/test-network/conf/25-dhcp-server-downstream.network @@ -0,0 +1,14 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=veth-peer + +[Network] +IPv6AcceptRA=false +DHCPServer=yes + +[DHCPServer] +ServerAddress=192.168.5.1/24 +PoolOffset=10 +PoolSize=50 +UplinkInterface=dummy98 +Router=192.168.5.3 diff --git a/test/test-network/conf/25-dhcp-server-static-lease.network b/test/test-network/conf/25-dhcp-server-static-lease.network new file mode 100644 index 0000000..1f2783d --- /dev/null +++ b/test/test-network/conf/25-dhcp-server-static-lease.network @@ -0,0 +1,18 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=veth-peer + +[Network] +IPv6AcceptRA=no +Address=10.1.1.1/24 +DHCPServer=yes + +[DHCPServer] +PoolOffset=0 +PoolSize=20 +EmitDNS=yes +DNS=9.9.9.9 + +[DHCPServerStaticLease] +MACAddress=12:34:56:78:9a:bc +Address=10.1.1.200 diff --git a/test/test-network/conf/25-dhcp-server-timezone-router.network b/test/test-network/conf/25-dhcp-server-timezone-router.network new file mode 100644 index 0000000..89a8db1 --- /dev/null +++ b/test/test-network/conf/25-dhcp-server-timezone-router.network @@ -0,0 +1,18 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=veth-peer + +[Network] +IPv6AcceptRA=false +Address=192.168.5.1/24 +Address=192.168.5.2/24 +DHCPServer=yes + +[DHCPServer] +ServerAddress=192.168.5.1/24 +PoolOffset=10 +PoolSize=50 +EmitRouter=yes +Timezone=Europe/Berlin +DNS=192.168.5.1 +NTP=192.168.5.1 diff --git a/test/test-network/conf/25-dhcp-server-uplink.network b/test/test-network/conf/25-dhcp-server-uplink.network new file mode 100644 index 0000000..59e0b6a --- /dev/null +++ b/test/test-network/conf/25-dhcp-server-uplink.network @@ -0,0 +1,9 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=dummy98 + +[Network] +IPv6AcceptRA=no +Address=192.168.5.2/24 +DNS=192.168.5.1 +NTP=192.168.5.1 diff --git a/test/test-network/conf/25-dhcp-server-veth-peer.network b/test/test-network/conf/25-dhcp-server-veth-peer.network new file mode 100644 index 0000000..d5cc6d3 --- /dev/null +++ b/test/test-network/conf/25-dhcp-server-veth-peer.network @@ -0,0 +1,8 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=veth-peer + +[Network] +IPv6AcceptRA=no +Address=2600::1/0 +Address=192.168.5.1/24 diff --git a/test/test-network/conf/25-dhcp-server.network b/test/test-network/conf/25-dhcp-server.network new file mode 100644 index 0000000..d9f2aa4 --- /dev/null +++ b/test/test-network/conf/25-dhcp-server.network @@ -0,0 +1,15 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=veth-peer + +[Network] +IPv6AcceptRA=false +DHCPServer=yes + +[DHCPServer] +ServerAddress=192.168.5.1/24 +PoolOffset=10 +PoolSize=50 +Router=192.168.5.3 +DNS=_server_address 192.168.5.10 +NTP=_server_address 192.168.5.11 diff --git a/test/test-network/conf/25-dhcp4-6rd-server.network b/test/test-network/conf/25-dhcp4-6rd-server.network new file mode 100644 index 0000000..91dc71a --- /dev/null +++ b/test/test-network/conf/25-dhcp4-6rd-server.network @@ -0,0 +1,7 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=veth-peer + +[Network] +IPv6AcceptRA=no +Address=10.0.0.1/8 diff --git a/test/test-network/conf/25-dhcp4-6rd-upstream.network b/test/test-network/conf/25-dhcp4-6rd-upstream.network new file mode 100644 index 0000000..fd0d894 --- /dev/null +++ b/test/test-network/conf/25-dhcp4-6rd-upstream.network @@ -0,0 +1,20 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=veth99 + +[Network] +IPv6PrivacyExtensions=yes +IPv6AcceptRA=no +DHCP=ipv4 +DHCPPrefixDelegation=yes + +[DHCPv4] +Use6RD=yes +SendDecline=yes + +[DHCPPrefixDelegation] +UplinkInterface=:self +SubnetId=10 +Announce=no +Token=eui64 +Token=::1a:2b:3c:4d diff --git a/test/test-network/conf/25-dhcp6pd-server.network b/test/test-network/conf/25-dhcp6pd-server.network new file mode 100644 index 0000000..f7a8526 --- /dev/null +++ b/test/test-network/conf/25-dhcp6pd-server.network @@ -0,0 +1,7 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=veth-peer + +[Network] +IPv6AcceptRA=no +Address=3ffe:501:ffff:100::1/64 diff --git a/test/test-network/conf/25-dhcp6pd-upstream.network b/test/test-network/conf/25-dhcp6pd-upstream.network new file mode 100644 index 0000000..4b8cd7d --- /dev/null +++ b/test/test-network/conf/25-dhcp6pd-upstream.network @@ -0,0 +1,19 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=veth99 + +[Network] +IPv6PrivacyExtensions=yes +IPv6AcceptRA=no +DHCP=ipv6 +DHCPPrefixDelegation=yes + +[DHCPv6] +WithoutRA=solicit + +[DHCPPrefixDelegation] +UplinkInterface=:self +SubnetId=10 +Announce=no +Token=eui64 +Token=::1a:2b:3c:4d diff --git a/test/test-network/conf/25-erspan.network b/test/test-network/conf/25-erspan.network new file mode 100644 index 0000000..c862bae --- /dev/null +++ b/test/test-network/conf/25-erspan.network @@ -0,0 +1,8 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=dummy98 + +[Network] +IPv6AcceptRA=no +Tunnel=erspan99 +Tunnel=erspan98 diff --git a/test/test-network/conf/25-erspan0-tunnel-local-any.netdev b/test/test-network/conf/25-erspan0-tunnel-local-any.netdev new file mode 100644 index 0000000..03db72a --- /dev/null +++ b/test/test-network/conf/25-erspan0-tunnel-local-any.netdev @@ -0,0 +1,15 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[NetDev] +Name=erspan98 +Kind=erspan + +[Tunnel] +ERSPANVersion=0 +# The three settings below will be ignored +ERSPANIndex=124 +ERSPANDirection=egress +ERSPANHardwareId=0x2f +Local = any +Remote = 172.16.1.100 +Key=102 +SerializeTunneledPackets=true diff --git a/test/test-network/conf/25-erspan0-tunnel.netdev b/test/test-network/conf/25-erspan0-tunnel.netdev new file mode 100644 index 0000000..ee295d9 --- /dev/null +++ b/test/test-network/conf/25-erspan0-tunnel.netdev @@ -0,0 +1,15 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[NetDev] +Name=erspan99 +Kind=erspan + +[Tunnel] +ERSPANVersion=0 +# The three settings below will be ignored +ERSPANIndex=123 +ERSPANDirection=ingress +ERSPANHardwareId=0x1f +Local = 172.16.1.200 +Remote = 172.16.1.100 +Key=101 +SerializeTunneledPackets=true diff --git a/test/test-network/conf/25-erspan1-tunnel-local-any.netdev b/test/test-network/conf/25-erspan1-tunnel-local-any.netdev new file mode 100644 index 0000000..beac91b --- /dev/null +++ b/test/test-network/conf/25-erspan1-tunnel-local-any.netdev @@ -0,0 +1,15 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[NetDev] +Name=erspan98 +Kind=erspan + +[Tunnel] +ERSPANVersion=1 +ERSPANIndex=124 +# The two settings below will be ignored +ERSPANDirection=egress +ERSPANHardwareId=0x2f +Local = any +Remote = 172.16.1.100 +Key=102 +SerializeTunneledPackets=true diff --git a/test/test-network/conf/25-erspan1-tunnel.netdev b/test/test-network/conf/25-erspan1-tunnel.netdev new file mode 100644 index 0000000..661ae90 --- /dev/null +++ b/test/test-network/conf/25-erspan1-tunnel.netdev @@ -0,0 +1,15 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[NetDev] +Name=erspan99 +Kind=erspan + +[Tunnel] +ERSPANVersion=1 +ERSPANIndex=123 +# The two settings below will be ignored +ERSPANDirection=ingress +ERSPANHardwareId=0x1f +Local = 172.16.1.200 +Remote = 172.16.1.100 +Key=101 +SerializeTunneledPackets=true diff --git a/test/test-network/conf/25-erspan2-tunnel-local-any.netdev b/test/test-network/conf/25-erspan2-tunnel-local-any.netdev new file mode 100644 index 0000000..010cf67 --- /dev/null +++ b/test/test-network/conf/25-erspan2-tunnel-local-any.netdev @@ -0,0 +1,15 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[NetDev] +Name=erspan98 +Kind=erspan + +[Tunnel] +ERSPANVersion=2 +# ERSPANIndex= will be ignored +ERSPANIndex=124 +ERSPANDirection=egress +ERSPANHardwareId=0x2f +Local = any +Remote = 172.16.1.100 +Key=102 +SerializeTunneledPackets=true diff --git a/test/test-network/conf/25-erspan2-tunnel.netdev b/test/test-network/conf/25-erspan2-tunnel.netdev new file mode 100644 index 0000000..b91bbaf --- /dev/null +++ b/test/test-network/conf/25-erspan2-tunnel.netdev @@ -0,0 +1,15 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[NetDev] +Name=erspan99 +Kind=erspan + +[Tunnel] +ERSPANVersion=2 +# ERSPANIndex= will be ignored +ERSPANIndex=123 +ERSPANDirection=ingress +ERSPANHardwareId=0x1f +Local = 172.16.1.200 +Remote = 172.16.1.100 +Key=101 +SerializeTunneledPackets=true diff --git a/test/test-network/conf/25-fibrule-invert.network b/test/test-network/conf/25-fibrule-invert.network new file mode 100644 index 0000000..3d4cbbc --- /dev/null +++ b/test/test-network/conf/25-fibrule-invert.network @@ -0,0 +1,14 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=test1 + +[Network] +IPv6AcceptRA=no + +[RoutingPolicyRule] +TypeOfService=0x08 +Table=7 +From= 192.168.100.18 +Priority=111 +IPProtocol = tcp +InvertRule=true diff --git a/test/test-network/conf/25-fibrule-port-range.network b/test/test-network/conf/25-fibrule-port-range.network new file mode 100644 index 0000000..973225d --- /dev/null +++ b/test/test-network/conf/25-fibrule-port-range.network @@ -0,0 +1,15 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=test1 + +[Network] +IPv6AcceptRA=no + +[RoutingPolicyRule] +TypeOfService=0x08 +Table=7 +From= 192.168.100.18 +Priority=111 +SourcePort = 1123-1150 +DestinationPort = 3224-3290 +IPProtocol = tcp diff --git a/test/test-network/conf/25-fibrule-uidrange.network b/test/test-network/conf/25-fibrule-uidrange.network new file mode 100644 index 0000000..a363d87 --- /dev/null +++ b/test/test-network/conf/25-fibrule-uidrange.network @@ -0,0 +1,13 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=test1 + +[Network] +IPv6AcceptRA=no + +[RoutingPolicyRule] +TypeOfService=0x08 +Table=7 +From= 192.168.100.18 +Priority=111 +User=100-200 diff --git a/test/test-network/conf/25-fou-gre.netdev b/test/test-network/conf/25-fou-gre.netdev new file mode 100644 index 0000000..a2d36d9 --- /dev/null +++ b/test/test-network/conf/25-fou-gre.netdev @@ -0,0 +1,15 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[NetDev] +Name=gretun96 +Kind=gre + +[Tunnel] +Local=10.65.223.238 +Remote=10.65.223.239 +Key=1.2.5.103 +SerializeTunneledPackets=true +Independent=true + +FooOverUDP=yes +FOUDestinationPort=55556 +FOUSourcePort=1001 diff --git a/test/test-network/conf/25-fou-gretap.netdev b/test/test-network/conf/25-fou-gretap.netdev new file mode 100644 index 0000000..7992bec --- /dev/null +++ b/test/test-network/conf/25-fou-gretap.netdev @@ -0,0 +1,14 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[NetDev] +Name=gretap96 +Kind=gretap + +[Tunnel] +Local=10.65.223.238 +Remote=10.65.223.239 +Key=1.2.5.106 +SerializeTunneledPackets=true +Independent=true + +FooOverUDP=yes +FOUDestinationPort=55556 diff --git a/test/test-network/conf/25-fou-ipip.netdev b/test/test-network/conf/25-fou-ipip.netdev new file mode 100644 index 0000000..1a98a40 --- /dev/null +++ b/test/test-network/conf/25-fou-ipip.netdev @@ -0,0 +1,13 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[NetDev] +Name=ipiptun96 +Kind=ipip +MTUBytes=1480 + +[Tunnel] +Local=192.168.223.238 +Remote=192.169.224.239 +Independent=true + +FooOverUDP=yes +FOUDestinationPort=55555 diff --git a/test/test-network/conf/25-fou-ipproto-gre.netdev b/test/test-network/conf/25-fou-ipproto-gre.netdev new file mode 100644 index 0000000..d48bb87 --- /dev/null +++ b/test/test-network/conf/25-fou-ipproto-gre.netdev @@ -0,0 +1,9 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[NetDev] +Name=fou98 +Kind=fou + +[FooOverUDP] +Encapsulation=FooOverUDP +Port=55556 +Protocol=GRE diff --git a/test/test-network/conf/25-fou-ipproto-ipip.netdev b/test/test-network/conf/25-fou-ipproto-ipip.netdev new file mode 100644 index 0000000..8aeb40b --- /dev/null +++ b/test/test-network/conf/25-fou-ipproto-ipip.netdev @@ -0,0 +1,9 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[NetDev] +Name=fou99 +Kind=fou + +[FooOverUDP] +Encapsulation=FooOverUDP +Port=55555 +Protocol=ipip diff --git a/test/test-network/conf/25-fou-sit.netdev b/test/test-network/conf/25-fou-sit.netdev new file mode 100644 index 0000000..f7f2238 --- /dev/null +++ b/test/test-network/conf/25-fou-sit.netdev @@ -0,0 +1,12 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[NetDev] +Name=sittun96 +Kind=sit + +[Tunnel] +Local=10.65.223.238 +Remote=10.65.223.239 +Independent=true + +FooOverUDP=yes +FOUDestinationPort=55555 diff --git a/test/test-network/conf/25-gateway-next-static.network b/test/test-network/conf/25-gateway-next-static.network new file mode 100644 index 0000000..2e74664 --- /dev/null +++ b/test/test-network/conf/25-gateway-next-static.network @@ -0,0 +1,8 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=dummy98 + +[Network] +IPv6AcceptRA=no +Address=149.10.124.58/28 +Gateway=149.10.124.60 diff --git a/test/test-network/conf/25-gateway-static.network b/test/test-network/conf/25-gateway-static.network new file mode 100644 index 0000000..3b43f56 --- /dev/null +++ b/test/test-network/conf/25-gateway-static.network @@ -0,0 +1,8 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=dummy98 + +[Network] +IPv6AcceptRA=no +Address=149.10.124.58/28 +Gateway=149.10.124.59 diff --git a/test/test-network/conf/25-geneve.netdev b/test/test-network/conf/25-geneve.netdev new file mode 100644 index 0000000..ddd5ecb --- /dev/null +++ b/test/test-network/conf/25-geneve.netdev @@ -0,0 +1,13 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[NetDev] +Name=geneve99 +Kind=geneve + +[GENEVE] +Id=99 +Remote=192.168.22.1 +TTL=1 +UDPChecksum=true +UDP6ZeroChecksumTx=true +UDP6ZeroChecksumRx=true +DestinationPort=6082 diff --git a/test/test-network/conf/25-gre-tunnel-any-any.netdev b/test/test-network/conf/25-gre-tunnel-any-any.netdev new file mode 100644 index 0000000..58b2bb3 --- /dev/null +++ b/test/test-network/conf/25-gre-tunnel-any-any.netdev @@ -0,0 +1,10 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[NetDev] +Name=gretun96 +Kind=gre + +[Tunnel] +Local=any +Remote=any +Key=106 +SerializeTunneledPackets=false diff --git a/test/test-network/conf/25-gre-tunnel-local-any.netdev b/test/test-network/conf/25-gre-tunnel-local-any.netdev new file mode 100644 index 0000000..120bcfb --- /dev/null +++ b/test/test-network/conf/25-gre-tunnel-local-any.netdev @@ -0,0 +1,10 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[NetDev] +Name=gretun98 +Kind=gre + +[Tunnel] +Local=any +Remote=10.65.223.239 +Key=104 +SerializeTunneledPackets=false diff --git a/test/test-network/conf/25-gre-tunnel-remote-any.netdev b/test/test-network/conf/25-gre-tunnel-remote-any.netdev new file mode 100644 index 0000000..f94578f --- /dev/null +++ b/test/test-network/conf/25-gre-tunnel-remote-any.netdev @@ -0,0 +1,10 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[NetDev] +Name=gretun97 +Kind=gre + +[Tunnel] +Local=10.65.223.238 +Remote=any +Key=105 +SerializeTunneledPackets=false diff --git a/test/test-network/conf/25-gre-tunnel.netdev b/test/test-network/conf/25-gre-tunnel.netdev new file mode 100644 index 0000000..9fc2371 --- /dev/null +++ b/test/test-network/conf/25-gre-tunnel.netdev @@ -0,0 +1,11 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[NetDev] +Name=gretun99 +Kind=gre + +[Tunnel] +Local=10.65.223.238 +Remote=10.65.223.239 +InputKey=1.2.3.103 +OutputKey=1.2.4.103 +SerializeTunneledPackets=true diff --git a/test/test-network/conf/25-gretap-tunnel-local-any.netdev b/test/test-network/conf/25-gretap-tunnel-local-any.netdev new file mode 100644 index 0000000..5e3bd82 --- /dev/null +++ b/test/test-network/conf/25-gretap-tunnel-local-any.netdev @@ -0,0 +1,10 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[NetDev] +Name=gretap98 +Kind=gretap + +[Tunnel] +Local=any +Remote=10.65.223.239 +Key=107 +SerializeTunneledPackets=true diff --git a/test/test-network/conf/25-gretap-tunnel.netdev b/test/test-network/conf/25-gretap-tunnel.netdev new file mode 100644 index 0000000..86ac3f7 --- /dev/null +++ b/test/test-network/conf/25-gretap-tunnel.netdev @@ -0,0 +1,10 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[NetDev] +Name=gretap99 +Kind=gretap + +[Tunnel] +Local=10.65.223.238 +Remote=10.65.223.239 +Key=106 +SerializeTunneledPackets=true diff --git a/test/test-network/conf/25-gretap.network b/test/test-network/conf/25-gretap.network new file mode 100644 index 0000000..5e940ed --- /dev/null +++ b/test/test-network/conf/25-gretap.network @@ -0,0 +1,8 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=dummy98 + +[Network] +IPv6AcceptRA=no +Tunnel=gretap99 +Tunnel=gretap98 diff --git a/test/test-network/conf/25-gretun.network b/test/test-network/conf/25-gretun.network new file mode 100644 index 0000000..3e81bed --- /dev/null +++ b/test/test-network/conf/25-gretun.network @@ -0,0 +1,10 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=dummy98 + +[Network] +IPv6AcceptRA=no +Tunnel=gretun99 +Tunnel=gretun98 +Tunnel=gretun97 +Tunnel=gretun96 diff --git a/test/test-network/conf/25-ifb.netdev b/test/test-network/conf/25-ifb.netdev new file mode 100644 index 0000000..e166364 --- /dev/null +++ b/test/test-network/conf/25-ifb.netdev @@ -0,0 +1,4 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[NetDev] +Kind=ifb +Name=ifb99 diff --git a/test/test-network/conf/25-ip6gre-tunnel-any-any.netdev b/test/test-network/conf/25-ip6gre-tunnel-any-any.netdev new file mode 100644 index 0000000..67ebdd0 --- /dev/null +++ b/test/test-network/conf/25-ip6gre-tunnel-any-any.netdev @@ -0,0 +1,8 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[NetDev] +Name=ip6gretun96 +Kind=ip6gre + +[Tunnel] +Local=any +Remote=any diff --git a/test/test-network/conf/25-ip6gre-tunnel-local-any.netdev b/test/test-network/conf/25-ip6gre-tunnel-local-any.netdev new file mode 100644 index 0000000..6d92129 --- /dev/null +++ b/test/test-network/conf/25-ip6gre-tunnel-local-any.netdev @@ -0,0 +1,8 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[NetDev] +Name=ip6gretun98 +Kind=ip6gre + +[Tunnel] +Local=any +Remote=2001:473:fece:cafe::5179 diff --git a/test/test-network/conf/25-ip6gre-tunnel-remote-any.netdev b/test/test-network/conf/25-ip6gre-tunnel-remote-any.netdev new file mode 100644 index 0000000..b242e87 --- /dev/null +++ b/test/test-network/conf/25-ip6gre-tunnel-remote-any.netdev @@ -0,0 +1,8 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[NetDev] +Name=ip6gretun97 +Kind=ip6gre + +[Tunnel] +Local=2a00:ffde:4567:edde::4987 +Remote=any diff --git a/test/test-network/conf/25-ip6gre-tunnel.netdev b/test/test-network/conf/25-ip6gre-tunnel.netdev new file mode 100644 index 0000000..deb1b29 --- /dev/null +++ b/test/test-network/conf/25-ip6gre-tunnel.netdev @@ -0,0 +1,8 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[NetDev] +Name=ip6gretun99 +Kind=ip6gre + +[Tunnel] +Local=2a00:ffde:4567:edde::4987 +Remote=2001:473:fece:cafe::5179 diff --git a/test/test-network/conf/25-ip6gretap-tunnel-local-any.netdev b/test/test-network/conf/25-ip6gretap-tunnel-local-any.netdev new file mode 100644 index 0000000..f1940c2 --- /dev/null +++ b/test/test-network/conf/25-ip6gretap-tunnel-local-any.netdev @@ -0,0 +1,8 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[NetDev] +Name=ip6gretap98 +Kind=ip6gretap + +[Tunnel] +Local=any +Remote=2001:473:fece:cafe::5179 diff --git a/test/test-network/conf/25-ip6gretap-tunnel.netdev b/test/test-network/conf/25-ip6gretap-tunnel.netdev new file mode 100644 index 0000000..09ea116 --- /dev/null +++ b/test/test-network/conf/25-ip6gretap-tunnel.netdev @@ -0,0 +1,8 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[NetDev] +Name=ip6gretap99 +Kind=ip6gretap + +[Tunnel] +Local=2a00:ffde:4567:edde::4987 +Remote=2001:473:fece:cafe::5179 diff --git a/test/test-network/conf/25-ip6gretap.network b/test/test-network/conf/25-ip6gretap.network new file mode 100644 index 0000000..472072b --- /dev/null +++ b/test/test-network/conf/25-ip6gretap.network @@ -0,0 +1,8 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=dummy98 + +[Network] +IPv6AcceptRA=no +Tunnel=ip6gretap99 +Tunnel=ip6gretap98 diff --git a/test/test-network/conf/25-ip6gretun.network b/test/test-network/conf/25-ip6gretun.network new file mode 100644 index 0000000..17ad558 --- /dev/null +++ b/test/test-network/conf/25-ip6gretun.network @@ -0,0 +1,10 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=dummy98 + +[Network] +IPv6AcceptRA=no +Tunnel=ip6gretun99 +Tunnel=ip6gretun98 +Tunnel=ip6gretun97 +Tunnel=ip6gretun96 diff --git a/test/test-network/conf/25-ip6tnl-slaac.network b/test/test-network/conf/25-ip6tnl-slaac.network new file mode 100644 index 0000000..80de59d --- /dev/null +++ b/test/test-network/conf/25-ip6tnl-slaac.network @@ -0,0 +1,10 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=veth99 + +[Network] +IPv6AcceptRA=yes +Tunnel=ip6tnl-slaac + +[IPv6AcceptRA] +PrefixAllowList=2002:da8:1::/64 diff --git a/test/test-network/conf/25-ip6tnl-tunnel-external.netdev b/test/test-network/conf/25-ip6tnl-tunnel-external.netdev new file mode 100644 index 0000000..68926cd --- /dev/null +++ b/test/test-network/conf/25-ip6tnl-tunnel-external.netdev @@ -0,0 +1,8 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[NetDev] +Name=ip6tnl-external +Kind=ip6tnl + +[Tunnel] +Mode=ip6ip6 +External=yes diff --git a/test/test-network/conf/25-ip6tnl-tunnel-local-any.netdev b/test/test-network/conf/25-ip6tnl-tunnel-local-any.netdev new file mode 100644 index 0000000..3521d33 --- /dev/null +++ b/test/test-network/conf/25-ip6tnl-tunnel-local-any.netdev @@ -0,0 +1,9 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[NetDev] +Name=ip6tnl98 +Kind=ip6tnl + +[Tunnel] +Mode=ip6ip6 +Local=any +Remote=2001:473:fece:cafe::5179 diff --git a/test/test-network/conf/25-ip6tnl-tunnel-local-slaac.netdev b/test/test-network/conf/25-ip6tnl-tunnel-local-slaac.netdev new file mode 100644 index 0000000..b07dc4a --- /dev/null +++ b/test/test-network/conf/25-ip6tnl-tunnel-local-slaac.netdev @@ -0,0 +1,9 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[NetDev] +Name=ip6tnl-slaac +Kind=ip6tnl + +[Tunnel] +Mode=ip6ip6 +Local=slaac +Remote=2001:473:fece:cafe::5179 diff --git a/test/test-network/conf/25-ip6tnl-tunnel-local-slaac.network b/test/test-network/conf/25-ip6tnl-tunnel-local-slaac.network new file mode 100644 index 0000000..34fa0ca --- /dev/null +++ b/test/test-network/conf/25-ip6tnl-tunnel-local-slaac.network @@ -0,0 +1,10 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=ip6tnl-slaac + +[Network] +IPv6AcceptRA=no +LinkLocalAddressing=yes + +[Route] +Destination=0.0.0.0/0 diff --git a/test/test-network/conf/25-ip6tnl-tunnel-remote-any.netdev b/test/test-network/conf/25-ip6tnl-tunnel-remote-any.netdev new file mode 100644 index 0000000..df22dd8 --- /dev/null +++ b/test/test-network/conf/25-ip6tnl-tunnel-remote-any.netdev @@ -0,0 +1,9 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[NetDev] +Name=ip6tnl97 +Kind=ip6tnl + +[Tunnel] +Mode=ip6ip6 +Local=2a00:ffde:4567:edde::4987 +Remote=any diff --git a/test/test-network/conf/25-ip6tnl-tunnel.netdev b/test/test-network/conf/25-ip6tnl-tunnel.netdev new file mode 100644 index 0000000..486bfbd --- /dev/null +++ b/test/test-network/conf/25-ip6tnl-tunnel.netdev @@ -0,0 +1,9 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[NetDev] +Name=ip6tnl99 +Kind=ip6tnl + +[Tunnel] +Mode=ip6ip6 +Local=2a00:ffde:4567:edde::4987 +Remote=2001:473:fece:cafe::5179 diff --git a/test/test-network/conf/25-ip6tnl.network b/test/test-network/conf/25-ip6tnl.network new file mode 100644 index 0000000..a773210 --- /dev/null +++ b/test/test-network/conf/25-ip6tnl.network @@ -0,0 +1,9 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=dummy98 + +[Network] +IPv6AcceptRA=no +Tunnel=ip6tnl99 +Tunnel=ip6tnl98 +Tunnel=ip6tnl97 diff --git a/test/test-network/conf/25-ipip-tunnel-any-any.netdev b/test/test-network/conf/25-ipip-tunnel-any-any.netdev new file mode 100644 index 0000000..414795a --- /dev/null +++ b/test/test-network/conf/25-ipip-tunnel-any-any.netdev @@ -0,0 +1,9 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[NetDev] +Name=ipiptun96 +Kind=ipip +MTUBytes=1480 + +[Tunnel] +Local=any +Remote=any diff --git a/test/test-network/conf/25-ipip-tunnel-independent-loopback.netdev b/test/test-network/conf/25-ipip-tunnel-independent-loopback.netdev new file mode 100644 index 0000000..c675029 --- /dev/null +++ b/test/test-network/conf/25-ipip-tunnel-independent-loopback.netdev @@ -0,0 +1,11 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[NetDev] +Name=ipiptun99 +Kind=ipip +MTUBytes=1480 + +[Tunnel] +Local=192.168.223.238 +Remote=192.169.224.239 +Independent=true +AssignToLoopback=yes diff --git a/test/test-network/conf/25-ipip-tunnel-independent.netdev b/test/test-network/conf/25-ipip-tunnel-independent.netdev new file mode 100644 index 0000000..757b751 --- /dev/null +++ b/test/test-network/conf/25-ipip-tunnel-independent.netdev @@ -0,0 +1,10 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[NetDev] +Name=ipiptun99 +Kind=ipip +MTUBytes=1480 + +[Tunnel] +Local=192.168.223.238 +Remote=192.169.224.239 +Independent=true diff --git a/test/test-network/conf/25-ipip-tunnel-local-any.netdev b/test/test-network/conf/25-ipip-tunnel-local-any.netdev new file mode 100644 index 0000000..3702cde --- /dev/null +++ b/test/test-network/conf/25-ipip-tunnel-local-any.netdev @@ -0,0 +1,9 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[NetDev] +Name=ipiptun98 +Kind=ipip +MTUBytes=1480 + +[Tunnel] +Local=any +Remote=192.169.224.239 diff --git a/test/test-network/conf/25-ipip-tunnel-remote-any.netdev b/test/test-network/conf/25-ipip-tunnel-remote-any.netdev new file mode 100644 index 0000000..792d7d3 --- /dev/null +++ b/test/test-network/conf/25-ipip-tunnel-remote-any.netdev @@ -0,0 +1,9 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[NetDev] +Name=ipiptun97 +Kind=ipip +MTUBytes=1480 + +[Tunnel] +Local=192.168.223.238 +Remote=any diff --git a/test/test-network/conf/25-ipip-tunnel.netdev b/test/test-network/conf/25-ipip-tunnel.netdev new file mode 100644 index 0000000..e31bfb6 --- /dev/null +++ b/test/test-network/conf/25-ipip-tunnel.netdev @@ -0,0 +1,9 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[NetDev] +Name=ipiptun99 +Kind=ipip +MTUBytes=1480 + +[Tunnel] +Local=192.168.223.238 +Remote=192.169.224.239 diff --git a/test/test-network/conf/25-ipip.network b/test/test-network/conf/25-ipip.network new file mode 100644 index 0000000..f359329 --- /dev/null +++ b/test/test-network/conf/25-ipip.network @@ -0,0 +1,10 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=dummy98 + +[Network] +IPv6AcceptRA=no +Tunnel=ipiptun99 +Tunnel=ipiptun98 +Tunnel=ipiptun97 +Tunnel=ipiptun96 diff --git a/test/test-network/conf/25-ipv6-address-label-section.network b/test/test-network/conf/25-ipv6-address-label-section.network new file mode 100644 index 0000000..89a5c2a --- /dev/null +++ b/test/test-network/conf/25-ipv6-address-label-section.network @@ -0,0 +1,34 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=dummy98 + +[Network] +IPv6AcceptRA=no + +[IPv6AddressLabel] +Label=4444 +Prefix=2004:da8:1:0::/64 + +# invalid sections +[IPv6AddressLabel] +# No Label= +Prefix=2004:da8:1:1::/64 + +[IPv6AddressLabel] +# No Prefix= +Label=4445 + +[IPv6AddressLabel] +# Invalid label +Label=0xffffffff +Prefix=2004:da8:1:2::/64 + +[IPv6AddressLabel] +# IPv4 mapped prefix +Label=4446 +Prefix=::ffff:c0a8:0/120 + +[IPv6AddressLabel] +# Invalid prefix +Label=4447 +Prefix=192.168.1.0/24 diff --git a/test/test-network/conf/25-ipv6-prefix-veth-token-prefixstable-without-address.network b/test/test-network/conf/25-ipv6-prefix-veth-token-prefixstable-without-address.network new file mode 100644 index 0000000..eda4ce1 --- /dev/null +++ b/test/test-network/conf/25-ipv6-prefix-veth-token-prefixstable-without-address.network @@ -0,0 +1,10 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=veth99 + +[Network] +IPv6AcceptRA=true + +[IPv6AcceptRA] +Token=prefixstable +Token=prefixstable,86b123b969ba4b7eb8b3d8605123525a diff --git a/test/test-network/conf/25-ipv6-prefix-veth-token-prefixstable.network b/test/test-network/conf/25-ipv6-prefix-veth-token-prefixstable.network new file mode 100644 index 0000000..ac50700 --- /dev/null +++ b/test/test-network/conf/25-ipv6-prefix-veth-token-prefixstable.network @@ -0,0 +1,19 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=veth99 + +[Network] +IPv6AcceptRA=true + +[IPv6AcceptRA] +Token=prefixstable:2002:da8:1:: +Token=prefixstable:2002:da8:1::,86b123b969ba4b7eb8b3d8605123525a +# invalid tokens +Token=prefixstable:2002:da8:1::,00000000000000000000000000000000 +Token=prefixstable:2002:da8:1::, +Token=prefixstable,00000000000000000000000000000000 +Token=prefixstable, +Token=prefixstable@ +Token=static +Token=static: +Token=static::: diff --git a/test/test-network/conf/25-ipv6-prefix-veth-token-static.network b/test/test-network/conf/25-ipv6-prefix-veth-token-static.network new file mode 100644 index 0000000..7c3ae33 --- /dev/null +++ b/test/test-network/conf/25-ipv6-prefix-veth-token-static.network @@ -0,0 +1,13 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=veth99 + +[Network] +IPv6AcceptRA=true + +[IPv6AcceptRA] +Token=::1a:2b:3c:4d +Token=static:::fa:de:ca:fe +Token=::1a:2b:3c:4d +Token=static:::1a:2b:3c:4d +Token=::fa:de:ca:fe diff --git a/test/test-network/conf/25-ipv6-prefix-veth.network b/test/test-network/conf/25-ipv6-prefix-veth.network new file mode 100644 index 0000000..905e2fd --- /dev/null +++ b/test/test-network/conf/25-ipv6-prefix-veth.network @@ -0,0 +1,11 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=veth99 + +[Network] +IPv6AcceptRA=true + +[IPv6AcceptRA] +UseDomains=yes +# just a random label which should exist +NetLabel=system_u:object_r:root_t:s0 diff --git a/test/test-network/conf/25-ipv6-prefix.network b/test/test-network/conf/25-ipv6-prefix.network new file mode 100644 index 0000000..9cf8f25 --- /dev/null +++ b/test/test-network/conf/25-ipv6-prefix.network @@ -0,0 +1,22 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=veth-peer + +[Network] +IPv6AcceptRA=no +IPv6SendRA=yes + +[IPv6SendRA] +DNS=_link_local 2002:da8:1:0::1 +DNSLifetimeSec=1min +Domains=hogehoge.test + +[IPv6Prefix] +Prefix=2002:da8:1:0::/64 +PreferredLifetimeSec=1000s +ValidLifetimeSec=2100s + +[IPv6Prefix] +Prefix=2002:da8:2:0::/64 +PreferredLifetimeSec=1000s +ValidLifetimeSec=2100s diff --git a/test/test-network/conf/25-ipv6-proxy-ndp.network b/test/test-network/conf/25-ipv6-proxy-ndp.network new file mode 100644 index 0000000..81302ab --- /dev/null +++ b/test/test-network/conf/25-ipv6-proxy-ndp.network @@ -0,0 +1,25 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=dummy98 + +[Network] +IPv6ProxyNDPAddress=2607:5300:203:5215:5::1 +IPv6ProxyNDPAddress=2607:5300:203:5215:4::1 +IPv6ProxyNDPAddress=2607:5300:203:5215:3::1 +IPv6ProxyNDPAddress=2607:5300:203:5215:2::1 +IPv6ProxyNDPAddress=2607:5300:203:5215:1::1 +IPv6AcceptRA=no +IPForward=yes +Address=66.70.129.136/32 +Address=66.70.129.142/32 +Address=66.70.129.143/32 + +[Address] +Address=2607:5300:203:5215::1/64 + +[Route] +Destination=2607:5300:203:52ff:ff:ff:ff:ff + +[Route] +Gateway=2607:5300:203:52ff:ff:ff:ff:ff +Destination=::/0 diff --git a/test/test-network/conf/25-ipv6ra-prefix-client-deny-list.network b/test/test-network/conf/25-ipv6ra-prefix-client-deny-list.network new file mode 100644 index 0000000..a8b7b0b --- /dev/null +++ b/test/test-network/conf/25-ipv6ra-prefix-client-deny-list.network @@ -0,0 +1,13 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=veth-peer + +[Network] +DHCP=no +IPv6AcceptRA=yes + +[IPv6AcceptRA] +RouterDenyList=2001::1 +PrefixDenyList=2001:db8:0:2:: +RouteDenyList=2001:db1:fff:: +UseDomains=yes diff --git a/test/test-network/conf/25-ipv6ra-prefix-client.network b/test/test-network/conf/25-ipv6ra-prefix-client.network new file mode 100644 index 0000000..a98f61e --- /dev/null +++ b/test/test-network/conf/25-ipv6ra-prefix-client.network @@ -0,0 +1,14 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=veth-peer + +[Network] +DHCP=no +IPv6AcceptRA=yes + +[IPv6AcceptRA] +# PrefixDenyList= will be ignored. +PrefixAllowList=2001:db8:0:1:: 2001:db8:0:1:: 2001:db8:0:1::/64 +PrefixDenyList=2001:db8:0:1::/64 2001:db8:0:1:: 2001:db8:0:3::/64 +RouteDenyList=2001:db1:fff::/64 2001:db1:fff:: 2001:db2:fff::/64 +UseDomains=yes diff --git a/test/test-network/conf/25-ipv6ra-prefix.network b/test/test-network/conf/25-ipv6ra-prefix.network new file mode 100644 index 0000000..0afdda5 --- /dev/null +++ b/test/test-network/conf/25-ipv6ra-prefix.network @@ -0,0 +1,34 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=veth99 + +[Network] +DHCP=no +IPv6SendRA=yes + +[IPv6SendRA] +UplinkInterface=dummy98 + +[IPv6Prefix] +Prefix=2001:db8:0:1::/64 + +[IPv6Prefix] +Prefix=2001:db8:0:2::/64 +Assign=yes +Token=::1a:2b:3c:4d +Token=static:::fa:de:ca:fe + +[IPv6Prefix] +Prefix=2001:db8:0:3::/64 + +[IPv6RoutePrefix] +Route=2001:db0:fff::/64 +LifetimeSec=1000 + +[IPv6RoutePrefix] +Route=2001:db1:fff::/64 +LifetimeSec=1000 + +[IPv6RoutePrefix] +Route=2001:db2:fff::/64 +LifetimeSec=1000 diff --git a/test/test-network/conf/25-ipv6ra-uplink.network b/test/test-network/conf/25-ipv6ra-uplink.network new file mode 100644 index 0000000..78de566 --- /dev/null +++ b/test/test-network/conf/25-ipv6ra-uplink.network @@ -0,0 +1,9 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=dummy98 + +[Network] +IPv6AcceptRA=no +Address=2001:db8:1:1::1/64 +DNS=2001:db8:1:1::2 +Domains=example.com diff --git a/test/test-network/conf/25-ipvlan.netdev b/test/test-network/conf/25-ipvlan.netdev new file mode 100644 index 0000000..0b1fd4b --- /dev/null +++ b/test/test-network/conf/25-ipvlan.netdev @@ -0,0 +1,4 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[NetDev] +Name=ipvlan99 +Kind=ipvlan diff --git a/test/test-network/conf/25-ipvlan.network b/test/test-network/conf/25-ipvlan.network new file mode 100644 index 0000000..c0c919b --- /dev/null +++ b/test/test-network/conf/25-ipvlan.network @@ -0,0 +1,7 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=test1 + +[Network] +IPv6AcceptRA=no +IPVLAN=ipvlan99 diff --git a/test/test-network/conf/25-ipvtap.netdev b/test/test-network/conf/25-ipvtap.netdev new file mode 100644 index 0000000..fd06264 --- /dev/null +++ b/test/test-network/conf/25-ipvtap.netdev @@ -0,0 +1,4 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[NetDev] +Name=ipvtap99 +Kind=ipvtap diff --git a/test/test-network/conf/25-ipvtap.network b/test/test-network/conf/25-ipvtap.network new file mode 100644 index 0000000..d66d98a --- /dev/null +++ b/test/test-network/conf/25-ipvtap.network @@ -0,0 +1,7 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=test1 + +[Network] +IPv6AcceptRA=no +IPVTAP=ipvtap99 diff --git a/test/test-network/conf/25-isatap-tunnel.netdev b/test/test-network/conf/25-isatap-tunnel.netdev new file mode 100644 index 0000000..9557e27 --- /dev/null +++ b/test/test-network/conf/25-isatap-tunnel.netdev @@ -0,0 +1,9 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[NetDev] +Name=isataptun99 +Kind=sit + +[Tunnel] +Local=10.65.223.238 +Remote=10.65.223.239 +ISATAP=true diff --git a/test/test-network/conf/25-isatap.network b/test/test-network/conf/25-isatap.network new file mode 100644 index 0000000..0f80426 --- /dev/null +++ b/test/test-network/conf/25-isatap.network @@ -0,0 +1,7 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=dummy98 + +[Network] +IPv6AcceptRA=no +Tunnel=isataptun99 diff --git a/test/test-network/conf/25-l2tp-dummy.network b/test/test-network/conf/25-l2tp-dummy.network new file mode 100644 index 0000000..507ccd3 --- /dev/null +++ b/test/test-network/conf/25-l2tp-dummy.network @@ -0,0 +1,7 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=test1 + +[Network] +Address=192.168.30.100/24 +IPv6AcceptRA=false diff --git a/test/test-network/conf/25-l2tp-ip.netdev b/test/test-network/conf/25-l2tp-ip.netdev new file mode 100644 index 0000000..882c83a --- /dev/null +++ b/test/test-network/conf/25-l2tp-ip.netdev @@ -0,0 +1,21 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[NetDev] +Kind=l2tp +Name=l2tp99 + +[L2TP] +TunnelId=10 +PeerTunnelId=12 +Local=static@test1 +Remote=192.168.30.101 +EncapsulationType=ip + +[L2TPSession] +SessionId=25 +PeerSessionId=26 +Name=l2tp-ses3 + +[L2TPSession] +SessionId=27 +PeerSessionId=28 +Name=l2tp-ses4 diff --git a/test/test-network/conf/25-l2tp-udp.netdev b/test/test-network/conf/25-l2tp-udp.netdev new file mode 100644 index 0000000..79824df --- /dev/null +++ b/test/test-network/conf/25-l2tp-udp.netdev @@ -0,0 +1,26 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[NetDev] +Kind=l2tp +Name=l2tp99 + +[L2TP] +TunnelId=10 +PeerTunnelId=11 +UDPSourcePort=3000 +UDPDestinationPort=4000 +Local=static@test1 +Remote=192.168.30.101 +EncapsulationType=udp +UDPCheckSum=true +UDP6CheckSumRx=true +UDP6CheckSumTx=true + +[L2TPSession] +SessionId=15 +PeerSessionId=16 +Name=l2tp-ses1 + +[L2TPSession] +SessionId=17 +PeerSessionId=18 +Name=l2tp-ses2 diff --git a/test/test-network/conf/25-l2tp.network b/test/test-network/conf/25-l2tp.network new file mode 100644 index 0000000..412f6d5 --- /dev/null +++ b/test/test-network/conf/25-l2tp.network @@ -0,0 +1,7 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=l2tp-ses* + +[Network] +IPv6AcceptRA=no +LinkLocalAddressing=yes diff --git a/test/test-network/conf/25-link-local-addressing-no.network b/test/test-network/conf/25-link-local-addressing-no.network new file mode 100644 index 0000000..a6974ba --- /dev/null +++ b/test/test-network/conf/25-link-local-addressing-no.network @@ -0,0 +1,6 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=dummy98 + +[Network] +LinkLocalAddressing=no diff --git a/test/test-network/conf/25-link-local-addressing-yes.network b/test/test-network/conf/25-link-local-addressing-yes.network new file mode 100644 index 0000000..3c99de1 --- /dev/null +++ b/test/test-network/conf/25-link-local-addressing-yes.network @@ -0,0 +1,8 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=test1 + +[Network] +LinkLocalAddressing=yes +IPv6AcceptRA=no +IPv6StableSecretAddress=0123:4567:89ab:cdef:0123:4567:89ab:cdef diff --git a/test/test-network/conf/25-link-section-unmanaged.network b/test/test-network/conf/25-link-section-unmanaged.network new file mode 100644 index 0000000..f06b615 --- /dev/null +++ b/test/test-network/conf/25-link-section-unmanaged.network @@ -0,0 +1,7 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=dummy98 + +[Link] +MACAddress=00:01:02:aa:bb:cc +Unmanaged=true diff --git a/test/test-network/conf/25-macsec.key b/test/test-network/conf/25-macsec.key new file mode 100644 index 0000000..56c51fa --- /dev/null +++ b/test/test-network/conf/25-macsec.key @@ -0,0 +1 @@ +85858585858585858585858585858585 diff --git a/test/test-network/conf/25-macsec.netdev b/test/test-network/conf/25-macsec.netdev new file mode 100644 index 0000000..9036cb5 --- /dev/null +++ b/test/test-network/conf/25-macsec.netdev @@ -0,0 +1,69 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[NetDev] +Name=macsec99 +Kind=macsec + +[MACsec] +Port=11 +Encrypt=yes + +[MACsecTransmitAssociation] +PacketNumber=1024 +KeyId=01 +Key=81818181818181818181818181818181 +Activate=yes + +[MACsecTransmitAssociation] +PacketNumber=512 +KeyId=0203 +Key=82828282828282828282828282828282 +UseForEncoding=yes + +[MACsecReceiveChannel] +Port=2 +MACAddress=8c:16:45:6c:83:a9 + +[MACsecReceiveAssociation] +Port=2 +MACAddress=8c:16:45:6c:83:a9 +PacketNumber=16 +KeyId=020304 +Key=83838383838383838383838383838383 + +[MACsecReceiveAssociation] +Port=256 +MACAddress=c6:19:52:8f:e6:a0 +PacketNumber=32 +KeyId=02030405 +Key=84848484848484848484848484848484 +Activate=yes + +[MACsecReceiveAssociation] +Port=256 +MACAddress=c6:19:52:8f:e6:a0 +PacketNumber=128 +KeyId=0203040506 +KeyFile=/run/systemd/network/25-macsec.key +Activate=yes + +[MACsecReceiveAssociation] +Port=256 +MACAddress=c6:19:52:8f:e6:a0 +KeyId=020304050607 +Key=86868686868686868686868686868686 +Activate=no + +[MACsecReceiveAssociation] +Port=256 +MACAddress=c6:19:52:8f:e6:a0 +KeyId=02030405060708 +Key=87878787878787878787878787878787 +Activate=no + +[MACsecReceiveAssociation] +# This section should be dropped. +Port=256 +MACAddress=c6:19:52:8f:e6:a0 +KeyId=0203040506070809 +Key=88888888888888888888888888888888 +Activate=no diff --git a/test/test-network/conf/25-macsec.network b/test/test-network/conf/25-macsec.network new file mode 100644 index 0000000..4dcccac --- /dev/null +++ b/test/test-network/conf/25-macsec.network @@ -0,0 +1,8 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=macsec99 + +[Network] +IPv6AcceptRA=no +Address=10.1.2.3/16 +LinkLocalAddressing=yes diff --git a/test/test-network/conf/25-macvlan.network b/test/test-network/conf/25-macvlan.network new file mode 100644 index 0000000..d34d7bd --- /dev/null +++ b/test/test-network/conf/25-macvlan.network @@ -0,0 +1,7 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=test1 + +[Network] +IPv6AcceptRA=no +MACVLAN=macvlan99 diff --git a/test/test-network/conf/25-macvtap.network b/test/test-network/conf/25-macvtap.network new file mode 100644 index 0000000..163c0de --- /dev/null +++ b/test/test-network/conf/25-macvtap.network @@ -0,0 +1,7 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=test1 + +[Network] +IPv6AcceptRA=no +MACVTAP=macvtap99 diff --git a/test/test-network/conf/25-neighbor-ip-dummy.network b/test/test-network/conf/25-neighbor-ip-dummy.network new file mode 100644 index 0000000..f1b1151 --- /dev/null +++ b/test/test-network/conf/25-neighbor-ip-dummy.network @@ -0,0 +1,8 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=dummy98 + +[Network] +IPv6AcceptRA=no +Tunnel=gretun97 +Tunnel=ip6gretun97 diff --git a/test/test-network/conf/25-neighbor-ip.network b/test/test-network/conf/25-neighbor-ip.network new file mode 100644 index 0000000..8ef6e3f --- /dev/null +++ b/test/test-network/conf/25-neighbor-ip.network @@ -0,0 +1,11 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=gretun97 + +[Network] +IPv6AcceptRA=no +Address=10.0.0.21 + +[Neighbor] +Address=10.0.0.22 +LinkLayerAddress=10.65.223.239 diff --git a/test/test-network/conf/25-neighbor-ipv6.network b/test/test-network/conf/25-neighbor-ipv6.network new file mode 100644 index 0000000..f7480fa --- /dev/null +++ b/test/test-network/conf/25-neighbor-ipv6.network @@ -0,0 +1,12 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=ip6gretun97 + +[Network] +IPv6AcceptRA=no +Address=2001:db8:0:f102::16/64 +LinkLocalAddressing=no + +[Neighbor] +Address=2001:db8:0:f102::17 +LinkLayerAddress=2a00:ffde:4567:edde::4988 diff --git a/test/test-network/conf/25-neighbor-next.network b/test/test-network/conf/25-neighbor-next.network new file mode 100644 index 0000000..6911f48 --- /dev/null +++ b/test/test-network/conf/25-neighbor-next.network @@ -0,0 +1,10 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=dummy98 + +[Network] +IPv6AcceptRA=no + +[Neighbor] +Address=192.168.10.1 +LinkLayerAddress=00:00:5e:00:02:66 diff --git a/test/test-network/conf/25-neighbor-section.network b/test/test-network/conf/25-neighbor-section.network new file mode 100644 index 0000000..38f6b02 --- /dev/null +++ b/test/test-network/conf/25-neighbor-section.network @@ -0,0 +1,14 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=dummy98 + +[Network] +IPv6AcceptRA=no + +[Neighbor] +Address=192.168.10.1 +LinkLayerAddress=00:00:5e:00:02:65 + +[Neighbor] +Address=2004:da8:1:0::1 +LinkLayerAddress=00:00:5e:00:02:66 diff --git a/test/test-network/conf/25-nexthop-dummy.network b/test/test-network/conf/25-nexthop-dummy.network new file mode 100644 index 0000000..a7bdaa9 --- /dev/null +++ b/test/test-network/conf/25-nexthop-dummy.network @@ -0,0 +1,15 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=dummy98 + +[Network] +Address=192.168.20.20/24 +IPv6AcceptRA=no + +[NextHop] +Id=20 +Gateway=192.168.20.1 + +[NextHop] +Id=21 +Group=1:3 20:1 diff --git a/test/test-network/conf/25-nexthop-nothing.network b/test/test-network/conf/25-nexthop-nothing.network new file mode 100644 index 0000000..9481175 --- /dev/null +++ b/test/test-network/conf/25-nexthop-nothing.network @@ -0,0 +1,9 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=veth99 + +[Network] +IPv6AcceptRA=no +Address=2001:1234:5:8f63::1/120 +Address=192.168.5.10/24 +Gateway=192.168.5.1 diff --git a/test/test-network/conf/25-nexthop.network b/test/test-network/conf/25-nexthop.network new file mode 100644 index 0000000..f53a58b --- /dev/null +++ b/test/test-network/conf/25-nexthop.network @@ -0,0 +1,83 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=veth99 + +[Network] +IPv6AcceptRA=no +Address=2001:1234:5:8f63::1/120 +Address=192.168.5.10/24 +Gateway=192.168.5.1 + +[NextHop] +Id=1 +Gateway=192.168.5.1 + +[NextHop] +Id=2 +Gateway=2001:1234:5:8f63::2 + +[NextHop] +Id=3 +Family=ipv6 + +[NextHop] +Id=4 +Family=ipv4 + +[NextHop] +Id=5 +Gateway=192.168.10.1 +OnLink=yes + +[NextHop] +Id=6 +Family=ipv4 +Blackhole=yes + +[NextHop] +Id=7 +Family=ipv6 +Blackhole=yes + +[NextHop] +Id=8 +Gateway=fe80::222:4dff:ff:ff:ff:ff + +[NextHop] +Gateway=192.168.5.2 + +[NextHop] +Family=ipv4 +Blackhole=yes + +[NextHop] +Family=ipv6 +Blackhole=yes + +[Route] +NextHop=1 +Destination=10.10.10.10 + +[Route] +NextHop=2 +Destination=10.10.10.11 + +[Route] +NextHop=2 +Destination=2001:1234:5:8f62::1 + +[Route] +NextHop=5 +Destination=10.10.10.12 + +[Route] +NextHop=6 +Destination=10.10.10.13 + +[Route] +NextHop=7 +Destination=2001:1234:5:8f62::2 + +[Route] +NextHop=21 +Destination=10.10.10.14 diff --git a/test/test-network/conf/25-nlmon.netdev b/test/test-network/conf/25-nlmon.netdev new file mode 100644 index 0000000..5e344d9 --- /dev/null +++ b/test/test-network/conf/25-nlmon.netdev @@ -0,0 +1,4 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[NetDev] +Kind=nlmon +Name=nlmon99 diff --git a/test/test-network/conf/25-prefix-route-with-vrf.network b/test/test-network/conf/25-prefix-route-with-vrf.network new file mode 100644 index 0000000..ac41a32 --- /dev/null +++ b/test/test-network/conf/25-prefix-route-with-vrf.network @@ -0,0 +1,27 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=dummy98 + +[Network] +IPv6AcceptRA=no +VRF=vrf99 +Address=fdde:11:22::1/128 +Address=fdde:11:33::1/64 +Address=10.20.22.1/32 +Address=10.20.33.1/24 + +[Address] +Address=fdde:11:44::1/128 +AddPrefixRoute=no + +[Address] +Address=fdde:11:55::1/64 +AddPrefixRoute=no + +[Address] +Address=10.20.44.1/32 +AddPrefixRoute=no + +[Address] +Address=10.20.55.1/24 +AddPrefixRoute=no diff --git a/test/test-network/conf/25-prefix-route-without-vrf.network b/test/test-network/conf/25-prefix-route-without-vrf.network new file mode 100644 index 0000000..d5338ce --- /dev/null +++ b/test/test-network/conf/25-prefix-route-without-vrf.network @@ -0,0 +1,26 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=test1 + +[Network] +IPv6AcceptRA=no +Address=fdde:12:22::1/128 +Address=fdde:12:33::1/64 +Address=10.21.22.1/32 +Address=10.21.33.1/24 + +[Address] +Address=fdde:12:44::1/128 +AddPrefixRoute=no + +[Address] +Address=fdde:12:55::1/64 +AddPrefixRoute=no + +[Address] +Address=10.21.44.1/32 +AddPrefixRoute=no + +[Address] +Address=10.21.55.1/24 +AddPrefixRoute=no diff --git a/test/test-network/conf/25-qdisc-cake.network b/test/test-network/conf/25-qdisc-cake.network new file mode 100644 index 0000000..b13720c --- /dev/null +++ b/test/test-network/conf/25-qdisc-cake.network @@ -0,0 +1,23 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=dummy98 + +[Network] +IPv6AcceptRA=no +Address=10.1.2.3/16 + +[CAKE] +Parent=root +Handle=3a +Bandwidth=500M +AutoRateIngress=yes +OverheadBytes=128 +MPUBytes=20 +CompensationMode=atm +UseRawPacketSize=yes +FlowIsolationMode=dual-dst-host +NAT=yes +PriorityQueueingPreset=diffserv8 +FirewallMark=0xff00 +Wash=yes +SplitGSO=yes diff --git a/test/test-network/conf/25-qdisc-clsact.network b/test/test-network/conf/25-qdisc-clsact.network new file mode 100644 index 0000000..8a16618 --- /dev/null +++ b/test/test-network/conf/25-qdisc-clsact.network @@ -0,0 +1,10 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=dummy98 + +[Network] +IPv6AcceptRA=no +Address=10.1.2.3/16 + +[QDisc] +Parent=clsact diff --git a/test/test-network/conf/25-qdisc-codel.network b/test/test-network/conf/25-qdisc-codel.network new file mode 100644 index 0000000..a332fa8 --- /dev/null +++ b/test/test-network/conf/25-qdisc-codel.network @@ -0,0 +1,16 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=dummy98 + +[Network] +IPv6AcceptRA=no +Address=10.1.2.3/16 + +[ControlledDelay] +Parent=root +Handle=0033 +PacketLimit=2000 +TargetSec=10ms +IntervalSec=50ms +ECN=yes +CEThresholdSec=100ms diff --git a/test/test-network/conf/25-qdisc-drr.network b/test/test-network/conf/25-qdisc-drr.network new file mode 100644 index 0000000..b5fca76 --- /dev/null +++ b/test/test-network/conf/25-qdisc-drr.network @@ -0,0 +1,16 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=dummy98 + +[Network] +IPv6AcceptRA=no +Address=10.1.2.3/16 + +[DeficitRoundRobinScheduler] +Parent=root +Handle=0002 + +[DeficitRoundRobinSchedulerClass] +Parent=root +ClassId=0002:0030 +QuantumBytes=2000 diff --git a/test/test-network/conf/25-qdisc-ets.network b/test/test-network/conf/25-qdisc-ets.network new file mode 100644 index 0000000..81ca718 --- /dev/null +++ b/test/test-network/conf/25-qdisc-ets.network @@ -0,0 +1,21 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=dummy98 + +[Network] +IPv6AcceptRA=no +Address=10.1.2.3/16 + +[EnhancedTransmissionSelection] +Parent=root +Handle=3a +Bands=10 +StrictBands=3 +QuantumBytes=2 4 6 +QuantumBytes= +QuantumBytes=1 2 3 +QuantumBytes=4 5 +PriorityMap=8 7 6 5 +PriorityMap= +PriorityMap=3 4 5 +PriorityMap=6 7 diff --git a/test/test-network/conf/25-qdisc-fq.network b/test/test-network/conf/25-qdisc-fq.network new file mode 100644 index 0000000..5539a64 --- /dev/null +++ b/test/test-network/conf/25-qdisc-fq.network @@ -0,0 +1,20 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=dummy98 + +[Network] +IPv6AcceptRA=no +Address=10.1.2.3/16 + +[FairQueueing] +Parent=root +Handle=0032 +PacketLimit=1000 +FlowLimit=200 +QuantumBytes=1500 +InitialQuantumBytes=13000 +MaximumRate=1M +Buckets=512 +OrphanMask=511 +Pacing=yes +CEThresholdSec=100ms diff --git a/test/test-network/conf/25-qdisc-fq_codel.network b/test/test-network/conf/25-qdisc-fq_codel.network new file mode 100644 index 0000000..0e7d62d --- /dev/null +++ b/test/test-network/conf/25-qdisc-fq_codel.network @@ -0,0 +1,19 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=dummy98 + +[Network] +IPv6AcceptRA=no +Address=10.1.2.3/16 + +[FairQueueingControlledDelay] +Parent=root +Handle=0034 +PacketLimit=20480 +MemoryLimitBytes=64M +Flows=2048 +TargetSec=10ms +IntervalSec=200ms +QuantumBytes=1400 +ECN=yes +CEThresholdSec=100ms diff --git a/test/test-network/conf/25-qdisc-fq_pie.network b/test/test-network/conf/25-qdisc-fq_pie.network new file mode 100644 index 0000000..5f567d3 --- /dev/null +++ b/test/test-network/conf/25-qdisc-fq_pie.network @@ -0,0 +1,12 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=dummy98 + +[Network] +IPv6AcceptRA=no +Address=10.1.2.3/16 + +[FlowQueuePIE] +Parent=root +Handle=3a +PacketLimit=200000 diff --git a/test/test-network/conf/25-qdisc-gred.network b/test/test-network/conf/25-qdisc-gred.network new file mode 100644 index 0000000..a49955f --- /dev/null +++ b/test/test-network/conf/25-qdisc-gred.network @@ -0,0 +1,14 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=dummy98 + +[Network] +IPv6AcceptRA=no +Address=10.1.2.3/16 + +[GenericRandomEarlyDetection] +Parent=root +Handle=0038 +VirtualQueues=12 +DefaultVirtualQueue=10 +GenericRIO=yes diff --git a/test/test-network/conf/25-qdisc-hhf.network b/test/test-network/conf/25-qdisc-hhf.network new file mode 100644 index 0000000..0b1c9d3 --- /dev/null +++ b/test/test-network/conf/25-qdisc-hhf.network @@ -0,0 +1,12 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=dummy98 + +[Network] +IPv6AcceptRA=no +Address=10.1.2.3/16 + +[HeavyHitterFilter] +Parent=root +Handle=3a +PacketLimit=1022 diff --git a/test/test-network/conf/25-qdisc-htb-fifo.network b/test/test-network/conf/25-qdisc-htb-fifo.network new file mode 100644 index 0000000..1e092a9 --- /dev/null +++ b/test/test-network/conf/25-qdisc-htb-fifo.network @@ -0,0 +1,65 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=dummy98 + +[Network] +IPv6AcceptRA=no +Address=10.1.2.3/16 + +[HierarchyTokenBucket] +Parent=root +Handle=0002 +DefaultClass=30 +RateToQuantum=20 + +[HierarchyTokenBucketClass] +Parent=root +ClassId=0002:0037 +Priority=1 +Rate=1M +CeilRate=0.5M +QuantumBytes=4000 +MTUBytes=1700 +OverheadBytes=100 +BufferBytes=123456 +CeilBufferBytes=123457 + +[PFIFO] +Parent=2:37 +Handle=0037 +PacketLimit=100000 + +[HierarchyTokenBucketClass] +Parent=root +ClassId=0002:003a +Priority=1 +Rate=1M +CeilRate=0.5M + +[BFIFO] +Parent=2:3a +Handle=003a +LimitBytes=1000000 + +[HierarchyTokenBucketClass] +Parent=root +ClassId=0002:003b +Priority=1 +Rate=1M +CeilRate=0.5M + +[PFIFOHeadDrop] +Parent=2:3b +Handle=003b +PacketLimit=1023 + +[HierarchyTokenBucketClass] +Parent=root +ClassId=0002:003c +Priority=1 +Rate=1M +CeilRate=0.5M + +[PFIFOFast] +Parent=2:3c +Handle=003c diff --git a/test/test-network/conf/25-qdisc-ingress.network b/test/test-network/conf/25-qdisc-ingress.network new file mode 100644 index 0000000..6fb5fef --- /dev/null +++ b/test/test-network/conf/25-qdisc-ingress.network @@ -0,0 +1,10 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=test1 + +[Network] +IPv6AcceptRA=no +Address=10.1.2.4/16 + +[QDisc] +Parent=ingress diff --git a/test/test-network/conf/25-qdisc-netem-compat.network b/test/test-network/conf/25-qdisc-netem-compat.network new file mode 100644 index 0000000..15e0f7f --- /dev/null +++ b/test/test-network/conf/25-qdisc-netem-compat.network @@ -0,0 +1,14 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=test1 + +[Network] +IPv6AcceptRA=no +Address=10.1.2.4/16 + +[TrafficControlQueueingDiscipline] +Parent=root +NetworkEmulatorDelaySec=50ms +NetworkEmulatorDelayJitterSec=10ms +NetworkEmulatorLossRate=20% +NetworkEmulatorPacketLimit=100 diff --git a/test/test-network/conf/25-qdisc-netem.network b/test/test-network/conf/25-qdisc-netem.network new file mode 100644 index 0000000..9848788 --- /dev/null +++ b/test/test-network/conf/25-qdisc-netem.network @@ -0,0 +1,15 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=dummy98 + +[Network] +IPv6AcceptRA=no +Address=10.1.2.3/16 + +[NetworkEmulator] +Parent=root +Handle=0030 +DelaySec=50ms +DelayJitterSec=10ms +LossRate=20% +PacketLimit=100 diff --git a/test/test-network/conf/25-qdisc-pie.network b/test/test-network/conf/25-qdisc-pie.network new file mode 100644 index 0000000..119423b --- /dev/null +++ b/test/test-network/conf/25-qdisc-pie.network @@ -0,0 +1,12 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=dummy98 + +[Network] +IPv6AcceptRA=no +Address=10.1.2.3/16 + +[PIE] +Parent=root +Handle=3a +PacketLimit=200000 diff --git a/test/test-network/conf/25-qdisc-qfq.network b/test/test-network/conf/25-qdisc-qfq.network new file mode 100644 index 0000000..b09e99c --- /dev/null +++ b/test/test-network/conf/25-qdisc-qfq.network @@ -0,0 +1,23 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=dummy98 + +[Network] +IPv6AcceptRA=no +Address=10.1.2.3/16 + +[QuickFairQueueing] +Parent=root +Handle=0002 + +[QuickFairQueueingClass] +Parent=root +ClassId=0002:0030 +Weight=2 +MaxPacketBytes=16000 + +[QuickFairQueueingClass] +Parent=root +ClassId=0002:0031 +Weight=10 +MaxPacketBytes=8000 diff --git a/test/test-network/conf/25-qdisc-sfb.network b/test/test-network/conf/25-qdisc-sfb.network new file mode 100644 index 0000000..bfcda00 --- /dev/null +++ b/test/test-network/conf/25-qdisc-sfb.network @@ -0,0 +1,12 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=dummy98 + +[Network] +IPv6AcceptRA=no +Address=10.1.2.3/16 + +[StochasticFairBlue] +Parent=root +Handle=0039 +PacketLimit=200000 diff --git a/test/test-network/conf/25-qdisc-sfq.network b/test/test-network/conf/25-qdisc-sfq.network new file mode 100644 index 0000000..263cd6d --- /dev/null +++ b/test/test-network/conf/25-qdisc-sfq.network @@ -0,0 +1,12 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=dummy98 + +[Network] +IPv6AcceptRA=no +Address=10.1.2.3/16 + +[StochasticFairnessQueueing] +Parent=root +Handle=0036 +PerturbPeriodSec=5sec diff --git a/test/test-network/conf/25-qdisc-tbf.network b/test/test-network/conf/25-qdisc-tbf.network new file mode 100644 index 0000000..c5f28fb --- /dev/null +++ b/test/test-network/conf/25-qdisc-tbf.network @@ -0,0 +1,16 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=dummy98 + +[Network] +IPv6AcceptRA=no +Address=10.1.2.3/16 + +[TokenBucketFilter] +Parent=root +Handle=0035 +Rate=1G +BurstBytes=5000 +LatencySec=70msec +PeakRate=100G +MTUBytes=1000000 diff --git a/test/test-network/conf/25-qdisc-teql.network b/test/test-network/conf/25-qdisc-teql.network new file mode 100644 index 0000000..ed7e21f --- /dev/null +++ b/test/test-network/conf/25-qdisc-teql.network @@ -0,0 +1,12 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=dummy98 + +[Network] +IPv6AcceptRA=no +Address=10.1.2.3/16 + +[TrivialLinkEqualizer] +Parent=root +Handle=0031 +Id=1 diff --git a/test/test-network/conf/25-route-congctl.network b/test/test-network/conf/25-route-congctl.network new file mode 100644 index 0000000..f924d73 --- /dev/null +++ b/test/test-network/conf/25-route-congctl.network @@ -0,0 +1,16 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=dummy98 + +[Network] +IPv6AcceptRA=no +Address=2001:1234:5:8f63::1/128 +Address=149.10.124.58/28 + +[Route] +Destination=2001:1234:5:8fff:ff:ff:ff:ff/128 +TCPCongestionControlAlgorithm=dctcp + +[Route] +Destination=149.10.124.66 +TCPCongestionControlAlgorithm=dctcp diff --git a/test/test-network/conf/25-route-ipv6-src.network b/test/test-network/conf/25-route-ipv6-src.network new file mode 100644 index 0000000..f2f8e45 --- /dev/null +++ b/test/test-network/conf/25-route-ipv6-src.network @@ -0,0 +1,17 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +# This test cannot use a dummy interface: IPv6 addresses +# are added without having to go through tentative state + +[Match] +Name=bond199 + +[Network] +LinkLocalAddressing=ipv6 +Address=2001:1234:56:8f63::1/64 +Address=2001:1234:56:8f63::2/64 +IPv6AcceptRA=no + +[Route] +Destination=abcd::/16 +Gateway=2001:1234:56:8f63::1:1 +PreferredSource=2001:1234:56:8f63::2 diff --git a/test/test-network/conf/25-route-preferred-source.network b/test/test-network/conf/25-route-preferred-source.network new file mode 100644 index 0000000..5a55460 --- /dev/null +++ b/test/test-network/conf/25-route-preferred-source.network @@ -0,0 +1,12 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=dummy98 + +[Network] +Address=2001:1234:56:8f63::1/64 +IPv6AcceptRA=no + +[Route] +Destination=abcd::/16 +Gateway=2001:1234:56:8f63::1:1 +PreferredSource=2001:1234:56:8f63::1 diff --git a/test/test-network/conf/25-route-static.network b/test/test-network/conf/25-route-static.network new file mode 100644 index 0000000..46ef0c4 --- /dev/null +++ b/test/test-network/conf/25-route-static.network @@ -0,0 +1,107 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=dummy98 + +[Network] +IPv6AcceptRA=no +Address=2001:1234:5:8f63::1/128 +Address=149.10.124.58/28 +DefaultRouteOnDevice=yes +IPv4LLRoute=yes + +[Route] +Destination=2001:1234:5:8fff:ff:ff:ff:ff/128 + +[Route] +Destination=2001:1234:5:9fff:ff:ff:ff:ff/128 + +[Route] +Gateway=2001:1234:5:8fff:ff:ff:ff:ff + +[Route] +Destination=2001:1234:5:afff:ff:ff:ff:ff/128 +Gateway=fe80::222:4dff:ff:ff:ff:ff + +[Route] +Destination=149.10.124.64 + +[Route] +Gateway=149.10.124.64 + +[Route] +Gateway=149.10.125.65 +GatewayOnLink=yes + +[Route] +Destination=192.168.1.1 +InitialCongestionWindow=20 + +[Route] +Destination=192.168.1.2 +InitialAdvertisedReceiveWindow=30 + +[Route] +Destination=192.168.1.3 +TCPAdvertisedMaximumSegmentSize=30 + +[Route] +Type=blackhole +Destination=202.54.1.2 + +[Route] +Type=unreachable +Destination=202.54.1.3 + +[Route] +Type=prohibit +Destination=202.54.1.4 + +[Route] +Type=blackhole +Destination=2001:1234:5678::2 + +[Route] +Type=unreachable +Destination=2001:1234:5678::3 + +[Route] +Type=prohibit +Destination=2001:1234:5678::4 + +[Route] +Type=local +Destination=149.10.123.1 + +[Route] +Type=anycast +Destination=149.10.123.2 + +[Route] +Type=broadcast +Destination=149.10.123.3 + +[Route] +Type=multicast +Destination=149.10.123.4 + +[Route] +Destination=192.168.10.1/32 +MultiPathRoute=149.10.124.59 10 +MultiPathRoute=149.10.124.60 5 + +[Route] +Destination=2001:1234:5:7fff:ff:ff:ff:ff/128 +MultiPathRoute=2001:1234:5:8fff:ff:ff:ff:ff@dummy98 10 +MultiPathRoute=2001:1234:5:9fff:ff:ff:ff:ff@dummy98 5 + +[Route] +Destination=192.168.10.2/32 +MultiPathRoute=2001:1234:5:8fff:ff:ff:ff:ff@dummy98 10 +MultiPathRoute=2001:1234:5:9fff:ff:ff:ff:ff@dummy98 5 + +[Address] +Address=1.1.8.105/31 +Peer=1.1.8.104/31 + +[Route] +Gateway=1.1.8.104 diff --git a/test/test-network/conf/25-route-via-ipv6.network b/test/test-network/conf/25-route-via-ipv6.network new file mode 100644 index 0000000..aa12781 --- /dev/null +++ b/test/test-network/conf/25-route-via-ipv6.network @@ -0,0 +1,15 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=dummy98 + +[Network] +IPv6AcceptRA=no +Address=2001:1234:5:8f63::1/128 +Address=149.10.124.58/28 + +[Route] +Destination=2001:1234:5:8fff:ff:ff:ff:ff/128 + +[Route] +Destination=149.10.124.66 +Gateway=2001:1234:5:8fff:ff:ff:ff:ff diff --git a/test/test-network/conf/25-route-vrf.network b/test/test-network/conf/25-route-vrf.network new file mode 100644 index 0000000..1bc94f9 --- /dev/null +++ b/test/test-network/conf/25-route-vrf.network @@ -0,0 +1,9 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=dummy98 + +[Network] +IPv6AcceptRA=no +VRF=vrf99 +Address=192.168.100.2/24 +Gateway=192.168.100.1 diff --git a/test/test-network/conf/25-routing-policy-rule-dummy98.network b/test/test-network/conf/25-routing-policy-rule-dummy98.network new file mode 100644 index 0000000..d4c579f --- /dev/null +++ b/test/test-network/conf/25-routing-policy-rule-dummy98.network @@ -0,0 +1,14 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=dummy98 + +[Network] +IPv6AcceptRA=no + +[RoutingPolicyRule] +TypeOfService=0x08 +Table=8 +From= 192.168.101.18 +Priority=112 +IncomingInterface=dummy98 +OutgoingInterface=dummy98 diff --git a/test/test-network/conf/25-routing-policy-rule-reconfigure1.network b/test/test-network/conf/25-routing-policy-rule-reconfigure1.network new file mode 100644 index 0000000..d0c05c5 --- /dev/null +++ b/test/test-network/conf/25-routing-policy-rule-reconfigure1.network @@ -0,0 +1,34 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=test1 + +[Network] +IPv6AcceptRA=no + +# fwmark +[RoutingPolicyRule] +Table=1011 +Family=ipv4 +Priority=10111 +FirewallMark=1011 + +# oif +[RoutingPolicyRule] +Table=1011 +Family=ipv4 +Priority=10112 +OutgoingInterface=test1 + +# iif +[RoutingPolicyRule] +Table=1011 +Family=both +Priority=10113 +IncomingInterface=test1 + +# source +[RoutingPolicyRule] +Table=1011 +Family=ipv4 +Priority=10114 +From=192.168.8.254 diff --git a/test/test-network/conf/25-routing-policy-rule-reconfigure2.network b/test/test-network/conf/25-routing-policy-rule-reconfigure2.network new file mode 100644 index 0000000..47bf4bb --- /dev/null +++ b/test/test-network/conf/25-routing-policy-rule-reconfigure2.network @@ -0,0 +1,34 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=test1 + +[Network] +IPv6AcceptRA=no + +# fwmark +[RoutingPolicyRule] +Table=1011 +Family=ipv4 +Priority=10111 +FirewallMark=1011 + +# oif +[RoutingPolicyRule] +Table=1011 +Family=both +Priority=10112 +OutgoingInterface=test1 + +# iif +[RoutingPolicyRule] +Table=1011 +Family=ipv4 +Priority=10113 +IncomingInterface=test1 + +# source +[RoutingPolicyRule] +Table=1011 +Family=ipv4 +Priority=10114 +From=192.168.8.254 diff --git a/test/test-network/conf/25-routing-policy-rule-test1.network b/test/test-network/conf/25-routing-policy-rule-test1.network new file mode 100644 index 0000000..7d6e17c --- /dev/null +++ b/test/test-network/conf/25-routing-policy-rule-test1.network @@ -0,0 +1,33 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=test1 + +[Network] +IPv6AcceptRA=no + +[RoutingPolicyRule] +TypeOfService=0x08 +Table=7 +From= 192.168.100.18 +Priority=111 +IncomingInterface=test1 +OutgoingInterface=test1 + +[RoutingPolicyRule] +IncomingInterface=test1 +From=::/0 +Table=8 +Priority=100 +Family=ipv6 + +[RoutingPolicyRule] +IncomingInterface=test1 +Table=9 +Priority=101 +Family=both + +[RoutingPolicyRule] +IncomingInterface=test1 +From=0.0.0.0/8 +Table=10 +Priority=102 diff --git a/test/test-network/conf/25-sit-tunnel-any-any.netdev b/test/test-network/conf/25-sit-tunnel-any-any.netdev new file mode 100644 index 0000000..a25cf3e --- /dev/null +++ b/test/test-network/conf/25-sit-tunnel-any-any.netdev @@ -0,0 +1,8 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[NetDev] +Name=sittun96 +Kind=sit + +[Tunnel] +Local=any +Remote=any diff --git a/test/test-network/conf/25-sit-tunnel-local-any.netdev b/test/test-network/conf/25-sit-tunnel-local-any.netdev new file mode 100644 index 0000000..3c92ccc --- /dev/null +++ b/test/test-network/conf/25-sit-tunnel-local-any.netdev @@ -0,0 +1,8 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[NetDev] +Name=sittun98 +Kind=sit + +[Tunnel] +Local=any +Remote=10.65.223.239 diff --git a/test/test-network/conf/25-sit-tunnel-remote-any.netdev b/test/test-network/conf/25-sit-tunnel-remote-any.netdev new file mode 100644 index 0000000..c8f18a6 --- /dev/null +++ b/test/test-network/conf/25-sit-tunnel-remote-any.netdev @@ -0,0 +1,8 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[NetDev] +Name=sittun97 +Kind=sit + +[Tunnel] +Local=10.65.223.238 +Remote=any diff --git a/test/test-network/conf/25-sit-tunnel.netdev b/test/test-network/conf/25-sit-tunnel.netdev new file mode 100644 index 0000000..1215797 --- /dev/null +++ b/test/test-network/conf/25-sit-tunnel.netdev @@ -0,0 +1,8 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[NetDev] +Name=sittun99 +Kind=sit + +[Tunnel] +Local=10.65.223.238 +Remote=10.65.223.239 diff --git a/test/test-network/conf/25-sit.network b/test/test-network/conf/25-sit.network new file mode 100644 index 0000000..e05bf82 --- /dev/null +++ b/test/test-network/conf/25-sit.network @@ -0,0 +1,10 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=dummy98 + +[Network] +IPv6AcceptRA=no +Tunnel=sittun99 +Tunnel=sittun98 +Tunnel=sittun97 +Tunnel=sittun96 diff --git a/test/test-network/conf/25-sriov-udev.network b/test/test-network/conf/25-sriov-udev.network new file mode 100644 index 0000000..e914131 --- /dev/null +++ b/test/test-network/conf/25-sriov-udev.network @@ -0,0 +1,7 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=eni99np1 + +[Network] +Address=192.168.100.100/24 +IPv6AcceptRA=no diff --git a/test/test-network/conf/25-sriov.link b/test/test-network/conf/25-sriov.link new file mode 100644 index 0000000..cc19561 --- /dev/null +++ b/test/test-network/conf/25-sriov.link @@ -0,0 +1,40 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Driver=netdevsim + +[Link] +NamePolicy=keep kernel database onboard slot path +AlternativeNamesPolicy=database onboard slot path mac +MACAddressPolicy=persistent + +[SR-IOV] +VirtualFunction=0 +VLANId=5 +VLANProtocol=802.1ad +QualityOfService=1 +MACSpoofCheck=yes +QueryReceiveSideScaling=yes +Trust=yes +LinkState=yes +MACAddress=00:11:22:33:44:55 + +[SR-IOV] +VirtualFunction=1 +VLANId=6 +VLANProtocol=802.1Q +QualityOfService=2 +MACSpoofCheck=no +QueryReceiveSideScaling=no +Trust=no +LinkState=no +MACAddress=00:11:22:33:44:56 + +[SR-IOV] +VirtualFunction=2 +VLANId=7 +QualityOfService=3 +MACSpoofCheck=no +QueryReceiveSideScaling=no +Trust=no +LinkState=auto +MACAddress=00:11:22:33:44:57 diff --git a/test/test-network/conf/25-sriov.network b/test/test-network/conf/25-sriov.network new file mode 100644 index 0000000..d87615e --- /dev/null +++ b/test/test-network/conf/25-sriov.network @@ -0,0 +1,39 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=eni99np1 + +[Network] +Address=192.168.100.100/24 +IPv6AcceptRA=no + +[SR-IOV] +VirtualFunction=0 +VLANId=5 +VLANProtocol=802.1ad +QualityOfService=1 +MACSpoofCheck=yes +QueryReceiveSideScaling=yes +Trust=yes +LinkState=yes +MACAddress=00:11:22:33:44:55 + +[SR-IOV] +VirtualFunction=1 +VLANId=6 +VLANProtocol=802.1Q +QualityOfService=2 +MACSpoofCheck=no +QueryReceiveSideScaling=no +Trust=no +LinkState=no +MACAddress=00:11:22:33:44:56 + +[SR-IOV] +VirtualFunction=2 +VLANId=7 +QualityOfService=3 +MACSpoofCheck=no +QueryReceiveSideScaling=no +Trust=no +LinkState=auto +MACAddress=00:11:22:33:44:57 diff --git a/test/test-network/conf/25-state-file-tests.network b/test/test-network/conf/25-state-file-tests.network new file mode 100644 index 0000000..d321d60 --- /dev/null +++ b/test/test-network/conf/25-state-file-tests.network @@ -0,0 +1,19 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=dummy98 + +[Link] +RequiredForOnline=routable +RequiredFamilyForOnline=both + +[Network] +IPv6AcceptRA=no +DNS=10.10.10.10#aaa.com 10.10.10.11:1111#bbb.com [1111:2222::3333]:1234#ccc.com +NTP=0.fedora.pool.ntp.org 1.fedora.pool.ntp.org +Domains=hogehoge ~foofoo +LLMNR=no +MulticastDNS=yes +DNSSEC=no +Address=192.168.10.10/24 +Address=192.168.12.12/24 +Address=2002:da8:1:0:1034:56ff:fe78:9abc/64 diff --git a/test/test-network/conf/25-sysctl-disable-ipv6.network b/test/test-network/conf/25-sysctl-disable-ipv6.network new file mode 100644 index 0000000..9e423c4 --- /dev/null +++ b/test/test-network/conf/25-sysctl-disable-ipv6.network @@ -0,0 +1,19 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=dummy98 + +[Network] +IPv6AcceptRA=no +Address=10.2.3.4/16 + +# This should be ignored when ipv6 is disabled +Gateway=2607:5300:0203:39ff:ff:ff:ff:ff + +[Address] +# This should be ignored when ipv6 is disabled +Address=2607:5300:0203:3906::/64 + +[Route] +# This should be ignored when ipv6 is disabled +Destination=2607:5300:0203:39ff:ff:ff:ff:ff +Scope=link diff --git a/test/test-network/conf/25-sysctl.network b/test/test-network/conf/25-sysctl.network new file mode 100644 index 0000000..72575ee --- /dev/null +++ b/test/test-network/conf/25-sysctl.network @@ -0,0 +1,13 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=dummy98 + +[Network] +IPForward=true +IPv6PrivacyExtensions=true +IPv6DuplicateAddressDetection=3 +IPv6HopLimit=5 +IPv4ProxyARP=true +IPv6ProxyNDP=true +IPv6AcceptRA=no +IPv4AcceptLocal=yes diff --git a/test/test-network/conf/25-tap.netdev b/test/test-network/conf/25-tap.netdev new file mode 100644 index 0000000..5cbfd0e --- /dev/null +++ b/test/test-network/conf/25-tap.netdev @@ -0,0 +1,10 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[NetDev] +Name=testtap99 +Kind=tap + +[Tap] +MultiQueue=true +PacketInfo=true +VNetHeader=true +KeepCarrier=yes diff --git a/test/test-network/conf/25-test1.network b/test/test-network/conf/25-test1.network new file mode 100644 index 0000000..c7ad431 --- /dev/null +++ b/test/test-network/conf/25-test1.network @@ -0,0 +1,8 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=test1 + +[Network] +Address=192.168.0.15/24 +Gateway=192.168.0.1 +IPv6AcceptRA=no diff --git a/test/test-network/conf/25-test1.network.d/configure-without-carrier.conf b/test/test-network/conf/25-test1.network.d/configure-without-carrier.conf new file mode 100644 index 0000000..fed3b0e --- /dev/null +++ b/test/test-network/conf/25-test1.network.d/configure-without-carrier.conf @@ -0,0 +1,2 @@ +[Network] +ConfigureWithoutCarrier=true diff --git a/test/test-network/conf/25-test1.network.d/ignore-carrier-loss-no.conf b/test/test-network/conf/25-test1.network.d/ignore-carrier-loss-no.conf new file mode 100644 index 0000000..b091e98 --- /dev/null +++ b/test/test-network/conf/25-test1.network.d/ignore-carrier-loss-no.conf @@ -0,0 +1,2 @@ +[Network] +IgnoreCarrierLoss=false diff --git a/test/test-network/conf/25-tun.netdev b/test/test-network/conf/25-tun.netdev new file mode 100644 index 0000000..a354ebb --- /dev/null +++ b/test/test-network/conf/25-tun.netdev @@ -0,0 +1,10 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[NetDev] +Name=testtun99 +Kind=tun + +[Tun] +MultiQueue=true +PacketInfo=true +VNetHeader=true +KeepCarrier=yes diff --git a/test/test-network/conf/25-tunnel-any-any.network b/test/test-network/conf/25-tunnel-any-any.network new file mode 100644 index 0000000..8ce56a3 --- /dev/null +++ b/test/test-network/conf/25-tunnel-any-any.network @@ -0,0 +1,9 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=*tun96 + +[Network] +IPv6AcceptRA=no +Address=2001:db8:0:f102::19/64 +Address=10.3.2.6/16 +LinkLocalAddressing=yes diff --git a/test/test-network/conf/25-tunnel-local-any.network b/test/test-network/conf/25-tunnel-local-any.network new file mode 100644 index 0000000..e65530e --- /dev/null +++ b/test/test-network/conf/25-tunnel-local-any.network @@ -0,0 +1,9 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=*tun98 *tap98 ip6tnl98 erspan98 + +[Network] +IPv6AcceptRA=no +Address=2001:db8:0:f102::17/64 +Address=10.3.2.4/16 +LinkLocalAddressing=yes diff --git a/test/test-network/conf/25-tunnel-remote-any.network b/test/test-network/conf/25-tunnel-remote-any.network new file mode 100644 index 0000000..eb7bda9 --- /dev/null +++ b/test/test-network/conf/25-tunnel-remote-any.network @@ -0,0 +1,9 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=*tun97 ip6tnl97 + +[Network] +IPv6AcceptRA=no +Address=2001:db8:0:f102::18/64 +Address=10.3.2.5/16 +LinkLocalAddressing=yes diff --git a/test/test-network/conf/25-tunnel.network b/test/test-network/conf/25-tunnel.network new file mode 100644 index 0000000..9e269bd --- /dev/null +++ b/test/test-network/conf/25-tunnel.network @@ -0,0 +1,9 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=*tun99 *tap99 ip6tnl99 erspan99 + +[Network] +IPv6AcceptRA=no +Address=2001:db8:0:f102::16/64 +Address=10.3.2.3/16 +LinkLocalAddressing=yes diff --git a/test/test-network/conf/25-vcan.netdev b/test/test-network/conf/25-vcan.netdev new file mode 100644 index 0000000..2762dd2 --- /dev/null +++ b/test/test-network/conf/25-vcan.netdev @@ -0,0 +1,5 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[NetDev] +Name=vcan99 +Kind=vcan +MTUBytes=16 diff --git a/test/test-network/conf/25-vcan98.netdev b/test/test-network/conf/25-vcan98.netdev new file mode 100644 index 0000000..5333c82 --- /dev/null +++ b/test/test-network/conf/25-vcan98.netdev @@ -0,0 +1,4 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[NetDev] +Name=vcan98 +Kind=vcan diff --git a/test/test-network/conf/25-vcan98.network b/test/test-network/conf/25-vcan98.network new file mode 100644 index 0000000..97f824d --- /dev/null +++ b/test/test-network/conf/25-vcan98.network @@ -0,0 +1,6 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=vcan98 + +[Link] +MTUBytes=16 diff --git a/test/test-network/conf/25-veth-downstream-veth97.netdev b/test/test-network/conf/25-veth-downstream-veth97.netdev new file mode 100644 index 0000000..5ba18ce --- /dev/null +++ b/test/test-network/conf/25-veth-downstream-veth97.netdev @@ -0,0 +1,9 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[NetDev] +Name=veth97 +Kind=veth +MACAddress=12:34:56:78:9a:ce + +[Peer] +Name=veth97-peer +MACAddress=12:34:56:78:9a:cf diff --git a/test/test-network/conf/25-veth-downstream-veth98.netdev b/test/test-network/conf/25-veth-downstream-veth98.netdev new file mode 100644 index 0000000..1329d91 --- /dev/null +++ b/test/test-network/conf/25-veth-downstream-veth98.netdev @@ -0,0 +1,9 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[NetDev] +Name=veth98 +Kind=veth +MACAddress=12:34:56:78:9a:be + +[Peer] +Name=veth98-peer +MACAddress=12:34:56:78:9a:bf diff --git a/test/test-network/conf/25-veth-mtu.netdev b/test/test-network/conf/25-veth-mtu.netdev new file mode 100644 index 0000000..f5ffe9e --- /dev/null +++ b/test/test-network/conf/25-veth-mtu.netdev @@ -0,0 +1,10 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[NetDev] +Name=veth-mtu +Kind=veth +MACAddress=12:34:56:78:9a:be +MTUBytes=1800 + +[Peer] +Name=veth-mtu-peer +MACAddress=12:34:56:78:9a:bf diff --git a/test/test-network/conf/25-veth-peer.network b/test/test-network/conf/25-veth-peer.network new file mode 100644 index 0000000..d5cc6d3 --- /dev/null +++ b/test/test-network/conf/25-veth-peer.network @@ -0,0 +1,8 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=veth-peer + +[Network] +IPv6AcceptRA=no +Address=2600::1/0 +Address=192.168.5.1/24 diff --git a/test/test-network/conf/25-veth.netdev b/test/test-network/conf/25-veth.netdev new file mode 100644 index 0000000..84bfa8f --- /dev/null +++ b/test/test-network/conf/25-veth.netdev @@ -0,0 +1,9 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[NetDev] +Name=veth99 +Kind=veth +MACAddress=12:34:56:78:9a:bc + +[Peer] +Name=veth-peer +MACAddress=12:34:56:78:9a:bd diff --git a/test/test-network/conf/25-vrf.netdev b/test/test-network/conf/25-vrf.netdev new file mode 100644 index 0000000..001ca87 --- /dev/null +++ b/test/test-network/conf/25-vrf.netdev @@ -0,0 +1,7 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[NetDev] +Name=vrf99 +Kind=vrf + +[VRF] +TableId=42 diff --git a/test/test-network/conf/25-vrf.network b/test/test-network/conf/25-vrf.network new file mode 100644 index 0000000..914efee --- /dev/null +++ b/test/test-network/conf/25-vrf.network @@ -0,0 +1,6 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=vrf99 + +[Network] +IPv6AcceptRA=no diff --git a/test/test-network/conf/25-vti-tunnel-any-any.netdev b/test/test-network/conf/25-vti-tunnel-any-any.netdev new file mode 100644 index 0000000..e1e1d65 --- /dev/null +++ b/test/test-network/conf/25-vti-tunnel-any-any.netdev @@ -0,0 +1,8 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[NetDev] +Name=vtitun96 +Kind=vti + +[Tunnel] +Local=any +Remote=any diff --git a/test/test-network/conf/25-vti-tunnel-local-any.netdev b/test/test-network/conf/25-vti-tunnel-local-any.netdev new file mode 100644 index 0000000..c1c94cf --- /dev/null +++ b/test/test-network/conf/25-vti-tunnel-local-any.netdev @@ -0,0 +1,8 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[NetDev] +Name=vtitun98 +Kind=vti + +[Tunnel] +Local=remote +Remote=10.65.223.239 diff --git a/test/test-network/conf/25-vti-tunnel-remote-any.netdev b/test/test-network/conf/25-vti-tunnel-remote-any.netdev new file mode 100644 index 0000000..2367ed9 --- /dev/null +++ b/test/test-network/conf/25-vti-tunnel-remote-any.netdev @@ -0,0 +1,8 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[NetDev] +Name=vtitun97 +Kind=vti + +[Tunnel] +Local=10.65.223.238 +Remote=any diff --git a/test/test-network/conf/25-vti-tunnel.netdev b/test/test-network/conf/25-vti-tunnel.netdev new file mode 100644 index 0000000..5a8a1ce --- /dev/null +++ b/test/test-network/conf/25-vti-tunnel.netdev @@ -0,0 +1,8 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[NetDev] +Name=vtitun99 +Kind=vti + +[Tunnel] +Local=10.65.223.238 +Remote=10.65.223.239 diff --git a/test/test-network/conf/25-vti.network b/test/test-network/conf/25-vti.network new file mode 100644 index 0000000..af80aad --- /dev/null +++ b/test/test-network/conf/25-vti.network @@ -0,0 +1,10 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=dummy98 + +[Network] +IPv6AcceptRA=no +Tunnel=vtitun99 +Tunnel=vtitun98 +Tunnel=vtitun97 +Tunnel=vtitun96 diff --git a/test/test-network/conf/25-vti6-tunnel-local-any.netdev b/test/test-network/conf/25-vti6-tunnel-local-any.netdev new file mode 100644 index 0000000..546999f --- /dev/null +++ b/test/test-network/conf/25-vti6-tunnel-local-any.netdev @@ -0,0 +1,8 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[NetDev] +Name=vti6tun98 +Kind=vti6 + +[Tunnel] +Local=any +Remote=2001:473:fece:cafe::5179 diff --git a/test/test-network/conf/25-vti6-tunnel-remote-any.netdev b/test/test-network/conf/25-vti6-tunnel-remote-any.netdev new file mode 100644 index 0000000..6f33315 --- /dev/null +++ b/test/test-network/conf/25-vti6-tunnel-remote-any.netdev @@ -0,0 +1,8 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[NetDev] +Name=vti6tun97 +Kind=vti6 + +[Tunnel] +Local=2a00:ffde:4567:edde::4987 +Remote=any diff --git a/test/test-network/conf/25-vti6-tunnel.netdev b/test/test-network/conf/25-vti6-tunnel.netdev new file mode 100644 index 0000000..68cbcbf --- /dev/null +++ b/test/test-network/conf/25-vti6-tunnel.netdev @@ -0,0 +1,8 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[NetDev] +Name=vti6tun99 +Kind=vti6 + +[Tunnel] +Local=2a00:ffde:4567:edde::4987 +Remote=2001:473:fece:cafe::5179 diff --git a/test/test-network/conf/25-vti6.network b/test/test-network/conf/25-vti6.network new file mode 100644 index 0000000..2f73a99 --- /dev/null +++ b/test/test-network/conf/25-vti6.network @@ -0,0 +1,9 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=dummy98 + +[Network] +IPv6AcceptRA=no +Tunnel=vti6tun99 +Tunnel=vti6tun98 +Tunnel=vti6tun97 diff --git a/test/test-network/conf/25-vxcan.netdev b/test/test-network/conf/25-vxcan.netdev new file mode 100644 index 0000000..49c0a17 --- /dev/null +++ b/test/test-network/conf/25-vxcan.netdev @@ -0,0 +1,7 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[NetDev] +Name=vxcan99 +Kind=vxcan + +[VXCAN] +Peer=vxcan-peer diff --git a/test/test-network/conf/25-vxlan-independent.netdev b/test/test-network/conf/25-vxlan-independent.netdev new file mode 100644 index 0000000..44b819d --- /dev/null +++ b/test/test-network/conf/25-vxlan-independent.netdev @@ -0,0 +1,18 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[NetDev] +Name=vxlan98 +Kind=vxlan + +[VXLAN] +VNI=1000 +L2MissNotification=true +L3MissNotification=true +RouteShortCircuit=true +UDPChecksum=true +UDP6ZeroChecksumTx=true +UDP6ZeroChecksumRx=true +RemoteChecksumTx=true +RemoteChecksumRx=true +GroupPolicyExtension=true +DestinationPort=5556 +Independent=yes diff --git a/test/test-network/conf/25-vxlan-ipv6.netdev b/test/test-network/conf/25-vxlan-ipv6.netdev new file mode 100644 index 0000000..b5079fd --- /dev/null +++ b/test/test-network/conf/25-vxlan-ipv6.netdev @@ -0,0 +1,8 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[NetDev] +Name=vxlan97 +Kind=vxlan + +[VXLAN] +VNI=4831583 +Local=fe80::281:8eff:fef0:73aa diff --git a/test/test-network/conf/25-vxlan-ipv6.network b/test/test-network/conf/25-vxlan-ipv6.network new file mode 100644 index 0000000..fd22387 --- /dev/null +++ b/test/test-network/conf/25-vxlan-ipv6.network @@ -0,0 +1,25 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=vxlan97 + +[Network] +IPv6AcceptRA=no +LinkLocalAddressing=yes + +[BridgeFDB] +MACAddress=00:00:00:00:00:00 +Destination=fe80::27c:16ff:fec0:6c74 +OutgoingInterface=test1 +VNI=4831583 + +[BridgeFDB] +MACAddress=00:00:00:00:00:00 +Destination=fe80::2a2:e4ff:fef9:2269 +OutgoingInterface=test1 +VNI=4831583 + +[BridgeFDB] +MACAddress=00:00:00:00:00:00 +Destination=fe80::23b:d2ff:fe95:967f +OutgoingInterface=test1 +VNI=4831583 diff --git a/test/test-network/conf/25-vxlan-local-slaac.netdev b/test/test-network/conf/25-vxlan-local-slaac.netdev new file mode 100644 index 0000000..43f5934 --- /dev/null +++ b/test/test-network/conf/25-vxlan-local-slaac.netdev @@ -0,0 +1,8 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[NetDev] +Name=vxlan-slaac +Kind=vxlan + +[VXLAN] +VNI=4831584 +Local=slaac diff --git a/test/test-network/conf/25-vxlan-local-slaac.network b/test/test-network/conf/25-vxlan-local-slaac.network new file mode 100644 index 0000000..4ea1eae --- /dev/null +++ b/test/test-network/conf/25-vxlan-local-slaac.network @@ -0,0 +1,7 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=vxlan-slaac + +[Network] +IPv6AcceptRA=no +LinkLocalAddressing=yes diff --git a/test/test-network/conf/25-vxlan-test1.network b/test/test-network/conf/25-vxlan-test1.network new file mode 100644 index 0000000..4e9501c --- /dev/null +++ b/test/test-network/conf/25-vxlan-test1.network @@ -0,0 +1,9 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=test1 + +[Network] +IPv6AcceptRA=false +LinkLocalAddressing=yes +VXLAN=vxlan99 +VXLAN=vxlan97 diff --git a/test/test-network/conf/25-vxlan-veth99.network b/test/test-network/conf/25-vxlan-veth99.network new file mode 100644 index 0000000..b67b746 --- /dev/null +++ b/test/test-network/conf/25-vxlan-veth99.network @@ -0,0 +1,10 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=veth99 + +[Network] +IPv6AcceptRA=yes +VXLAN=vxlan-slaac + +[IPv6AcceptRA] +PrefixAllowList=2002:da8:1::/64 diff --git a/test/test-network/conf/25-vxlan.netdev b/test/test-network/conf/25-vxlan.netdev new file mode 100644 index 0000000..0b41fc5 --- /dev/null +++ b/test/test-network/conf/25-vxlan.netdev @@ -0,0 +1,17 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[NetDev] +Name=vxlan99 +Kind=vxlan + +[VXLAN] +VNI=999 +L2MissNotification=true +L3MissNotification=true +RouteShortCircuit=true +UDPChecksum=true +UDP6ZeroChecksumTx=true +UDP6ZeroChecksumRx=true +RemoteChecksumTx=true +RemoteChecksumRx=true +GroupPolicyExtension=true +DestinationPort=5555 diff --git a/test/test-network/conf/25-vxlan.network b/test/test-network/conf/25-vxlan.network new file mode 100644 index 0000000..683291f --- /dev/null +++ b/test/test-network/conf/25-vxlan.network @@ -0,0 +1,20 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=vxlan99 + +[Network] +IPv6AcceptRA=no +LinkLocalAddressing=yes + +[BridgeFDB] +MACAddress=00:11:22:33:44:55 +Destination=10.0.0.5 + +[BridgeFDB] +MACAddress=00:11:22:33:44:66 +Destination=10.0.0.6 + +[BridgeFDB] +MACAddress=00:11:22:33:44:77 +Destination=10.0.0.7 +OutgoingInterface=test1 diff --git a/test/test-network/conf/25-wireguard-23-peers.netdev b/test/test-network/conf/25-wireguard-23-peers.netdev new file mode 100644 index 0000000..86f1440 --- /dev/null +++ b/test/test-network/conf/25-wireguard-23-peers.netdev @@ -0,0 +1,153 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[NetDev] +Name=wg98 +Kind=wireguard +Description=For issue #11404 +# Generated by the script https://launchpadlibrarian.net/405947185/systemd-wg + +[WireGuard] +# 51820 is common port for Wireguard, 4500 is IPSec/UDP +ListenPort=4500 +# The key below should be overridden by PrivateKeyFile= +PrivateKey=EEGlnEPYJV//kbvvIqxKkQwOiS+UENyPncC4bF46ong= +PrivateKeyFile=/run/systemd/network/25-wireguard-private-key.txt +RouteTable=1234 +RouteMetric=123 + +# peer 1 +[WireGuardPeer] +PublicKey=TxVmU/YJ2R3G3cbGKUiIx02y6CgcKlElVGAkzrwJuXg= +AllowedIPs=fd8d:4d6d:3ccb:0500:0c79:2339:edce:ece1/128 +AllowedIPs=fd8d:4d6d:3ccb:0c79:2339:edce::/96 + +# peer 2 +[WireGuardPeer] +PublicKey=coGr5lLn1RsCeh1RWBXn1GvcDqKSQ82HSeN0GrUugHg= +AllowedIPs=fd8d:4d6d:3ccb:0500:a072:80da:de4f:add1/128 +AllowedIPs=fd8d:4d6d:3ccb:a072:80da:de4f::/96 + +# peer 3 +[WireGuardPeer] +PublicKey=PeiULTZjyfjqg/OOqnzKtLSWnrU+ipinqMsMw0hY+1w= +AllowedIPs=fd8d:4d6d:3ccb:0500:f349:c4f0:10c1:06b4/128 +AllowedIPs=fd8d:4d6d:3ccb:f349:c4f0:10c1::/96 + +# peer 4 +[WireGuardPeer] +PublicKey=PjdC8+BmQPdgheY7gle9s3gvM7r07L6A+gMBe5bOZXk= +AllowedIPs=fd8d:4d6d:3ccb:0500:b684:4f81:2e3e:132e/128 +AllowedIPs=fd8d:4d6d:3ccb:b684:4f81:2e3e::/96 + +# peer 5 +[WireGuardPeer] +PublicKey=1MGQurlRaQIAgdH/sd0qDNamDKAepMy/+pzZUx9oEDI= +AllowedIPs=fd8d:4d6d:3ccb:0500:c624:6bf7:4c09:3b59/128 +AllowedIPs=fd8d:4d6d:3ccb:c624:6bf7:4c09::/96 + +# peer 6 +[WireGuardPeer] +PublicKey=+FgzhoGfPIzNBvtIZfBwNtWls2FSGt/6Kve3M9Z1ZlE= +AllowedIPs=fd8d:4d6d:3ccb:0500:9c11:d820:2e96:9be0/128 +AllowedIPs=fd8d:4d6d:3ccb:9c11:d820:2e96::/96 + +# peer 7 +[WireGuardPeer] +PublicKey=Kb2ozFhzg9huKmV4miLlWgh05ToP+xVqd2N0e7Ebmyc= +AllowedIPs=fd8d:4d6d:3ccb:0500:bad5:495d:8e9c:3427/128 +AllowedIPs=fd8d:4d6d:3ccb:bad5:495d:8e9c::/96 + +# peer 8 +[WireGuardPeer] +PublicKey=p2kY786d4vFO/PpstaQrn7UPuakoHRABUHmcDKzXVi4= +AllowedIPs=fd8d:4d6d:3ccb:0500:1e54:1415:35d0:a47c/128 +AllowedIPs=fd8d:4d6d:3ccb:1e54:1415:35d0::/96 + +# peer 9 +[WireGuardPeer] +PublicKey=FNiQqmeizNXTmd9jEU/gvNkuEs1MoWovNp8IpPkoqz4= +AllowedIPs=fd8d:4d6d:3ccb:0500:1dbf:ca8a:32d3:dd81/128 +AllowedIPs=fd8d:4d6d:3ccb:1dbf:ca8a:32d3::/96 + +# peer 10 +[WireGuardPeer] +PublicKey=wAwyAuLSQTO7lwQnUQHTumrMgkwigIExGR26AthWTU8= +AllowedIPs=fd8d:4d6d:3ccb:0500:dcdd:d33b:90c9:6088/128 +AllowedIPs=fd8d:4d6d:3ccb:dcdd:d33b:90c9::/96 + +# peer 11 +[WireGuardPeer] +PublicKey=8gRYdXRyhgjiMSbqk3sj5kzXGsQqkZ4defvK2ONqHA0= +AllowedIPs=fd8d:4d6d:3ccb:0500:6f2e:6888:c6fd:dfb9/128 +AllowedIPs=fd8d:4d6d:3ccb:6f2e:6888:c6fd::/96 + +# peer 12 +[WireGuardPeer] +PublicKey=4Bj9Dalwnq2Trf5Bl7iJCpSOaxC83YEbxgrgBl0ljQk= +AllowedIPs=fd8d:4d6d:3ccb:0500:d4f9:05dc:9296:0a1a/128 +AllowedIPs=fd8d:4d6d:3ccb:d4f9:05dc:9296::/96 + +# peer 13 +[WireGuardPeer] +PublicKey=BOTxUDlPSIzYucVmML4IYcTIaX0TiqC7DOnfLUI7RRg= +AllowedIPs=fd8d:4d6d:3ccb:0500:b39c:9cdc:755a:ead3/128 +AllowedIPs=fd8d:4d6d:3ccb:b39c:9cdc:755a::/96 + +# peer 14 +[WireGuardPeer] +PublicKey=PiqEvBzow5vElGD2uOtRtZG6G60tM82kmjbyJP02mFQ= +AllowedIPs=fd8d:4d6d:3ccb:0500:bfe5:c3c3:5d77:0fcb/128 +AllowedIPs=fd8d:4d6d:3ccb:bfe5:c3c3:5d77::/96 + +# peer 15 +[WireGuardPeer] +PublicKey=Eor9QBsIoUG6C3ZKsKdqm4Vkt0n2N7qpSh2LzphQeho= +AllowedIPs=fd8d:4d6d:3ccb:0500:900c:d437:ec27:8822/128 +AllowedIPs=fd8d:4d6d:3ccb:900c:d437:ec27::/96 + +# peer 16 +[WireGuardPeer] +PublicKey=acXPW0Ar+TiTOqKuUDpop9AVLuPNdzqf0l+V8k5t7CM= +AllowedIPs=fd8d:4d6d:3ccb:0500:270d:b5dd:4a3f:8909/128 +AllowedIPs=fd8d:4d6d:3ccb:270d:b5dd:4a3f::/96 + +# peer 17 +[WireGuardPeer] +PublicKey=+0g/5jzbitHyfhB4gbJnWrhSMsSjCcOE2rftWTDEW3E= +AllowedIPs=fd8d:4d6d:3ccb:0500:e2e1:ae15:103f:f376/128 +AllowedIPs=fd8d:4d6d:3ccb:e2e1:ae15:103f::/96 + +# peer 18 +[WireGuardPeer] +PublicKey=FC7mjuWpkM8bjM3vaLPbba2HwHGbTSDK9QsLEZvUZ2I= +AllowedIPs=fd8d:4d6d:3ccb:0500:5660:679d:3532:94d8/128 +AllowedIPs=fd8d:4d6d:3ccb:5660:679d:3532::/96 + +# peer 19 +[WireGuardPeer] +PublicKey=fRdm/tbE2jGuLd6zMxSQYMP6pPfMmXYW84TUPJCPjHM= +AllowedIPs=fd8d:4d6d:3ccb:0500:6825:573f:30f3:9472/128 +AllowedIPs=fd8d:4d6d:3ccb:6825:573f:30f3::/96 + +# peer 20 +[WireGuardPeer] +PublicKey=xm540z0UwfTF5f0YwfjmCX0eGdHY8bOb/4ovVA2SgCI= +AllowedIPs=fd8d:4d6d:3ccb:0500:a94b:cd6a:a32d:90e6/128 +AllowedIPs=fd8d:4d6d:3ccb:a94b:cd6a:a32d::/96 + +# peer 21 +[WireGuardPeer] +PublicKey=5X5+9IiRBjaadazEKNO+CozpomiKPMIBQT7uJ4SnbVs= +AllowedIPs=fd8d:4d6d:3ccb:0500:8d4d:0bab:7280:a09a/128 +AllowedIPs=fd8d:4d6d:3ccb:8d4d:0bab:7280::/96 + +# peer 22 +[WireGuardPeer] +PublicKey=d61T4K0wmS4Z3lK9M8/Z48IXzldLCOCm7a6Mx1r/A3I= +AllowedIPs=fd8d:4d6d:3ccb:0500:a3f3:df38:19b0:0721/128 +AllowedIPs=fd8d:4d6d:3ccb:a3f3:df38:19b0::/96 + +# peer 23 +[WireGuardPeer] +PublicKey=Nt7N3hXfpMWsIsx9me4ID77okka+0Oe5eqnFDp00IFI= +AllowedIPs=fd8d:4d6d:3ccb:0500:9742:9931:5217:18d5/128 +AllowedIPs=fd8d:4d6d:3ccb:9742:9931:5217::/96 diff --git a/test/test-network/conf/25-wireguard-23-peers.network b/test/test-network/conf/25-wireguard-23-peers.network new file mode 100644 index 0000000..6f4c2d0 --- /dev/null +++ b/test/test-network/conf/25-wireguard-23-peers.network @@ -0,0 +1,8 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=wg98 + +[Network] +Address=192.168.123.123/24 +Address=fd8d:4d6d:3ccb:0500::1/64 +IPv6AcceptRA=no diff --git a/test/test-network/conf/25-wireguard-no-peer.netdev b/test/test-network/conf/25-wireguard-no-peer.netdev new file mode 100644 index 0000000..ce3b31a --- /dev/null +++ b/test/test-network/conf/25-wireguard-no-peer.netdev @@ -0,0 +1,9 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[NetDev] +Name=wg97 +Kind=wireguard + +[WireGuard] +PrivateKey=EEGlnEPYJV//kbvvIqxKkQwOiS+UENyPncC4bF46ong= +ListenPort=51821 +FwMark=1235 diff --git a/test/test-network/conf/25-wireguard-no-peer.network b/test/test-network/conf/25-wireguard-no-peer.network new file mode 100644 index 0000000..62238a1 --- /dev/null +++ b/test/test-network/conf/25-wireguard-no-peer.network @@ -0,0 +1,3 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=wg97 diff --git a/test/test-network/conf/25-wireguard-preshared-key.txt b/test/test-network/conf/25-wireguard-preshared-key.txt new file mode 100644 index 0000000..021c443 --- /dev/null +++ b/test/test-network/conf/25-wireguard-preshared-key.txt @@ -0,0 +1,3 @@ +cPLOy1YUrEI0EM + MIycPJmOo0aTu3RZnw8bL5 + meVD6m0= diff --git a/test/test-network/conf/25-wireguard-private-key.txt b/test/test-network/conf/25-wireguard-private-key.txt new file mode 100644 index 0000000..469acd0 --- /dev/null +++ b/test/test-network/conf/25-wireguard-private-key.txt @@ -0,0 +1,6 @@ +CJQUtcS9emY2fLY + qDlpSZiE/QJyHkP + Wr+WHtZ + + +LZ90FU= diff --git a/test/test-network/conf/25-wireguard.netdev b/test/test-network/conf/25-wireguard.netdev new file mode 100644 index 0000000..4fed38e --- /dev/null +++ b/test/test-network/conf/25-wireguard.netdev @@ -0,0 +1,21 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[NetDev] +Name=wg99 +Kind=wireguard + +[WireGuard] +ListenPort=51820 +FwMark=1234 +# settings below are ignored. +RouteTable=off +RouteMetric=456 + +[WireGuardPeer] +PublicKey=RDf+LSpeEre7YEIKaxg+wbpsNV7du+ktR99uBEtIiCA= +AllowedIPs=fd31:bf08:57cb::/48,192.168.26.3/24 +#Endpoint=wireguard.example.com:51820 +Endpoint=192.168.27.3:51820 +PresharedKey=IIWIV17wutHv7t4cR6pOT91z6NSz/T8Arh0yaywhw3M= +PersistentKeepalive=20 +RouteTable=1234 +RouteMetric=123 diff --git a/test/test-network/conf/25-wireguard.netdev.d/peer.conf b/test/test-network/conf/25-wireguard.netdev.d/peer.conf new file mode 100644 index 0000000..f559ea6 --- /dev/null +++ b/test/test-network/conf/25-wireguard.netdev.d/peer.conf @@ -0,0 +1,5 @@ +[WireGuardPeer] +PublicKey=lsDtM3AbjxNlauRKzHEPfgS1Zp7cp/VX5Use/P4PQSc= +AllowedIPs=fdbc:bae2:7871:0500:e1fe:0793:8636:dad1/128 +AllowedIPs=fdbc:bae2:7871:e1fe:0793:8636::/96 +PresharedKeyFile=/run/systemd/network/25-wireguard-preshared-key.txt diff --git a/test/test-network/conf/25-wireguard.netdev.d/peer1.conf b/test/test-network/conf/25-wireguard.netdev.d/peer1.conf new file mode 100644 index 0000000..47848fc --- /dev/null +++ b/test/test-network/conf/25-wireguard.netdev.d/peer1.conf @@ -0,0 +1,5 @@ +[WireGuardPeer] +PublicKey=TTiCUpCxS7zDn/ax4p5W6Evg41r8hOrnWQw2Sq6Nh10= +PresharedKey=it7nd33chCT/tKT2ZZWfYyp43Zs+6oif72hexnSNMqA= + +AllowedIPs=192.168.124.2 diff --git a/test/test-network/conf/25-wireguard.netdev.d/peer2.conf b/test/test-network/conf/25-wireguard.netdev.d/peer2.conf new file mode 100644 index 0000000..bf99a5a --- /dev/null +++ b/test/test-network/conf/25-wireguard.netdev.d/peer2.conf @@ -0,0 +1,5 @@ +[WireGuardPeer] +PublicKey=9uioxkGzjvGjkse3V35I9AhorWfIjBcrf3UPMS0bw2c= +PresharedKey=6Fsg8XN0DE6aPQgAX4r2oazEYJOGqyHUz3QRH/jCB+I= + +AllowedIPs=192.168.124.3 diff --git a/test/test-network/conf/25-wireguard.netdev.d/private-key.conf b/test/test-network/conf/25-wireguard.netdev.d/private-key.conf new file mode 100644 index 0000000..9b04cf7 --- /dev/null +++ b/test/test-network/conf/25-wireguard.netdev.d/private-key.conf @@ -0,0 +1,2 @@ +[WireGuard] +PrivateKey=EEGlnEPYJV//kbvvIqxKkQwOiS+UENyPncC4bF46ong= diff --git a/test/test-network/conf/25-wireguard.network b/test/test-network/conf/25-wireguard.network new file mode 100644 index 0000000..bd3c735 --- /dev/null +++ b/test/test-network/conf/25-wireguard.network @@ -0,0 +1,9 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=wg99 + +[Network] +Address=192.168.124.1/24 +Address=fe80::1/64 +Address=169.254.11.1/24 +IPv6AcceptRA=no diff --git a/test/test-network/conf/25-xfrm-independent.netdev b/test/test-network/conf/25-xfrm-independent.netdev new file mode 100644 index 0000000..b54c659 --- /dev/null +++ b/test/test-network/conf/25-xfrm-independent.netdev @@ -0,0 +1,8 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[NetDev] +Kind=xfrm +Name=xfrm99 + +[Xfrm] +InterfaceId=0x99 +Independent=yes diff --git a/test/test-network/conf/25-xfrm.netdev b/test/test-network/conf/25-xfrm.netdev new file mode 100644 index 0000000..8e1d5c8 --- /dev/null +++ b/test/test-network/conf/25-xfrm.netdev @@ -0,0 +1,7 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[NetDev] +Kind=xfrm +Name=xfrm98 + +[Xfrm] +InterfaceId=0x98 diff --git a/test/test-network/conf/25-xfrm.network b/test/test-network/conf/25-xfrm.network new file mode 100644 index 0000000..19f2214 --- /dev/null +++ b/test/test-network/conf/25-xfrm.network @@ -0,0 +1,7 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=dummy98 + +[Network] +IPv6AcceptRA=no +Xfrm=xfrm98 diff --git a/test/test-network/conf/26-bridge-configure-without-carrier.network b/test/test-network/conf/26-bridge-configure-without-carrier.network new file mode 100644 index 0000000..ad7f007 --- /dev/null +++ b/test/test-network/conf/26-bridge-configure-without-carrier.network @@ -0,0 +1,10 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=bridge99 + +[Network] +LinkLocalAddressing=yes +IPv6AcceptRA=no +ConfigureWithoutCarrier=yes +Address=10.1.2.3/24 +Gateway=10.1.2.1 diff --git a/test/test-network/conf/26-bridge-issue-20373.netdev b/test/test-network/conf/26-bridge-issue-20373.netdev new file mode 100644 index 0000000..4ee5ba0 --- /dev/null +++ b/test/test-network/conf/26-bridge-issue-20373.netdev @@ -0,0 +1,13 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[NetDev] +Name=bridge99 +Kind=bridge + +[Bridge] +MulticastQuerier=yes +MulticastSnooping=yes +Priority=10 +STP=yes +ForwardDelaySec=5 +MulticastIGMPVersion=2 +VLANFiltering=yes diff --git a/test/test-network/conf/26-bridge-mdb-master.network b/test/test-network/conf/26-bridge-mdb-master.network new file mode 100644 index 0000000..d92762d --- /dev/null +++ b/test/test-network/conf/26-bridge-mdb-master.network @@ -0,0 +1,14 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=bridge99 + +[Network] +IPv6AcceptRA=false + +[BridgeMDB] +VLANId=4066 +MulticastGroupAddress=ff02:aaaa:fee5:0000:0000:0000:0001:0004 + +[BridgeMDB] +VLANId=4067 +MulticastGroupAddress=224.0.1.2 diff --git a/test/test-network/conf/26-bridge-mdb-slave.network b/test/test-network/conf/26-bridge-mdb-slave.network new file mode 100644 index 0000000..301d22a --- /dev/null +++ b/test/test-network/conf/26-bridge-mdb-slave.network @@ -0,0 +1,15 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=test1 + +[Network] +IPv6AcceptRA=no +Bridge=bridge99 + +[BridgeMDB] +VLANId=4064 +MulticastGroupAddress=ff02:aaaa:fee5:0000:0000:0000:0001:0003 + +[BridgeMDB] +VLANId=4065 +MulticastGroupAddress=224.0.1.1 diff --git a/test/test-network/conf/26-bridge-slave-interface-1.network b/test/test-network/conf/26-bridge-slave-interface-1.network new file mode 100644 index 0000000..cdb3daa --- /dev/null +++ b/test/test-network/conf/26-bridge-slave-interface-1.network @@ -0,0 +1,23 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=dummy98 + +[Link] +MTUBytes=9000 + +[Network] +Bridge=bridge99 + +[Bridge] +Cost=400 +HairPin = true +Isolated = true +FastLeave = true +UnicastFlood = true +MulticastFlood = false +MulticastToUnicast = true +NeighborSuppression = true +Learning = false +Priority = 23 +UseBPDU = true +AllowPortToBeRoot=true diff --git a/test/test-network/conf/26-bridge-slave-interface-2.network b/test/test-network/conf/26-bridge-slave-interface-2.network new file mode 100644 index 0000000..42b197e --- /dev/null +++ b/test/test-network/conf/26-bridge-slave-interface-2.network @@ -0,0 +1,12 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=test1 + +[Link] +MTUBytes=9000 + +[Network] +Bridge=bridge99 + +[Bridge] +Priority=0 diff --git a/test/test-network/conf/26-bridge-vlan-master-issue-20373.network b/test/test-network/conf/26-bridge-vlan-master-issue-20373.network new file mode 100644 index 0000000..7a69757 --- /dev/null +++ b/test/test-network/conf/26-bridge-vlan-master-issue-20373.network @@ -0,0 +1,21 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=bridge99 + +[Network] +VLAN=vlan99 +IPForward=yes +ConfigureWithoutCarrier=yes +LLDP=yes +IPv6AcceptRA=false + +[Bridge] +Learning=yes +MulticastRouter=no +UseBPDU=yes + +[BridgeVLAN] +VLAN=100 + +[BridgeVLAN] +VLAN=600 diff --git a/test/test-network/conf/26-bridge-vlan-master.network b/test/test-network/conf/26-bridge-vlan-master.network new file mode 100644 index 0000000..4bbbc56 --- /dev/null +++ b/test/test-network/conf/26-bridge-vlan-master.network @@ -0,0 +1,9 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=bridge99 + +[Network] +IPv6AcceptRA=false + +[BridgeVLAN] +VLAN=4060-4094 diff --git a/test/test-network/conf/26-bridge-vlan-slave-issue-20373.network b/test/test-network/conf/26-bridge-vlan-slave-issue-20373.network new file mode 100644 index 0000000..876219f --- /dev/null +++ b/test/test-network/conf/26-bridge-vlan-slave-issue-20373.network @@ -0,0 +1,30 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=test1 + +[Network] +IPv6AcceptRA=no +IPForward=yes +Bridge=bridge99 +LinkLocalAddressing=no +EmitLLDP=nearest-bridge +LLDP=yes + +[Link] +RequiredForOnline=no + +[Bridge] +Learning=yes +MulticastRouter=query +UseBPDU=yes + +[BridgeVLAN] +VLAN=100 +EgressUntagged=100 +PVID=100 + +[BridgeVLAN] +VLAN=560 + +[BridgeVLAN] +VLAN=600 diff --git a/test/test-network/conf/26-bridge-vlan-slave.network b/test/test-network/conf/26-bridge-vlan-slave.network new file mode 100644 index 0000000..9ac8510 --- /dev/null +++ b/test/test-network/conf/26-bridge-vlan-slave.network @@ -0,0 +1,10 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=test1 + +[Network] +IPv6AcceptRA=no +Bridge=bridge99 + +[BridgeVLAN] +VLAN=4064-4094 diff --git a/test/test-network/conf/26-bridge.netdev b/test/test-network/conf/26-bridge.netdev new file mode 100644 index 0000000..fda9cd6 --- /dev/null +++ b/test/test-network/conf/26-bridge.netdev @@ -0,0 +1,4 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[NetDev] +Name=bridge99 +Kind=bridge diff --git a/test/test-network/conf/26-link-local-addressing-ipv6.network b/test/test-network/conf/26-link-local-addressing-ipv6.network new file mode 100644 index 0000000..931341b --- /dev/null +++ b/test/test-network/conf/26-link-local-addressing-ipv6.network @@ -0,0 +1,7 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=dummy98 + +[Network] +LinkLocalAddressing=ipv6 +IPv6AcceptRA=no diff --git a/test/test-network/conf/26-macsec.network b/test/test-network/conf/26-macsec.network new file mode 100644 index 0000000..0066474 --- /dev/null +++ b/test/test-network/conf/26-macsec.network @@ -0,0 +1,11 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=dummy98 + +[Link] +MACAddress=00:50:56:c0:00:19 + +[Network] +IPv6AcceptRA=no +LinkLocalAddressing=yes +MACsec=macsec99 diff --git a/test/test-network/conf/26-netdev-link-local-addressing-yes.network b/test/test-network/conf/26-netdev-link-local-addressing-yes.network new file mode 100644 index 0000000..7152125 --- /dev/null +++ b/test/test-network/conf/26-netdev-link-local-addressing-yes.network @@ -0,0 +1,30 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Match] +Name=bareudp99 +Name=batadv99 +Name=ip6tnl-external +Name=ipvlan99 +Name=ipvtap99 +Name=macvlan99 +Name=macvtap99 +Name=veth99 +Name=veth-peer +Name=veth-mtu +Name=veth-mtu-peer +Name=vcan99 +Name=vxcan99 +Name=vxcan-peer +Name=vrf99 +Name=geneve99 +Name=ifb99 +Name=ipiptun99 +Name=nlmon99 +Name=xfrm98 xfrm99 +Name=vxlan98 +Name=hogehogehogehogehogehoge +Name=testtun99 +Name=testtap99 + +[Network] +LinkLocalAddressing=yes +IPv6AcceptRA=no diff --git a/test/test-network/conf/80-6rd-tunnel.network b/test/test-network/conf/80-6rd-tunnel.network new file mode 100644 index 0000000..2e479eb --- /dev/null +++ b/test/test-network/conf/80-6rd-tunnel.network @@ -0,0 +1,18 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +# +# This file is part of systemd. +# +# systemd is free software; you can redistribute it and/or modify it +# under the terms of the GNU Lesser General Public License as published by +# the Free Software Foundation; either version 2.1 of the License, or +# (at your option) any later version. + +# This network file matches 6rd-* SIT devices which is automatically created by +# systemd-networkd when DHCPv4 6RD option is received. + +[Match] +Name=6rd-* +Type=sit + +[Network] +DHCPPrefixDelegation=yes diff --git a/test/test-network/conf/isc-dhcpd-dhcp6pd.conf b/test/test-network/conf/isc-dhcpd-dhcp6pd.conf new file mode 100644 index 0000000..c95b00e --- /dev/null +++ b/test/test-network/conf/isc-dhcpd-dhcp6pd.conf @@ -0,0 +1,21 @@ +default-lease-time 2592000; +preferred-lifetime 604800; + +option dhcp-renewal-time 3600; +option dhcp-rebinding-time 7200; + +# Enable RFC 5007 support (same than for DHCPv4) +allow leasequery; + +option dhcp6.name-servers 3ffe:501:ffff:100:200:ff:fe00:3f3e; +option dhcp6.domain-search "test.example.com","example.com"; + +option dhcp6.info-refresh-time 21600; + +subnet6 3ffe:501:ffff:100::/64 { + # Addresses available to clients + range6 3ffe:501:ffff:100::10 3ffe:501:ffff:100::100; + + # Some /64 prefixes available for Prefix Delegation (RFC 3633) + prefix6 3ffe:501:ffff:200:: 3ffe:501:ffff:f00:: /56; +} diff --git a/test/test-network/conf/networkd-manage-foreign-routes-no.conf b/test/test-network/conf/networkd-manage-foreign-routes-no.conf new file mode 100644 index 0000000..7cfc56c --- /dev/null +++ b/test/test-network/conf/networkd-manage-foreign-routes-no.conf @@ -0,0 +1,3 @@ +# SPDX-License-Identifier: LGPL-2.1-or-later +[Network] +ManageForeignRoutes=no diff --git a/test/test-network/systemd-networkd-tests.py b/test/test-network/systemd-networkd-tests.py new file mode 100755 index 0000000..45aa1b0 --- /dev/null +++ b/test/test-network/systemd-networkd-tests.py @@ -0,0 +1,5734 @@ +#!/usr/bin/env python3 +# SPDX-License-Identifier: LGPL-2.1-or-later +# pylint: disable=line-too-long,too-many-lines,too-many-branches,too-many-statements,too-many-arguments +# pylint: disable=too-many-public-methods,too-many-boolean-expressions,invalid-name +# pylint: disable=missing-function-docstring,missing-class-docstring,missing-module-docstring +# systemd-networkd tests + +# These tests can be executed in the systemd mkosi image when booted in QEMU. After booting the QEMU VM, +# simply run this file which can be found in the VM at /root/src/test/test-network/systemd-networkd-tests.py. + +import argparse +import errno +import itertools +import os +import pathlib +import re +import shutil +import signal +import subprocess +import sys +import time +import unittest + +import psutil + +network_unit_dir = '/run/systemd/network' +networkd_conf_dropin_dir = '/run/systemd/networkd.conf.d' +networkd_ci_temp_dir = '/run/networkd-ci' +udev_rules_dir = '/run/udev/rules.d' + +dnsmasq_pid_file = '/run/networkd-ci/test-dnsmasq.pid' +dnsmasq_log_file = '/run/networkd-ci/test-dnsmasq.log' +dnsmasq_lease_file = '/run/networkd-ci/test-dnsmasq.lease' + +isc_dhcpd_pid_file = '/run/networkd-ci/test-isc-dhcpd.pid' +isc_dhcpd_lease_file = '/run/networkd-ci/test-isc-dhcpd.lease' + +systemd_lib_paths = ['/usr/lib/systemd', '/lib/systemd'] +which_paths = ':'.join(systemd_lib_paths + os.getenv('PATH', os.defpath).lstrip(':').split(':')) +systemd_source_dir = None + +networkd_bin = shutil.which('systemd-networkd', path=which_paths) +resolved_bin = shutil.which('systemd-resolved', path=which_paths) +timesyncd_bin = shutil.which('systemd-timesyncd', path=which_paths) +udevd_bin = shutil.which('systemd-udevd', path=which_paths) +wait_online_bin = shutil.which('systemd-networkd-wait-online', path=which_paths) +networkctl_bin = shutil.which('networkctl', path=which_paths) +resolvectl_bin = shutil.which('resolvectl', path=which_paths) +timedatectl_bin = shutil.which('timedatectl', path=which_paths) +udevadm_bin = shutil.which('udevadm', path=which_paths) +systemd_udev_rules_build_dir = None + +use_valgrind = False +valgrind_cmd = '' +enable_debug = True +env = {} +wait_online_env = {} +asan_options = None +lsan_options = None +ubsan_options = None +with_coverage = False + +active_units = [] +protected_links = { + 'erspan0', + 'gre0', + 'gretap0', + 'ifb0', + 'ifb1', + 'ip6_vti0', + 'ip6gre0', + 'ip6tnl0', + 'ip_vti0', + 'lo', + 'sit0', + 'tunl0', +} +saved_routes = None +saved_ipv4_rules = None +saved_ipv6_rules = None +saved_timezone = None + +def rm_f(path): + if os.path.exists(path): + os.remove(path) + +def rm_rf(path): + shutil.rmtree(path, ignore_errors=True) + +def cp(src, dst): + shutil.copy(src, dst) + +def cp_r(src, dst): + shutil.copytree(src, dst, copy_function=shutil.copy) + +def mkdir_p(path): + os.makedirs(path, exist_ok=True) + +def touch(path): + pathlib.Path(path).touch() + +# pylint: disable=R1710 +def check_output(*command, **kwargs): + # This checks the result and returns stdout (and stderr) on success. + command = command[0].split() + list(command[1:]) + ret = subprocess.run(command, check=False, universal_newlines=True, stdout=subprocess.PIPE, stderr=subprocess.STDOUT, **kwargs) + if ret.returncode == 0: + return ret.stdout.rstrip() + # When returncode != 0, print stdout and stderr, then trigger CalledProcessError. + print(ret.stdout) + ret.check_returncode() + +def call(*command, **kwargs): + # This returns returncode. stdout and stderr are merged and shown in console + command = command[0].split() + list(command[1:]) + return subprocess.run(command, check=False, universal_newlines=True, stderr=subprocess.STDOUT, **kwargs).returncode + +def call_quiet(*command, **kwargs): + command = command[0].split() + list(command[1:]) + return subprocess.run(command, check=False, universal_newlines=True, stdout=subprocess.DEVNULL, stderr=subprocess.DEVNULL, **kwargs).returncode + +def run(*command, **kwargs): + # This returns CompletedProcess instance. + command = command[0].split() + list(command[1:]) + return subprocess.run(command, check=False, universal_newlines=True, stdout=subprocess.PIPE, stderr=subprocess.PIPE, **kwargs) + +def is_module_available(*module_names): + for module_name in module_names: + lsmod_output = check_output('lsmod') + module_re = re.compile(rf'^{re.escape(module_name)}\b', re.MULTILINE) + if not module_re.search(lsmod_output) and call_quiet('modprobe', module_name) != 0: + return False + return True + +def expectedFailureIfModuleIsNotAvailable(*module_names): + def f(func): + return func if is_module_available(*module_names) else unittest.expectedFailure(func) + + return f + +def expectedFailureIfERSPANv0IsNotSupported(): + # erspan version 0 is supported since f989d546a2d5a9f001f6f8be49d98c10ab9b1897 (v5.8) + def f(func): + rc = call_quiet('ip link add dev erspan99 type erspan seq key 30 local 192.168.1.4 remote 192.168.1.1 erspan_ver 0') + remove_link('erspan99') + return func if rc == 0 else unittest.expectedFailure(func) + + return f + +def expectedFailureIfERSPANv2IsNotSupported(): + # erspan version 2 is supported since f551c91de262ba36b20c3ac19538afb4f4507441 (v4.16) + def f(func): + rc = call_quiet('ip link add dev erspan99 type erspan seq key 30 local 192.168.1.4 remote 192.168.1.1 erspan_ver 2') + remove_link('erspan99') + return func if rc == 0 else unittest.expectedFailure(func) + + return f + +def expectedFailureIfRoutingPolicyPortRangeIsNotAvailable(): + def f(func): + rc = call_quiet('ip rule add from 192.168.100.19 sport 1123-1150 dport 3224-3290 table 7') + call_quiet('ip rule del from 192.168.100.19 sport 1123-1150 dport 3224-3290 table 7') + return func if rc == 0 else unittest.expectedFailure(func) + + return f + +def expectedFailureIfRoutingPolicyIPProtoIsNotAvailable(): + def f(func): + rc = call_quiet('ip rule add not from 192.168.100.19 ipproto tcp table 7') + call_quiet('ip rule del not from 192.168.100.19 ipproto tcp table 7') + return func if rc == 0 else unittest.expectedFailure(func) + + return f + +def expectedFailureIfRoutingPolicyUIDRangeIsNotAvailable(): + def f(func): + supported = False + if call_quiet('ip rule add from 192.168.100.19 table 7 uidrange 200-300') == 0: + ret = run('ip rule list from 192.168.100.19 table 7') + supported = ret.returncode == 0 and 'uidrange 200-300' in ret.stdout + call_quiet('ip rule del from 192.168.100.19 table 7 uidrange 200-300') + return func if supported else unittest.expectedFailure(func) + + return f + +def expectedFailureIfLinkFileFieldIsNotSet(): + def f(func): + call_quiet('ip link add name dummy99 type dummy') + ret = run('udevadm info -w10s /sys/class/net/dummy99') + supported = ret.returncode == 0 and 'E: ID_NET_LINK_FILE=' in ret.stdout + remove_link('dummy99') + return func if supported else unittest.expectedFailure(func) + + return f + +def expectedFailureIfNexthopIsNotAvailable(): + def f(func): + rc = call_quiet('ip nexthop list') + return func if rc == 0 else unittest.expectedFailure(func) + + return f + +def expectedFailureIfRTA_VIAIsNotSupported(): + def f(func): + call_quiet('ip link add dummy98 type dummy') + call_quiet('ip link set up dev dummy98') + call_quiet('ip route add 2001:1234:5:8fff:ff:ff:ff:fe/128 dev dummy98') + rc = call_quiet('ip route add 10.10.10.10 via inet6 2001:1234:5:8fff:ff:ff:ff:fe dev dummy98') + remove_link('dummy98') + return func if rc == 0 else unittest.expectedFailure(func) + + return f + +def expectedFailureIfAlternativeNameIsNotAvailable(): + def f(func): + call_quiet('ip link add dummy98 type dummy') + supported = \ + call_quiet('ip link prop add dev dummy98 altname hogehogehogehogehoge') == 0 and \ + call_quiet('ip link show dev hogehogehogehogehoge') == 0 + remove_link('dummy98') + return func if supported else unittest.expectedFailure(func) + + return f + +def expectedFailureIfNetdevsimWithSRIOVIsNotAvailable(): + def f(func): + def finalize(func, supported): + call_quiet('rmmod netdevsim') + return func if supported else unittest.expectedFailure(func) + + call_quiet('rmmod netdevsim') + if call_quiet('modprobe netdevsim') != 0: + return finalize(func, False) + + try: + with open('/sys/bus/netdevsim/new_device', mode='w', encoding='utf-8') as f: + f.write('99 1') + except OSError: + return finalize(func, False) + + if not os.path.exists('/sys/bus/netdevsim/devices/netdevsim99/sriov_numvfs'): + return finalize(func, False) + + # Also checks if udevd supports .link files, as it seems disabled on CentOS CI (Arch). + rc = call_quiet('udevadm info -w10s /sys/class/net/eni99np1') + return finalize(func, rc == 0) + + return f + +# pylint: disable=C0415 +def compare_kernel_version(min_kernel_version): + try: + import platform + from packaging import version + except ImportError: + print('Failed to import either platform or packaging module, assuming the comparison failed') + return False + + # Get only the actual kernel version without any build/distro/arch stuff + # e.g. '5.18.5-200.fc36.x86_64' -> '5.18.5' + kver = platform.release().split('-')[0] + + return version.parse(kver) >= version.parse(min_kernel_version) + +def udev_reload(): + check_output(*udevadm_cmd, 'control', '--reload') + +def copy_network_unit(*units, copy_dropins=True): + """ + Copy networkd unit files into the testbed. + + Any networkd unit file type can be specified, as well as drop-in files. + + By default, all drop-ins for a specified unit file are copied in; + to avoid that specify dropins=False. + + When a drop-in file is specified, its unit file is also copied in automatically. + """ + has_link = False + mkdir_p(network_unit_dir) + for unit in units: + if copy_dropins and os.path.exists(os.path.join(networkd_ci_temp_dir, unit + '.d')): + cp_r(os.path.join(networkd_ci_temp_dir, unit + '.d'), os.path.join(network_unit_dir, unit + '.d')) + + if unit.endswith('.conf'): + dropin = unit + unit = os.path.dirname(dropin).rstrip('.d') + dropindir = os.path.join(network_unit_dir, unit + '.d') + mkdir_p(dropindir) + cp(os.path.join(networkd_ci_temp_dir, dropin), dropindir) + + cp(os.path.join(networkd_ci_temp_dir, unit), network_unit_dir) + + if unit.endswith('.link'): + has_link = True + + if has_link: + udev_reload() + +def remove_network_unit(*units): + """ + Remove previously copied unit files from the testbed. + + Drop-ins will be removed automatically. + """ + has_link = False + for unit in units: + rm_f(os.path.join(network_unit_dir, unit)) + rm_rf(os.path.join(network_unit_dir, unit + '.d')) + + if unit.endswith('.link') or unit.endswith('.link.d'): + has_link = True + + if has_link: + udev_reload() + +def clear_network_units(): + has_link = False + if os.path.exists(network_unit_dir): + units = os.listdir(network_unit_dir) + for unit in units: + if unit.endswith('.link') or unit.endswith('.link.d'): + has_link = True + + rm_rf(network_unit_dir) + + if has_link: + udev_reload() + +def copy_networkd_conf_dropin(*dropins): + """Copy networkd.conf dropin files into the testbed.""" + mkdir_p(networkd_conf_dropin_dir) + for dropin in dropins: + cp(os.path.join(networkd_ci_temp_dir, dropin), networkd_conf_dropin_dir) + +def remove_networkd_conf_dropin(*dropins): + """Remove previously copied networkd.conf dropin files from the testbed.""" + for dropin in dropins: + rm_f(os.path.join(networkd_conf_dropin_dir, dropin)) + +def clear_networkd_conf_dropins(): + rm_rf(networkd_conf_dropin_dir) + +def setup_systemd_udev_rules(): + if not systemd_udev_rules_build_dir: + return + + mkdir_p(udev_rules_dir) + + for path in [systemd_udev_rules_build_dir, os.path.join(systemd_source_dir, "rules.d")]: + print(f"Copying udev rules from {path} to {udev_rules_dir}") + + for rule in os.listdir(path): + if not rule.endswith(".rules"): + continue + cp(os.path.join(path, rule), udev_rules_dir) + +def copy_udev_rule(*rules): + """Copy udev rules""" + mkdir_p(udev_rules_dir) + for rule in rules: + cp(os.path.join(networkd_ci_temp_dir, rule), udev_rules_dir) + +def remove_udev_rule(*rules): + """Remove previously copied udev rules""" + for rule in rules: + rm_f(os.path.join(udev_rules_dir, rule)) + +def clear_udev_rules(): + rm_rf(udev_rules_dir) + +def save_active_units(): + for u in ['systemd-networkd.socket', 'systemd-networkd.service', + 'systemd-resolved.service', 'systemd-timesyncd.service', + 'firewalld.service']: + if call(f'systemctl is-active --quiet {u}') == 0: + call(f'systemctl stop {u}') + active_units.append(u) + +def restore_active_units(): + if 'systemd-networkd.socket' in active_units: + call('systemctl stop systemd-networkd.socket systemd-networkd.service') + for u in active_units: + call(f'systemctl restart {u}') + +def create_unit_dropin(unit, contents): + mkdir_p(f'/run/systemd/system/{unit}.d') + with open(f'/run/systemd/system/{unit}.d/00-override.conf', mode='w', encoding='utf-8') as f: + f.write('\n'.join(contents)) + +def create_service_dropin(service, command, reload_command=None, additional_settings=None): + drop_in = [ + '[Service]', + 'ExecStart=', + f'ExecStart=!!{valgrind_cmd}{command}', + ] + if reload_command: + drop_in += [ + 'ExecReload=', + f'ExecReload={valgrind_cmd}{reload_command}', + ] + if enable_debug: + drop_in += ['Environment=SYSTEMD_LOG_LEVEL=debug'] + if asan_options: + drop_in += [f'Environment=ASAN_OPTIONS="{asan_options}"'] + if lsan_options: + drop_in += [f'Environment=LSAN_OPTIONS="{lsan_options}"'] + if ubsan_options: + drop_in += [f'Environment=UBSAN_OPTIONS="{ubsan_options}"'] + if asan_options or lsan_options or ubsan_options: + drop_in += ['SystemCallFilter='] + if use_valgrind or asan_options or lsan_options or ubsan_options: + drop_in += ['MemoryDenyWriteExecute=no'] + if use_valgrind: + drop_in += [ + 'Environment=SYSTEMD_MEMPOOL=0', + 'PrivateTmp=yes', + ] + if with_coverage: + drop_in += [ + 'ProtectSystem=no', + 'ProtectHome=no', + ] + if additional_settings: + drop_in += additional_settings + + create_unit_dropin(f'{service}.service', drop_in) + +def link_exists(link): + return os.path.exists(os.path.join('/sys/class/net', link, 'ifindex')) + +def remove_link(*links, protect=False): + for link in links: + if protect and link in protected_links: + continue + if link_exists(link): + call(f'ip link del dev {link}') + +def save_existing_links(): + links = os.listdir('/sys/class/net') + for link in links: + if link_exists(link): + protected_links.add(link) + + print('### The following links will be protected:') + print(', '.join(sorted(list(protected_links)))) + +def flush_links(): + links = os.listdir('/sys/class/net') + remove_link(*links, protect=True) + +def flush_nexthops(): + # Currently, the 'ip nexthop' command does not have 'save' and 'restore'. + # Hence, we cannot restore nexthops in a simple way. + # Let's assume there is no nexthop used in the system + call_quiet('ip nexthop flush') + +def save_routes(): + # pylint: disable=global-statement + global saved_routes + saved_routes = check_output('ip route show table all') + print('### The following routes will be protected:') + print(saved_routes) + +def flush_routes(): + have = False + output = check_output('ip route show table all') + for line in output.splitlines(): + if line in saved_routes: + continue + if 'proto kernel' in line: + continue + if ' dev ' in line and not ' dev lo ' in line: + continue + if not have: + have = True + print('### Removing routes that did not exist when the test started.') + print(f'# {line}') + call(f'ip route del {line}') + +def save_routing_policy_rules(): + # pylint: disable=global-statement + global saved_ipv4_rules, saved_ipv6_rules + def save(ipv): + output = check_output(f'ip -{ipv} rule show') + print(f'### The following IPv{ipv} routing policy rules will be protected:') + print(output) + return output + + saved_ipv4_rules = save(4) + saved_ipv6_rules = save(6) + +def flush_routing_policy_rules(): + def flush(ipv, saved_rules): + have = False + output = check_output(f'ip -{ipv} rule show') + for line in output.splitlines(): + if line in saved_rules: + continue + if not have: + have = True + print(f'### Removing IPv{ipv} routing policy rules that did not exist when the test started.') + print(f'# {line}') + words = line.replace('lookup [l3mdev-table]', 'l3mdev').split() + priority = words[0].rstrip(':') + call(f'ip -{ipv} rule del priority {priority} ' + ' '.join(words[1:])) + + flush(4, saved_ipv4_rules) + flush(6, saved_ipv6_rules) + +def flush_fou_ports(): + ret = run('ip fou show') + if ret.returncode != 0: + return # fou may not be supported + for line in ret.stdout.splitlines(): + port = line.split()[1] + call(f'ip fou del port {port}') + +def flush_l2tp_tunnels(): + tids = [] + ret = run('ip l2tp show tunnel') + if ret.returncode != 0: + return # l2tp may not be supported + for line in ret.stdout.splitlines(): + words = line.split() + if words[0] == 'Tunnel': + tid = words[1].rstrip(',') + call(f'ip l2tp del tunnel tunnel_id {tid}') + tids.append(tid) + + # Removing L2TP tunnel is asynchronous and slightly takes a time. + for tid in tids: + for _ in range(50): + r = run(f'ip l2tp show tunnel tunnel_id {tid}') + if r.returncode != 0 or len(r.stdout.rstrip()) == 0: + break + time.sleep(.2) + else: + print(f'Cannot remove L2TP tunnel {tid}, ignoring.') + +def save_timezone(): + # pylint: disable=global-statement + global saved_timezone + r = run(*timedatectl_cmd, 'show', '--value', '--property', 'Timezone', env=env) + if r.returncode == 0: + saved_timezone = r.stdout.rstrip() + print(f'### Saved timezone: {saved_timezone}') + +def restore_timezone(): + if saved_timezone: + call(*timedatectl_cmd, 'set-timezone', f'{saved_timezone}', env=env) + +def read_link_attr(*args): + with open(os.path.join('/sys/class/net', *args), encoding='utf-8') as f: + return f.readline().strip() + +def read_link_state_file(link): + ifindex = read_link_attr(link, 'ifindex') + path = os.path.join('/run/systemd/netif/links', ifindex) + with open(path, encoding='utf-8') as f: + return f.read() + +def read_ip_sysctl_attr(link, attribute, ipv): + with open(os.path.join('/proc/sys/net', ipv, 'conf', link, attribute), encoding='utf-8') as f: + return f.readline().strip() + +def read_ipv6_sysctl_attr(link, attribute): + return read_ip_sysctl_attr(link, attribute, 'ipv6') + +def read_ipv4_sysctl_attr(link, attribute): + return read_ip_sysctl_attr(link, attribute, 'ipv4') + +def start_dnsmasq(*additional_options, interface='veth-peer', lease_time='2m', ipv4_range='192.168.5.10,192.168.5.200', ipv4_router='192.168.5.1', ipv6_range='2600::10,2600::20'): + command = ( + 'dnsmasq', + f'--log-facility={dnsmasq_log_file}', + '--log-queries=extra', + '--log-dhcp', + f'--pid-file={dnsmasq_pid_file}', + '--conf-file=/dev/null', + '--bind-interfaces', + f'--interface={interface}', + f'--dhcp-leasefile={dnsmasq_lease_file}', + '--enable-ra', + f'--dhcp-range={ipv6_range},{lease_time}', + f'--dhcp-range={ipv4_range},{lease_time}', + '--dhcp-option=option:mtu,1492', + f'--dhcp-option=option:router,{ipv4_router}', + '--port=0', + '--no-resolv', + ) + additional_options + check_output(*command) + +def stop_by_pid_file(pid_file): + if not os.path.exists(pid_file): + return + with open(pid_file, 'r', encoding='utf-8') as f: + pid = f.read().rstrip(' \t\r\n\0') + os.kill(int(pid), signal.SIGTERM) + for _ in range(25): + try: + os.kill(int(pid), 0) + print(f"PID {pid} is still alive, waiting...") + time.sleep(.2) + except OSError as e: + if e.errno == errno.ESRCH: + break + print(f"Unexpected exception when waiting for {pid} to die: {e.errno}") + os.remove(pid_file) + +def stop_dnsmasq(): + stop_by_pid_file(dnsmasq_pid_file) + rm_f(dnsmasq_lease_file) + rm_f(dnsmasq_log_file) + +def read_dnsmasq_log_file(): + with open(dnsmasq_log_file, encoding='utf-8') as f: + return f.read() + +def start_isc_dhcpd(conf_file, ipv, interface='veth-peer'): + conf_file_path = os.path.join(networkd_ci_temp_dir, conf_file) + isc_dhcpd_command = f'dhcpd {ipv} -cf {conf_file_path} -lf {isc_dhcpd_lease_file} -pf {isc_dhcpd_pid_file} {interface}' + touch(isc_dhcpd_lease_file) + check_output(isc_dhcpd_command) + +def stop_isc_dhcpd(): + stop_by_pid_file(isc_dhcpd_pid_file) + rm_f(isc_dhcpd_lease_file) + +def networkd_invocation_id(): + return check_output('systemctl show --value -p InvocationID systemd-networkd.service') + +def read_networkd_log(invocation_id=None): + if not invocation_id: + invocation_id = networkd_invocation_id() + return check_output('journalctl _SYSTEMD_INVOCATION_ID=' + invocation_id) + +def stop_networkd(show_logs=True): + if show_logs: + invocation_id = networkd_invocation_id() + check_output('systemctl stop systemd-networkd.socket') + check_output('systemctl stop systemd-networkd.service') + if show_logs: + print(read_networkd_log(invocation_id)) + +def start_networkd(): + check_output('systemctl start systemd-networkd') + +def restart_networkd(show_logs=True): + if show_logs: + invocation_id = networkd_invocation_id() + check_output('systemctl restart systemd-networkd.service') + if show_logs: + print(read_networkd_log(invocation_id)) + +def networkd_pid(): + return int(check_output('systemctl show --value -p MainPID systemd-networkd.service')) + +def networkctl_reconfigure(*links): + check_output(*networkctl_cmd, 'reconfigure', *links, env=env) + +def networkctl_reload(sleep_time=1): + check_output(*networkctl_cmd, 'reload', env=env) + # 'networkctl reload' asynchronously reconfigure links. + # Hence, we need to wait for a short time for link to be in configuring state. + if sleep_time > 0: + time.sleep(sleep_time) + +def setup_common(): + print() + +def tear_down_common(): + # 1. stop DHCP servers + stop_dnsmasq() + stop_isc_dhcpd() + + # 2. remove modules + call_quiet('rmmod netdevsim') + call_quiet('rmmod sch_teql') + + # 3. remove network namespace + call_quiet('ip netns del ns99') + + # 4. remove links + flush_l2tp_tunnels() + flush_links() + + # 5. stop networkd + stop_networkd() + + # 6. remove configs + clear_network_units() + clear_networkd_conf_dropins() + + # 7. flush settings + flush_fou_ports() + flush_nexthops() + flush_routing_policy_rules() + flush_routes() + +def setUpModule(): + rm_rf(networkd_ci_temp_dir) + cp_r(os.path.join(os.path.dirname(os.path.abspath(__file__)), 'conf'), networkd_ci_temp_dir) + + clear_network_units() + clear_networkd_conf_dropins() + clear_udev_rules() + + setup_systemd_udev_rules() + copy_udev_rule('00-debug-net.rules') + + # Save current state + save_active_units() + save_existing_links() + save_routes() + save_routing_policy_rules() + save_timezone() + + create_service_dropin('systemd-networkd', networkd_bin, + f'{networkctl_bin} reload', + ['[Service]', 'Restart=no', '[Unit]', 'StartLimitIntervalSec=0']) + create_service_dropin('systemd-resolved', resolved_bin) + create_service_dropin('systemd-timesyncd', timesyncd_bin) + + # TODO: also run udevd with sanitizers, valgrind, or coverage + #create_service_dropin('systemd-udevd', udevd_bin, + # f'{udevadm_bin} control --reload --timeout 0') + create_unit_dropin( + 'systemd-udevd.service', + [ + '[Service]', + 'ExecStart=', + f'ExecStart=!!{udevd_bin}', + 'ExecReload=', + f'ExecReload={udevadm_bin} control --reload --timeout 0', + ] + ) + create_unit_dropin( + 'systemd-networkd.socket', + [ + '[Unit]', + 'StartLimitIntervalSec=0', + ] + ) + + check_output('systemctl daemon-reload') + print(check_output('systemctl cat systemd-networkd.service')) + print(check_output('systemctl cat systemd-resolved.service')) + print(check_output('systemctl cat systemd-timesyncd.service')) + print(check_output('systemctl cat systemd-udevd.service')) + check_output('systemctl restart systemd-resolved.service') + check_output('systemctl restart systemd-timesyncd.service') + check_output('systemctl restart systemd-udevd.service') + +def tearDownModule(): + rm_rf(networkd_ci_temp_dir) + clear_udev_rules() + clear_network_units() + clear_networkd_conf_dropins() + + restore_timezone() + + rm_rf('/run/systemd/system/systemd-networkd.service.d') + rm_rf('/run/systemd/system/systemd-networkd.socket.d') + rm_rf('/run/systemd/system/systemd-resolved.service.d') + rm_rf('/run/systemd/system/systemd-timesyncd.service.d') + rm_rf('/run/systemd/system/systemd-udevd.service.d') + check_output('systemctl daemon-reload') + check_output('systemctl restart systemd-udevd.service') + restore_active_units() + +class Utilities(): + # pylint: disable=no-member + + def check_link_exists(self, link, expected=True): + if expected: + self.assertTrue(link_exists(link)) + else: + self.assertFalse(link_exists(link)) + + def check_link_attr(self, *args): + self.assertEqual(read_link_attr(*args[:-1]), args[-1]) + + def check_bridge_port_attr(self, master, port, attribute, expected, allow_enoent=False): + path = os.path.join('/sys/devices/virtual/net', master, 'lower_' + port, 'brport', attribute) + if allow_enoent and not os.path.exists(path): + return + with open(path, encoding='utf-8') as f: + self.assertEqual(f.readline().strip(), expected) + + def check_ipv4_sysctl_attr(self, link, attribute, expected): + self.assertEqual(read_ipv4_sysctl_attr(link, attribute), expected) + + def check_ipv6_sysctl_attr(self, link, attribute, expected): + self.assertEqual(read_ipv6_sysctl_attr(link, attribute), expected) + + def wait_links(self, *links, timeout=20, fail_assert=True): + def links_exist(*links): + for link in links: + if not link_exists(link): + return False + return True + + for iteration in range(timeout + 1): + if iteration > 0: + time.sleep(1) + + if links_exist(*links): + return True + if fail_assert: + self.fail('Timed out waiting for all links to be created: ' + ', '.join(list(links))) + return False + + def wait_activated(self, link, state='down', timeout=20, fail_assert=True): + # wait for the interface is activated. + invocation_id = check_output('systemctl show systemd-networkd -p InvocationID --value') + needle = f'{link}: Bringing link {state}' + flag = state.upper() + for iteration in range(timeout + 1): + if iteration != 0: + time.sleep(1) + if not link_exists(link): + continue + output = check_output('journalctl _SYSTEMD_INVOCATION_ID=' + invocation_id) + if needle in output and flag in check_output(f'ip link show {link}'): + return True + if fail_assert: + self.fail(f'Timed out waiting for {link} activated.') + return False + + def wait_operstate(self, link, operstate='degraded', setup_state='configured', setup_timeout=5, fail_assert=True): + """Wait for the link to reach the specified operstate and/or setup state. + + Specify None or '' for either operstate or setup_state to ignore that state. + This will recheck until the state conditions are met or the timeout expires. + + If the link successfully matches the requested state, this returns True. + If this times out waiting for the link to match, the behavior depends on the + 'fail_assert' parameter; if True, this causes a test assertion failure, + otherwise this returns False. The default is to cause assertion failure. + + Note that this function matches on *exactly* the given operstate and setup_state. + To wait for a link to reach *or exceed* a given operstate, use wait_online(). + """ + if not operstate: + operstate = r'\S+' + if not setup_state: + setup_state = r'\S+' + + for secs in range(setup_timeout + 1): + if secs != 0: + time.sleep(1) + if not link_exists(link): + continue + output = check_output(*networkctl_cmd, '-n', '0', 'status', link, env=env) + if re.search(rf'(?m)^\s*State:\s+{operstate}\s+\({setup_state}\)\s*$', output): + return True + + print(output) + if fail_assert: + self.fail(f'Timed out waiting for {link} to reach state {operstate}/{setup_state}') + return False + + def wait_online(self, links_with_operstate, timeout='20s', bool_any=False, ipv4=False, ipv6=False, setup_state='configured', setup_timeout=5): + """Wait for the links to reach the specified operstate and/or setup state. + + This is similar to wait_operstate() but can be used for multiple links, + and it also calls systemd-networkd-wait-online to wait for the given operstate. + The operstate should be specified in the link name, like 'eth0:degraded'. + If just a link name is provided, wait-online's default operstate to wait for is degraded. + + The 'timeout' parameter controls the systemd-networkd-wait-online timeout, and the + 'setup_timeout' controls the per-link timeout waiting for the setup_state. + + Set 'bool_any' to True to wait for any (instead of all) of the given links. + If this is set, no setup_state checks are done. + + Set 'ipv4' or 'ipv6' to True to wait for IPv4 address or IPv6 address, respectively, of each of the given links. + This is applied only for the operational state 'degraded' or above. + + Note that this function waits for the links to reach *or exceed* the given operstate. + However, the setup_state, if specified, must be matched *exactly*. + + This returns if the links reached the requested operstate/setup_state; otherwise it + raises CalledProcessError or fails test assertion. + """ + args = wait_online_cmd + [f'--timeout={timeout}'] + [f'--interface={link}' for link in links_with_operstate] + [f'--ignore={link}' for link in protected_links] + if bool_any: + args += ['--any'] + if ipv4: + args += ['--ipv4'] + if ipv6: + args += ['--ipv6'] + try: + check_output(*args, env=wait_online_env) + except subprocess.CalledProcessError: + # show detailed status on failure + for link in links_with_operstate: + name = link.split(':')[0] + if link_exists(name): + call(*networkctl_cmd, '-n', '0', 'status', name, env=env) + raise + if not bool_any and setup_state: + for link in links_with_operstate: + self.wait_operstate(link.split(':')[0], None, setup_state, setup_timeout) + + def wait_address(self, link, address_regex, scope='global', ipv='', timeout_sec=100): + for i in range(timeout_sec): + if i > 0: + time.sleep(1) + output = check_output(f'ip {ipv} address show dev {link} scope {scope}') + if re.search(address_regex, output) and 'tentative' not in output: + break + + self.assertRegex(output, address_regex) + + def wait_address_dropped(self, link, address_regex, scope='global', ipv='', timeout_sec=100): + for i in range(timeout_sec): + if i > 0: + time.sleep(1) + output = check_output(f'ip {ipv} address show dev {link} scope {scope}') + if not re.search(address_regex, output): + break + + self.assertNotRegex(output, address_regex) + + def check_netlabel(self, interface, address, label='system_u:object_r:root_t:s0'): + if not shutil.which('selinuxenabled'): + print('## Checking NetLabel skipped: selinuxenabled command not found.') + elif call_quiet('selinuxenabled') != 0: + print('## Checking NetLabel skipped: SELinux disabled.') + elif not shutil.which('netlabelctl'): # not packaged by all distros + print('## Checking NetLabel skipped: netlabelctl command not found.') + else: + output = check_output('netlabelctl unlbl list') + print(output) + self.assertRegex(output, f'interface:{interface},address:{address},label:"{label}"') + +class NetworkctlTests(unittest.TestCase, Utilities): + + def setUp(self): + setup_common() + + def tearDown(self): + tear_down_common() + + @expectedFailureIfAlternativeNameIsNotAvailable() + def test_altname(self): + copy_network_unit('26-netdev-link-local-addressing-yes.network', '12-dummy.netdev', '12-dummy.link') + start_networkd() + self.wait_online(['dummy98:degraded']) + + output = check_output(*networkctl_cmd, '-n', '0', 'status', 'dummy98', env=env) + self.assertRegex(output, 'hogehogehogehogehogehoge') + + @expectedFailureIfAlternativeNameIsNotAvailable() + def test_rename_to_altname(self): + copy_network_unit('26-netdev-link-local-addressing-yes.network', + '12-dummy.netdev', '12-dummy-rename-to-altname.link') + start_networkd() + self.wait_online(['dummyalt:degraded']) + + output = check_output(*networkctl_cmd, '-n', '0', 'status', 'dummyalt', env=env) + self.assertIn('hogehogehogehogehogehoge', output) + self.assertNotIn('dummy98', output) + + def test_reconfigure(self): + copy_network_unit('25-address-static.network', '12-dummy.netdev') + start_networkd() + self.wait_online(['dummy98:routable']) + + output = check_output('ip -4 address show dev dummy98') + print(output) + self.assertIn('inet 10.1.2.3/16 brd 10.1.255.255 scope global dummy98', output) + self.assertIn('inet 10.1.2.4/16 brd 10.1.255.255 scope global secondary dummy98', output) + self.assertIn('inet 10.2.2.4/16 brd 10.2.255.255 scope global dummy98', output) + + check_output('ip address del 10.1.2.3/16 dev dummy98') + check_output('ip address del 10.1.2.4/16 dev dummy98') + check_output('ip address del 10.2.2.4/16 dev dummy98') + + networkctl_reconfigure('dummy98') + self.wait_online(['dummy98:routable']) + + output = check_output('ip -4 address show dev dummy98') + print(output) + self.assertIn('inet 10.1.2.3/16 brd 10.1.255.255 scope global dummy98', output) + self.assertIn('inet 10.1.2.4/16 brd 10.1.255.255 scope global secondary dummy98', output) + self.assertIn('inet 10.2.2.4/16 brd 10.2.255.255 scope global dummy98', output) + + remove_network_unit('25-address-static.network') + + networkctl_reload() + self.wait_operstate('dummy98', 'degraded', setup_state='unmanaged') + + output = check_output('ip -4 address show dev dummy98') + print(output) + self.assertNotIn('inet 10.1.2.3/16 brd 10.1.255.255 scope global dummy98', output) + self.assertNotIn('inet 10.1.2.4/16 brd 10.1.255.255 scope global secondary dummy98', output) + self.assertNotIn('inet 10.2.2.4/16 brd 10.2.255.255 scope global dummy98', output) + + copy_network_unit('25-address-static.network') + networkctl_reload() + self.wait_online(['dummy98:routable']) + + output = check_output('ip -4 address show dev dummy98') + print(output) + self.assertIn('inet 10.1.2.3/16 brd 10.1.255.255 scope global dummy98', output) + self.assertIn('inet 10.1.2.4/16 brd 10.1.255.255 scope global secondary dummy98', output) + self.assertIn('inet 10.2.2.4/16 brd 10.2.255.255 scope global dummy98', output) + + def test_reload(self): + start_networkd() + + copy_network_unit('11-dummy.netdev') + networkctl_reload() + self.wait_operstate('test1', 'off', setup_state='unmanaged') + + copy_network_unit('11-dummy.network') + networkctl_reload() + self.wait_online(['test1:degraded']) + + remove_network_unit('11-dummy.network') + networkctl_reload() + self.wait_operstate('test1', 'degraded', setup_state='unmanaged') + + remove_network_unit('11-dummy.netdev') + networkctl_reload() + self.wait_operstate('test1', 'degraded', setup_state='unmanaged') + + copy_network_unit('11-dummy.netdev', '11-dummy.network') + networkctl_reload() + self.wait_operstate('test1', 'degraded') + + def test_glob(self): + copy_network_unit('11-dummy.netdev', '11-dummy.network') + start_networkd() + + self.wait_online(['test1:degraded']) + + output = check_output(*networkctl_cmd, 'list', env=env) + self.assertRegex(output, '1 lo ') + self.assertRegex(output, 'test1') + + output = check_output(*networkctl_cmd, 'list', 'test1', env=env) + self.assertNotRegex(output, '1 lo ') + self.assertRegex(output, 'test1') + + output = check_output(*networkctl_cmd, 'list', 'te*', env=env) + self.assertNotRegex(output, '1 lo ') + self.assertRegex(output, 'test1') + + output = check_output(*networkctl_cmd, '-n', '0', 'status', 'te*', env=env) + self.assertNotRegex(output, '1: lo ') + self.assertRegex(output, 'test1') + + output = check_output(*networkctl_cmd, '-n', '0', 'status', 'tes[a-z][0-9]', env=env) + self.assertNotRegex(output, '1: lo ') + self.assertRegex(output, 'test1') + + def test_mtu(self): + copy_network_unit('11-dummy-mtu.netdev', '11-dummy.network') + start_networkd() + + self.wait_online(['test1:degraded']) + + output = check_output(*networkctl_cmd, '-n', '0', 'status', 'test1', env=env) + self.assertRegex(output, 'MTU: 1600') + + def test_type(self): + copy_network_unit('11-dummy.netdev', '11-dummy.network') + start_networkd() + self.wait_online(['test1:degraded']) + + output = check_output(*networkctl_cmd, '-n', '0', 'status', 'test1', env=env) + print(output) + self.assertRegex(output, 'Type: ether') + + output = check_output(*networkctl_cmd, '-n', '0', 'status', 'lo', env=env) + print(output) + self.assertRegex(output, 'Type: loopback') + + @expectedFailureIfLinkFileFieldIsNotSet() + def test_udev_link_file(self): + copy_network_unit('11-dummy.netdev', '11-dummy.network') + start_networkd() + self.wait_online(['test1:degraded']) + + output = check_output(*networkctl_cmd, '-n', '0', 'status', 'test1', env=env) + print(output) + self.assertRegex(output, r'Link File: (/usr)?/lib/systemd/network/99-default.link') + self.assertRegex(output, r'Network File: /run/systemd/network/11-dummy.network') + + # This test may be run on the system that has older udevd than 70f32a260b5ebb68c19ecadf5d69b3844896ba55 (v249). + # In that case, the udev DB for the loopback network interface may already have ID_NET_LINK_FILE property. + # Let's reprocess the interface and drop the property. + check_output(*udevadm_cmd, 'trigger', '--settle', '--action=add', '/sys/class/net/lo') + output = check_output(*networkctl_cmd, '-n', '0', 'status', 'lo', env=env) + print(output) + self.assertRegex(output, r'Link File: n/a') + self.assertRegex(output, r'Network File: n/a') + + def test_delete_links(self): + copy_network_unit('11-dummy.netdev', '11-dummy.network', + '25-veth.netdev', '26-netdev-link-local-addressing-yes.network') + start_networkd() + + self.wait_online(['test1:degraded', 'veth99:degraded', 'veth-peer:degraded']) + + check_output(*networkctl_cmd, 'delete', 'test1', 'veth99', env=env) + self.check_link_exists('test1', expected=False) + self.check_link_exists('veth99', expected=False) + self.check_link_exists('veth-peer', expected=False) + +class WaitOnlineTests(unittest.TestCase, Utilities): + + def setUp(self): + setup_common() + + def tearDown(self): + tear_down_common() + + def test_wait_online_any(self): + copy_network_unit('25-bridge.netdev', '25-bridge.network', '11-dummy.netdev', '11-dummy.network') + start_networkd() + + self.wait_online(['bridge99', 'test1:degraded'], bool_any=True) + + self.wait_operstate('bridge99', '(off|no-carrier)', setup_state='configuring') + self.wait_operstate('test1', 'degraded') + +class NetworkdNetDevTests(unittest.TestCase, Utilities): + + def setUp(self): + setup_common() + + def tearDown(self): + tear_down_common() + + def test_dropin_and_name_conflict(self): + copy_network_unit('10-dropin-test.netdev', '15-name-conflict-test.netdev') + start_networkd() + + self.wait_online(['dropin-test:off'], setup_state='unmanaged') + + output = check_output('ip link show dropin-test') + print(output) + self.assertRegex(output, '00:50:56:c0:00:28') + + def test_match_udev_property(self): + copy_network_unit('12-dummy.netdev', '13-not-match-udev-property.network', '14-match-udev-property.network') + start_networkd() + self.wait_online(['dummy98:routable']) + + output = check_output(*networkctl_cmd, '-n', '0', 'status', 'dummy98', env=env) + print(output) + self.assertRegex(output, 'Network File: /run/systemd/network/14-match-udev-property') + + @expectedFailureIfModuleIsNotAvailable('bareudp') + def test_bareudp(self): + copy_network_unit('25-bareudp.netdev', '26-netdev-link-local-addressing-yes.network') + start_networkd() + + self.wait_online(['bareudp99:degraded']) + + output = check_output('ip -d link show bareudp99') + print(output) + self.assertRegex(output, 'dstport 1000 ') + self.assertRegex(output, 'ethertype ip ') + + @expectedFailureIfModuleIsNotAvailable('batman-adv') + def test_batadv(self): + copy_network_unit('25-batadv.netdev', '26-netdev-link-local-addressing-yes.network') + start_networkd() + + self.wait_online(['batadv99:degraded']) + + output = check_output('ip -d link show batadv99') + print(output) + self.assertRegex(output, 'batadv') + + def test_bridge(self): + copy_network_unit('25-bridge.netdev', '25-bridge-configure-without-carrier.network') + start_networkd() + + self.wait_online(['bridge99:no-carrier']) + + tick = os.sysconf('SC_CLK_TCK') + self.assertEqual(9, round(float(read_link_attr('bridge99', 'bridge', 'hello_time')) / tick)) + self.assertEqual(9, round(float(read_link_attr('bridge99', 'bridge', 'max_age')) / tick)) + self.assertEqual(9, round(float(read_link_attr('bridge99', 'bridge', 'forward_delay')) / tick)) + self.assertEqual(9, round(float(read_link_attr('bridge99', 'bridge', 'ageing_time')) / tick)) + self.assertEqual(9, int(read_link_attr('bridge99', 'bridge', 'priority'))) + self.assertEqual(1, int(read_link_attr('bridge99', 'bridge', 'multicast_querier'))) + self.assertEqual(1, int(read_link_attr('bridge99', 'bridge', 'multicast_snooping'))) + self.assertEqual(1, int(read_link_attr('bridge99', 'bridge', 'stp_state'))) + self.assertEqual(3, int(read_link_attr('bridge99', 'bridge', 'multicast_igmp_version'))) + + output = check_output(*networkctl_cmd, '-n', '0', 'status', 'bridge99', env=env) + print(output) + self.assertRegex(output, 'Priority: 9') + self.assertRegex(output, 'STP: yes') + self.assertRegex(output, 'Multicast IGMP Version: 3') + + output = check_output('ip -d link show bridge99') + print(output) + self.assertIn('vlan_filtering 1 ', output) + self.assertIn('vlan_protocol 802.1ad ', output) + self.assertIn('vlan_default_pvid 9 ', output) + + def test_bond(self): + copy_network_unit('25-bond.netdev', '25-bond-balanced-tlb.netdev') + start_networkd() + + self.wait_online(['bond99:off', 'bond98:off'], setup_state='unmanaged') + + self.check_link_attr('bond99', 'bonding', 'mode', '802.3ad 4') + self.check_link_attr('bond99', 'bonding', 'xmit_hash_policy', 'layer3+4 1') + self.check_link_attr('bond99', 'bonding', 'miimon', '1000') + self.check_link_attr('bond99', 'bonding', 'lacp_rate', 'fast 1') + self.check_link_attr('bond99', 'bonding', 'updelay', '2000') + self.check_link_attr('bond99', 'bonding', 'downdelay', '2000') + self.check_link_attr('bond99', 'bonding', 'resend_igmp', '4') + self.check_link_attr('bond99', 'bonding', 'min_links', '1') + self.check_link_attr('bond99', 'bonding', 'ad_actor_sys_prio', '1218') + self.check_link_attr('bond99', 'bonding', 'ad_user_port_key', '811') + self.check_link_attr('bond99', 'bonding', 'ad_actor_system', '00:11:22:33:44:55') + + self.check_link_attr('bond98', 'bonding', 'mode', 'balance-tlb 5') + self.check_link_attr('bond98', 'bonding', 'tlb_dynamic_lb', '1') + + output = check_output(*networkctl_cmd, '-n', '0', 'status', 'bond99', env=env) + print(output) + self.assertIn('Mode: 802.3ad', output) + self.assertIn('Miimon: 1s', output) + self.assertIn('Updelay: 2s', output) + self.assertIn('Downdelay: 2s', output) + + output = check_output(*networkctl_cmd, '-n', '0', 'status', 'bond98', env=env) + print(output) + self.assertIn('Mode: balance-tlb', output) + + def test_vlan(self): + copy_network_unit('21-vlan.netdev', '11-dummy.netdev', + '21-vlan.network', '21-vlan-test1.network') + start_networkd() + + self.wait_online(['test1:degraded', 'vlan99:routable']) + + output = check_output('ip -d link show test1') + print(output) + self.assertRegex(output, ' mtu 2000 ') + + output = check_output('ip -d link show vlan99') + print(output) + self.assertIn(' mtu 2000 ', output) + self.assertIn('REORDER_HDR', output) + self.assertIn('LOOSE_BINDING', output) + self.assertIn('GVRP', output) + self.assertIn('MVRP', output) + self.assertIn(' id 99 ', output) + self.assertIn('ingress-qos-map { 4:100 7:13 }', output) + self.assertIn('egress-qos-map { 0:1 1:3 6:6 7:7 10:3 }', output) + + output = check_output('ip -4 address show dev test1') + print(output) + self.assertRegex(output, 'inet 192.168.24.5/24 brd 192.168.24.255 scope global test1') + self.assertRegex(output, 'inet 192.168.25.5/24 brd 192.168.25.255 scope global test1') + + output = check_output('ip -4 address show dev vlan99') + print(output) + self.assertRegex(output, 'inet 192.168.23.5/24 brd 192.168.23.255 scope global vlan99') + + def test_vlan_on_bond(self): + # For issue #24377 (https://github.com/systemd/systemd/issues/24377), + # which is fixed by b05e52000b4eee764b383cc3031da0a3739e996e (PR#24020). + + copy_network_unit('21-bond-802.3ad.netdev', '21-bond-802.3ad.network', + '21-vlan-on-bond.netdev', '21-vlan-on-bond.network') + start_networkd() + self.wait_online(['bond99:off']) + self.wait_operstate('vlan99', operstate='off', setup_state='configuring', setup_timeout=10) + + # The commit b05e52000b4eee764b383cc3031da0a3739e996e adds ", ignoring". To make it easily confirmed + # that the issue is fixed by the commit, let's allow to match both string. + log_re = re.compile('vlan99: Could not bring up interface(, ignoring|): Network is down$', re.MULTILINE) + for i in range(20): + if i > 0: + time.sleep(0.5) + if log_re.search(read_networkd_log()): + break + else: + self.fail() + + copy_network_unit('11-dummy.netdev', '12-dummy.netdev', '21-dummy-bond-slave.network') + networkctl_reload() + self.wait_online(['test1:enslaved', 'dummy98:enslaved', 'bond99:carrier', 'vlan99:routable']) + + def test_macvtap(self): + first = True + for mode in ['private', 'vepa', 'bridge', 'passthru']: + if first: + first = False + else: + self.tearDown() + + print(f'### test_macvtap(mode={mode})') + with self.subTest(mode=mode): + copy_network_unit('21-macvtap.netdev', '26-netdev-link-local-addressing-yes.network', + '11-dummy.netdev', '25-macvtap.network') + with open(os.path.join(network_unit_dir, '21-macvtap.netdev'), mode='a', encoding='utf-8') as f: + f.write('[MACVTAP]\nMode=' + mode) + start_networkd() + + self.wait_online(['macvtap99:degraded', + 'test1:carrier' if mode == 'passthru' else 'test1:degraded']) + + output = check_output('ip -d link show macvtap99') + print(output) + self.assertRegex(output, 'macvtap mode ' + mode + ' ') + + def test_macvlan(self): + first = True + for mode in ['private', 'vepa', 'bridge', 'passthru']: + if first: + first = False + else: + self.tearDown() + + print(f'### test_macvlan(mode={mode})') + with self.subTest(mode=mode): + copy_network_unit('21-macvlan.netdev', '26-netdev-link-local-addressing-yes.network', + '11-dummy.netdev', '25-macvlan.network') + with open(os.path.join(network_unit_dir, '21-macvlan.netdev'), mode='a', encoding='utf-8') as f: + f.write('[MACVLAN]\nMode=' + mode) + start_networkd() + + self.wait_online(['macvlan99:degraded', + 'test1:carrier' if mode == 'passthru' else 'test1:degraded']) + + output = check_output('ip -d link show test1') + print(output) + self.assertRegex(output, ' mtu 2000 ') + + output = check_output('ip -d link show macvlan99') + print(output) + self.assertRegex(output, ' mtu 2000 ') + self.assertRegex(output, 'macvlan mode ' + mode + ' ') + + remove_link('test1') + time.sleep(1) + + check_output("ip link add test1 type dummy") + self.wait_online(['macvlan99:degraded', + 'test1:carrier' if mode == 'passthru' else 'test1:degraded']) + + output = check_output('ip -d link show test1') + print(output) + self.assertRegex(output, ' mtu 2000 ') + + output = check_output('ip -d link show macvlan99') + print(output) + self.assertRegex(output, ' mtu 2000 ') + self.assertRegex(output, 'macvlan mode ' + mode + ' ') + + @expectedFailureIfModuleIsNotAvailable('ipvlan') + def test_ipvlan(self): + first = True + for mode, flag in [['L2', 'private'], ['L3', 'vepa'], ['L3S', 'bridge']]: + if first: + first = False + else: + self.tearDown() + + print(f'### test_ipvlan(mode={mode}, flag={flag})') + with self.subTest(mode=mode, flag=flag): + copy_network_unit('25-ipvlan.netdev', '26-netdev-link-local-addressing-yes.network', + '11-dummy.netdev', '25-ipvlan.network') + with open(os.path.join(network_unit_dir, '25-ipvlan.netdev'), mode='a', encoding='utf-8') as f: + f.write('[IPVLAN]\nMode=' + mode + '\nFlags=' + flag) + + start_networkd() + self.wait_online(['ipvlan99:degraded', 'test1:degraded']) + + output = check_output('ip -d link show ipvlan99') + print(output) + self.assertRegex(output, 'ipvlan *mode ' + mode.lower() + ' ' + flag) + + @expectedFailureIfModuleIsNotAvailable('ipvtap') + def test_ipvtap(self): + first = True + for mode, flag in [['L2', 'private'], ['L3', 'vepa'], ['L3S', 'bridge']]: + if first: + first = False + else: + self.tearDown() + + print(f'### test_ipvtap(mode={mode}, flag={flag})') + with self.subTest(mode=mode, flag=flag): + copy_network_unit('25-ipvtap.netdev', '26-netdev-link-local-addressing-yes.network', + '11-dummy.netdev', '25-ipvtap.network') + with open(os.path.join(network_unit_dir, '25-ipvtap.netdev'), mode='a', encoding='utf-8') as f: + f.write('[IPVTAP]\nMode=' + mode + '\nFlags=' + flag) + + start_networkd() + self.wait_online(['ipvtap99:degraded', 'test1:degraded']) + + output = check_output('ip -d link show ipvtap99') + print(output) + self.assertRegex(output, 'ipvtap *mode ' + mode.lower() + ' ' + flag) + + def test_veth(self): + copy_network_unit('25-veth.netdev', '26-netdev-link-local-addressing-yes.network', + '25-veth-mtu.netdev') + start_networkd() + + self.wait_online(['veth99:degraded', 'veth-peer:degraded', 'veth-mtu:degraded', 'veth-mtu-peer:degraded']) + + output = check_output('ip -d link show veth99') + print(output) + self.assertRegex(output, 'link/ether 12:34:56:78:9a:bc') + output = check_output('ip -d link show veth-peer') + print(output) + self.assertRegex(output, 'link/ether 12:34:56:78:9a:bd') + + output = check_output('ip -d link show veth-mtu') + print(output) + self.assertRegex(output, 'link/ether 12:34:56:78:9a:be') + self.assertRegex(output, 'mtu 1800') + output = check_output('ip -d link show veth-mtu-peer') + print(output) + self.assertRegex(output, 'link/ether 12:34:56:78:9a:bf') + self.assertRegex(output, 'mtu 1800') + + def test_tuntap(self): + copy_network_unit('25-tun.netdev', '25-tap.netdev', '26-netdev-link-local-addressing-yes.network') + start_networkd() + + self.wait_online(['testtun99:degraded', 'testtap99:degraded']) + + pid = networkd_pid() + name = psutil.Process(pid).name()[:15] + + output = check_output('ip -d tuntap show') + print(output) + self.assertRegex(output, fr'(?m)testtap99: tap pi (multi_queue |)vnet_hdr persist filter *(0x100|)\n\tAttached to processes:{name}\({pid}\)systemd\(1\)$') + self.assertRegex(output, fr'(?m)testtun99: tun pi (multi_queue |)vnet_hdr persist filter *(0x100|)\n\tAttached to processes:{name}\({pid}\)systemd\(1\)$') + + output = check_output('ip -d link show testtun99') + print(output) + # Old ip command does not support IFF_ flags + self.assertRegex(output, 'tun (type tun pi on vnet_hdr on multi_queue|addrgenmode) ') + self.assertIn('UP,LOWER_UP', output) + + output = check_output('ip -d link show testtap99') + print(output) + self.assertRegex(output, 'tun (type tap pi on vnet_hdr on multi_queue|addrgenmode) ') + self.assertIn('UP,LOWER_UP', output) + + remove_network_unit('26-netdev-link-local-addressing-yes.network') + + restart_networkd() + self.wait_online(['testtun99:degraded', 'testtap99:degraded'], setup_state='unmanaged') + + pid = networkd_pid() + name = psutil.Process(pid).name()[:15] + + output = check_output('ip -d tuntap show') + print(output) + self.assertRegex(output, fr'(?m)testtap99: tap pi (multi_queue |)vnet_hdr persist filter *(0x100|)\n\tAttached to processes:{name}\({pid}\)systemd\(1\)$') + self.assertRegex(output, fr'(?m)testtun99: tun pi (multi_queue |)vnet_hdr persist filter *(0x100|)\n\tAttached to processes:{name}\({pid}\)systemd\(1\)$') + + output = check_output('ip -d link show testtun99') + print(output) + self.assertRegex(output, 'tun (type tun pi on vnet_hdr on multi_queue|addrgenmode) ') + self.assertIn('UP,LOWER_UP', output) + + output = check_output('ip -d link show testtap99') + print(output) + self.assertRegex(output, 'tun (type tap pi on vnet_hdr on multi_queue|addrgenmode) ') + self.assertIn('UP,LOWER_UP', output) + + clear_network_units() + restart_networkd() + self.wait_online(['testtun99:off', 'testtap99:off'], setup_state='unmanaged') + + output = check_output('ip -d tuntap show') + print(output) + self.assertRegex(output, r'(?m)testtap99: tap pi (multi_queue |)vnet_hdr persist filter *(0x100|)\n\tAttached to processes:$') + self.assertRegex(output, r'(?m)testtun99: tun pi (multi_queue |)vnet_hdr persist filter *(0x100|)\n\tAttached to processes:$') + + for i in range(10): + if i != 0: + time.sleep(1) + output = check_output('ip -d link show testtun99') + print(output) + self.assertRegex(output, 'tun (type tun pi on vnet_hdr on multi_queue|addrgenmode) ') + if 'NO-CARRIER' in output: + break + else: + self.fail() + + for i in range(10): + if i != 0: + time.sleep(1) + output = check_output('ip -d link show testtap99') + print(output) + self.assertRegex(output, 'tun (type tap pi on vnet_hdr on multi_queue|addrgenmode) ') + if 'NO-CARRIER' in output: + break + else: + self.fail() + + @expectedFailureIfModuleIsNotAvailable('vrf') + def test_vrf(self): + copy_network_unit('25-vrf.netdev', '26-netdev-link-local-addressing-yes.network') + start_networkd() + + self.wait_online(['vrf99:carrier']) + + @expectedFailureIfModuleIsNotAvailable('vcan') + def test_vcan(self): + copy_network_unit('25-vcan.netdev', '26-netdev-link-local-addressing-yes.network', + '25-vcan98.netdev', '25-vcan98.network') + start_networkd() + + self.wait_online(['vcan99:carrier', 'vcan98:carrier']) + + # https://github.com/systemd/systemd/issues/30140 + output = check_output('ip -d link show vcan99') + print(output) + self.assertIn('mtu 16 ', output) + + output = check_output('ip -d link show vcan98') + print(output) + self.assertIn('mtu 16 ', output) + + @expectedFailureIfModuleIsNotAvailable('vxcan') + def test_vxcan(self): + copy_network_unit('25-vxcan.netdev', '26-netdev-link-local-addressing-yes.network') + start_networkd() + + self.wait_online(['vxcan99:carrier', 'vxcan-peer:carrier']) + + @expectedFailureIfModuleIsNotAvailable('wireguard') + def test_wireguard(self): + copy_network_unit('25-wireguard.netdev', '25-wireguard.network', + '25-wireguard-23-peers.netdev', '25-wireguard-23-peers.network', + '25-wireguard-preshared-key.txt', '25-wireguard-private-key.txt', + '25-wireguard-no-peer.netdev', '25-wireguard-no-peer.network') + start_networkd() + self.wait_online(['wg99:routable', 'wg98:routable', 'wg97:carrier']) + + output = check_output('ip -4 address show dev wg99') + print(output) + self.assertIn('inet 192.168.124.1/24 scope global wg99', output) + + output = check_output('ip -4 address show dev wg99') + print(output) + self.assertIn('inet 169.254.11.1/24 scope link wg99', output) + + output = check_output('ip -6 address show dev wg99') + print(output) + self.assertIn('inet6 fe80::1/64 scope link', output) + + output = check_output('ip -4 address show dev wg98') + print(output) + self.assertIn('inet 192.168.123.123/24 scope global wg98', output) + + output = check_output('ip -6 address show dev wg98') + print(output) + self.assertIn('inet6 fd8d:4d6d:3ccb:500::1/64 scope global', output) + + output = check_output('ip -4 route show dev wg99 table 1234') + print(output) + self.assertIn('192.168.26.0/24 proto static metric 123', output) + + output = check_output('ip -6 route show dev wg99 table 1234') + print(output) + self.assertIn('fd31:bf08:57cb::/48 proto static metric 123 pref medium', output) + + output = check_output('ip -6 route show dev wg98 table 1234') + print(output) + self.assertIn('fd8d:4d6d:3ccb:500:c79:2339:edce:ece1 proto static metric 123 pref medium', output) + self.assertIn('fd8d:4d6d:3ccb:500:1dbf:ca8a:32d3:dd81 proto static metric 123 pref medium', output) + self.assertIn('fd8d:4d6d:3ccb:500:1e54:1415:35d0:a47c proto static metric 123 pref medium', output) + self.assertIn('fd8d:4d6d:3ccb:500:270d:b5dd:4a3f:8909 proto static metric 123 pref medium', output) + self.assertIn('fd8d:4d6d:3ccb:500:5660:679d:3532:94d8 proto static metric 123 pref medium', output) + self.assertIn('fd8d:4d6d:3ccb:500:6825:573f:30f3:9472 proto static metric 123 pref medium', output) + self.assertIn('fd8d:4d6d:3ccb:500:6f2e:6888:c6fd:dfb9 proto static metric 123 pref medium', output) + self.assertIn('fd8d:4d6d:3ccb:500:8d4d:bab:7280:a09a proto static metric 123 pref medium', output) + self.assertIn('fd8d:4d6d:3ccb:500:900c:d437:ec27:8822 proto static metric 123 pref medium', output) + self.assertIn('fd8d:4d6d:3ccb:500:9742:9931:5217:18d5 proto static metric 123 pref medium', output) + self.assertIn('fd8d:4d6d:3ccb:500:9c11:d820:2e96:9be0 proto static metric 123 pref medium', output) + self.assertIn('fd8d:4d6d:3ccb:500:a072:80da:de4f:add1 proto static metric 123 pref medium', output) + self.assertIn('fd8d:4d6d:3ccb:500:a3f3:df38:19b0:721 proto static metric 123 pref medium', output) + self.assertIn('fd8d:4d6d:3ccb:500:a94b:cd6a:a32d:90e6 proto static metric 123 pref medium', output) + self.assertIn('fd8d:4d6d:3ccb:500:b39c:9cdc:755a:ead3 proto static metric 123 pref medium', output) + self.assertIn('fd8d:4d6d:3ccb:500:b684:4f81:2e3e:132e proto static metric 123 pref medium', output) + self.assertIn('fd8d:4d6d:3ccb:500:bad5:495d:8e9c:3427 proto static metric 123 pref medium', output) + self.assertIn('fd8d:4d6d:3ccb:500:bfe5:c3c3:5d77:fcb proto static metric 123 pref medium', output) + self.assertIn('fd8d:4d6d:3ccb:500:c624:6bf7:4c09:3b59 proto static metric 123 pref medium', output) + self.assertIn('fd8d:4d6d:3ccb:500:d4f9:5dc:9296:a1a proto static metric 123 pref medium', output) + self.assertIn('fd8d:4d6d:3ccb:500:dcdd:d33b:90c9:6088 proto static metric 123 pref medium', output) + self.assertIn('fd8d:4d6d:3ccb:500:e2e1:ae15:103f:f376 proto static metric 123 pref medium', output) + self.assertIn('fd8d:4d6d:3ccb:500:f349:c4f0:10c1:6b4 proto static metric 123 pref medium', output) + self.assertIn('fd8d:4d6d:3ccb:c79:2339:edce::/96 proto static metric 123 pref medium', output) + self.assertIn('fd8d:4d6d:3ccb:1dbf:ca8a:32d3::/96 proto static metric 123 pref medium', output) + self.assertIn('fd8d:4d6d:3ccb:1e54:1415:35d0::/96 proto static metric 123 pref medium', output) + self.assertIn('fd8d:4d6d:3ccb:270d:b5dd:4a3f::/96 proto static metric 123 pref medium', output) + self.assertIn('fd8d:4d6d:3ccb:5660:679d:3532::/96 proto static metric 123 pref medium', output) + self.assertIn('fd8d:4d6d:3ccb:6825:573f:30f3::/96 proto static metric 123 pref medium', output) + self.assertIn('fd8d:4d6d:3ccb:6f2e:6888:c6fd::/96 proto static metric 123 pref medium', output) + self.assertIn('fd8d:4d6d:3ccb:8d4d:bab:7280::/96 proto static metric 123 pref medium', output) + self.assertIn('fd8d:4d6d:3ccb:900c:d437:ec27::/96 proto static metric 123 pref medium', output) + self.assertIn('fd8d:4d6d:3ccb:9742:9931:5217::/96 proto static metric 123 pref medium', output) + self.assertIn('fd8d:4d6d:3ccb:9c11:d820:2e96::/96 proto static metric 123 pref medium', output) + self.assertIn('fd8d:4d6d:3ccb:a072:80da:de4f::/96 proto static metric 123 pref medium', output) + self.assertIn('fd8d:4d6d:3ccb:a3f3:df38:19b0::/96 proto static metric 123 pref medium', output) + self.assertIn('fd8d:4d6d:3ccb:a94b:cd6a:a32d::/96 proto static metric 123 pref medium', output) + self.assertIn('fd8d:4d6d:3ccb:b39c:9cdc:755a::/96 proto static metric 123 pref medium', output) + self.assertIn('fd8d:4d6d:3ccb:b684:4f81:2e3e::/96 proto static metric 123 pref medium', output) + self.assertIn('fd8d:4d6d:3ccb:bad5:495d:8e9c::/96 proto static metric 123 pref medium', output) + self.assertIn('fd8d:4d6d:3ccb:bfe5:c3c3:5d77::/96 proto static metric 123 pref medium', output) + self.assertIn('fd8d:4d6d:3ccb:c624:6bf7:4c09::/96 proto static metric 123 pref medium', output) + self.assertIn('fd8d:4d6d:3ccb:d4f9:5dc:9296::/96 proto static metric 123 pref medium', output) + self.assertIn('fd8d:4d6d:3ccb:dcdd:d33b:90c9::/96 proto static metric 123 pref medium', output) + self.assertIn('fd8d:4d6d:3ccb:e2e1:ae15:103f::/96 proto static metric 123 pref medium', output) + self.assertIn('fd8d:4d6d:3ccb:f349:c4f0:10c1::/96 proto static metric 123 pref medium', output) + + if shutil.which('wg'): + call('wg') + + output = check_output('wg show wg99 listen-port') + self.assertEqual(output, '51820') + output = check_output('wg show wg99 fwmark') + self.assertEqual(output, '0x4d2') + output = check_output('wg show wg99 private-key') + self.assertEqual(output, 'EEGlnEPYJV//kbvvIqxKkQwOiS+UENyPncC4bF46ong=') + output = check_output('wg show wg99 allowed-ips') + self.assertIn('9uioxkGzjvGjkse3V35I9AhorWfIjBcrf3UPMS0bw2c=\t192.168.124.3/32', output) + self.assertIn('TTiCUpCxS7zDn/ax4p5W6Evg41r8hOrnWQw2Sq6Nh10=\t192.168.124.2/32', output) + self.assertIn('lsDtM3AbjxNlauRKzHEPfgS1Zp7cp/VX5Use/P4PQSc=\tfdbc:bae2:7871:e1fe:793:8636::/96 fdbc:bae2:7871:500:e1fe:793:8636:dad1/128', output) + self.assertIn('RDf+LSpeEre7YEIKaxg+wbpsNV7du+ktR99uBEtIiCA=\t192.168.26.0/24 fd31:bf08:57cb::/48', output) + output = check_output('wg show wg99 persistent-keepalive') + self.assertIn('9uioxkGzjvGjkse3V35I9AhorWfIjBcrf3UPMS0bw2c=\toff', output) + self.assertIn('TTiCUpCxS7zDn/ax4p5W6Evg41r8hOrnWQw2Sq6Nh10=\toff', output) + self.assertIn('lsDtM3AbjxNlauRKzHEPfgS1Zp7cp/VX5Use/P4PQSc=\toff', output) + self.assertIn('RDf+LSpeEre7YEIKaxg+wbpsNV7du+ktR99uBEtIiCA=\t20', output) + output = check_output('wg show wg99 endpoints') + self.assertIn('9uioxkGzjvGjkse3V35I9AhorWfIjBcrf3UPMS0bw2c=\t(none)', output) + self.assertIn('TTiCUpCxS7zDn/ax4p5W6Evg41r8hOrnWQw2Sq6Nh10=\t(none)', output) + self.assertIn('lsDtM3AbjxNlauRKzHEPfgS1Zp7cp/VX5Use/P4PQSc=\t(none)', output) + self.assertIn('RDf+LSpeEre7YEIKaxg+wbpsNV7du+ktR99uBEtIiCA=\t192.168.27.3:51820', output) + output = check_output('wg show wg99 preshared-keys') + self.assertIn('9uioxkGzjvGjkse3V35I9AhorWfIjBcrf3UPMS0bw2c=\t6Fsg8XN0DE6aPQgAX4r2oazEYJOGqyHUz3QRH/jCB+I=', output) + self.assertIn('TTiCUpCxS7zDn/ax4p5W6Evg41r8hOrnWQw2Sq6Nh10=\tit7nd33chCT/tKT2ZZWfYyp43Zs+6oif72hexnSNMqA=', output) + self.assertIn('lsDtM3AbjxNlauRKzHEPfgS1Zp7cp/VX5Use/P4PQSc=\tcPLOy1YUrEI0EMMIycPJmOo0aTu3RZnw8bL5meVD6m0=', output) + self.assertIn('RDf+LSpeEre7YEIKaxg+wbpsNV7du+ktR99uBEtIiCA=\tIIWIV17wutHv7t4cR6pOT91z6NSz/T8Arh0yaywhw3M=', output) + + output = check_output('wg show wg98 private-key') + self.assertEqual(output, 'CJQUtcS9emY2fLYqDlpSZiE/QJyHkPWr+WHtZLZ90FU=') + + output = check_output('wg show wg97 listen-port') + self.assertEqual(output, '51821') + output = check_output('wg show wg97 fwmark') + self.assertEqual(output, '0x4d3') + + def test_geneve(self): + copy_network_unit('25-geneve.netdev', '26-netdev-link-local-addressing-yes.network') + start_networkd() + + self.wait_online(['geneve99:degraded']) + + output = check_output('ip -d link show geneve99') + print(output) + self.assertRegex(output, '192.168.22.1') + self.assertRegex(output, '6082') + self.assertRegex(output, 'udpcsum') + self.assertRegex(output, 'udp6zerocsumrx') + + def test_ipip_tunnel(self): + copy_network_unit('12-dummy.netdev', '25-ipip.network', + '25-ipip-tunnel.netdev', '25-tunnel.network', + '25-ipip-tunnel-local-any.netdev', '25-tunnel-local-any.network', + '25-ipip-tunnel-remote-any.netdev', '25-tunnel-remote-any.network', + '25-ipip-tunnel-any-any.netdev', '25-tunnel-any-any.network') + start_networkd() + self.wait_online(['ipiptun99:routable', 'ipiptun98:routable', 'ipiptun97:routable', 'ipiptun96:routable', 'dummy98:degraded']) + + output = check_output('ip -d link show ipiptun99') + print(output) + self.assertRegex(output, 'ipip (ipip )?remote 192.169.224.239 local 192.168.223.238 dev dummy98') + output = check_output('ip -d link show ipiptun98') + print(output) + self.assertRegex(output, 'ipip (ipip )?remote 192.169.224.239 local any dev dummy98') + output = check_output('ip -d link show ipiptun97') + print(output) + self.assertRegex(output, 'ipip (ipip )?remote any local 192.168.223.238 dev dummy98') + output = check_output('ip -d link show ipiptun96') + print(output) + self.assertRegex(output, 'ipip (ipip )?remote any local any dev dummy98') + + def test_gre_tunnel(self): + copy_network_unit('12-dummy.netdev', '25-gretun.network', + '25-gre-tunnel.netdev', '25-tunnel.network', + '25-gre-tunnel-local-any.netdev', '25-tunnel-local-any.network', + '25-gre-tunnel-remote-any.netdev', '25-tunnel-remote-any.network', + '25-gre-tunnel-any-any.netdev', '25-tunnel-any-any.network') + start_networkd() + self.wait_online(['gretun99:routable', 'gretun98:routable', 'gretun97:routable', 'gretun96:routable', 'dummy98:degraded']) + + output = check_output('ip -d link show gretun99') + print(output) + self.assertRegex(output, 'gre remote 10.65.223.239 local 10.65.223.238 dev dummy98') + self.assertRegex(output, 'ikey 1.2.3.103') + self.assertRegex(output, 'okey 1.2.4.103') + self.assertRegex(output, 'iseq') + self.assertRegex(output, 'oseq') + output = check_output('ip -d link show gretun98') + print(output) + self.assertRegex(output, 'gre remote 10.65.223.239 local any dev dummy98') + self.assertRegex(output, 'ikey 0.0.0.104') + self.assertRegex(output, 'okey 0.0.0.104') + self.assertNotRegex(output, 'iseq') + self.assertNotRegex(output, 'oseq') + output = check_output('ip -d link show gretun97') + print(output) + self.assertRegex(output, 'gre remote any local 10.65.223.238 dev dummy98') + self.assertRegex(output, 'ikey 0.0.0.105') + self.assertRegex(output, 'okey 0.0.0.105') + self.assertNotRegex(output, 'iseq') + self.assertNotRegex(output, 'oseq') + output = check_output('ip -d link show gretun96') + print(output) + self.assertRegex(output, 'gre remote any local any dev dummy98') + self.assertRegex(output, 'ikey 0.0.0.106') + self.assertRegex(output, 'okey 0.0.0.106') + self.assertNotRegex(output, 'iseq') + self.assertNotRegex(output, 'oseq') + + def test_ip6gre_tunnel(self): + copy_network_unit('12-dummy.netdev', '25-ip6gretun.network', + '25-ip6gre-tunnel.netdev', '25-tunnel.network', + '25-ip6gre-tunnel-local-any.netdev', '25-tunnel-local-any.network', + '25-ip6gre-tunnel-remote-any.netdev', '25-tunnel-remote-any.network', + '25-ip6gre-tunnel-any-any.netdev', '25-tunnel-any-any.network') + start_networkd() + + # Old kernels seem not to support IPv6LL address on ip6gre tunnel, So please do not use wait_online() here. + + self.wait_links('dummy98', 'ip6gretun99', 'ip6gretun98', 'ip6gretun97', 'ip6gretun96') + + output = check_output('ip -d link show ip6gretun99') + print(output) + self.assertRegex(output, 'ip6gre remote 2001:473:fece:cafe::5179 local 2a00:ffde:4567:edde::4987 dev dummy98') + output = check_output('ip -d link show ip6gretun98') + print(output) + self.assertRegex(output, 'ip6gre remote 2001:473:fece:cafe::5179 local any dev dummy98') + output = check_output('ip -d link show ip6gretun97') + print(output) + self.assertRegex(output, 'ip6gre remote any local 2a00:ffde:4567:edde::4987 dev dummy98') + output = check_output('ip -d link show ip6gretun96') + print(output) + self.assertRegex(output, 'ip6gre remote any local any dev dummy98') + + def test_gretap_tunnel(self): + copy_network_unit('12-dummy.netdev', '25-gretap.network', + '25-gretap-tunnel.netdev', '25-tunnel.network', + '25-gretap-tunnel-local-any.netdev', '25-tunnel-local-any.network') + start_networkd() + self.wait_online(['gretap99:routable', 'gretap98:routable', 'dummy98:degraded']) + + output = check_output('ip -d link show gretap99') + print(output) + self.assertRegex(output, 'gretap remote 10.65.223.239 local 10.65.223.238 dev dummy98') + self.assertRegex(output, 'ikey 0.0.0.106') + self.assertRegex(output, 'okey 0.0.0.106') + self.assertRegex(output, 'iseq') + self.assertRegex(output, 'oseq') + output = check_output('ip -d link show gretap98') + print(output) + self.assertRegex(output, 'gretap remote 10.65.223.239 local any dev dummy98') + self.assertRegex(output, 'ikey 0.0.0.107') + self.assertRegex(output, 'okey 0.0.0.107') + self.assertRegex(output, 'iseq') + self.assertRegex(output, 'oseq') + + def test_ip6gretap_tunnel(self): + copy_network_unit('12-dummy.netdev', '25-ip6gretap.network', + '25-ip6gretap-tunnel.netdev', '25-tunnel.network', + '25-ip6gretap-tunnel-local-any.netdev', '25-tunnel-local-any.network') + start_networkd() + self.wait_online(['ip6gretap99:routable', 'ip6gretap98:routable', 'dummy98:degraded']) + + output = check_output('ip -d link show ip6gretap99') + print(output) + self.assertRegex(output, 'ip6gretap remote 2001:473:fece:cafe::5179 local 2a00:ffde:4567:edde::4987 dev dummy98') + output = check_output('ip -d link show ip6gretap98') + print(output) + self.assertRegex(output, 'ip6gretap remote 2001:473:fece:cafe::5179 local any dev dummy98') + + def test_vti_tunnel(self): + copy_network_unit('12-dummy.netdev', '25-vti.network', + '25-vti-tunnel.netdev', '25-tunnel.network', + '25-vti-tunnel-local-any.netdev', '25-tunnel-local-any.network', + '25-vti-tunnel-remote-any.netdev', '25-tunnel-remote-any.network', + '25-vti-tunnel-any-any.netdev', '25-tunnel-any-any.network') + start_networkd() + self.wait_online(['vtitun99:routable', 'vtitun98:routable', 'vtitun97:routable', 'vtitun96:routable', 'dummy98:degraded']) + + output = check_output('ip -d link show vtitun99') + print(output) + self.assertRegex(output, 'vti remote 10.65.223.239 local 10.65.223.238 dev dummy98') + output = check_output('ip -d link show vtitun98') + print(output) + self.assertRegex(output, 'vti remote 10.65.223.239 local any dev dummy98') + output = check_output('ip -d link show vtitun97') + print(output) + self.assertRegex(output, 'vti remote any local 10.65.223.238 dev dummy98') + output = check_output('ip -d link show vtitun96') + print(output) + self.assertRegex(output, 'vti remote any local any dev dummy98') + + def test_vti6_tunnel(self): + copy_network_unit('12-dummy.netdev', '25-vti6.network', + '25-vti6-tunnel.netdev', '25-tunnel.network', + '25-vti6-tunnel-local-any.netdev', '25-tunnel-local-any.network', + '25-vti6-tunnel-remote-any.netdev', '25-tunnel-remote-any.network') + start_networkd() + self.wait_online(['vti6tun99:routable', 'vti6tun98:routable', 'vti6tun97:routable', 'dummy98:degraded']) + + output = check_output('ip -d link show vti6tun99') + print(output) + self.assertRegex(output, 'vti6 remote 2001:473:fece:cafe::5179 local 2a00:ffde:4567:edde::4987 dev dummy98') + output = check_output('ip -d link show vti6tun98') + print(output) + self.assertRegex(output, 'vti6 remote 2001:473:fece:cafe::5179 local (any|::) dev dummy98') + output = check_output('ip -d link show vti6tun97') + print(output) + self.assertRegex(output, 'vti6 remote (any|::) local 2a00:ffde:4567:edde::4987 dev dummy98') + + def test_ip6tnl_tunnel(self): + copy_network_unit('12-dummy.netdev', '25-ip6tnl.network', + '25-ip6tnl-tunnel.netdev', '25-tunnel.network', + '25-ip6tnl-tunnel-local-any.netdev', '25-tunnel-local-any.network', + '25-ip6tnl-tunnel-remote-any.netdev', '25-tunnel-remote-any.network', + '25-veth.netdev', '25-ip6tnl-slaac.network', '25-ipv6-prefix.network', + '25-ip6tnl-tunnel-local-slaac.netdev', '25-ip6tnl-tunnel-local-slaac.network', + '25-ip6tnl-tunnel-external.netdev', '26-netdev-link-local-addressing-yes.network') + start_networkd() + self.wait_online(['ip6tnl99:routable', 'ip6tnl98:routable', 'ip6tnl97:routable', + 'ip6tnl-slaac:degraded', 'ip6tnl-external:degraded', + 'dummy98:degraded', 'veth99:routable', 'veth-peer:degraded']) + + output = check_output('ip -d link show ip6tnl99') + print(output) + self.assertIn('ip6tnl ip6ip6 remote 2001:473:fece:cafe::5179 local 2a00:ffde:4567:edde::4987 dev dummy98', output) + output = check_output('ip -d link show ip6tnl98') + print(output) + self.assertRegex(output, 'ip6tnl ip6ip6 remote 2001:473:fece:cafe::5179 local (any|::) dev dummy98') + output = check_output('ip -d link show ip6tnl97') + print(output) + self.assertRegex(output, 'ip6tnl ip6ip6 remote (any|::) local 2a00:ffde:4567:edde::4987 dev dummy98') + output = check_output('ip -d link show ip6tnl-external') + print(output) + self.assertIn('ip6tnl-external@NONE:', output) + self.assertIn('ip6tnl external ', output) + output = check_output('ip -d link show ip6tnl-slaac') + print(output) + self.assertIn('ip6tnl ip6ip6 remote 2001:473:fece:cafe::5179 local 2002:da8:1:0:1034:56ff:fe78:9abc dev veth99', output) + + output = check_output('ip -6 address show veth99') + print(output) + self.assertIn('inet6 2002:da8:1:0:1034:56ff:fe78:9abc/64 scope global dynamic', output) + + output = check_output('ip -4 route show default') + print(output) + self.assertIn('default dev ip6tnl-slaac proto static', output) + + def test_sit_tunnel(self): + copy_network_unit('12-dummy.netdev', '25-sit.network', + '25-sit-tunnel.netdev', '25-tunnel.network', + '25-sit-tunnel-local-any.netdev', '25-tunnel-local-any.network', + '25-sit-tunnel-remote-any.netdev', '25-tunnel-remote-any.network', + '25-sit-tunnel-any-any.netdev', '25-tunnel-any-any.network') + start_networkd() + self.wait_online(['sittun99:routable', 'sittun98:routable', 'sittun97:routable', 'sittun96:routable', 'dummy98:degraded']) + + output = check_output('ip -d link show sittun99') + print(output) + self.assertRegex(output, "sit (ip6ip )?remote 10.65.223.239 local 10.65.223.238 dev dummy98") + output = check_output('ip -d link show sittun98') + print(output) + self.assertRegex(output, "sit (ip6ip )?remote 10.65.223.239 local any dev dummy98") + output = check_output('ip -d link show sittun97') + print(output) + self.assertRegex(output, "sit (ip6ip )?remote any local 10.65.223.238 dev dummy98") + output = check_output('ip -d link show sittun96') + print(output) + self.assertRegex(output, "sit (ip6ip )?remote any local any dev dummy98") + + def test_isatap_tunnel(self): + copy_network_unit('12-dummy.netdev', '25-isatap.network', + '25-isatap-tunnel.netdev', '25-tunnel.network') + start_networkd() + self.wait_online(['isataptun99:routable', 'dummy98:degraded']) + + output = check_output('ip -d link show isataptun99') + print(output) + self.assertRegex(output, "isatap ") + + def test_6rd_tunnel(self): + copy_network_unit('12-dummy.netdev', '25-6rd.network', + '25-6rd-tunnel.netdev', '25-tunnel.network') + start_networkd() + self.wait_online(['sittun99:routable', 'dummy98:degraded']) + + output = check_output('ip -d link show sittun99') + print(output) + self.assertRegex(output, '6rd-prefix 2602::/24') + + @expectedFailureIfERSPANv0IsNotSupported() + def test_erspan_tunnel_v0(self): + copy_network_unit('12-dummy.netdev', '25-erspan.network', + '25-erspan0-tunnel.netdev', '25-tunnel.network', + '25-erspan0-tunnel-local-any.netdev', '25-tunnel-local-any.network') + start_networkd() + self.wait_online(['erspan99:routable', 'erspan98:routable', 'dummy98:degraded']) + + output = check_output('ip -d link show erspan99') + print(output) + self.assertIn('erspan remote 172.16.1.100 local 172.16.1.200', output) + self.assertIn('erspan_ver 0', output) + self.assertNotIn('erspan_index 123', output) + self.assertNotIn('erspan_dir ingress', output) + self.assertNotIn('erspan_hwid 1f', output) + self.assertIn('ikey 0.0.0.101', output) + self.assertIn('iseq', output) + output = check_output('ip -d link show erspan98') + print(output) + self.assertIn('erspan remote 172.16.1.100 local any', output) + self.assertIn('erspan_ver 0', output) + self.assertNotIn('erspan_index 124', output) + self.assertNotIn('erspan_dir egress', output) + self.assertNotIn('erspan_hwid 2f', output) + self.assertIn('ikey 0.0.0.102', output) + self.assertIn('iseq', output) + + def test_erspan_tunnel_v1(self): + copy_network_unit('12-dummy.netdev', '25-erspan.network', + '25-erspan1-tunnel.netdev', '25-tunnel.network', + '25-erspan1-tunnel-local-any.netdev', '25-tunnel-local-any.network') + start_networkd() + self.wait_online(['erspan99:routable', 'erspan98:routable', 'dummy98:degraded']) + + output = check_output('ip -d link show erspan99') + print(output) + self.assertIn('erspan remote 172.16.1.100 local 172.16.1.200', output) + self.assertIn('erspan_ver 1', output) + self.assertIn('erspan_index 123', output) + self.assertNotIn('erspan_dir ingress', output) + self.assertNotIn('erspan_hwid 1f', output) + self.assertIn('ikey 0.0.0.101', output) + self.assertIn('okey 0.0.0.101', output) + self.assertIn('iseq', output) + self.assertIn('oseq', output) + output = check_output('ip -d link show erspan98') + print(output) + self.assertIn('erspan remote 172.16.1.100 local any', output) + self.assertIn('erspan_ver 1', output) + self.assertIn('erspan_index 124', output) + self.assertNotIn('erspan_dir egress', output) + self.assertNotIn('erspan_hwid 2f', output) + self.assertIn('ikey 0.0.0.102', output) + self.assertIn('okey 0.0.0.102', output) + self.assertIn('iseq', output) + self.assertIn('oseq', output) + + @expectedFailureIfERSPANv2IsNotSupported() + def test_erspan_tunnel_v2(self): + copy_network_unit('12-dummy.netdev', '25-erspan.network', + '25-erspan2-tunnel.netdev', '25-tunnel.network', + '25-erspan2-tunnel-local-any.netdev', '25-tunnel-local-any.network') + start_networkd() + self.wait_online(['erspan99:routable', 'erspan98:routable', 'dummy98:degraded']) + + output = check_output('ip -d link show erspan99') + print(output) + self.assertIn('erspan remote 172.16.1.100 local 172.16.1.200', output) + self.assertIn('erspan_ver 2', output) + self.assertNotIn('erspan_index 123', output) + self.assertIn('erspan_dir ingress', output) + self.assertIn('erspan_hwid 0x1f', output) + self.assertIn('ikey 0.0.0.101', output) + self.assertIn('okey 0.0.0.101', output) + self.assertIn('iseq', output) + self.assertIn('oseq', output) + output = check_output('ip -d link show erspan98') + print(output) + self.assertIn('erspan remote 172.16.1.100 local any', output) + self.assertIn('erspan_ver 2', output) + self.assertNotIn('erspan_index 124', output) + self.assertIn('erspan_dir egress', output) + self.assertIn('erspan_hwid 0x2f', output) + self.assertIn('ikey 0.0.0.102', output) + self.assertIn('okey 0.0.0.102', output) + self.assertIn('iseq', output) + self.assertIn('oseq', output) + + def test_tunnel_independent(self): + copy_network_unit('25-ipip-tunnel-independent.netdev', '26-netdev-link-local-addressing-yes.network') + start_networkd() + + self.wait_online(['ipiptun99:carrier']) + + def test_tunnel_independent_loopback(self): + copy_network_unit('25-ipip-tunnel-independent-loopback.netdev', '26-netdev-link-local-addressing-yes.network') + start_networkd() + + self.wait_online(['ipiptun99:carrier']) + + @expectedFailureIfModuleIsNotAvailable('xfrm_interface') + def test_xfrm(self): + copy_network_unit('12-dummy.netdev', '25-xfrm.network', + '25-xfrm.netdev', '25-xfrm-independent.netdev', + '26-netdev-link-local-addressing-yes.network') + start_networkd() + + self.wait_online(['dummy98:degraded', 'xfrm98:degraded', 'xfrm99:degraded']) + + output = check_output('ip -d link show dev xfrm98') + print(output) + self.assertIn('xfrm98@dummy98:', output) + self.assertIn('xfrm if_id 0x98 ', output) + + output = check_output('ip -d link show dev xfrm99') + print(output) + self.assertIn('xfrm99@lo:', output) + self.assertIn('xfrm if_id 0x99 ', output) + + @expectedFailureIfModuleIsNotAvailable('fou') + def test_fou(self): + # The following redundant check is necessary for CentOS CI. + # Maybe, error handling in lookup_id() in sd-netlink/generic-netlink.c needs to be updated. + self.assertTrue(is_module_available('fou')) + + copy_network_unit('25-fou-ipproto-ipip.netdev', '25-fou-ipproto-gre.netdev', + '25-fou-ipip.netdev', '25-fou-sit.netdev', + '25-fou-gre.netdev', '25-fou-gretap.netdev') + start_networkd() + + self.wait_online(['ipiptun96:off', 'sittun96:off', 'gretun96:off', 'gretap96:off'], setup_state='unmanaged') + + output = check_output('ip fou show') + print(output) + self.assertRegex(output, 'port 55555 ipproto 4') + self.assertRegex(output, 'port 55556 ipproto 47') + + output = check_output('ip -d link show ipiptun96') + print(output) + self.assertRegex(output, 'encap fou encap-sport auto encap-dport 55555') + output = check_output('ip -d link show sittun96') + print(output) + self.assertRegex(output, 'encap fou encap-sport auto encap-dport 55555') + output = check_output('ip -d link show gretun96') + print(output) + self.assertRegex(output, 'encap fou encap-sport 1001 encap-dport 55556') + output = check_output('ip -d link show gretap96') + print(output) + self.assertRegex(output, 'encap fou encap-sport auto encap-dport 55556') + + def test_vxlan(self): + copy_network_unit('11-dummy.netdev', '25-vxlan-test1.network', + '25-vxlan.netdev', '25-vxlan.network', + '25-vxlan-ipv6.netdev', '25-vxlan-ipv6.network', + '25-vxlan-independent.netdev', '26-netdev-link-local-addressing-yes.network', + '25-veth.netdev', '25-vxlan-veth99.network', '25-ipv6-prefix.network', + '25-vxlan-local-slaac.netdev', '25-vxlan-local-slaac.network') + start_networkd() + + self.wait_online(['test1:degraded', 'veth99:routable', 'veth-peer:degraded', + 'vxlan99:degraded', 'vxlan98:degraded', 'vxlan97:degraded', 'vxlan-slaac:degraded']) + + output = check_output('ip -d -d link show vxlan99') + print(output) + self.assertIn('999', output) + self.assertIn('5555', output) + self.assertIn('l2miss', output) + self.assertIn('l3miss', output) + self.assertIn('gbp', output) + # Since [0] some of the options use slightly different names and some + # options with default values are shown only if the -d(etails) setting + # is repeated + # [0] https://git.kernel.org/pub/scm/network/iproute2/iproute2.git/commit/?id=1215e9d3862387353d8672296cb4c6c16e8cbb72 + self.assertRegex(output, '(udpcsum|udp_csum)') + self.assertRegex(output, '(udp6zerocsumtx|udp_zero_csum6_tx)') + self.assertRegex(output, '(udp6zerocsumrx|udp_zero_csum6_rx)') + self.assertRegex(output, '(remcsumtx|remcsum_tx)') + self.assertRegex(output, '(remcsumrx|remcsum_rx)') + + output = check_output('bridge fdb show dev vxlan99') + print(output) + self.assertIn('00:11:22:33:44:55 dst 10.0.0.5 self permanent', output) + self.assertIn('00:11:22:33:44:66 dst 10.0.0.6 self permanent', output) + self.assertIn('00:11:22:33:44:77 dst 10.0.0.7 via test1 self permanent', output) + + output = check_output(*networkctl_cmd, '-n', '0', 'status', 'vxlan99', env=env) + print(output) + self.assertIn('VNI: 999', output) + self.assertIn('Destination Port: 5555', output) + self.assertIn('Underlying Device: test1', output) + + output = check_output('bridge fdb show dev vxlan97') + print(output) + self.assertIn('00:00:00:00:00:00 dst fe80::23b:d2ff:fe95:967f via test1 self permanent', output) + self.assertIn('00:00:00:00:00:00 dst fe80::27c:16ff:fec0:6c74 via test1 self permanent', output) + self.assertIn('00:00:00:00:00:00 dst fe80::2a2:e4ff:fef9:2269 via test1 self permanent', output) + + output = check_output('ip -d link show vxlan-slaac') + print(output) + self.assertIn('vxlan id 4831584 local 2002:da8:1:0:1034:56ff:fe78:9abc dev veth99', output) + + output = check_output('ip -6 address show veth99') + print(output) + self.assertIn('inet6 2002:da8:1:0:1034:56ff:fe78:9abc/64 scope global dynamic', output) + + @unittest.skipUnless(compare_kernel_version("6"), reason="Causes kernel panic on unpatched kernels: https://bugzilla.kernel.org/show_bug.cgi?id=208315") + def test_macsec(self): + copy_network_unit('25-macsec.netdev', '25-macsec.network', '25-macsec.key', + '26-macsec.network', '12-dummy.netdev') + start_networkd() + + self.wait_online(['dummy98:degraded', 'macsec99:routable']) + + output = check_output('ip -d link show macsec99') + print(output) + self.assertRegex(output, 'macsec99@dummy98') + self.assertRegex(output, 'macsec sci [0-9a-f]*000b') + self.assertRegex(output, 'encrypt on') + + output = check_output('ip macsec show macsec99') + print(output) + self.assertRegex(output, 'encrypt on') + self.assertRegex(output, 'TXSC: [0-9a-f]*000b on SA 1') + self.assertRegex(output, '0: PN [0-9]*, state on, key 01000000000000000000000000000000') + self.assertRegex(output, '1: PN [0-9]*, state on, key 02030000000000000000000000000000') + self.assertRegex(output, 'RXSC: c619528fe6a00100, state on') + self.assertRegex(output, '0: PN [0-9]*, state on, key 02030405000000000000000000000000') + self.assertRegex(output, '1: PN [0-9]*, state on, key 02030405060000000000000000000000') + self.assertRegex(output, '2: PN [0-9]*, state off, key 02030405060700000000000000000000') + self.assertRegex(output, '3: PN [0-9]*, state off, key 02030405060708000000000000000000') + self.assertNotRegex(output, 'key 02030405067080900000000000000000') + self.assertRegex(output, 'RXSC: 8c16456c83a90002, state on') + self.assertRegex(output, '0: PN [0-9]*, state off, key 02030400000000000000000000000000') + + def test_nlmon(self): + copy_network_unit('25-nlmon.netdev', '26-netdev-link-local-addressing-yes.network') + start_networkd() + + self.wait_online(['nlmon99:carrier']) + + @expectedFailureIfModuleIsNotAvailable('ifb') + def test_ifb(self): + copy_network_unit('25-ifb.netdev', '26-netdev-link-local-addressing-yes.network') + start_networkd() + + self.wait_online(['ifb99:degraded']) + +class NetworkdL2TPTests(unittest.TestCase, Utilities): + + def setUp(self): + setup_common() + + def tearDown(self): + tear_down_common() + + @expectedFailureIfModuleIsNotAvailable('l2tp_eth', 'l2tp_netlink') + def test_l2tp_udp(self): + copy_network_unit('11-dummy.netdev', '25-l2tp-dummy.network', + '25-l2tp-udp.netdev', '25-l2tp.network') + start_networkd() + + self.wait_online(['test1:routable', 'l2tp-ses1:degraded', 'l2tp-ses2:degraded']) + + output = check_output('ip l2tp show tunnel tunnel_id 10') + print(output) + self.assertRegex(output, "Tunnel 10, encap UDP") + self.assertRegex(output, "From 192.168.30.100 to 192.168.30.101") + self.assertRegex(output, "Peer tunnel 11") + self.assertRegex(output, "UDP source / dest ports: 3000/4000") + self.assertRegex(output, "UDP checksum: enabled") + + output = check_output('ip l2tp show session tid 10 session_id 15') + print(output) + self.assertRegex(output, "Session 15 in tunnel 10") + self.assertRegex(output, "Peer session 16, tunnel 11") + self.assertRegex(output, "interface name: l2tp-ses1") + + output = check_output('ip l2tp show session tid 10 session_id 17') + print(output) + self.assertRegex(output, "Session 17 in tunnel 10") + self.assertRegex(output, "Peer session 18, tunnel 11") + self.assertRegex(output, "interface name: l2tp-ses2") + + @expectedFailureIfModuleIsNotAvailable('l2tp_eth', 'l2tp_ip', 'l2tp_netlink') + def test_l2tp_ip(self): + copy_network_unit('11-dummy.netdev', '25-l2tp-dummy.network', + '25-l2tp-ip.netdev', '25-l2tp.network') + start_networkd() + + self.wait_online(['test1:routable', 'l2tp-ses3:degraded', 'l2tp-ses4:degraded']) + + output = check_output('ip l2tp show tunnel tunnel_id 10') + print(output) + self.assertRegex(output, "Tunnel 10, encap IP") + self.assertRegex(output, "From 192.168.30.100 to 192.168.30.101") + self.assertRegex(output, "Peer tunnel 12") + + output = check_output('ip l2tp show session tid 10 session_id 25') + print(output) + self.assertRegex(output, "Session 25 in tunnel 10") + self.assertRegex(output, "Peer session 26, tunnel 12") + self.assertRegex(output, "interface name: l2tp-ses3") + + output = check_output('ip l2tp show session tid 10 session_id 27') + print(output) + self.assertRegex(output, "Session 27 in tunnel 10") + self.assertRegex(output, "Peer session 28, tunnel 12") + self.assertRegex(output, "interface name: l2tp-ses4") + +class NetworkdNetworkTests(unittest.TestCase, Utilities): + + def setUp(self): + setup_common() + + def tearDown(self): + tear_down_common() + + def test_address_static(self): + # test for #22515. The address will be removed and replaced with /64 prefix. + check_output('ip link add dummy98 type dummy') + check_output('ip link set dev dummy98 up') + check_output('ip -6 address add 2001:db8:0:f101::15/128 dev dummy98') + self.wait_address('dummy98', '2001:db8:0:f101::15/128', ipv='-6') + check_output('ip -4 address add 10.3.2.3/16 brd 10.3.255.250 scope global label dummy98:hoge dev dummy98') + self.wait_address('dummy98', '10.3.2.3/16 brd 10.3.255.250', ipv='-4') + + copy_network_unit('25-address-static.network', '12-dummy.netdev') + start_networkd() + + self.wait_online(['dummy98:routable']) + + output = check_output('ip -4 address show dev dummy98') + print(output) + self.assertIn('inet 10.1.2.3/16 brd 10.1.255.255 scope global dummy98', output) + self.assertIn('inet 10.1.2.4/16 brd 10.1.255.255 scope global secondary dummy98', output) + self.assertIn('inet 10.2.2.4/16 brd 10.2.255.255 scope global dummy98', output) + self.assertIn('inet 10.7.8.9/16 brd 10.7.255.255 scope link deprecated dummy98', output) + self.assertIn('inet 10.8.8.1/16 scope global dummy98', output) + self.assertIn('inet 10.8.8.2/16 brd 10.8.8.128 scope global secondary dummy98', output) + self.assertRegex(output, 'inet 10.9.0.1/16 (metric 128 |)brd 10.9.255.255 scope global dummy98') + + # test for ENOBUFS issue #17012 + for i in range(1, 254): + self.assertIn(f'inet 10.3.3.{i}/16 brd 10.3.255.255', output) + + # invalid sections + self.assertNotIn('10.10.0.1/16', output) + self.assertNotIn('10.10.0.2/16', output) + + output = check_output('ip -4 address show dev dummy98 label 32') + self.assertIn('inet 10.3.2.3/16 brd 10.3.255.255 scope global 32', output) + + output = check_output('ip -4 address show dev dummy98 label 33') + self.assertIn('inet 10.4.2.3 peer 10.4.2.4/16 scope global 33', output) + + output = check_output('ip -4 address show dev dummy98 label 34') + self.assertRegex(output, r'inet 192.168.[0-9]*.1/24 brd 192.168.[0-9]*.255 scope global 34') + + output = check_output('ip -4 address show dev dummy98 label 35') + self.assertRegex(output, r'inet 172.[0-9]*.0.1/16 brd 172.[0-9]*.255.255 scope global 35') + + output = check_output('ip -4 route show dev dummy98') + print(output) + self.assertIn('10.9.0.0/16 proto kernel scope link src 10.9.0.1 metric 128', output) + + output = check_output('ip -6 address show dev dummy98') + print(output) + self.assertIn('inet6 2001:db8:0:f101::15/64 scope global', output) + self.assertIn('inet6 2001:db8:0:f101::16/64 scope global', output) + self.assertIn('inet6 2001:db8:0:f102::15/64 scope global', output) + self.assertIn('inet6 2001:db8:0:f102::16/64 scope global', output) + self.assertIn('inet6 2001:db8:0:f103::20 peer 2001:db8:0:f103::10/128 scope global', output) + self.assertIn('inet6 2001:db8:1:f101::1/64 scope global deprecated', output) + self.assertRegex(output, r'inet6 fd[0-9a-f:]*1/64 scope global') + + self.check_netlabel('dummy98', r'10\.4\.3\.0/24') + + # Tests for #20891. + # 1. set preferred lifetime forever to drop the deprecated flag for testing #20891. + check_output('ip address change 10.7.8.9/16 dev dummy98 preferred_lft forever') + check_output('ip address change 2001:db8:1:f101::1/64 dev dummy98 preferred_lft forever') + output = check_output('ip -4 address show dev dummy98') + print(output) + self.assertNotIn('deprecated', output) + output = check_output('ip -6 address show dev dummy98') + print(output) + self.assertNotIn('deprecated', output) + + # 2. reconfigure the interface. + networkctl_reconfigure('dummy98') + self.wait_online(['dummy98:routable']) + + # 3. check the deprecated flag is set for the address configured with PreferredLifetime=0 + output = check_output('ip -4 address show dev dummy98') + print(output) + self.assertIn('inet 10.7.8.9/16 brd 10.7.255.255 scope link deprecated dummy98', output) + output = check_output('ip -6 address show dev dummy98') + print(output) + self.assertIn('inet6 2001:db8:1:f101::1/64 scope global deprecated', output) + + # test for ENOBUFS issue #17012 + output = check_output('ip -4 address show dev dummy98') + for i in range(1, 254): + self.assertIn(f'inet 10.3.3.{i}/16 brd 10.3.255.255', output) + + # TODO: check json string + check_output(*networkctl_cmd, '--json=short', 'status', env=env) + + def test_address_ipv4acd(self): + check_output('ip netns add ns99') + check_output('ip link add veth99 type veth peer veth-peer') + check_output('ip link set veth-peer netns ns99') + check_output('ip link set veth99 up') + check_output('ip netns exec ns99 ip link set veth-peer up') + check_output('ip netns exec ns99 ip address add 192.168.100.10/24 dev veth-peer') + + copy_network_unit('25-address-ipv4acd-veth99.network', copy_dropins=False) + start_networkd() + self.wait_online(['veth99:routable']) + + output = check_output('ip -4 address show dev veth99') + print(output) + self.assertNotIn('192.168.100.10/24', output) + self.assertIn('192.168.100.11/24', output) + + copy_network_unit('25-address-ipv4acd-veth99.network.d/conflict-address.conf') + networkctl_reload() + self.wait_operstate('veth99', operstate='routable', setup_state='configuring', setup_timeout=10) + + output = check_output('ip -4 address show dev veth99') + print(output) + self.assertNotIn('192.168.100.10/24', output) + self.assertIn('192.168.100.11/24', output) + + def test_address_peer_ipv4(self): + # test for issue #17304 + copy_network_unit('25-address-peer-ipv4.network', '12-dummy.netdev') + + for trial in range(2): + if trial == 0: + start_networkd() + else: + restart_networkd() + + self.wait_online(['dummy98:routable']) + + output = check_output('ip -4 address show dev dummy98') + self.assertIn('inet 100.64.0.1 peer 100.64.0.2/32 scope global', output) + + @expectedFailureIfModuleIsNotAvailable('vrf') + def test_prefix_route(self): + copy_network_unit('25-prefix-route-with-vrf.network', '12-dummy.netdev', + '25-prefix-route-without-vrf.network', '11-dummy.netdev', + '25-vrf.netdev', '25-vrf.network') + for trial in range(2): + if trial == 0: + start_networkd() + else: + restart_networkd() + + self.wait_online(['dummy98:routable', 'test1:routable', 'vrf99:carrier']) + + output = check_output('ip route show table 42 dev dummy98') + print('### ip route show table 42 dev dummy98') + print(output) + self.assertRegex(output, 'local 10.20.22.1 proto kernel scope host src 10.20.22.1') + self.assertRegex(output, '10.20.33.0/24 proto kernel scope link src 10.20.33.1') + self.assertRegex(output, 'local 10.20.33.1 proto kernel scope host src 10.20.33.1') + self.assertRegex(output, 'broadcast 10.20.33.255 proto kernel scope link src 10.20.33.1') + self.assertRegex(output, 'local 10.20.44.1 proto kernel scope host src 10.20.44.1') + self.assertRegex(output, 'local 10.20.55.1 proto kernel scope host src 10.20.55.1') + self.assertRegex(output, 'broadcast 10.20.55.255 proto kernel scope link src 10.20.55.1') + output = check_output('ip -6 route show table 42 dev dummy98') + print('### ip -6 route show table 42 dev dummy98') + print(output) + if trial == 0: + # Kernel's bug? + self.assertRegex(output, 'local fdde:11:22::1 proto kernel metric 0 pref medium') + #self.assertRegex(output, 'fdde:11:22::1 proto kernel metric 256 pref medium') + self.assertRegex(output, 'local fdde:11:33::1 proto kernel metric 0 pref medium') + self.assertRegex(output, 'fdde:11:33::/64 proto kernel metric 256 pref medium') + self.assertRegex(output, 'local fdde:11:44::1 proto kernel metric 0 pref medium') + self.assertRegex(output, 'local fdde:11:55::1 proto kernel metric 0 pref medium') + self.assertRegex(output, 'fe80::/64 proto kernel metric 256 pref medium') + self.assertRegex(output, 'ff00::/8 (proto kernel )?metric 256 (linkdown )?pref medium') + + print() + + output = check_output('ip route show dev test1') + print('### ip route show dev test1') + print(output) + self.assertRegex(output, '10.21.33.0/24 proto kernel scope link src 10.21.33.1') + output = check_output('ip route show table local dev test1') + print('### ip route show table local dev test1') + print(output) + self.assertRegex(output, 'local 10.21.22.1 proto kernel scope host src 10.21.22.1') + self.assertRegex(output, 'local 10.21.33.1 proto kernel scope host src 10.21.33.1') + self.assertRegex(output, 'broadcast 10.21.33.255 proto kernel scope link src 10.21.33.1') + self.assertRegex(output, 'local 10.21.44.1 proto kernel scope host src 10.21.44.1') + self.assertRegex(output, 'local 10.21.55.1 proto kernel scope host src 10.21.55.1') + self.assertRegex(output, 'broadcast 10.21.55.255 proto kernel scope link src 10.21.55.1') + output = check_output('ip -6 route show dev test1') + print('### ip -6 route show dev test1') + print(output) + self.assertRegex(output, 'fdde:12:22::1 proto kernel metric 256 pref medium') + self.assertRegex(output, 'fdde:12:33::/64 proto kernel metric 256 pref medium') + self.assertRegex(output, 'fe80::/64 proto kernel metric 256 pref medium') + output = check_output('ip -6 route show table local dev test1') + print('### ip -6 route show table local dev test1') + print(output) + self.assertRegex(output, 'local fdde:12:22::1 proto kernel metric 0 pref medium') + self.assertRegex(output, 'local fdde:12:33::1 proto kernel metric 0 pref medium') + self.assertRegex(output, 'local fdde:12:44::1 proto kernel metric 0 pref medium') + self.assertRegex(output, 'local fdde:12:55::1 proto kernel metric 0 pref medium') + self.assertRegex(output, 'ff00::/8 (proto kernel )?metric 256 (linkdown )?pref medium') + + def test_configure_without_carrier(self): + copy_network_unit('11-dummy.netdev') + start_networkd() + self.wait_operstate('test1', 'off', '') + check_output('ip link set dev test1 up carrier off') + + copy_network_unit('25-test1.network.d/configure-without-carrier.conf', copy_dropins=False) + restart_networkd() + self.wait_online(['test1:no-carrier']) + + carrier_map = {'on': '1', 'off': '0'} + routable_map = {'on': 'routable', 'off': 'no-carrier'} + for carrier in ['off', 'on', 'off']: + with self.subTest(carrier=carrier): + if carrier_map[carrier] != read_link_attr('test1', 'carrier'): + check_output(f'ip link set dev test1 carrier {carrier}') + self.wait_online([f'test1:{routable_map[carrier]}:{routable_map[carrier]}']) + + output = check_output(*networkctl_cmd, '-n', '0', 'status', 'test1', env=env) + print(output) + self.assertRegex(output, '192.168.0.15') + self.assertRegex(output, '192.168.0.1') + self.assertRegex(output, routable_map[carrier]) + + def test_configure_without_carrier_yes_ignore_carrier_loss_no(self): + copy_network_unit('11-dummy.netdev') + start_networkd() + self.wait_operstate('test1', 'off', '') + check_output('ip link set dev test1 up carrier off') + + copy_network_unit('25-test1.network') + restart_networkd() + self.wait_online(['test1:no-carrier']) + + carrier_map = {'on': '1', 'off': '0'} + routable_map = {'on': 'routable', 'off': 'no-carrier'} + for (carrier, have_config) in [('off', True), ('on', True), ('off', False)]: + with self.subTest(carrier=carrier, have_config=have_config): + if carrier_map[carrier] != read_link_attr('test1', 'carrier'): + check_output(f'ip link set dev test1 carrier {carrier}') + self.wait_online([f'test1:{routable_map[carrier]}:{routable_map[carrier]}']) + + output = check_output(*networkctl_cmd, '-n', '0', 'status', 'test1', env=env) + print(output) + if have_config: + self.assertRegex(output, '192.168.0.15') + self.assertRegex(output, '192.168.0.1') + else: + self.assertNotRegex(output, '192.168.0.15') + self.assertNotRegex(output, '192.168.0.1') + self.assertRegex(output, routable_map[carrier]) + + def test_routing_policy_rule(self): + copy_network_unit('25-routing-policy-rule-test1.network', '11-dummy.netdev') + start_networkd() + self.wait_online(['test1:degraded']) + + output = check_output('ip rule list iif test1 priority 111') + print(output) + self.assertRegex(output, '111:') + self.assertRegex(output, 'from 192.168.100.18') + self.assertRegex(output, r'tos (0x08|throughput)\s') + self.assertRegex(output, 'iif test1') + self.assertRegex(output, 'oif test1') + self.assertRegex(output, 'lookup 7') + + output = check_output('ip rule list iif test1 priority 101') + print(output) + self.assertRegex(output, '101:') + self.assertRegex(output, 'from all') + self.assertRegex(output, 'iif test1') + self.assertRegex(output, 'lookup 9') + + output = check_output('ip -6 rule list iif test1 priority 100') + print(output) + self.assertRegex(output, '100:') + self.assertRegex(output, 'from all') + self.assertRegex(output, 'iif test1') + self.assertRegex(output, 'lookup 8') + + output = check_output('ip rule list iif test1 priority 102') + print(output) + self.assertRegex(output, '102:') + self.assertRegex(output, 'from 0.0.0.0/8') + self.assertRegex(output, 'iif test1') + self.assertRegex(output, 'lookup 10') + + # TODO: check json string + check_output(*networkctl_cmd, '--json=short', 'status', env=env) + + def test_routing_policy_rule_issue_11280(self): + copy_network_unit('25-routing-policy-rule-test1.network', '11-dummy.netdev', + '25-routing-policy-rule-dummy98.network', '12-dummy.netdev') + + for trial in range(3): + restart_networkd(show_logs=(trial > 0)) + self.wait_online(['test1:degraded', 'dummy98:degraded']) + + output = check_output('ip rule list table 7') + print(output) + self.assertRegex(output, '111: from 192.168.100.18 tos (0x08|throughput) iif test1 oif test1 lookup 7') + + output = check_output('ip rule list table 8') + print(output) + self.assertRegex(output, '112: from 192.168.101.18 tos (0x08|throughput) iif dummy98 oif dummy98 lookup 8') + + def test_routing_policy_rule_reconfigure(self): + copy_network_unit('25-routing-policy-rule-reconfigure2.network', '11-dummy.netdev') + start_networkd() + self.wait_online(['test1:degraded']) + + output = check_output('ip rule list table 1011') + print(output) + self.assertIn('10111: from all fwmark 0x3f3 lookup 1011', output) + self.assertIn('10112: from all oif test1 lookup 1011', output) + self.assertIn('10113: from all iif test1 lookup 1011', output) + self.assertIn('10114: from 192.168.8.254 lookup 1011', output) + + output = check_output('ip -6 rule list table 1011') + print(output) + self.assertIn('10112: from all oif test1 lookup 1011', output) + + copy_network_unit('25-routing-policy-rule-reconfigure1.network', '11-dummy.netdev') + networkctl_reload() + self.wait_online(['test1:degraded']) + + output = check_output('ip rule list table 1011') + print(output) + self.assertIn('10111: from all fwmark 0x3f3 lookup 1011', output) + self.assertIn('10112: from all oif test1 lookup 1011', output) + self.assertIn('10113: from all iif test1 lookup 1011', output) + self.assertIn('10114: from 192.168.8.254 lookup 1011', output) + + output = check_output('ip -6 rule list table 1011') + print(output) + self.assertNotIn('10112: from all oif test1 lookup 1011', output) + self.assertIn('10113: from all iif test1 lookup 1011', output) + + call('ip rule delete priority 10111') + call('ip rule delete priority 10112') + call('ip rule delete priority 10113') + call('ip rule delete priority 10114') + call('ip -6 rule delete priority 10113') + + output = check_output('ip rule list table 1011') + print(output) + self.assertEqual(output, '') + + output = check_output('ip -6 rule list table 1011') + print(output) + self.assertEqual(output, '') + + networkctl_reconfigure('test1') + self.wait_online(['test1:degraded']) + + output = check_output('ip rule list table 1011') + print(output) + self.assertIn('10111: from all fwmark 0x3f3 lookup 1011', output) + self.assertIn('10112: from all oif test1 lookup 1011', output) + self.assertIn('10113: from all iif test1 lookup 1011', output) + self.assertIn('10114: from 192.168.8.254 lookup 1011', output) + + output = check_output('ip -6 rule list table 1011') + print(output) + self.assertIn('10113: from all iif test1 lookup 1011', output) + + @expectedFailureIfRoutingPolicyPortRangeIsNotAvailable() + def test_routing_policy_rule_port_range(self): + copy_network_unit('25-fibrule-port-range.network', '11-dummy.netdev') + start_networkd() + self.wait_online(['test1:degraded']) + + output = check_output('ip rule') + print(output) + self.assertRegex(output, '111') + self.assertRegex(output, 'from 192.168.100.18') + self.assertRegex(output, '1123-1150') + self.assertRegex(output, '3224-3290') + self.assertRegex(output, 'tcp') + self.assertRegex(output, 'lookup 7') + + @expectedFailureIfRoutingPolicyIPProtoIsNotAvailable() + def test_routing_policy_rule_invert(self): + copy_network_unit('25-fibrule-invert.network', '11-dummy.netdev') + start_networkd() + self.wait_online(['test1:degraded']) + + output = check_output('ip rule') + print(output) + self.assertRegex(output, '111') + self.assertRegex(output, 'not.*?from.*?192.168.100.18') + self.assertRegex(output, 'tcp') + self.assertRegex(output, 'lookup 7') + + @expectedFailureIfRoutingPolicyUIDRangeIsNotAvailable() + def test_routing_policy_rule_uidrange(self): + copy_network_unit('25-fibrule-uidrange.network', '11-dummy.netdev') + start_networkd() + self.wait_online(['test1:degraded']) + + output = check_output('ip rule') + print(output) + self.assertRegex(output, '111') + self.assertRegex(output, 'from 192.168.100.18') + self.assertRegex(output, 'lookup 7') + self.assertRegex(output, 'uidrange 100-200') + + def _test_route_static(self, manage_foreign_routes): + if not manage_foreign_routes: + copy_networkd_conf_dropin('networkd-manage-foreign-routes-no.conf') + + copy_network_unit('25-route-static.network', '12-dummy.netdev') + start_networkd() + self.wait_online(['dummy98:routable']) + + output = check_output(*networkctl_cmd, '-n', '0', 'status', 'dummy98', env=env) + print(output) + + print('### ip -6 route show dev dummy98') + output = check_output('ip -6 route show dev dummy98') + print(output) + self.assertIn('2001:1234:5:8fff:ff:ff:ff:ff proto static', output) + self.assertIn('2001:1234:5:8f63::1 proto kernel', output) + self.assertIn('2001:1234:5:afff:ff:ff:ff:ff via fe80:0:222:4dff:ff:ff:ff:ff proto static', output) + + print('### ip -6 route show default') + output = check_output('ip -6 route show default') + print(output) + self.assertIn('default', output) + self.assertIn('via 2001:1234:5:8fff:ff:ff:ff:ff', output) + + print('### ip -4 route show dev dummy98') + output = check_output('ip -4 route show dev dummy98') + print(output) + self.assertIn('149.10.124.48/28 proto kernel scope link src 149.10.124.58', output) + self.assertIn('149.10.124.64 proto static scope link', output) + self.assertIn('169.254.0.0/16 proto static scope link metric 2048', output) + self.assertIn('192.168.1.1 proto static scope link initcwnd 20', output) + self.assertIn('192.168.1.2 proto static scope link initrwnd 30', output) + self.assertIn('192.168.1.3 proto static scope link advmss 30', output) + self.assertIn('multicast 149.10.123.4 proto static', output) + + print('### ip -4 route show dev dummy98 default') + output = check_output('ip -4 route show dev dummy98 default') + print(output) + self.assertIn('default via 149.10.125.65 proto static onlink', output) + self.assertIn('default via 149.10.124.64 proto static', output) + self.assertIn('default proto static', output) + self.assertIn('default via 1.1.8.104 proto static', output) + + print('### ip -4 route show table local dev dummy98') + output = check_output('ip -4 route show table local dev dummy98') + print(output) + self.assertIn('local 149.10.123.1 proto static scope host', output) + self.assertIn('anycast 149.10.123.2 proto static scope link', output) + self.assertIn('broadcast 149.10.123.3 proto static scope link', output) + + print('### ip -4 route show type blackhole') + output = check_output('ip -4 route show type blackhole') + print(output) + self.assertIn('blackhole 202.54.1.2 proto static', output) + + print('### ip -4 route show type unreachable') + output = check_output('ip -4 route show type unreachable') + print(output) + self.assertIn('unreachable 202.54.1.3 proto static', output) + + print('### ip -4 route show type prohibit') + output = check_output('ip -4 route show type prohibit') + print(output) + self.assertIn('prohibit 202.54.1.4 proto static', output) + + print('### ip -6 route show type blackhole') + output = check_output('ip -6 route show type blackhole') + print(output) + self.assertIn('blackhole 2001:1234:5678::2 dev lo proto static', output) + + print('### ip -6 route show type unreachable') + output = check_output('ip -6 route show type unreachable') + print(output) + self.assertIn('unreachable 2001:1234:5678::3 dev lo proto static', output) + + print('### ip -6 route show type prohibit') + output = check_output('ip -6 route show type prohibit') + print(output) + self.assertIn('prohibit 2001:1234:5678::4 dev lo proto static', output) + + print('### ip route show 192.168.10.1') + output = check_output('ip route show 192.168.10.1') + print(output) + self.assertIn('192.168.10.1 proto static', output) + self.assertIn('nexthop via 149.10.124.59 dev dummy98 weight 10', output) + self.assertIn('nexthop via 149.10.124.60 dev dummy98 weight 5', output) + + print('### ip route show 192.168.10.2') + output = check_output('ip route show 192.168.10.2') + print(output) + # old ip command does not show IPv6 gateways... + self.assertIn('192.168.10.2 proto static', output) + self.assertIn('nexthop', output) + self.assertIn('dev dummy98 weight 10', output) + self.assertIn('dev dummy98 weight 5', output) + + print('### ip -6 route show 2001:1234:5:7fff:ff:ff:ff:ff') + output = check_output('ip -6 route show 2001:1234:5:7fff:ff:ff:ff:ff') + print(output) + # old ip command does not show 'nexthop' keyword and weight... + self.assertIn('2001:1234:5:7fff:ff:ff:ff:ff', output) + self.assertIn('via 2001:1234:5:8fff:ff:ff:ff:ff dev dummy98', output) + self.assertIn('via 2001:1234:5:9fff:ff:ff:ff:ff dev dummy98', output) + + # TODO: check json string + check_output(*networkctl_cmd, '--json=short', 'status', env=env) + + copy_network_unit('25-address-static.network') + networkctl_reload() + self.wait_online(['dummy98:routable']) + + # check all routes managed by Manager are removed + print('### ip -4 route show type blackhole') + output = check_output('ip -4 route show type blackhole') + print(output) + self.assertEqual(output, '') + + print('### ip -4 route show type unreachable') + output = check_output('ip -4 route show type unreachable') + print(output) + self.assertEqual(output, '') + + print('### ip -4 route show type prohibit') + output = check_output('ip -4 route show type prohibit') + print(output) + self.assertEqual(output, '') + + print('### ip -6 route show type blackhole') + output = check_output('ip -6 route show type blackhole') + print(output) + self.assertEqual(output, '') + + print('### ip -6 route show type unreachable') + output = check_output('ip -6 route show type unreachable') + print(output) + self.assertEqual(output, '') + + print('### ip -6 route show type prohibit') + output = check_output('ip -6 route show type prohibit') + print(output) + self.assertEqual(output, '') + + remove_network_unit('25-address-static.network') + networkctl_reload() + self.wait_online(['dummy98:routable']) + + # check all routes managed by Manager are reconfigured + print('### ip -4 route show type blackhole') + output = check_output('ip -4 route show type blackhole') + print(output) + self.assertIn('blackhole 202.54.1.2 proto static', output) + + print('### ip -4 route show type unreachable') + output = check_output('ip -4 route show type unreachable') + print(output) + self.assertIn('unreachable 202.54.1.3 proto static', output) + + print('### ip -4 route show type prohibit') + output = check_output('ip -4 route show type prohibit') + print(output) + self.assertIn('prohibit 202.54.1.4 proto static', output) + + print('### ip -6 route show type blackhole') + output = check_output('ip -6 route show type blackhole') + print(output) + self.assertIn('blackhole 2001:1234:5678::2 dev lo proto static', output) + + print('### ip -6 route show type unreachable') + output = check_output('ip -6 route show type unreachable') + print(output) + self.assertIn('unreachable 2001:1234:5678::3 dev lo proto static', output) + + print('### ip -6 route show type prohibit') + output = check_output('ip -6 route show type prohibit') + print(output) + self.assertIn('prohibit 2001:1234:5678::4 dev lo proto static', output) + + remove_link('dummy98') + time.sleep(2) + + # check all routes managed by Manager are removed + print('### ip -4 route show type blackhole') + output = check_output('ip -4 route show type blackhole') + print(output) + self.assertEqual(output, '') + + print('### ip -4 route show type unreachable') + output = check_output('ip -4 route show type unreachable') + print(output) + self.assertEqual(output, '') + + print('### ip -4 route show type prohibit') + output = check_output('ip -4 route show type prohibit') + print(output) + self.assertEqual(output, '') + + print('### ip -6 route show type blackhole') + output = check_output('ip -6 route show type blackhole') + print(output) + self.assertEqual(output, '') + + print('### ip -6 route show type unreachable') + output = check_output('ip -6 route show type unreachable') + print(output) + self.assertEqual(output, '') + + print('### ip -6 route show type prohibit') + output = check_output('ip -6 route show type prohibit') + print(output) + self.assertEqual(output, '') + + self.tearDown() + + def test_route_static(self): + first = True + for manage_foreign_routes in [True, False]: + if first: + first = False + else: + self.tearDown() + + print(f'### test_route_static(manage_foreign_routes={manage_foreign_routes})') + with self.subTest(manage_foreign_routes=manage_foreign_routes): + self._test_route_static(manage_foreign_routes) + + @expectedFailureIfRTA_VIAIsNotSupported() + def test_route_via_ipv6(self): + copy_network_unit('25-route-via-ipv6.network', '12-dummy.netdev') + start_networkd() + self.wait_online(['dummy98:routable']) + + output = check_output(*networkctl_cmd, '-n', '0', 'status', 'dummy98', env=env) + print(output) + + print('### ip -6 route show dev dummy98') + output = check_output('ip -6 route show dev dummy98') + print(output) + self.assertRegex(output, '2001:1234:5:8fff:ff:ff:ff:ff proto static') + self.assertRegex(output, '2001:1234:5:8f63::1 proto kernel') + + print('### ip -4 route show dev dummy98') + output = check_output('ip -4 route show dev dummy98') + print(output) + self.assertRegex(output, '149.10.124.48/28 proto kernel scope link src 149.10.124.58') + self.assertRegex(output, '149.10.124.66 via inet6 2001:1234:5:8fff:ff:ff:ff:ff proto static') + + @expectedFailureIfModuleIsNotAvailable('tcp_dctcp') + def test_route_congctl(self): + copy_network_unit('25-route-congctl.network', '12-dummy.netdev') + start_networkd() + self.wait_online(['dummy98:routable']) + + print('### ip -6 route show dev dummy98 2001:1234:5:8fff:ff:ff:ff:ff') + output = check_output('ip -6 route show dev dummy98 2001:1234:5:8fff:ff:ff:ff:ff') + print(output) + self.assertIn('2001:1234:5:8fff:ff:ff:ff:ff proto static', output) + self.assertIn('congctl dctcp', output) + + print('### ip -4 route show dev dummy98 149.10.124.66') + output = check_output('ip -4 route show dev dummy98 149.10.124.66') + print(output) + self.assertIn('149.10.124.66 proto static', output) + self.assertIn('congctl dctcp', output) + + @expectedFailureIfModuleIsNotAvailable('vrf') + def test_route_vrf(self): + copy_network_unit('25-route-vrf.network', '12-dummy.netdev', + '25-vrf.netdev', '25-vrf.network') + start_networkd() + self.wait_online(['dummy98:routable', 'vrf99:carrier']) + + output = check_output('ip route show vrf vrf99') + print(output) + self.assertRegex(output, 'default via 192.168.100.1') + + output = check_output('ip route show') + print(output) + self.assertNotRegex(output, 'default via 192.168.100.1') + + def test_gateway_reconfigure(self): + copy_network_unit('25-gateway-static.network', '12-dummy.netdev') + start_networkd() + self.wait_online(['dummy98:routable']) + print('### ip -4 route show dev dummy98 default') + output = check_output('ip -4 route show dev dummy98 default') + print(output) + self.assertIn('default via 149.10.124.59 proto static', output) + self.assertNotIn('149.10.124.60', output) + + remove_network_unit('25-gateway-static.network') + copy_network_unit('25-gateway-next-static.network') + networkctl_reload() + self.wait_online(['dummy98:routable']) + print('### ip -4 route show dev dummy98 default') + output = check_output('ip -4 route show dev dummy98 default') + print(output) + self.assertNotIn('149.10.124.59', output) + self.assertIn('default via 149.10.124.60 proto static', output) + + def test_ip_route_ipv6_src_route(self): + # a dummy device does not make the addresses go through tentative state, so we + # reuse a bond from an earlier test, which does make the addresses go through + # tentative state, and do our test on that + copy_network_unit('23-active-slave.network', '25-route-ipv6-src.network', '25-bond-active-backup-slave.netdev', '12-dummy.netdev') + start_networkd() + self.wait_online(['dummy98:enslaved', 'bond199:routable']) + + output = check_output('ip -6 route list dev bond199') + print(output) + self.assertIn('abcd::/16 via 2001:1234:56:8f63::1:1 proto static src 2001:1234:56:8f63::2', output) + + def test_route_preferred_source_with_existing_address(self): + # See issue #28009. + copy_network_unit('25-route-preferred-source.network', '12-dummy.netdev') + start_networkd() + + for i in range(3): + if i != 0: + networkctl_reconfigure('dummy98') + + self.wait_online(['dummy98:routable']) + + output = check_output('ip -6 route list dev dummy98') + print(output) + self.assertIn('abcd::/16 via 2001:1234:56:8f63::1:1 proto static src 2001:1234:56:8f63::1', output) + + def test_ip_link_mac_address(self): + copy_network_unit('25-address-link-section.network', '12-dummy.netdev') + start_networkd() + self.wait_online(['dummy98:degraded']) + + output = check_output('ip link show dummy98') + print(output) + self.assertRegex(output, '00:01:02:aa:bb:cc') + + def test_ip_link_unmanaged(self): + copy_network_unit('25-link-section-unmanaged.network', '12-dummy.netdev') + start_networkd() + + self.wait_operstate('dummy98', 'off', setup_state='unmanaged') + + def test_ipv6_address_label(self): + copy_network_unit('25-ipv6-address-label-section.network', '12-dummy.netdev') + start_networkd() + self.wait_online(['dummy98:degraded']) + + output = check_output('ip addrlabel list') + print(output) + self.assertRegex(output, '2004:da8:1::/64') + + def test_ipv6_proxy_ndp(self): + copy_network_unit('25-ipv6-proxy-ndp.network', '12-dummy.netdev') + start_networkd() + + self.wait_online(['dummy98:routable']) + + output = check_output('ip neighbor show proxy dev dummy98') + print(output) + for i in range(1, 5): + self.assertRegex(output, f'2607:5300:203:5215:{i}::1 *proxy') + + def test_neighbor_section(self): + copy_network_unit('25-neighbor-section.network', '12-dummy.netdev') + start_networkd() + self.wait_online(['dummy98:degraded'], timeout='40s') + + print('### ip neigh list dev dummy98') + output = check_output('ip neigh list dev dummy98') + print(output) + self.assertRegex(output, '192.168.10.1.*00:00:5e:00:02:65.*PERMANENT') + self.assertRegex(output, '2004:da8:1::1.*00:00:5e:00:02:66.*PERMANENT') + + # TODO: check json string + check_output(*networkctl_cmd, '--json=short', 'status', env=env) + + def test_neighbor_reconfigure(self): + copy_network_unit('25-neighbor-section.network', '12-dummy.netdev') + start_networkd() + self.wait_online(['dummy98:degraded'], timeout='40s') + + print('### ip neigh list dev dummy98') + output = check_output('ip neigh list dev dummy98') + print(output) + self.assertRegex(output, '192.168.10.1.*00:00:5e:00:02:65.*PERMANENT') + self.assertRegex(output, '2004:da8:1::1.*00:00:5e:00:02:66.*PERMANENT') + + remove_network_unit('25-neighbor-section.network') + copy_network_unit('25-neighbor-next.network') + networkctl_reload() + self.wait_online(['dummy98:degraded'], timeout='40s') + print('### ip neigh list dev dummy98') + output = check_output('ip neigh list dev dummy98') + print(output) + self.assertNotRegex(output, '192.168.10.1.*00:00:5e:00:02:65.*PERMANENT') + self.assertRegex(output, '192.168.10.1.*00:00:5e:00:02:66.*PERMANENT') + self.assertNotRegex(output, '2004:da8:1::1.*PERMANENT') + + def test_neighbor_gre(self): + copy_network_unit('25-neighbor-ip.network', '25-neighbor-ipv6.network', '25-neighbor-ip-dummy.network', + '12-dummy.netdev', '25-gre-tunnel-remote-any.netdev', '25-ip6gre-tunnel-remote-any.netdev') + start_networkd() + self.wait_online(['dummy98:degraded', 'gretun97:routable', 'ip6gretun97:routable'], timeout='40s') + + output = check_output('ip neigh list dev gretun97') + print(output) + self.assertRegex(output, '10.0.0.22 lladdr 10.65.223.239 PERMANENT') + + output = check_output('ip neigh list dev ip6gretun97') + print(output) + self.assertRegex(output, '2001:db8:0:f102::17 lladdr 2a:?00:ff:?de:45:?67:ed:?de:[0:]*:49:?88 PERMANENT') + + # TODO: check json string + check_output(*networkctl_cmd, '--json=short', 'status', env=env) + + def test_link_local_addressing(self): + copy_network_unit('25-link-local-addressing-yes.network', '11-dummy.netdev', + '25-link-local-addressing-no.network', '12-dummy.netdev') + start_networkd() + self.wait_online(['test1:degraded', 'dummy98:carrier']) + + output = check_output('ip address show dev test1') + print(output) + self.assertRegex(output, 'inet .* scope link') + self.assertRegex(output, 'inet6 .* scope link') + + output = check_output('ip address show dev dummy98') + print(output) + self.assertNotRegex(output, 'inet6* .* scope link') + + # Documentation/networking/ip-sysctl.txt + # + # addr_gen_mode - INTEGER + # Defines how link-local and autoconf addresses are generated. + # + # 0: generate address based on EUI64 (default) + # 1: do no generate a link-local address, use EUI64 for addresses generated + # from autoconf + # 2: generate stable privacy addresses, using the secret from + # stable_secret (RFC7217) + # 3: generate stable privacy addresses, using a random secret if unset + + self.check_ipv6_sysctl_attr('test1', 'stable_secret', '0123:4567:89ab:cdef:0123:4567:89ab:cdef') + self.check_ipv6_sysctl_attr('test1', 'addr_gen_mode', '2') + self.check_ipv6_sysctl_attr('dummy98', 'addr_gen_mode', '1') + + def test_link_local_addressing_ipv6ll(self): + copy_network_unit('26-link-local-addressing-ipv6.network', '12-dummy.netdev') + start_networkd() + self.wait_online(['dummy98:degraded']) + + # An IPv6LL address exists by default. + output = check_output('ip address show dev dummy98') + print(output) + self.assertRegex(output, 'inet6 .* scope link') + + copy_network_unit('25-link-local-addressing-no.network') + networkctl_reload() + self.wait_online(['dummy98:carrier']) + + # Check if the IPv6LL address is removed. + output = check_output('ip address show dev dummy98') + print(output) + self.assertNotRegex(output, 'inet6 .* scope link') + + remove_network_unit('25-link-local-addressing-no.network') + networkctl_reload() + self.wait_online(['dummy98:degraded']) + + # Check if a new IPv6LL address is assigned. + output = check_output('ip address show dev dummy98') + print(output) + self.assertRegex(output, 'inet6 .* scope link') + + def test_sysctl(self): + copy_network_unit('25-sysctl.network', '12-dummy.netdev') + start_networkd() + self.wait_online(['dummy98:degraded']) + + self.check_ipv6_sysctl_attr('dummy98', 'forwarding', '1') + self.check_ipv6_sysctl_attr('dummy98', 'use_tempaddr', '2') + self.check_ipv6_sysctl_attr('dummy98', 'dad_transmits', '3') + self.check_ipv6_sysctl_attr('dummy98', 'hop_limit', '5') + self.check_ipv6_sysctl_attr('dummy98', 'proxy_ndp', '1') + self.check_ipv4_sysctl_attr('dummy98', 'forwarding', '1') + self.check_ipv4_sysctl_attr('dummy98', 'proxy_arp', '1') + self.check_ipv4_sysctl_attr('dummy98', 'accept_local', '1') + + def test_sysctl_disable_ipv6(self): + copy_network_unit('25-sysctl-disable-ipv6.network', '12-dummy.netdev') + + print('## Disable ipv6') + check_output('sysctl net.ipv6.conf.all.disable_ipv6=1') + check_output('sysctl net.ipv6.conf.default.disable_ipv6=1') + + start_networkd() + self.wait_online(['dummy98:routable']) + + output = check_output('ip -4 address show dummy98') + print(output) + self.assertRegex(output, 'inet 10.2.3.4/16 brd 10.2.255.255 scope global dummy98') + output = check_output('ip -6 address show dummy98') + print(output) + self.assertRegex(output, 'inet6 2607:5300:203:3906::/64 scope global') + self.assertRegex(output, 'inet6 .* scope link') + output = check_output('ip -4 route show dev dummy98') + print(output) + self.assertRegex(output, '10.2.0.0/16 proto kernel scope link src 10.2.3.4') + output = check_output('ip -6 route show default') + print(output) + self.assertRegex(output, 'default') + self.assertRegex(output, 'via 2607:5300:203:39ff:ff:ff:ff:ff') + + remove_link('dummy98') + + print('## Enable ipv6') + check_output('sysctl net.ipv6.conf.all.disable_ipv6=0') + check_output('sysctl net.ipv6.conf.default.disable_ipv6=0') + + restart_networkd() + self.wait_online(['dummy98:routable']) + + output = check_output('ip -4 address show dummy98') + print(output) + self.assertRegex(output, 'inet 10.2.3.4/16 brd 10.2.255.255 scope global dummy98') + output = check_output('ip -6 address show dummy98') + print(output) + self.assertRegex(output, 'inet6 2607:5300:203:3906::/64 scope global') + self.assertRegex(output, 'inet6 .* scope link') + output = check_output('ip -4 route show dev dummy98') + print(output) + self.assertRegex(output, '10.2.0.0/16 proto kernel scope link src 10.2.3.4') + output = check_output('ip -6 route show default') + print(output) + self.assertRegex(output, 'via 2607:5300:203:39ff:ff:ff:ff:ff') + + def test_bind_carrier(self): + check_output('ip link add dummy98 type dummy') + check_output('ip link set dummy98 up') + time.sleep(2) + + copy_network_unit('25-bind-carrier.network', '11-dummy.netdev') + start_networkd() + self.wait_online(['test1:routable']) + + output = check_output('ip address show test1') + print(output) + self.assertRegex(output, 'UP,LOWER_UP') + self.assertRegex(output, 'inet 192.168.10.30/24 brd 192.168.10.255 scope global test1') + self.wait_operstate('test1', 'routable') + + check_output('ip link add dummy99 type dummy') + check_output('ip link set dummy99 up') + time.sleep(2) + output = check_output('ip address show test1') + print(output) + self.assertRegex(output, 'UP,LOWER_UP') + self.assertRegex(output, 'inet 192.168.10.30/24 brd 192.168.10.255 scope global test1') + self.wait_operstate('test1', 'routable') + + remove_link('dummy98') + time.sleep(2) + output = check_output('ip address show test1') + print(output) + self.assertRegex(output, 'UP,LOWER_UP') + self.assertRegex(output, 'inet 192.168.10.30/24 brd 192.168.10.255 scope global test1') + self.wait_operstate('test1', 'routable') + + check_output('ip link set dummy99 down') + time.sleep(2) + output = check_output('ip address show test1') + print(output) + self.assertNotRegex(output, 'UP,LOWER_UP') + self.assertRegex(output, 'DOWN') + self.assertNotRegex(output, '192.168.10') + self.wait_operstate('test1', 'off') + + check_output('ip link set dummy99 up') + time.sleep(2) + output = check_output('ip address show test1') + print(output) + self.assertRegex(output, 'UP,LOWER_UP') + self.assertRegex(output, 'inet 192.168.10.30/24 brd 192.168.10.255 scope global test1') + self.wait_operstate('test1', 'routable') + + def _test_activation_policy(self, interface, test): + conffile = '25-activation-policy.network' + if test: + conffile = f'{conffile}.d/{test}.conf' + if interface == 'vlan99': + copy_network_unit('21-vlan.netdev', '21-vlan-test1.network') + copy_network_unit('11-dummy.netdev', conffile, copy_dropins=False) + start_networkd() + + always = test.startswith('always') + initial_up = test != 'manual' and not test.endswith('down') # note: default is up + expect_up = initial_up + next_up = not expect_up + + if test.endswith('down'): + self.wait_activated(interface) + + for iteration in range(4): + with self.subTest(iteration=iteration, expect_up=expect_up): + operstate = 'routable' if expect_up else 'off' + setup_state = 'configured' if expect_up else ('configuring' if iteration == 0 else None) + self.wait_operstate(interface, operstate, setup_state=setup_state, setup_timeout=20) + + if expect_up: + self.assertIn('UP', check_output(f'ip link show {interface}')) + self.assertIn('192.168.10.30/24', check_output(f'ip address show {interface}')) + self.assertIn('default via 192.168.10.1', check_output(f'ip route show dev {interface}')) + else: + self.assertIn('DOWN', check_output(f'ip link show {interface}')) + + if next_up: + check_output(f'ip link set dev {interface} up') + else: + check_output(f'ip link set dev {interface} down') + expect_up = initial_up if always else next_up + next_up = not next_up + if always: + time.sleep(1) + + def test_activation_policy(self): + first = True + for interface in ['test1', 'vlan99']: + for test in ['up', 'always-up', 'manual', 'always-down', 'down', '']: + if first: + first = False + else: + self.tearDown() + + print(f'### test_activation_policy(interface={interface}, test={test})') + with self.subTest(interface=interface, test=test): + self._test_activation_policy(interface, test) + + def _test_activation_policy_required_for_online(self, policy, required): + conffile = '25-activation-policy.network' + units = ['11-dummy.netdev', '12-dummy.netdev', '12-dummy.network', conffile] + if policy: + units += [f'{conffile}.d/{policy}.conf'] + if required: + units += [f'{conffile}.d/required-{required}.conf'] + copy_network_unit(*units, copy_dropins=False) + start_networkd() + + if policy.endswith('down'): + self.wait_activated('test1') + + if policy.endswith('down') or policy == 'manual': + self.wait_operstate('test1', 'off', setup_state='configuring') + else: + self.wait_online(['test1']) + + if policy == 'always-down': + # if always-down, required for online is forced to no + expected = False + elif required: + # otherwise if required for online is specified, it should match that + expected = required == 'yes' + elif policy: + # otherwise if only policy specified, required for online defaults to + # true if policy is up, always-up, or bound + expected = policy.endswith('up') or policy == 'bound' + else: + # default is true, if neither are specified + expected = True + + output = check_output(*networkctl_cmd, '-n', '0', 'status', 'test1', env=env) + print(output) + + yesno = 'yes' if expected else 'no' + self.assertRegex(output, f'Required For Online: {yesno}') + + def test_activation_policy_required_for_online(self): + first = True + for policy in ['up', 'always-up', 'manual', 'always-down', 'down', 'bound', '']: + for required in ['yes', 'no', '']: + if first: + first = False + else: + self.tearDown() + + print(f'### test_activation_policy_required_for_online(policy={policy}, required={required})') + with self.subTest(policy=policy, required=required): + self._test_activation_policy_required_for_online(policy, required) + + def test_domain(self): + copy_network_unit('12-dummy.netdev', '24-search-domain.network') + start_networkd() + self.wait_online(['dummy98:routable']) + + output = check_output(*networkctl_cmd, '-n', '0', 'status', 'dummy98', env=env) + print(output) + self.assertRegex(output, 'Address: 192.168.42.100') + self.assertRegex(output, 'DNS: 192.168.42.1') + self.assertRegex(output, 'Search Domains: one') + + def test_keep_configuration_static(self): + check_output('ip link add name dummy98 type dummy') + check_output('ip address add 10.1.2.3/16 dev dummy98') + check_output('ip address add 10.2.3.4/16 dev dummy98 valid_lft 600 preferred_lft 500') + output = check_output('ip address show dummy98') + print(output) + self.assertRegex(output, 'inet 10.1.2.3/16 scope global dummy98') + self.assertRegex(output, 'inet 10.2.3.4/16 scope global dynamic dummy98') + output = check_output('ip route show dev dummy98') + print(output) + + copy_network_unit('24-keep-configuration-static.network') + start_networkd() + self.wait_online(['dummy98:routable']) + + output = check_output('ip address show dummy98') + print(output) + self.assertRegex(output, 'inet 10.1.2.3/16 scope global dummy98') + self.assertNotRegex(output, 'inet 10.2.3.4/16 scope global dynamic dummy98') + + @expectedFailureIfNexthopIsNotAvailable() + def test_nexthop(self): + def check_nexthop(self): + self.wait_online(['veth99:routable', 'veth-peer:routable', 'dummy98:routable']) + + output = check_output('ip nexthop list dev veth99') + print(output) + self.assertIn('id 1 via 192.168.5.1 dev veth99', output) + self.assertIn('id 2 via 2001:1234:5:8f63::2 dev veth99', output) + self.assertIn('id 3 dev veth99', output) + self.assertIn('id 4 dev veth99', output) + self.assertRegex(output, 'id 5 via 192.168.10.1 dev veth99 .*onlink') + self.assertIn('id 8 via fe80:0:222:4dff:ff:ff:ff:ff dev veth99', output) + self.assertRegex(output, r'id [0-9]* via 192.168.5.2 dev veth99') + + output = check_output('ip nexthop list dev dummy98') + print(output) + self.assertIn('id 20 via 192.168.20.1 dev dummy98', output) + + # kernel manages blackhole nexthops on lo + output = check_output('ip nexthop list dev lo') + print(output) + self.assertIn('id 6 blackhole', output) + self.assertIn('id 7 blackhole', output) + + # group nexthops are shown with -0 option + output = check_output('ip -0 nexthop list id 21') + print(output) + self.assertRegex(output, r'id 21 group (1,3/20|20/1,3)') + + output = check_output('ip route show dev veth99 10.10.10.10') + print(output) + self.assertEqual('10.10.10.10 nhid 1 via 192.168.5.1 proto static', output) + + output = check_output('ip route show dev veth99 10.10.10.11') + print(output) + self.assertEqual('10.10.10.11 nhid 2 via inet6 2001:1234:5:8f63::2 proto static', output) + + output = check_output('ip route show dev veth99 10.10.10.12') + print(output) + self.assertEqual('10.10.10.12 nhid 5 via 192.168.10.1 proto static onlink', output) + + output = check_output('ip -6 route show dev veth99 2001:1234:5:8f62::1') + print(output) + self.assertEqual('2001:1234:5:8f62::1 nhid 2 via 2001:1234:5:8f63::2 proto static metric 1024 pref medium', output) + + output = check_output('ip route show 10.10.10.13') + print(output) + self.assertEqual('blackhole 10.10.10.13 nhid 6 dev lo proto static', output) + + output = check_output('ip -6 route show 2001:1234:5:8f62::2') + print(output) + self.assertEqual('blackhole 2001:1234:5:8f62::2 nhid 7 dev lo proto static metric 1024 pref medium', output) + + output = check_output('ip route show 10.10.10.14') + print(output) + self.assertIn('10.10.10.14 nhid 21 proto static', output) + self.assertIn('nexthop via 192.168.20.1 dev dummy98 weight 1', output) + self.assertIn('nexthop via 192.168.5.1 dev veth99 weight 3', output) + + # TODO: check json string + check_output(*networkctl_cmd, '--json=short', 'status', env=env) + + copy_network_unit('25-nexthop.network', '25-veth.netdev', '25-veth-peer.network', + '12-dummy.netdev', '25-nexthop-dummy.network') + start_networkd() + + check_nexthop(self) + + remove_network_unit('25-nexthop.network') + copy_network_unit('25-nexthop-nothing.network') + networkctl_reload() + self.wait_online(['veth99:routable', 'veth-peer:routable']) + + output = check_output('ip nexthop list dev veth99') + print(output) + self.assertEqual(output, '') + output = check_output('ip nexthop list dev lo') + print(output) + self.assertEqual(output, '') + + remove_network_unit('25-nexthop-nothing.network') + copy_network_unit('25-nexthop.network') + networkctl_reconfigure('dummy98') + networkctl_reload() + + check_nexthop(self) + + remove_link('veth99') + time.sleep(2) + + output = check_output('ip nexthop list dev lo') + print(output) + self.assertEqual(output, '') + +class NetworkdTCTests(unittest.TestCase, Utilities): + + def setUp(self): + setup_common() + + def tearDown(self): + tear_down_common() + + @expectedFailureIfModuleIsNotAvailable('sch_cake') + def test_qdisc_cake(self): + copy_network_unit('25-qdisc-cake.network', '12-dummy.netdev') + start_networkd() + self.wait_online(['dummy98:routable']) + + output = check_output('tc qdisc show dev dummy98') + print(output) + self.assertIn('qdisc cake 3a: root', output) + self.assertIn('bandwidth 500Mbit', output) + self.assertIn('autorate-ingress', output) + self.assertIn('diffserv8', output) + self.assertIn('dual-dsthost', output) + self.assertIn(' nat', output) + self.assertIn(' wash', output) + self.assertIn(' split-gso', output) + self.assertIn(' raw', output) + self.assertIn(' atm', output) + self.assertIn('overhead 128', output) + self.assertIn('mpu 20', output) + self.assertIn('fwmark 0xff00', output) + + @expectedFailureIfModuleIsNotAvailable('sch_codel') + def test_qdisc_codel(self): + copy_network_unit('25-qdisc-codel.network', '12-dummy.netdev') + start_networkd() + self.wait_online(['dummy98:routable']) + + output = check_output('tc qdisc show dev dummy98') + print(output) + self.assertRegex(output, 'qdisc codel 33: root') + self.assertRegex(output, 'limit 2000p target 10(.0)?ms ce_threshold 100(.0)?ms interval 50(.0)?ms ecn') + + @expectedFailureIfModuleIsNotAvailable('sch_drr') + def test_qdisc_drr(self): + copy_network_unit('25-qdisc-drr.network', '12-dummy.netdev') + start_networkd() + self.wait_online(['dummy98:routable']) + + output = check_output('tc qdisc show dev dummy98') + print(output) + self.assertRegex(output, 'qdisc drr 2: root') + output = check_output('tc class show dev dummy98') + print(output) + self.assertRegex(output, 'class drr 2:30 root quantum 2000b') + + @expectedFailureIfModuleIsNotAvailable('sch_ets') + def test_qdisc_ets(self): + copy_network_unit('25-qdisc-ets.network', '12-dummy.netdev') + start_networkd() + self.wait_online(['dummy98:routable']) + + output = check_output('tc qdisc show dev dummy98') + print(output) + + self.assertRegex(output, 'qdisc ets 3a: root') + self.assertRegex(output, 'bands 10 strict 3') + self.assertRegex(output, 'quanta 1 2 3 4 5') + self.assertRegex(output, 'priomap 3 4 5 6 7') + + @expectedFailureIfModuleIsNotAvailable('sch_fq') + def test_qdisc_fq(self): + copy_network_unit('25-qdisc-fq.network', '12-dummy.netdev') + start_networkd() + self.wait_online(['dummy98:routable']) + + output = check_output('tc qdisc show dev dummy98') + print(output) + self.assertRegex(output, 'qdisc fq 32: root') + self.assertRegex(output, 'limit 1000p flow_limit 200p buckets 512 orphan_mask 511') + self.assertRegex(output, 'quantum 1500') + self.assertRegex(output, 'initial_quantum 13000') + self.assertRegex(output, 'maxrate 1Mbit') + + @expectedFailureIfModuleIsNotAvailable('sch_fq_codel') + def test_qdisc_fq_codel(self): + copy_network_unit('25-qdisc-fq_codel.network', '12-dummy.netdev') + start_networkd() + self.wait_online(['dummy98:routable']) + + output = check_output('tc qdisc show dev dummy98') + print(output) + self.assertRegex(output, 'qdisc fq_codel 34: root') + self.assertRegex(output, 'limit 20480p flows 2048 quantum 1400 target 10(.0)?ms ce_threshold 100(.0)?ms interval 200(.0)?ms memory_limit 64Mb ecn') + + @expectedFailureIfModuleIsNotAvailable('sch_fq_pie') + def test_qdisc_fq_pie(self): + copy_network_unit('25-qdisc-fq_pie.network', '12-dummy.netdev') + start_networkd() + self.wait_online(['dummy98:routable']) + + output = check_output('tc qdisc show dev dummy98') + print(output) + + self.assertRegex(output, 'qdisc fq_pie 3a: root') + self.assertRegex(output, 'limit 200000p') + + @expectedFailureIfModuleIsNotAvailable('sch_gred') + def test_qdisc_gred(self): + copy_network_unit('25-qdisc-gred.network', '12-dummy.netdev') + start_networkd() + self.wait_online(['dummy98:routable']) + + output = check_output('tc qdisc show dev dummy98') + print(output) + self.assertRegex(output, 'qdisc gred 38: root') + self.assertRegex(output, 'vqs 12 default 10 grio') + + @expectedFailureIfModuleIsNotAvailable('sch_hhf') + def test_qdisc_hhf(self): + copy_network_unit('25-qdisc-hhf.network', '12-dummy.netdev') + start_networkd() + self.wait_online(['dummy98:routable']) + + output = check_output('tc qdisc show dev dummy98') + print(output) + self.assertRegex(output, 'qdisc hhf 3a: root') + self.assertRegex(output, 'limit 1022p') + + @expectedFailureIfModuleIsNotAvailable('sch_htb') + def test_qdisc_htb_fifo(self): + copy_network_unit('25-qdisc-htb-fifo.network', '12-dummy.netdev') + start_networkd() + self.wait_online(['dummy98:routable']) + + output = check_output('tc qdisc show dev dummy98') + print(output) + self.assertRegex(output, 'qdisc htb 2: root') + self.assertRegex(output, r'default (0x30|30)') + + self.assertRegex(output, 'qdisc pfifo 37: parent 2:37') + self.assertRegex(output, 'limit 100000p') + + self.assertRegex(output, 'qdisc bfifo 3a: parent 2:3a') + self.assertRegex(output, 'limit 1000000') + + self.assertRegex(output, 'qdisc pfifo_head_drop 3b: parent 2:3b') + self.assertRegex(output, 'limit 1023p') + + self.assertRegex(output, 'qdisc pfifo_fast 3c: parent 2:3c') + + output = check_output('tc -d class show dev dummy98') + print(output) + # Here (:|prio) is a workaround for a bug in iproute2 v6.2.0 caused by + # https://github.com/shemminger/iproute2/commit/010a8388aea11e767ba3a2506728b9ad9760df0e + # which is fixed in v6.3.0 by + # https://github.com/shemminger/iproute2/commit/4e0e56e0ef05387f7f5d8ab41fe6ec6a1897b26d + self.assertRegex(output, 'class htb 2:37 root leaf 37(:|prio) ') + self.assertRegex(output, 'class htb 2:3a root leaf 3a(:|prio) ') + self.assertRegex(output, 'class htb 2:3b root leaf 3b(:|prio) ') + self.assertRegex(output, 'class htb 2:3c root leaf 3c(:|prio) ') + self.assertRegex(output, 'prio 1 quantum 4000 rate 1Mbit overhead 100 ceil 500Kbit') + self.assertRegex(output, 'burst 123456') + self.assertRegex(output, 'cburst 123457') + + @expectedFailureIfModuleIsNotAvailable('sch_ingress') + def test_qdisc_ingress(self): + copy_network_unit('25-qdisc-clsact.network', '12-dummy.netdev', + '25-qdisc-ingress.network', '11-dummy.netdev') + start_networkd() + self.wait_online(['dummy98:routable', 'test1:routable']) + + output = check_output('tc qdisc show dev dummy98') + print(output) + self.assertRegex(output, 'qdisc clsact') + + output = check_output('tc qdisc show dev test1') + print(output) + self.assertRegex(output, 'qdisc ingress') + + @expectedFailureIfModuleIsNotAvailable('sch_netem') + def test_qdisc_netem(self): + copy_network_unit('25-qdisc-netem.network', '12-dummy.netdev', + '25-qdisc-netem-compat.network', '11-dummy.netdev') + start_networkd() + self.wait_online(['dummy98:routable', 'test1:routable']) + + output = check_output('tc qdisc show dev dummy98') + print(output) + self.assertRegex(output, 'qdisc netem 30: root') + self.assertRegex(output, 'limit 100 delay 50(.0)?ms 10(.0)?ms loss 20%') + + output = check_output('tc qdisc show dev test1') + print(output) + self.assertRegex(output, 'qdisc netem [0-9a-f]*: root') + self.assertRegex(output, 'limit 100 delay 50(.0)?ms 10(.0)?ms loss 20%') + + @expectedFailureIfModuleIsNotAvailable('sch_pie') + def test_qdisc_pie(self): + copy_network_unit('25-qdisc-pie.network', '12-dummy.netdev') + start_networkd() + self.wait_online(['dummy98:routable']) + + output = check_output('tc qdisc show dev dummy98') + print(output) + self.assertRegex(output, 'qdisc pie 3a: root') + self.assertRegex(output, 'limit 200000') + + @expectedFailureIfModuleIsNotAvailable('sch_qfq') + def test_qdisc_qfq(self): + copy_network_unit('25-qdisc-qfq.network', '12-dummy.netdev') + start_networkd() + self.wait_online(['dummy98:routable']) + + output = check_output('tc qdisc show dev dummy98') + print(output) + self.assertRegex(output, 'qdisc qfq 2: root') + output = check_output('tc class show dev dummy98') + print(output) + self.assertRegex(output, 'class qfq 2:30 root weight 2 maxpkt 16000') + self.assertRegex(output, 'class qfq 2:31 root weight 10 maxpkt 8000') + + @expectedFailureIfModuleIsNotAvailable('sch_sfb') + def test_qdisc_sfb(self): + copy_network_unit('25-qdisc-sfb.network', '12-dummy.netdev') + start_networkd() + self.wait_online(['dummy98:routable']) + + output = check_output('tc qdisc show dev dummy98') + print(output) + self.assertRegex(output, 'qdisc sfb 39: root') + self.assertRegex(output, 'limit 200000') + + @expectedFailureIfModuleIsNotAvailable('sch_sfq') + def test_qdisc_sfq(self): + copy_network_unit('25-qdisc-sfq.network', '12-dummy.netdev') + start_networkd() + self.wait_online(['dummy98:routable']) + + output = check_output('tc qdisc show dev dummy98') + print(output) + self.assertRegex(output, 'qdisc sfq 36: root') + self.assertRegex(output, 'perturb 5sec') + + @expectedFailureIfModuleIsNotAvailable('sch_tbf') + def test_qdisc_tbf(self): + copy_network_unit('25-qdisc-tbf.network', '12-dummy.netdev') + start_networkd() + self.wait_online(['dummy98:routable']) + + output = check_output('tc qdisc show dev dummy98') + print(output) + self.assertRegex(output, 'qdisc tbf 35: root') + self.assertRegex(output, 'rate 1Gbit burst 5000b peakrate 100Gbit minburst 987500b lat 70(.0)?ms') + + @expectedFailureIfModuleIsNotAvailable('sch_teql') + def test_qdisc_teql(self): + call_quiet('rmmod sch_teql') + + copy_network_unit('25-qdisc-teql.network', '12-dummy.netdev') + start_networkd() + self.wait_links('dummy98') + check_output('modprobe sch_teql max_equalizers=2') + self.wait_online(['dummy98:routable']) + + output = check_output('tc qdisc show dev dummy98') + print(output) + self.assertRegex(output, 'qdisc teql1 31: root') + +class NetworkdStateFileTests(unittest.TestCase, Utilities): + + def setUp(self): + setup_common() + + def tearDown(self): + tear_down_common() + + def test_state_file(self): + copy_network_unit('12-dummy.netdev', '25-state-file-tests.network') + start_networkd() + self.wait_online(['dummy98:routable']) + + # make link state file updated + check_output(*resolvectl_cmd, 'revert', 'dummy98', env=env) + + # TODO: check json string + check_output(*networkctl_cmd, '--json=short', 'status', env=env) + + output = read_link_state_file('dummy98') + print(output) + self.assertIn('IPV4_ADDRESS_STATE=routable', output) + self.assertIn('IPV6_ADDRESS_STATE=routable', output) + self.assertIn('ADMIN_STATE=configured', output) + self.assertIn('OPER_STATE=routable', output) + self.assertIn('REQUIRED_FOR_ONLINE=yes', output) + self.assertIn('REQUIRED_OPER_STATE_FOR_ONLINE=routable', output) + self.assertIn('REQUIRED_FAMILY_FOR_ONLINE=both', output) + self.assertIn('ACTIVATION_POLICY=up', output) + self.assertIn('NETWORK_FILE=/run/systemd/network/25-state-file-tests.network', output) + self.assertIn('DNS=10.10.10.10#aaa.com 10.10.10.11:1111#bbb.com [1111:2222::3333]:1234#ccc.com', output) + self.assertIn('NTP=0.fedora.pool.ntp.org 1.fedora.pool.ntp.org', output) + self.assertIn('DOMAINS=hogehoge', output) + self.assertIn('ROUTE_DOMAINS=foofoo', output) + self.assertIn('LLMNR=no', output) + self.assertIn('MDNS=yes', output) + self.assertIn('DNSSEC=no', output) + + check_output(*resolvectl_cmd, 'dns', 'dummy98', '10.10.10.12#ccc.com', '10.10.10.13', '1111:2222::3333', env=env) + check_output(*resolvectl_cmd, 'domain', 'dummy98', 'hogehogehoge', '~foofoofoo', env=env) + check_output(*resolvectl_cmd, 'llmnr', 'dummy98', 'yes', env=env) + check_output(*resolvectl_cmd, 'mdns', 'dummy98', 'no', env=env) + check_output(*resolvectl_cmd, 'dnssec', 'dummy98', 'yes', env=env) + check_output(*timedatectl_cmd, 'ntp-servers', 'dummy98', '2.fedora.pool.ntp.org', '3.fedora.pool.ntp.org', env=env) + + # TODO: check json string + check_output(*networkctl_cmd, '--json=short', 'status', env=env) + + output = read_link_state_file('dummy98') + print(output) + self.assertIn('DNS=10.10.10.12#ccc.com 10.10.10.13 1111:2222::3333', output) + self.assertIn('NTP=2.fedora.pool.ntp.org 3.fedora.pool.ntp.org', output) + self.assertIn('DOMAINS=hogehogehoge', output) + self.assertIn('ROUTE_DOMAINS=foofoofoo', output) + self.assertIn('LLMNR=yes', output) + self.assertIn('MDNS=no', output) + self.assertIn('DNSSEC=yes', output) + + check_output(*timedatectl_cmd, 'revert', 'dummy98', env=env) + + # TODO: check json string + check_output(*networkctl_cmd, '--json=short', 'status', env=env) + + output = read_link_state_file('dummy98') + print(output) + self.assertIn('DNS=10.10.10.12#ccc.com 10.10.10.13 1111:2222::3333', output) + self.assertIn('NTP=0.fedora.pool.ntp.org 1.fedora.pool.ntp.org', output) + self.assertIn('DOMAINS=hogehogehoge', output) + self.assertIn('ROUTE_DOMAINS=foofoofoo', output) + self.assertIn('LLMNR=yes', output) + self.assertIn('MDNS=no', output) + self.assertIn('DNSSEC=yes', output) + + check_output(*resolvectl_cmd, 'revert', 'dummy98', env=env) + + # TODO: check json string + check_output(*networkctl_cmd, '--json=short', 'status', env=env) + + output = read_link_state_file('dummy98') + print(output) + self.assertIn('DNS=10.10.10.10#aaa.com 10.10.10.11:1111#bbb.com [1111:2222::3333]:1234#ccc.com', output) + self.assertIn('NTP=0.fedora.pool.ntp.org 1.fedora.pool.ntp.org', output) + self.assertIn('DOMAINS=hogehoge', output) + self.assertIn('ROUTE_DOMAINS=foofoo', output) + self.assertIn('LLMNR=no', output) + self.assertIn('MDNS=yes', output) + self.assertIn('DNSSEC=no', output) + + def test_address_state(self): + copy_network_unit('12-dummy.netdev', '12-dummy-no-address.network') + start_networkd() + + self.wait_online(['dummy98:degraded']) + + output = read_link_state_file('dummy98') + self.assertIn('IPV4_ADDRESS_STATE=off', output) + self.assertIn('IPV6_ADDRESS_STATE=degraded', output) + + # with a routable IPv4 address + check_output('ip address add 10.1.2.3/16 dev dummy98') + self.wait_online(['dummy98:routable'], ipv4=True) + self.wait_online(['dummy98:routable']) + + output = read_link_state_file('dummy98') + self.assertIn('IPV4_ADDRESS_STATE=routable', output) + self.assertIn('IPV6_ADDRESS_STATE=degraded', output) + + check_output('ip address del 10.1.2.3/16 dev dummy98') + + # with a routable IPv6 address + check_output('ip address add 2002:da8:1:0:1034:56ff:fe78:9abc/64 dev dummy98') + self.wait_online(['dummy98:routable'], ipv6=True) + self.wait_online(['dummy98:routable']) + + output = read_link_state_file('dummy98') + self.assertIn('IPV4_ADDRESS_STATE=off', output) + self.assertIn('IPV6_ADDRESS_STATE=routable', output) + +class NetworkdBondTests(unittest.TestCase, Utilities): + + def setUp(self): + setup_common() + + def tearDown(self): + tear_down_common() + + def test_bond_keep_master(self): + check_output('ip link add bond199 type bond mode active-backup') + check_output('ip link add dummy98 type dummy') + check_output('ip link set dummy98 master bond199') + + copy_network_unit('23-keep-master.network') + start_networkd() + self.wait_online(['dummy98:enslaved']) + + output = check_output('ip -d link show bond199') + print(output) + self.assertRegex(output, 'active_slave dummy98') + + output = check_output('ip -d link show dummy98') + print(output) + self.assertRegex(output, 'master bond199') + + def test_bond_active_slave(self): + copy_network_unit('23-active-slave.network', '23-bond199.network', '25-bond-active-backup-slave.netdev', '12-dummy.netdev') + start_networkd() + self.wait_online(['dummy98:enslaved', 'bond199:degraded']) + + output = check_output('ip -d link show bond199') + print(output) + self.assertIn('active_slave dummy98', output) + + def test_bond_primary_slave(self): + copy_network_unit('23-primary-slave.network', '23-bond199.network', '25-bond-active-backup-slave.netdev', '12-dummy.netdev') + start_networkd() + self.wait_online(['dummy98:enslaved', 'bond199:degraded']) + + output = check_output('ip -d link show bond199') + print(output) + self.assertIn('primary dummy98', output) + + # for issue #25627 + mkdir_p(os.path.join(network_unit_dir, '23-bond199.network.d')) + for mac in ['00:11:22:33:44:55', '00:11:22:33:44:56']: + with open(os.path.join(network_unit_dir, '23-bond199.network.d/mac.conf'), mode='w', encoding='utf-8') as f: + f.write(f'[Link]\nMACAddress={mac}\n') + + networkctl_reload() + self.wait_online(['dummy98:enslaved', 'bond199:degraded']) + + output = check_output('ip -d link show bond199') + print(output) + self.assertIn(f'link/ether {mac}', output) + + def test_bond_operstate(self): + copy_network_unit('25-bond.netdev', '11-dummy.netdev', '12-dummy.netdev', + '25-bond99.network', '25-bond-slave.network') + start_networkd() + self.wait_online(['dummy98:enslaved', 'test1:enslaved', 'bond99:routable']) + + output = check_output('ip -d link show dummy98') + print(output) + self.assertRegex(output, 'SLAVE,UP,LOWER_UP') + + output = check_output('ip -d link show test1') + print(output) + self.assertRegex(output, 'SLAVE,UP,LOWER_UP') + + output = check_output('ip -d link show bond99') + print(output) + self.assertRegex(output, 'MASTER,UP,LOWER_UP') + + self.wait_operstate('dummy98', 'enslaved') + self.wait_operstate('test1', 'enslaved') + self.wait_operstate('bond99', 'routable') + + check_output('ip link set dummy98 down') + + self.wait_operstate('dummy98', 'off') + self.wait_operstate('test1', 'enslaved') + self.wait_operstate('bond99', 'routable') + + check_output('ip link set dummy98 up') + + self.wait_operstate('dummy98', 'enslaved') + self.wait_operstate('test1', 'enslaved') + self.wait_operstate('bond99', 'routable') + + check_output('ip link set dummy98 down') + check_output('ip link set test1 down') + + self.wait_operstate('dummy98', 'off') + self.wait_operstate('test1', 'off') + + if not self.wait_operstate('bond99', 'no-carrier', setup_timeout=30, fail_assert=False): + # Huh? Kernel does not recognize that all slave interfaces are down? + # Let's confirm that networkd's operstate is consistent with ip's result. + self.assertNotRegex(output, 'NO-CARRIER') + +class NetworkdBridgeTests(unittest.TestCase, Utilities): + + def setUp(self): + setup_common() + + def tearDown(self): + tear_down_common() + + def test_bridge_vlan(self): + copy_network_unit('11-dummy.netdev', '26-bridge-vlan-slave.network', + '26-bridge.netdev', '26-bridge-vlan-master.network') + start_networkd() + self.wait_online(['test1:enslaved', 'bridge99:degraded']) + + output = check_output('bridge vlan show dev test1') + print(output) + self.assertNotRegex(output, '4063') + for i in range(4064, 4095): + self.assertRegex(output, f'{i}') + self.assertNotRegex(output, '4095') + + output = check_output('bridge vlan show dev bridge99') + print(output) + self.assertNotRegex(output, '4059') + for i in range(4060, 4095): + self.assertRegex(output, f'{i}') + self.assertNotRegex(output, '4095') + + def test_bridge_vlan_issue_20373(self): + copy_network_unit('11-dummy.netdev', '26-bridge-vlan-slave-issue-20373.network', + '26-bridge-issue-20373.netdev', '26-bridge-vlan-master-issue-20373.network', + '21-vlan.netdev', '21-vlan.network') + start_networkd() + self.wait_online(['test1:enslaved', 'bridge99:degraded', 'vlan99:routable']) + + output = check_output('bridge vlan show dev test1') + print(output) + self.assertIn('100 PVID Egress Untagged', output) + self.assertIn('560', output) + self.assertIn('600', output) + + output = check_output('bridge vlan show dev bridge99') + print(output) + self.assertIn('1 PVID Egress Untagged', output) + self.assertIn('100', output) + self.assertIn('600', output) + + def test_bridge_mdb(self): + copy_network_unit('11-dummy.netdev', '26-bridge-mdb-slave.network', + '26-bridge.netdev', '26-bridge-mdb-master.network') + start_networkd() + self.wait_online(['test1:enslaved', 'bridge99:degraded']) + + output = check_output('bridge mdb show dev bridge99') + print(output) + self.assertRegex(output, 'dev bridge99 port test1 grp ff02:aaaa:fee5::1:3 permanent *vid 4064') + self.assertRegex(output, 'dev bridge99 port test1 grp 224.0.1.1 permanent *vid 4065') + + # Old kernel may not support bridge MDB entries on bridge master + if call_quiet('bridge mdb add dev bridge99 port bridge99 grp 224.0.1.3 temp vid 4068') == 0: + self.assertRegex(output, 'dev bridge99 port bridge99 grp ff02:aaaa:fee5::1:4 temp *vid 4066') + self.assertRegex(output, 'dev bridge99 port bridge99 grp 224.0.1.2 temp *vid 4067') + + def test_bridge_keep_master(self): + check_output('ip link add bridge99 type bridge') + check_output('ip link set bridge99 up') + check_output('ip link add dummy98 type dummy') + check_output('ip link set dummy98 master bridge99') + + copy_network_unit('23-keep-master.network') + start_networkd() + self.wait_online(['dummy98:enslaved']) + + output = check_output('ip -d link show dummy98') + print(output) + self.assertRegex(output, 'master bridge99') + self.assertRegex(output, 'bridge') + + output = check_output('bridge -d link show dummy98') + print(output) + self.check_bridge_port_attr('bridge99', 'dummy98', 'path_cost', '400') + self.check_bridge_port_attr('bridge99', 'dummy98', 'hairpin_mode', '1') + self.check_bridge_port_attr('bridge99', 'dummy98', 'multicast_fast_leave', '1') + self.check_bridge_port_attr('bridge99', 'dummy98', 'unicast_flood', '1') + self.check_bridge_port_attr('bridge99', 'dummy98', 'multicast_flood', '0') + # CONFIG_BRIDGE_IGMP_SNOOPING=y + self.check_bridge_port_attr('bridge99', 'dummy98', 'multicast_to_unicast', '1', allow_enoent=True) + self.check_bridge_port_attr('bridge99', 'dummy98', 'neigh_suppress', '1', allow_enoent=True) + self.check_bridge_port_attr('bridge99', 'dummy98', 'learning', '0') + self.check_bridge_port_attr('bridge99', 'dummy98', 'priority', '23') + self.check_bridge_port_attr('bridge99', 'dummy98', 'bpdu_guard', '0') + self.check_bridge_port_attr('bridge99', 'dummy98', 'root_block', '0') + + def test_bridge_property(self): + copy_network_unit('11-dummy.netdev', '12-dummy.netdev', '26-bridge.netdev', + '26-bridge-slave-interface-1.network', '26-bridge-slave-interface-2.network', + '25-bridge99.network') + start_networkd() + self.wait_online(['dummy98:enslaved', 'test1:enslaved', 'bridge99:routable']) + + output = check_output('ip -d link show bridge99') + print(output) + self.assertIn('mtu 9000 ', output) + + output = check_output('ip -d link show test1') + print(output) + self.assertIn('master bridge99 ', output) + self.assertIn('bridge_slave', output) + self.assertIn('mtu 9000 ', output) + + output = check_output('ip -d link show dummy98') + print(output) + self.assertIn('master bridge99 ', output) + self.assertIn('bridge_slave', output) + self.assertIn('mtu 9000 ', output) + + output = check_output('ip addr show bridge99') + print(output) + self.assertIn('192.168.0.15/24', output) + + output = check_output('bridge -d link show dummy98') + print(output) + self.check_bridge_port_attr('bridge99', 'dummy98', 'path_cost', '400') + self.check_bridge_port_attr('bridge99', 'dummy98', 'hairpin_mode', '1') + self.check_bridge_port_attr('bridge99', 'dummy98', 'isolated', '1') + self.check_bridge_port_attr('bridge99', 'dummy98', 'multicast_fast_leave', '1') + self.check_bridge_port_attr('bridge99', 'dummy98', 'unicast_flood', '1') + self.check_bridge_port_attr('bridge99', 'dummy98', 'multicast_flood', '0') + # CONFIG_BRIDGE_IGMP_SNOOPING=y + self.check_bridge_port_attr('bridge99', 'dummy98', 'multicast_to_unicast', '1', allow_enoent=True) + self.check_bridge_port_attr('bridge99', 'dummy98', 'neigh_suppress', '1', allow_enoent=True) + self.check_bridge_port_attr('bridge99', 'dummy98', 'learning', '0') + self.check_bridge_port_attr('bridge99', 'dummy98', 'priority', '23') + self.check_bridge_port_attr('bridge99', 'dummy98', 'bpdu_guard', '0') + self.check_bridge_port_attr('bridge99', 'dummy98', 'root_block', '0') + + output = check_output('bridge -d link show test1') + print(output) + self.check_bridge_port_attr('bridge99', 'test1', 'priority', '0') + + check_output('ip address add 192.168.0.16/24 dev bridge99') + output = check_output('ip addr show bridge99') + print(output) + self.assertIn('192.168.0.16/24', output) + + # for issue #6088 + print('### ip -6 route list table all dev bridge99') + output = check_output('ip -6 route list table all dev bridge99') + print(output) + self.assertRegex(output, 'ff00::/8 table local (proto kernel )?metric 256 (linkdown )?pref medium') + + remove_link('test1') + self.wait_operstate('bridge99', 'routable') + + output = check_output('ip -d link show bridge99') + print(output) + self.assertIn('mtu 9000 ', output) + + output = check_output('ip -d link show dummy98') + print(output) + self.assertIn('master bridge99 ', output) + self.assertIn('bridge_slave', output) + self.assertIn('mtu 9000 ', output) + + remove_link('dummy98') + self.wait_operstate('bridge99', 'no-carrier') + + output = check_output('ip -d link show bridge99') + print(output) + # When no carrier, the kernel may reset the MTU + self.assertIn('NO-CARRIER', output) + + output = check_output('ip address show bridge99') + print(output) + self.assertNotIn('192.168.0.15/24', output) + self.assertIn('192.168.0.16/24', output) # foreign address is kept + + print('### ip -6 route list table all dev bridge99') + output = check_output('ip -6 route list table all dev bridge99') + print(output) + self.assertRegex(output, 'ff00::/8 table local (proto kernel )?metric 256 (linkdown )?pref medium') + + check_output('ip link add dummy98 type dummy') + self.wait_online(['dummy98:enslaved', 'bridge99:routable']) + + output = check_output('ip -d link show bridge99') + print(output) + self.assertIn('mtu 9000 ', output) + + output = check_output('ip -d link show dummy98') + print(output) + self.assertIn('master bridge99 ', output) + self.assertIn('bridge_slave', output) + self.assertIn('mtu 9000 ', output) + + def test_bridge_configure_without_carrier(self): + copy_network_unit('26-bridge.netdev', '26-bridge-configure-without-carrier.network', + '11-dummy.netdev') + start_networkd() + + # With ConfigureWithoutCarrier=yes, the bridge should remain configured for all these situations + for test in ['no-slave', 'add-slave', 'slave-up', 'slave-no-carrier', 'slave-carrier', 'slave-down']: + with self.subTest(test=test): + if test == 'no-slave': + # bridge has no slaves; it's up but *might* not have carrier + self.wait_operstate('bridge99', operstate=r'(no-carrier|routable)', setup_state=None, setup_timeout=30) + # due to a bug in the kernel, newly-created bridges are brought up + # *with* carrier, unless they have had any setting changed; e.g. + # their mac set, priority set, etc. Then, they will lose carrier + # as soon as a (down) slave interface is added, and regain carrier + # again once the slave interface is brought up. + #self.check_link_attr('bridge99', 'carrier', '0') + elif test == 'add-slave': + # add slave to bridge, but leave it down; bridge is definitely no-carrier + self.check_link_attr('test1', 'operstate', 'down') + check_output('ip link set dev test1 master bridge99') + self.wait_operstate('bridge99', operstate='no-carrier', setup_state=None) + self.check_link_attr('bridge99', 'carrier', '0') + elif test == 'slave-up': + # bring up slave, which will have carrier; bridge gains carrier + check_output('ip link set dev test1 up') + self.wait_online(['bridge99:routable']) + self.check_link_attr('bridge99', 'carrier', '1') + elif test == 'slave-no-carrier': + # drop slave carrier; bridge loses carrier + check_output('ip link set dev test1 carrier off') + self.wait_online(['bridge99:no-carrier:no-carrier']) + self.check_link_attr('bridge99', 'carrier', '0') + elif test == 'slave-carrier': + # restore slave carrier; bridge gains carrier + check_output('ip link set dev test1 carrier on') + self.wait_online(['bridge99:routable']) + self.check_link_attr('bridge99', 'carrier', '1') + elif test == 'slave-down': + # bring down slave; bridge loses carrier + check_output('ip link set dev test1 down') + self.wait_online(['bridge99:no-carrier:no-carrier']) + self.check_link_attr('bridge99', 'carrier', '0') + + output = check_output(*networkctl_cmd, '-n', '0', 'status', 'bridge99', env=env) + self.assertRegex(output, '10.1.2.3') + self.assertRegex(output, '10.1.2.1') + + def test_bridge_ignore_carrier_loss(self): + copy_network_unit('11-dummy.netdev', '12-dummy.netdev', '26-bridge.netdev', + '26-bridge-slave-interface-1.network', '26-bridge-slave-interface-2.network', + '25-bridge99-ignore-carrier-loss.network') + start_networkd() + self.wait_online(['dummy98:enslaved', 'test1:enslaved', 'bridge99:routable']) + + check_output('ip address add 192.168.0.16/24 dev bridge99') + remove_link('test1', 'dummy98') + time.sleep(3) + + output = check_output('ip address show bridge99') + print(output) + self.assertRegex(output, 'NO-CARRIER') + self.assertRegex(output, 'inet 192.168.0.15/24 brd 192.168.0.255 scope global bridge99') + self.assertRegex(output, 'inet 192.168.0.16/24 scope global secondary bridge99') + + def test_bridge_ignore_carrier_loss_frequent_loss_and_gain(self): + copy_network_unit('26-bridge.netdev', '26-bridge-slave-interface-1.network', + '25-bridge99-ignore-carrier-loss.network') + start_networkd() + self.wait_online(['bridge99:no-carrier']) + + for trial in range(4): + check_output('ip link add dummy98 type dummy') + check_output('ip link set dummy98 up') + if trial < 3: + remove_link('dummy98') + + self.wait_online(['bridge99:routable', 'dummy98:enslaved']) + + output = check_output('ip address show bridge99') + print(output) + self.assertRegex(output, 'inet 192.168.0.15/24 brd 192.168.0.255 scope global bridge99') + + output = check_output('ip rule list table 100') + print(output) + self.assertIn('from all to 8.8.8.8 lookup 100', output) + +class NetworkdSRIOVTests(unittest.TestCase, Utilities): + + def setUp(self): + setup_common() + + def tearDown(self): + tear_down_common() + + @expectedFailureIfNetdevsimWithSRIOVIsNotAvailable() + def test_sriov(self): + call('modprobe netdevsim') + + with open('/sys/bus/netdevsim/new_device', mode='w', encoding='utf-8') as f: + f.write('99 1') + + with open('/sys/bus/netdevsim/devices/netdevsim99/sriov_numvfs', mode='w', encoding='utf-8') as f: + f.write('3') + + copy_network_unit('25-sriov.network') + start_networkd() + self.wait_online(['eni99np1:routable']) + + output = check_output('ip link show dev eni99np1') + print(output) + self.assertRegex(output, + 'vf 0 .*00:11:22:33:44:55.*vlan 5, qos 1, vlan protocol 802.1ad, spoof checking on, link-state enable, trust on, query_rss on\n *' + 'vf 1 .*00:11:22:33:44:56.*vlan 6, qos 2, spoof checking off, link-state disable, trust off, query_rss off\n *' + 'vf 2 .*00:11:22:33:44:57.*vlan 7, qos 3, spoof checking off, link-state auto, trust off, query_rss off' + ) + + @expectedFailureIfNetdevsimWithSRIOVIsNotAvailable() + def test_sriov_udev(self): + copy_network_unit('25-sriov.link', '25-sriov-udev.network') + + call('modprobe netdevsim') + + with open('/sys/bus/netdevsim/new_device', mode='w', encoding='utf-8') as f: + f.write('99 1') + + start_networkd() + self.wait_online(['eni99np1:routable']) + + output = check_output('ip link show dev eni99np1') + print(output) + self.assertRegex(output, + 'vf 0 .*00:11:22:33:44:55.*vlan 5, qos 1, vlan protocol 802.1ad, spoof checking on, link-state enable, trust on, query_rss on\n *' + 'vf 1 .*00:11:22:33:44:56.*vlan 6, qos 2, spoof checking off, link-state disable, trust off, query_rss off\n *' + 'vf 2 .*00:11:22:33:44:57.*vlan 7, qos 3, spoof checking off, link-state auto, trust off, query_rss off' + ) + self.assertNotIn('vf 3', output) + self.assertNotIn('vf 4', output) + + with open(os.path.join(network_unit_dir, '25-sriov.link'), mode='a', encoding='utf-8') as f: + f.write('[Link]\nSR-IOVVirtualFunctions=4\n') + + udev_reload() + call(*udevadm_cmd, 'trigger', '--action=add', '--settle', '/sys/devices/netdevsim99/net/eni99np1') + + output = check_output('ip link show dev eni99np1') + print(output) + self.assertRegex(output, + 'vf 0 .*00:11:22:33:44:55.*vlan 5, qos 1, vlan protocol 802.1ad, spoof checking on, link-state enable, trust on, query_rss on\n *' + 'vf 1 .*00:11:22:33:44:56.*vlan 6, qos 2, spoof checking off, link-state disable, trust off, query_rss off\n *' + 'vf 2 .*00:11:22:33:44:57.*vlan 7, qos 3, spoof checking off, link-state auto, trust off, query_rss off\n *' + 'vf 3' + ) + self.assertNotIn('vf 4', output) + + with open(os.path.join(network_unit_dir, '25-sriov.link'), mode='a', encoding='utf-8') as f: + f.write('[Link]\nSR-IOVVirtualFunctions=\n') + + udev_reload() + call(*udevadm_cmd, 'trigger', '--action=add', '--settle', '/sys/devices/netdevsim99/net/eni99np1') + + output = check_output('ip link show dev eni99np1') + print(output) + self.assertRegex(output, + 'vf 0 .*00:11:22:33:44:55.*vlan 5, qos 1, vlan protocol 802.1ad, spoof checking on, link-state enable, trust on, query_rss on\n *' + 'vf 1 .*00:11:22:33:44:56.*vlan 6, qos 2, spoof checking off, link-state disable, trust off, query_rss off\n *' + 'vf 2 .*00:11:22:33:44:57.*vlan 7, qos 3, spoof checking off, link-state auto, trust off, query_rss off\n *' + 'vf 3' + ) + self.assertNotIn('vf 4', output) + + with open(os.path.join(network_unit_dir, '25-sriov.link'), mode='a', encoding='utf-8') as f: + f.write('[Link]\nSR-IOVVirtualFunctions=2\n') + + udev_reload() + call(*udevadm_cmd, 'trigger', '--action=add', '--settle', '/sys/devices/netdevsim99/net/eni99np1') + + output = check_output('ip link show dev eni99np1') + print(output) + self.assertRegex(output, + 'vf 0 .*00:11:22:33:44:55.*vlan 5, qos 1, vlan protocol 802.1ad, spoof checking on, link-state enable, trust on, query_rss on\n *' + 'vf 1 .*00:11:22:33:44:56.*vlan 6, qos 2, spoof checking off, link-state disable, trust off, query_rss off' + ) + self.assertNotIn('vf 2', output) + self.assertNotIn('vf 3', output) + self.assertNotIn('vf 4', output) + + with open(os.path.join(network_unit_dir, '25-sriov.link'), mode='a', encoding='utf-8') as f: + f.write('[Link]\nSR-IOVVirtualFunctions=\n') + + udev_reload() + call(*udevadm_cmd, 'trigger', '--action=add', '--settle', '/sys/devices/netdevsim99/net/eni99np1') + + output = check_output('ip link show dev eni99np1') + print(output) + self.assertRegex(output, + 'vf 0 .*00:11:22:33:44:55.*vlan 5, qos 1, vlan protocol 802.1ad, spoof checking on, link-state enable, trust on, query_rss on\n *' + 'vf 1 .*00:11:22:33:44:56.*vlan 6, qos 2, spoof checking off, link-state disable, trust off, query_rss off\n *' + 'vf 2 .*00:11:22:33:44:57.*vlan 7, qos 3, spoof checking off, link-state auto, trust off, query_rss off' + ) + self.assertNotIn('vf 3', output) + self.assertNotIn('vf 4', output) + +class NetworkdLLDPTests(unittest.TestCase, Utilities): + + def setUp(self): + setup_common() + + def tearDown(self): + tear_down_common() + + def test_lldp(self): + copy_network_unit('23-emit-lldp.network', '24-lldp.network', '25-veth.netdev') + start_networkd() + self.wait_online(['veth99:degraded', 'veth-peer:degraded']) + + for trial in range(10): + if trial > 0: + time.sleep(1) + + output = check_output(*networkctl_cmd, 'lldp', env=env) + print(output) + if re.search(r'veth99 .* veth-peer', output): + break + else: + self.fail() + +class NetworkdRATests(unittest.TestCase, Utilities): + + def setUp(self): + setup_common() + + def tearDown(self): + tear_down_common() + + def test_ipv6_prefix_delegation(self): + copy_network_unit('25-veth.netdev', '25-ipv6-prefix.network', '25-ipv6-prefix-veth.network') + start_networkd() + self.wait_online(['veth99:routable', 'veth-peer:degraded']) + + output = check_output(*resolvectl_cmd, 'dns', 'veth99', env=env) + print(output) + self.assertRegex(output, 'fe80::') + self.assertRegex(output, '2002:da8:1::1') + + output = check_output(*resolvectl_cmd, 'domain', 'veth99', env=env) + print(output) + self.assertIn('hogehoge.test', output) + + output = check_output(*networkctl_cmd, '-n', '0', 'status', 'veth99', env=env) + print(output) + self.assertRegex(output, '2002:da8:1:0') + + self.check_netlabel('veth99', '2002:da8:1::/64') + self.check_netlabel('veth99', '2002:da8:2::/64') + + def test_ipv6_token_static(self): + copy_network_unit('25-veth.netdev', '25-ipv6-prefix.network', '25-ipv6-prefix-veth-token-static.network') + start_networkd() + self.wait_online(['veth99:routable', 'veth-peer:degraded']) + + output = check_output(*networkctl_cmd, '-n', '0', 'status', 'veth99', env=env) + print(output) + self.assertRegex(output, '2002:da8:1:0:1a:2b:3c:4d') + self.assertRegex(output, '2002:da8:1:0:fa:de:ca:fe') + self.assertRegex(output, '2002:da8:2:0:1a:2b:3c:4d') + self.assertRegex(output, '2002:da8:2:0:fa:de:ca:fe') + + def test_ipv6_token_prefixstable(self): + copy_network_unit('25-veth.netdev', '25-ipv6-prefix.network', '25-ipv6-prefix-veth-token-prefixstable.network') + start_networkd() + self.wait_online(['veth99:routable', 'veth-peer:degraded']) + + output = check_output(*networkctl_cmd, '-n', '0', 'status', 'veth99', env=env) + print(output) + self.assertIn('2002:da8:1:0:b47e:7975:fc7a:7d6e', output) + self.assertIn('2002:da8:2:0:1034:56ff:fe78:9abc', output) # EUI64 + + def test_ipv6_token_prefixstable_without_address(self): + copy_network_unit('25-veth.netdev', '25-ipv6-prefix.network', '25-ipv6-prefix-veth-token-prefixstable-without-address.network') + start_networkd() + self.wait_online(['veth99:routable', 'veth-peer:degraded']) + + output = check_output(*networkctl_cmd, '-n', '0', 'status', 'veth99', env=env) + print(output) + self.assertIn('2002:da8:1:0:b47e:7975:fc7a:7d6e', output) + self.assertIn('2002:da8:2:0:f689:561a:8eda:7443', output) + +class NetworkdDHCPServerTests(unittest.TestCase, Utilities): + + def setUp(self): + setup_common() + + def tearDown(self): + tear_down_common() + + def test_dhcp_server(self): + copy_network_unit('25-veth.netdev', '25-dhcp-client.network', '25-dhcp-server.network') + start_networkd() + self.wait_online(['veth99:routable', 'veth-peer:routable']) + + output = check_output(*networkctl_cmd, '-n', '0', 'status', 'veth99', env=env) + print(output) + self.assertRegex(output, r'Address: 192.168.5.[0-9]* \(DHCP4 via 192.168.5.1\)') + self.assertIn('Gateway: 192.168.5.3', output) + self.assertRegex(output, 'DNS: 192.168.5.1\n *192.168.5.10') + self.assertRegex(output, 'NTP: 192.168.5.1\n *192.168.5.11') + + def test_dhcp_server_with_uplink(self): + copy_network_unit('25-veth.netdev', '25-dhcp-client.network', '25-dhcp-server-downstream.network', + '12-dummy.netdev', '25-dhcp-server-uplink.network') + start_networkd() + self.wait_online(['veth99:routable', 'veth-peer:routable']) + + output = check_output(*networkctl_cmd, '-n', '0', 'status', 'veth99', env=env) + print(output) + self.assertRegex(output, r'Address: 192.168.5.[0-9]* \(DHCP4 via 192.168.5.1\)') + self.assertIn('Gateway: 192.168.5.3', output) + self.assertIn('DNS: 192.168.5.1', output) + self.assertIn('NTP: 192.168.5.1', output) + + def test_emit_router_timezone(self): + copy_network_unit('25-veth.netdev', '25-dhcp-client-timezone-router.network', '25-dhcp-server-timezone-router.network') + start_networkd() + self.wait_online(['veth99:routable', 'veth-peer:routable']) + + output = check_output(*networkctl_cmd, '-n', '0', 'status', 'veth99', env=env) + print(output) + self.assertRegex(output, r'Address: 192.168.5.[0-9]* \(DHCP4 via 192.168.5.1\)') + self.assertIn('Gateway: 192.168.5.1', output) + self.assertIn('Time Zone: Europe/Berlin', output) + + def test_dhcp_server_static_lease(self): + copy_network_unit('25-veth.netdev', '25-dhcp-client-static-lease.network', '25-dhcp-server-static-lease.network') + start_networkd() + self.wait_online(['veth99:routable', 'veth-peer:routable']) + + output = check_output(*networkctl_cmd, '-n', '0', 'status', 'veth99', env=env) + print(output) + self.assertIn('Address: 10.1.1.200 (DHCP4 via 10.1.1.1)', output) + +class NetworkdDHCPServerRelayAgentTests(unittest.TestCase, Utilities): + + def setUp(self): + setup_common() + + def tearDown(self): + tear_down_common() + + def test_relay_agent(self): + copy_network_unit('25-agent-veth-client.netdev', + '25-agent-veth-server.netdev', + '25-agent-client.network', + '25-agent-server.network', + '25-agent-client-peer.network', + '25-agent-server-peer.network') + start_networkd() + + self.wait_online(['client:routable']) + + output = check_output(*networkctl_cmd, '-n', '0', 'status', 'client', env=env) + print(output) + self.assertRegex(output, r'Address: 192.168.5.150 \(DHCP4 via 192.168.5.1\)') + +class NetworkdDHCPClientTests(unittest.TestCase, Utilities): + + def setUp(self): + setup_common() + + def tearDown(self): + tear_down_common() + + def test_dhcp_client_ipv6_only(self): + copy_network_unit('25-veth.netdev', '25-dhcp-server-veth-peer.network', '25-dhcp-client-ipv6-only.network') + + start_networkd() + self.wait_online(['veth-peer:carrier']) + start_dnsmasq() + self.wait_online(['veth99:routable', 'veth-peer:routable']) + + # checking address + output = check_output('ip address show dev veth99 scope global') + print(output) + self.assertRegex(output, r'inet6 2600::[0-9a-f:]*/128 scope global dynamic noprefixroute') + self.assertNotIn('192.168.5', output) + + # checking semi-static route + output = check_output('ip -6 route list dev veth99 2001:1234:5:9fff:ff:ff:ff:ff') + print(output) + self.assertRegex(output, 'via fe80::1034:56ff:fe78:9abd') + + # Confirm that ipv6 token is not set in the kernel + output = check_output('ip token show dev veth99') + print(output) + self.assertRegex(output, 'token :: dev veth99') + + print('## dnsmasq log') + output = read_dnsmasq_log_file() + print(output) + self.assertIn('DHCPSOLICIT(veth-peer)', output) + self.assertNotIn('DHCPADVERTISE(veth-peer)', output) + self.assertNotIn('DHCPREQUEST(veth-peer)', output) + self.assertIn('DHCPREPLY(veth-peer)', output) + self.assertIn('sent size: 0 option: 14 rapid-commit', output) + + with open(os.path.join(network_unit_dir, '25-dhcp-client-ipv6-only.network'), mode='a', encoding='utf-8') as f: + f.write('\n[DHCPv6]\nRapidCommit=no\n') + + stop_dnsmasq() + start_dnsmasq() + + networkctl_reload() + self.wait_online(['veth99:routable', 'veth-peer:routable']) + + # checking address + output = check_output('ip address show dev veth99 scope global') + print(output) + self.assertRegex(output, r'inet6 2600::[0-9a-f:]*/128 scope global dynamic noprefixroute') + self.assertNotIn('192.168.5', output) + + # checking semi-static route + output = check_output('ip -6 route list dev veth99 2001:1234:5:9fff:ff:ff:ff:ff') + print(output) + self.assertRegex(output, 'via fe80::1034:56ff:fe78:9abd') + + print('## dnsmasq log') + output = read_dnsmasq_log_file() + print(output) + self.assertIn('DHCPSOLICIT(veth-peer)', output) + self.assertIn('DHCPADVERTISE(veth-peer)', output) + self.assertIn('DHCPREQUEST(veth-peer)', output) + self.assertIn('DHCPREPLY(veth-peer)', output) + self.assertNotIn('rapid-commit', output) + + def test_dhcp_client_ipv4_only(self): + copy_network_unit('25-veth.netdev', '25-dhcp-server-veth-peer.network', '25-dhcp-client-ipv4-only.network') + + start_networkd() + self.wait_online(['veth-peer:carrier']) + start_dnsmasq('--dhcp-option=option:dns-server,192.168.5.6,192.168.5.7', + '--dhcp-option=option:domain-search,example.com', + '--dhcp-alternate-port=67,5555', + ipv4_range='192.168.5.110,192.168.5.119') + self.wait_online(['veth99:routable', 'veth-peer:routable']) + + print('## ip address show dev veth99 scope global') + output = check_output('ip address show dev veth99 scope global') + print(output) + self.assertIn('mtu 1492', output) + self.assertIn('inet 192.168.5.250/24 brd 192.168.5.255 scope global veth99', output) + self.assertRegex(output, r'inet 192.168.5.11[0-9]/24 metric 24 brd 192.168.5.255 scope global secondary dynamic noprefixroute test-label') + self.assertNotIn('2600::', output) + + print('## ip route show table main dev veth99') + output = check_output('ip route show table main dev veth99') + print(output) + # no DHCP routes assigned to the main table + self.assertNotIn('proto dhcp', output) + # static routes + self.assertIn('192.168.5.0/24 proto kernel scope link src 192.168.5.250', output) + self.assertIn('192.168.5.0/24 proto static scope link', output) + self.assertIn('192.168.6.0/24 proto static scope link', output) + self.assertIn('192.168.7.0/24 proto static scope link', output) + + print('## ip route show table 211 dev veth99') + output = check_output('ip route show table 211 dev veth99') + print(output) + self.assertRegex(output, 'default via 192.168.5.1 proto dhcp src 192.168.5.11[0-9] metric 24') + self.assertRegex(output, '192.168.5.0/24 proto dhcp scope link src 192.168.5.11[0-9] metric 24') + self.assertRegex(output, '192.168.5.1 proto dhcp scope link src 192.168.5.11[0-9] metric 24') + self.assertRegex(output, '192.168.5.6 proto dhcp scope link src 192.168.5.11[0-9] metric 24') + self.assertRegex(output, '192.168.5.7 proto dhcp scope link src 192.168.5.11[0-9] metric 24') + self.assertIn('10.0.0.0/8 via 192.168.5.1 proto dhcp', output) + + print('## link state file') + output = read_link_state_file('veth99') + print(output) + # checking DNS server and Domains + self.assertIn('DNS=192.168.5.6 192.168.5.7', output) + self.assertIn('DOMAINS=example.com', output) + + print('## dnsmasq log') + output = read_dnsmasq_log_file() + print(output) + self.assertIn('vendor class: FooBarVendorTest', output) + self.assertIn('DHCPDISCOVER(veth-peer) 12:34:56:78:9a:bc', output) + self.assertIn('client provides name: test-hostname', output) + self.assertIn('26:mtu', output) + + # change address range, DNS servers, and Domains + stop_dnsmasq() + start_dnsmasq('--dhcp-option=option:dns-server,192.168.5.1,192.168.5.7,192.168.5.8', + '--dhcp-option=option:domain-search,foo.example.com', + '--dhcp-alternate-port=67,5555', + ipv4_range='192.168.5.120,192.168.5.129',) + + # Sleep for 120 sec as the dnsmasq minimum lease time can only be set to 120 + print('Wait for the DHCP lease to be expired') + self.wait_address_dropped('veth99', r'inet 192.168.5.11[0-9]*/24', ipv='-4', timeout_sec=120) + self.wait_address('veth99', r'inet 192.168.5.12[0-9]*/24', ipv='-4') + + self.wait_online(['veth99:routable', 'veth-peer:routable']) + + print('## ip address show dev veth99 scope global') + output = check_output('ip address show dev veth99 scope global') + print(output) + self.assertIn('mtu 1492', output) + self.assertIn('inet 192.168.5.250/24 brd 192.168.5.255 scope global veth99', output) + self.assertNotIn('192.168.5.11', output) + self.assertRegex(output, r'inet 192.168.5.12[0-9]/24 metric 24 brd 192.168.5.255 scope global secondary dynamic noprefixroute test-label') + self.assertNotIn('2600::', output) + + print('## ip route show table main dev veth99') + output = check_output('ip route show table main dev veth99') + print(output) + # no DHCP routes assigned to the main table + self.assertNotIn('proto dhcp', output) + # static routes + self.assertIn('192.168.5.0/24 proto kernel scope link src 192.168.5.250', output) + self.assertIn('192.168.5.0/24 proto static scope link', output) + self.assertIn('192.168.6.0/24 proto static scope link', output) + self.assertIn('192.168.7.0/24 proto static scope link', output) + + print('## ip route show table 211 dev veth99') + output = check_output('ip route show table 211 dev veth99') + print(output) + self.assertRegex(output, 'default via 192.168.5.1 proto dhcp src 192.168.5.12[0-9] metric 24') + self.assertRegex(output, '192.168.5.0/24 proto dhcp scope link src 192.168.5.12[0-9] metric 24') + self.assertRegex(output, '192.168.5.1 proto dhcp scope link src 192.168.5.12[0-9] metric 24') + self.assertNotIn('192.168.5.6', output) + self.assertRegex(output, '192.168.5.7 proto dhcp scope link src 192.168.5.12[0-9] metric 24') + self.assertRegex(output, '192.168.5.8 proto dhcp scope link src 192.168.5.12[0-9] metric 24') + self.assertIn('10.0.0.0/8 via 192.168.5.1 proto dhcp', output) + + print('## link state file') + output = read_link_state_file('veth99') + print(output) + # checking DNS server and Domains + self.assertIn('DNS=192.168.5.1 192.168.5.7 192.168.5.8', output) + self.assertIn('DOMAINS=foo.example.com', output) + + print('## dnsmasq log') + output = read_dnsmasq_log_file() + print(output) + self.assertIn('vendor class: FooBarVendorTest', output) + self.assertIn('DHCPDISCOVER(veth-peer) 192.168.5.11', output) + self.assertIn('client provides name: test-hostname', output) + self.assertIn('26:mtu', output) + + self.check_netlabel('veth99', r'192\.168\.5\.0/24') + + def test_dhcp_client_ipv4_use_routes_gateway(self): + first = True + for (routes, gateway, dns_and_ntp_routes, classless) in itertools.product([True, False], repeat=4): + if first: + first = False + else: + self.tearDown() + + print(f'### test_dhcp_client_ipv4_use_routes_gateway(routes={routes}, gateway={gateway}, dns_and_ntp_routes={dns_and_ntp_routes}, classless={classless})') + with self.subTest(routes=routes, gateway=gateway, dns_and_ntp_routes=dns_and_ntp_routes, classless=classless): + self._test_dhcp_client_ipv4_use_routes_gateway(routes, gateway, dns_and_ntp_routes, classless) + + def _test_dhcp_client_ipv4_use_routes_gateway(self, use_routes, use_gateway, dns_and_ntp_routes, classless): + testunit = '25-dhcp-client-ipv4-use-routes-use-gateway.network' + testunits = ['25-veth.netdev', '25-dhcp-server-veth-peer.network', testunit] + testunits.append(f'{testunit}.d/use-routes-{use_routes}.conf') + testunits.append(f'{testunit}.d/use-gateway-{use_gateway}.conf') + testunits.append(f'{testunit}.d/use-dns-and-ntp-routes-{dns_and_ntp_routes}.conf') + copy_network_unit(*testunits, copy_dropins=False) + + start_networkd() + self.wait_online(['veth-peer:carrier']) + additional_options = [ + '--dhcp-option=option:dns-server,192.168.5.10,8.8.8.8', + '--dhcp-option=option:ntp-server,192.168.5.11,9.9.9.9', + '--dhcp-option=option:static-route,192.168.5.100,192.168.5.2,8.8.8.8,192.168.5.3' + ] + if classless: + additional_options += [ + '--dhcp-option=option:classless-static-route,0.0.0.0/0,192.168.5.4,8.0.0.0/8,192.168.5.5,192.168.5.64/26,192.168.5.5' + ] + start_dnsmasq(*additional_options) + self.wait_online(['veth99:routable', 'veth-peer:routable']) + + output = check_output('ip -4 route show dev veth99') + print(output) + + # Check UseRoutes= + if use_routes: + if classless: + self.assertRegex(output, r'default via 192.168.5.4 proto dhcp src 192.168.5.[0-9]* metric 1024') + self.assertRegex(output, r'8.0.0.0/8 via 192.168.5.5 proto dhcp src 192.168.5.[0-9]* metric 1024') + self.assertRegex(output, r'192.168.5.64/26 via 192.168.5.5 proto dhcp src 192.168.5.[0-9]* metric 1024') + self.assertRegex(output, r'192.168.5.4 proto dhcp scope link src 192.168.5.[0-9]* metric 1024') + self.assertRegex(output, r'192.168.5.5 proto dhcp scope link src 192.168.5.[0-9]* metric 1024') + else: + self.assertRegex(output, r'192.168.5.0/24 proto dhcp scope link src 192.168.5.[0-9]* metric 1024') + self.assertRegex(output, r'8.0.0.0/8 via 192.168.5.3 proto dhcp src 192.168.5.[0-9]* metric 1024') + self.assertRegex(output, r'192.168.5.3 proto dhcp scope link src 192.168.5.[0-9]* metric 1024') + else: + self.assertNotRegex(output, r'default via 192.168.5.4 proto dhcp src 192.168.5.[0-9]* metric 1024') + self.assertNotRegex(output, r'8.0.0.0/8 via 192.168.5.5 proto dhcp src 192.168.5.[0-9]* metric 1024') + self.assertNotRegex(output, r'192.168.5.4 proto dhcp scope link src 192.168.5.[0-9]* metric 1024') + self.assertNotRegex(output, r'192.168.5.5 proto dhcp scope link src 192.168.5.[0-9]* metric 1024') + self.assertNotRegex(output, r'192.168.5.0/24 proto dhcp scope link src 192.168.5.[0-9]* metric 1024') + self.assertNotRegex(output, r'8.0.0.0/8 via 192.168.5.3 proto dhcp src 192.168.5.[0-9]* metric 1024') + self.assertNotRegex(output, r'192.168.5.3 proto dhcp scope link src 192.168.5.[0-9]* metric 1024') + + # Check UseGateway= + if use_gateway and (not classless or not use_routes): + self.assertRegex(output, r'default via 192.168.5.1 proto dhcp src 192.168.5.[0-9]* metric 1024') + else: + self.assertNotRegex(output, r'default via 192.168.5.1 proto dhcp src 192.168.5.[0-9]* metric 1024') + + # Check route to gateway + if (use_gateway or dns_and_ntp_routes) and (not classless or not use_routes): + self.assertRegex(output, r'192.168.5.1 proto dhcp scope link src 192.168.5.[0-9]* metric 1024') + else: + self.assertNotRegex(output, r'192.168.5.1 proto dhcp scope link src 192.168.5.[0-9]* metric 1024') + + # Check RoutesToDNS= and RoutesToNTP= + if dns_and_ntp_routes: + self.assertRegex(output, r'192.168.5.10 proto dhcp scope link src 192.168.5.[0-9]* metric 1024') + self.assertRegex(output, r'192.168.5.11 proto dhcp scope link src 192.168.5.[0-9]* metric 1024') + if classless and use_routes: + self.assertRegex(output, r'8.8.8.8 via 192.168.5.4 proto dhcp src 192.168.5.[0-9]* metric 1024') + self.assertRegex(output, r'9.9.9.9 via 192.168.5.4 proto dhcp src 192.168.5.[0-9]* metric 1024') + else: + self.assertRegex(output, r'8.8.8.8 via 192.168.5.1 proto dhcp src 192.168.5.[0-9]* metric 1024') + self.assertRegex(output, r'9.9.9.9 via 192.168.5.1 proto dhcp src 192.168.5.[0-9]* metric 1024') + else: + self.assertNotRegex(output, r'192.168.5.10 proto dhcp scope link src 192.168.5.[0-9]* metric 1024') + self.assertNotRegex(output, r'192.168.5.11 proto dhcp scope link src 192.168.5.[0-9]* metric 1024') + self.assertNotRegex(output, r'8.8.8.8 via 192.168.5.[0-9]* proto dhcp src 192.168.5.[0-9]* metric 1024') + self.assertNotRegex(output, r'9.9.9.9 via 192.168.5.[0-9]* proto dhcp src 192.168.5.[0-9]* metric 1024') + + # TODO: check json string + check_output(*networkctl_cmd, '--json=short', 'status', env=env) + + def test_dhcp_client_settings_anonymize(self): + copy_network_unit('25-veth.netdev', '25-dhcp-server-veth-peer.network', '25-dhcp-client-anonymize.network') + start_networkd() + self.wait_online(['veth-peer:carrier']) + start_dnsmasq() + self.wait_online(['veth99:routable', 'veth-peer:routable']) + + print('## dnsmasq log') + output = read_dnsmasq_log_file() + print(output) + self.assertNotIn('VendorClassIdentifier=SusantVendorTest', output) + self.assertNotIn('test-hostname', output) + self.assertNotIn('26:mtu', output) + + def test_dhcp_keep_configuration_dhcp(self): + copy_network_unit('25-veth.netdev', + '25-dhcp-server-veth-peer.network', + '25-dhcp-client-keep-configuration-dhcp.network') + start_networkd() + self.wait_online(['veth-peer:carrier']) + start_dnsmasq() + self.wait_online(['veth99:routable', 'veth-peer:routable']) + + output = check_output('ip address show dev veth99 scope global') + print(output) + self.assertRegex(output, r'inet 192.168.5.[0-9]*/24 metric 1024 brd 192.168.5.255 scope global veth99\n *' + 'valid_lft forever preferred_lft forever') + + # Stopping dnsmasq as networkd won't be allowed to renew the DHCP lease. + stop_dnsmasq() + + # Sleep for 120 sec as the dnsmasq minimum lease time can only be set to 120 + print('Wait for the DHCP lease to be expired') + time.sleep(120) + + # The lease address should be kept after the lease expired + output = check_output('ip address show dev veth99 scope global') + print(output) + self.assertRegex(output, r'inet 192.168.5.[0-9]*/24 metric 1024 brd 192.168.5.255 scope global veth99\n *' + 'valid_lft forever preferred_lft forever') + + stop_networkd() + + # The lease address should be kept after networkd stopped + output = check_output('ip address show dev veth99 scope global') + print(output) + self.assertRegex(output, r'inet 192.168.5.[0-9]*/24 metric 1024 brd 192.168.5.255 scope global veth99\n *' + 'valid_lft forever preferred_lft forever') + + with open(os.path.join(network_unit_dir, '25-dhcp-client-keep-configuration-dhcp.network'), mode='a', encoding='utf-8') as f: + f.write('[Network]\nDHCP=no\n') + + start_networkd() + self.wait_online(['veth99:routable', 'veth-peer:routable']) + + # Still the lease address should be kept after networkd restarted + output = check_output('ip address show dev veth99 scope global') + print(output) + self.assertRegex(output, r'inet 192.168.5.[0-9]*/24 metric 1024 brd 192.168.5.255 scope global veth99\n *' + 'valid_lft forever preferred_lft forever') + + def test_dhcp_keep_configuration_dhcp_on_stop(self): + copy_network_unit('25-veth.netdev', + '25-dhcp-server-veth-peer.network', + '25-dhcp-client-keep-configuration-dhcp-on-stop.network') + start_networkd() + self.wait_online(['veth-peer:carrier']) + start_dnsmasq() + self.wait_online(['veth99:routable', 'veth-peer:routable']) + + output = check_output('ip address show dev veth99 scope global') + print(output) + self.assertRegex(output, r'inet 192.168.5.[0-9]*/24 metric 1024 brd 192.168.5.255 scope global dynamic veth99') + + stop_dnsmasq() + stop_networkd() + + output = check_output('ip address show dev veth99 scope global') + print(output) + self.assertRegex(output, r'inet 192.168.5.[0-9]*/24 metric 1024 brd 192.168.5.255 scope global dynamic veth99') + + start_networkd() + self.wait_online(['veth-peer:routable']) + + output = check_output('ip address show dev veth99 scope global') + print(output) + self.assertNotIn('192.168.5.', output) + + def test_dhcp_client_reuse_address_as_static(self): + copy_network_unit('25-veth.netdev', '25-dhcp-server-veth-peer.network', '25-dhcp-client.network') + start_networkd() + self.wait_online(['veth-peer:carrier']) + start_dnsmasq() + self.wait_online(['veth99:routable', 'veth-peer:routable']) + + # link become 'routable' when at least one protocol provide an valid address. + self.wait_address('veth99', r'inet 192.168.5.[0-9]*/24 metric 1024 brd 192.168.5.255 scope global dynamic', ipv='-4') + self.wait_address('veth99', r'inet6 2600::[0-9a-f]*/128 scope global (dynamic noprefixroute|noprefixroute dynamic)', ipv='-6') + + output = check_output('ip address show dev veth99 scope global') + ipv4_address = re.search(r'192.168.5.[0-9]*/24', output).group() + ipv6_address = re.search(r'2600::[0-9a-f:]*/128', output).group() + static_network = '\n'.join(['[Match]', 'Name=veth99', '[Network]', 'IPv6AcceptRA=no', 'Address=' + ipv4_address, 'Address=' + ipv6_address]) + print(static_network) + + remove_network_unit('25-dhcp-client.network') + + with open(os.path.join(network_unit_dir, '25-static.network'), mode='w', encoding='utf-8') as f: + f.write(static_network) + + restart_networkd() + self.wait_online(['veth99:routable']) + + output = check_output('ip -4 address show dev veth99 scope global') + print(output) + self.assertRegex(output, f'inet {ipv4_address} brd 192.168.5.255 scope global veth99\n *' + 'valid_lft forever preferred_lft forever') + + output = check_output('ip -6 address show dev veth99 scope global') + print(output) + self.assertRegex(output, f'inet6 {ipv6_address} scope global *\n *' + 'valid_lft forever preferred_lft forever') + + @expectedFailureIfModuleIsNotAvailable('vrf') + def test_dhcp_client_vrf(self): + copy_network_unit('25-veth.netdev', '25-dhcp-server-veth-peer.network', '25-dhcp-client-vrf.network', + '25-vrf.netdev', '25-vrf.network') + start_networkd() + self.wait_online(['veth-peer:carrier']) + start_dnsmasq() + self.wait_online(['veth99:routable', 'veth-peer:routable', 'vrf99:carrier']) + + # link become 'routable' when at least one protocol provide an valid address. + self.wait_address('veth99', r'inet 192.168.5.[0-9]*/24 metric 1024 brd 192.168.5.255 scope global dynamic', ipv='-4') + self.wait_address('veth99', r'inet6 2600::[0-9a-f]*/128 scope global (dynamic noprefixroute|noprefixroute dynamic)', ipv='-6') + + print('## ip -d link show dev vrf99') + output = check_output('ip -d link show dev vrf99') + print(output) + self.assertRegex(output, 'vrf table 42') + + print('## ip address show vrf vrf99') + output = check_output('ip address show vrf vrf99') + print(output) + self.assertRegex(output, 'inet 192.168.5.[0-9]*/24 metric 1024 brd 192.168.5.255 scope global dynamic veth99') + self.assertRegex(output, 'inet6 2600::[0-9a-f]*/128 scope global (dynamic noprefixroute|noprefixroute dynamic)') + self.assertRegex(output, 'inet6 .* scope link') + + print('## ip address show dev veth99') + output = check_output('ip address show dev veth99') + print(output) + self.assertRegex(output, 'inet 192.168.5.[0-9]*/24 metric 1024 brd 192.168.5.255 scope global dynamic veth99') + self.assertRegex(output, 'inet6 2600::[0-9a-f]*/128 scope global (dynamic noprefixroute|noprefixroute dynamic)') + self.assertRegex(output, 'inet6 .* scope link') + + print('## ip route show vrf vrf99') + output = check_output('ip route show vrf vrf99') + print(output) + self.assertRegex(output, 'default via 192.168.5.1 dev veth99 proto dhcp src 192.168.5.') + self.assertRegex(output, '192.168.5.0/24 dev veth99 proto kernel scope link src 192.168.5') + self.assertRegex(output, '192.168.5.1 dev veth99 proto dhcp scope link src 192.168.5') + + print('## ip route show table main dev veth99') + output = check_output('ip route show table main dev veth99') + print(output) + self.assertEqual(output, '') + + def test_dhcp_client_gateway_onlink_implicit(self): + copy_network_unit('25-veth.netdev', '25-dhcp-server-veth-peer.network', + '25-dhcp-client-gateway-onlink-implicit.network') + start_networkd() + self.wait_online(['veth-peer:carrier']) + start_dnsmasq() + self.wait_online(['veth99:routable', 'veth-peer:routable']) + + output = check_output(*networkctl_cmd, '-n', '0', 'status', 'veth99', env=env) + print(output) + self.assertRegex(output, '192.168.5') + + output = check_output('ip route list dev veth99 10.0.0.0/8') + print(output) + self.assertRegex(output, 'onlink') + output = check_output('ip route list dev veth99 192.168.100.0/24') + print(output) + self.assertRegex(output, 'onlink') + + def test_dhcp_client_with_ipv4ll(self): + copy_network_unit('25-veth.netdev', '25-dhcp-server-veth-peer.network', + '25-dhcp-client-with-ipv4ll.network') + start_networkd() + # we need to increase timeout above default, as this will need to wait for + # systemd-networkd to get the dhcpv4 transient failure event + self.wait_online(['veth99:degraded', 'veth-peer:routable'], timeout='60s') + + output = check_output('ip -4 address show dev veth99') + print(output) + self.assertNotIn('192.168.5.', output) + self.assertIn('inet 169.254.133.11/16 metric 2048 brd 169.254.255.255 scope link', output) + + start_dnsmasq() + print('Wait for a DHCP lease to be acquired and the IPv4LL address to be dropped') + self.wait_address('veth99', r'inet 192\.168\.5\.\d+/24 metric 1024 brd 192\.168\.5\.255 scope global dynamic', ipv='-4') + self.wait_address_dropped('veth99', r'inet 169\.254\.\d+\.\d+/16 metric 2048 brd 169\.254\.255\.255 scope link', scope='link', ipv='-4') + self.wait_online(['veth99:routable']) + + output = check_output('ip -4 address show dev veth99') + print(output) + self.assertRegex(output, r'inet 192\.168\.5\.\d+/24 metric 1024 brd 192\.168\.5\.255 scope global dynamic veth99') + self.assertNotIn('169.254.', output) + self.assertNotIn('scope link', output) + + stop_dnsmasq() + print('Wait for the DHCP lease to be expired and an IPv4LL address to be acquired') + self.wait_address_dropped('veth99', r'inet 192\.168\.5\.\d+/24 metric 1024 brd 192\.168\.5\.255 scope global dynamic', ipv='-4', timeout_sec=130) + self.wait_address('veth99', r'inet 169\.254\.133\.11/16 metric 2048 brd 169\.254\.255\.255 scope link', scope='link', ipv='-4') + + output = check_output('ip -4 address show dev veth99') + print(output) + self.assertNotIn('192.168.5.', output) + self.assertIn('inet 169.254.133.11/16 metric 2048 brd 169.254.255.255 scope link', output) + + def test_dhcp_client_use_dns(self): + def check(self, ipv4, ipv6): + os.makedirs(os.path.join(network_unit_dir, '25-dhcp-client.network.d'), exist_ok=True) + with open(os.path.join(network_unit_dir, '25-dhcp-client.network.d/override.conf'), mode='w', encoding='utf-8') as f: + f.write('[DHCPv4]\nUseDNS=') + f.write('yes' if ipv4 else 'no') + f.write('\n[DHCPv6]\nUseDNS=') + f.write('yes' if ipv6 else 'no') + f.write('\n[IPv6AcceptRA]\nUseDNS=no') + + networkctl_reload() + self.wait_online(['veth99:routable']) + + # link becomes 'routable' when at least one protocol provide an valid address. Hence, we need to explicitly wait for both addresses. + self.wait_address('veth99', r'inet 192.168.5.[0-9]*/24 metric 1024 brd 192.168.5.255 scope global dynamic', ipv='-4') + self.wait_address('veth99', r'inet6 2600::[0-9a-f]*/128 scope global (dynamic noprefixroute|noprefixroute dynamic)', ipv='-6') + + # make resolved re-read the link state file + check_output(*resolvectl_cmd, 'revert', 'veth99', env=env) + + output = check_output(*resolvectl_cmd, 'dns', 'veth99', env=env) + print(output) + if ipv4: + self.assertIn('192.168.5.1', output) + else: + self.assertNotIn('192.168.5.1', output) + if ipv6: + self.assertIn('2600::1', output) + else: + self.assertNotIn('2600::1', output) + + # TODO: check json string + check_output(*networkctl_cmd, '--json=short', 'status', env=env) + + copy_network_unit('25-veth.netdev', '25-dhcp-server-veth-peer.network', '25-dhcp-client.network', copy_dropins=False) + + start_networkd() + self.wait_online(['veth-peer:carrier']) + start_dnsmasq('--dhcp-option=option:dns-server,192.168.5.1', + '--dhcp-option=option6:dns-server,[2600::1]') + + check(self, True, True) + check(self, True, False) + check(self, False, True) + check(self, False, False) + +class NetworkdDHCPPDTests(unittest.TestCase, Utilities): + + def setUp(self): + setup_common() + + def tearDown(self): + tear_down_common() + + def test_dhcp6pd(self): + copy_network_unit('25-veth.netdev', '25-dhcp6pd-server.network', '25-dhcp6pd-upstream.network', + '25-veth-downstream-veth97.netdev', '25-dhcp-pd-downstream-veth97.network', '25-dhcp-pd-downstream-veth97-peer.network', + '25-veth-downstream-veth98.netdev', '25-dhcp-pd-downstream-veth98.network', '25-dhcp-pd-downstream-veth98-peer.network', + '11-dummy.netdev', '25-dhcp-pd-downstream-test1.network', + '25-dhcp-pd-downstream-dummy97.network', + '12-dummy.netdev', '25-dhcp-pd-downstream-dummy98.network', + '13-dummy.netdev', '25-dhcp-pd-downstream-dummy99.network') + + start_networkd() + self.wait_online(['veth-peer:routable']) + start_isc_dhcpd(conf_file='isc-dhcpd-dhcp6pd.conf', ipv='-6') + self.wait_online(['veth99:routable', 'test1:routable', 'dummy98:routable', 'dummy99:degraded', + 'veth97:routable', 'veth97-peer:routable', 'veth98:routable', 'veth98-peer:routable']) + + print('### ip -6 address show dev veth-peer scope global') + output = check_output('ip -6 address show dev veth-peer scope global') + print(output) + self.assertIn('inet6 3ffe:501:ffff:100::1/64 scope global', output) + + # Link Subnet IDs + # test1: 0x00 + # dummy97: 0x01 (The link will appear later) + # dummy98: 0x00 + # dummy99: auto -> 0x02 (No address assignment) + # veth97: 0x08 + # veth98: 0x09 + # veth99: 0x10 + + print('### ip -6 address show dev veth99 scope global') + output = check_output('ip -6 address show dev veth99 scope global') + print(output) + # IA_NA + self.assertRegex(output, 'inet6 3ffe:501:ffff:100::[0-9]*/128 scope global (dynamic noprefixroute|noprefixroute dynamic)') + # address in IA_PD (Token=static) + self.assertRegex(output, 'inet6 3ffe:501:ffff:[2-9a-f]10:1a:2b:3c:4d/64 (metric 256 |)scope global dynamic') + # address in IA_PD (Token=eui64) + self.assertRegex(output, 'inet6 3ffe:501:ffff:[2-9a-f]10:1034:56ff:fe78:9abc/64 (metric 256 |)scope global dynamic') + # address in IA_PD (temporary) + # Note that the temporary addresses may appear after the link enters configured state + self.wait_address('veth99', 'inet6 3ffe:501:ffff:[2-9a-f]10:[0-9a-f]*:[0-9a-f]*:[0-9a-f]*:[0-9a-f]*/64 (metric 256 |)scope global temporary dynamic', ipv='-6') + + print('### ip -6 address show dev test1 scope global') + output = check_output('ip -6 address show dev test1 scope global') + print(output) + # address in IA_PD (Token=static) + self.assertRegex(output, 'inet6 3ffe:501:ffff:[2-9a-f]00:1a:2b:3c:4d/64 (metric 256 |)scope global dynamic mngtmpaddr') + # address in IA_PD (temporary) + self.wait_address('test1', 'inet6 3ffe:501:ffff:[2-9a-f]00:[0-9a-f]*:[0-9a-f]*:[0-9a-f]*:[0-9a-f]*/64 (metric 256 |)scope global temporary dynamic', ipv='-6') + + print('### ip -6 address show dev dummy98 scope global') + output = check_output('ip -6 address show dev dummy98 scope global') + print(output) + # address in IA_PD (Token=static) + self.assertRegex(output, 'inet6 3ffe:501:ffff:[2-9a-f]00:1a:2b:3c:4d/64 (metric 256 |)scope global dynamic mngtmpaddr') + # address in IA_PD (temporary) + self.wait_address('dummy98', 'inet6 3ffe:501:ffff:[2-9a-f]00:[0-9a-f]*:[0-9a-f]*:[0-9a-f]*:[0-9a-f]*/64 (metric 256 |)scope global temporary dynamic', ipv='-6') + + print('### ip -6 address show dev dummy99 scope global') + output = check_output('ip -6 address show dev dummy99 scope global') + print(output) + # Assign=no + self.assertNotRegex(output, 'inet6 3ffe:501:ffff:[2-9a-f]02') + + print('### ip -6 address show dev veth97 scope global') + output = check_output('ip -6 address show dev veth97 scope global') + print(output) + # address in IA_PD (Token=static) + self.assertRegex(output, 'inet6 3ffe:501:ffff:[2-9a-f]08:1a:2b:3c:4d/64 (metric 256 |)scope global dynamic mngtmpaddr') + # address in IA_PD (Token=eui64) + self.assertRegex(output, 'inet6 3ffe:501:ffff:[2-9a-f]08:1034:56ff:fe78:9ace/64 (metric 256 |)scope global dynamic mngtmpaddr') + # address in IA_PD (temporary) + self.wait_address('veth97', 'inet6 3ffe:501:ffff:[2-9a-f]08:[0-9a-f]*:[0-9a-f]*:[0-9a-f]*:[0-9a-f]*/64 (metric 256 |)scope global temporary dynamic', ipv='-6') + + print('### ip -6 address show dev veth97-peer scope global') + output = check_output('ip -6 address show dev veth97-peer scope global') + print(output) + # NDisc address (Token=static) + self.assertRegex(output, 'inet6 3ffe:501:ffff:[2-9a-f]08:1a:2b:3c:4e/64 (metric 256 |)scope global dynamic mngtmpaddr') + # NDisc address (Token=eui64) + self.assertRegex(output, 'inet6 3ffe:501:ffff:[2-9a-f]08:1034:56ff:fe78:9acf/64 (metric 256 |)scope global dynamic mngtmpaddr') + # NDisc address (temporary) + self.wait_address('veth97-peer', 'inet6 3ffe:501:ffff:[2-9a-f]08:[0-9a-f]*:[0-9a-f]*:[0-9a-f]*:[0-9a-f]*/64 (metric 256 |)scope global temporary dynamic', ipv='-6') + + print('### ip -6 address show dev veth98 scope global') + output = check_output('ip -6 address show dev veth98 scope global') + print(output) + # address in IA_PD (Token=static) + self.assertRegex(output, 'inet6 3ffe:501:ffff:[2-9a-f]09:1a:2b:3c:4d/64 (metric 256 |)scope global dynamic mngtmpaddr') + # address in IA_PD (Token=eui64) + self.assertRegex(output, 'inet6 3ffe:501:ffff:[2-9a-f]09:1034:56ff:fe78:9abe/64 (metric 256 |)scope global dynamic mngtmpaddr') + # address in IA_PD (temporary) + self.wait_address('veth98', 'inet6 3ffe:501:ffff:[2-9a-f]09:[0-9a-f]*:[0-9a-f]*:[0-9a-f]*:[0-9a-f]*/64 (metric 256 |)scope global temporary dynamic', ipv='-6') + + print('### ip -6 address show dev veth98-peer scope global') + output = check_output('ip -6 address show dev veth98-peer scope global') + print(output) + # NDisc address (Token=static) + self.assertRegex(output, 'inet6 3ffe:501:ffff:[2-9a-f]09:1a:2b:3c:4e/64 (metric 256 |)scope global dynamic mngtmpaddr') + # NDisc address (Token=eui64) + self.assertRegex(output, 'inet6 3ffe:501:ffff:[2-9a-f]09:1034:56ff:fe78:9abf/64 (metric 256 |)scope global dynamic mngtmpaddr') + # NDisc address (temporary) + self.wait_address('veth98-peer', 'inet6 3ffe:501:ffff:[2-9a-f]09:[0-9a-f]*:[0-9a-f]*:[0-9a-f]*:[0-9a-f]*/64 (metric 256 |)scope global temporary dynamic', ipv='-6') + + print('### ip -6 route show type unreachable') + output = check_output('ip -6 route show type unreachable') + print(output) + self.assertRegex(output, 'unreachable 3ffe:501:ffff:[2-9a-f]00::/56 dev lo proto dhcp') + + print('### ip -6 route show dev veth99') + output = check_output('ip -6 route show dev veth99') + print(output) + self.assertRegex(output, '3ffe:501:ffff:[2-9a-f]10::/64 proto kernel metric [0-9]* expires') + + print('### ip -6 route show dev test1') + output = check_output('ip -6 route show dev test1') + print(output) + self.assertRegex(output, '3ffe:501:ffff:[2-9a-f]00::/64 proto kernel metric [0-9]* expires') + + print('### ip -6 route show dev dummy98') + output = check_output('ip -6 route show dev dummy98') + print(output) + self.assertRegex(output, '3ffe:501:ffff:[2-9a-f]00::/64 proto kernel metric [0-9]* expires') + + print('### ip -6 route show dev dummy99') + output = check_output('ip -6 route show dev dummy99') + print(output) + self.assertRegex(output, '3ffe:501:ffff:[2-9a-f]02::/64 proto dhcp metric [0-9]* expires') + + print('### ip -6 route show dev veth97') + output = check_output('ip -6 route show dev veth97') + print(output) + self.assertRegex(output, '3ffe:501:ffff:[2-9a-f]08::/64 proto kernel metric [0-9]* expires') + + print('### ip -6 route show dev veth97-peer') + output = check_output('ip -6 route show dev veth97-peer') + print(output) + self.assertRegex(output, '3ffe:501:ffff:[2-9a-f]08::/64 proto ra metric [0-9]* expires') + + print('### ip -6 route show dev veth98') + output = check_output('ip -6 route show dev veth98') + print(output) + self.assertRegex(output, '3ffe:501:ffff:[2-9a-f]09::/64 proto kernel metric [0-9]* expires') + + print('### ip -6 route show dev veth98-peer') + output = check_output('ip -6 route show dev veth98-peer') + print(output) + self.assertRegex(output, '3ffe:501:ffff:[2-9a-f]09::/64 proto ra metric [0-9]* expires') + + # Test case for a downstream which appears later + check_output('ip link add dummy97 type dummy') + self.wait_online(['dummy97:routable']) + + print('### ip -6 address show dev dummy97 scope global') + output = check_output('ip -6 address show dev dummy97 scope global') + print(output) + # address in IA_PD (Token=static) + self.assertRegex(output, 'inet6 3ffe:501:ffff:[2-9a-f]01:1a:2b:3c:4d/64 (metric 256 |)scope global dynamic mngtmpaddr') + # address in IA_PD (temporary) + self.wait_address('dummy97', 'inet6 3ffe:501:ffff:[2-9a-f]01:[0-9a-f]*:[0-9a-f]*:[0-9a-f]*:[0-9a-f]*/64 (metric 256 |)scope global temporary dynamic', ipv='-6') + + print('### ip -6 route show dev dummy97') + output = check_output('ip -6 route show dev dummy97') + print(output) + self.assertRegex(output, '3ffe:501:ffff:[2-9a-f]01::/64 proto kernel metric [0-9]* expires') + + # Test case for reconfigure + networkctl_reconfigure('dummy98', 'dummy99') + self.wait_online(['dummy98:routable', 'dummy99:degraded']) + + print('### ip -6 address show dev dummy98 scope global') + output = check_output('ip -6 address show dev dummy98 scope global') + print(output) + # address in IA_PD (Token=static) + self.assertRegex(output, 'inet6 3ffe:501:ffff:[2-9a-f]00:1a:2b:3c:4d/64 (metric 256 |)scope global dynamic mngtmpaddr') + # address in IA_PD (temporary) + self.wait_address('dummy98', 'inet6 3ffe:501:ffff:[2-9a-f]00:[0-9a-f]*:[0-9a-f]*:[0-9a-f]*:[0-9a-f]*/64 (metric 256 |)scope global temporary dynamic', ipv='-6') + + print('### ip -6 address show dev dummy99 scope global') + output = check_output('ip -6 address show dev dummy99 scope global') + print(output) + # Assign=no + self.assertNotRegex(output, 'inet6 3ffe:501:ffff:[2-9a-f]02') + + print('### ip -6 route show dev dummy98') + output = check_output('ip -6 route show dev dummy98') + print(output) + self.assertRegex(output, '3ffe:501:ffff:[2-9a-f]00::/64 proto kernel metric [0-9]* expires') + + print('### ip -6 route show dev dummy99') + output = check_output('ip -6 route show dev dummy99') + print(output) + self.assertRegex(output, '3ffe:501:ffff:[2-9a-f]02::/64 proto dhcp metric [0-9]* expires') + + self.check_netlabel('dummy98', '3ffe:501:ffff:[2-9a-f]00::/64') + + def verify_dhcp4_6rd(self, tunnel_name): + print('### ip -4 address show dev veth-peer scope global') + output = check_output('ip -4 address show dev veth-peer scope global') + print(output) + self.assertIn('inet 10.0.0.1/8 brd 10.255.255.255 scope global veth-peer', output) + + # Link Subnet IDs + # test1: 0x00 + # dummy97: 0x01 (The link will appear later) + # dummy98: 0x00 + # dummy99: auto -> 0x0[23] (No address assignment) + # 6rd-XXX: auto -> 0x0[23] + # veth97: 0x08 + # veth98: 0x09 + # veth99: 0x10 + + print('### ip -4 address show dev veth99 scope global') + output = check_output('ip -4 address show dev veth99 scope global') + print(output) + self.assertRegex(output, 'inet 10.100.100.[0-9]*/8 (metric 1024 |)brd 10.255.255.255 scope global dynamic veth99') + + print('### ip -6 address show dev veth99 scope global') + output = check_output('ip -6 address show dev veth99 scope global') + print(output) + # address in IA_PD (Token=static) + self.assertRegex(output, 'inet6 2001:db8:6464:[0-9a-f]+10:1a:2b:3c:4d/64 (metric 256 |)scope global dynamic mngtmpaddr') + # address in IA_PD (Token=eui64) + self.assertRegex(output, 'inet6 2001:db8:6464:[0-9a-f]+10:1034:56ff:fe78:9abc/64 (metric 256 |)scope global dynamic mngtmpaddr') + # address in IA_PD (temporary) + # Note that the temporary addresses may appear after the link enters configured state + self.wait_address('veth99', 'inet6 2001:db8:6464:[0-9a-f]+10:[0-9a-f]*:[0-9a-f]*:[0-9a-f]*:[0-9a-f]*/64 (metric 256 |)scope global temporary dynamic', ipv='-6') + + print('### ip -6 address show dev test1 scope global') + output = check_output('ip -6 address show dev test1 scope global') + print(output) + # address in IA_PD (Token=static) + self.assertRegex(output, 'inet6 2001:db8:6464:[0-9a-f]+00:1a:2b:3c:4d/64 (metric 256 |)scope global dynamic mngtmpaddr') + # address in IA_PD (temporary) + self.wait_address('test1', 'inet6 2001:db8:6464:[0-9a-f]+00:[0-9a-f]*:[0-9a-f]*:[0-9a-f]*:[0-9a-f]*/64 (metric 256 |)scope global temporary dynamic', ipv='-6') + + print('### ip -6 address show dev dummy98 scope global') + output = check_output('ip -6 address show dev dummy98 scope global') + print(output) + # address in IA_PD (Token=static) + self.assertRegex(output, 'inet6 2001:db8:6464:[0-9a-f]+00:1a:2b:3c:4d/64 (metric 256 |)scope global dynamic mngtmpaddr') + # address in IA_PD (temporary) + self.wait_address('dummy98', 'inet6 2001:db8:6464:[0-9a-f]+00:[0-9a-f]*:[0-9a-f]*:[0-9a-f]*:[0-9a-f]*/64 (metric 256 |)scope global temporary dynamic', ipv='-6') + + print('### ip -6 address show dev dummy99 scope global') + output = check_output('ip -6 address show dev dummy99 scope global') + print(output) + # Assign=no + self.assertNotRegex(output, 'inet6 2001:db8:6464:[0-9a-f]+0[23]') + + print('### ip -6 address show dev veth97 scope global') + output = check_output('ip -6 address show dev veth97 scope global') + print(output) + # address in IA_PD (Token=static) + self.assertRegex(output, 'inet6 2001:db8:6464:[0-9a-f]+08:1a:2b:3c:4d/64 (metric 256 |)scope global dynamic mngtmpaddr') + # address in IA_PD (Token=eui64) + self.assertRegex(output, 'inet6 2001:db8:6464:[0-9a-f]+08:1034:56ff:fe78:9ace/64 (metric 256 |)scope global dynamic mngtmpaddr') + # address in IA_PD (temporary) + self.wait_address('veth97', 'inet6 2001:db8:6464:[0-9a-f]+08:[0-9a-f]*:[0-9a-f]*:[0-9a-f]*:[0-9a-f]*/64 (metric 256 |)scope global temporary dynamic', ipv='-6') + + print('### ip -6 address show dev veth97-peer scope global') + output = check_output('ip -6 address show dev veth97-peer scope global') + print(output) + # NDisc address (Token=static) + self.assertRegex(output, 'inet6 2001:db8:6464:[0-9a-f]+08:1a:2b:3c:4e/64 (metric 256 |)scope global dynamic mngtmpaddr') + # NDisc address (Token=eui64) + self.assertRegex(output, 'inet6 2001:db8:6464:[0-9a-f]+08:1034:56ff:fe78:9acf/64 (metric 256 |)scope global dynamic mngtmpaddr') + # NDisc address (temporary) + self.wait_address('veth97-peer', 'inet6 2001:db8:6464:[0-9a-f]+08:[0-9a-f]*:[0-9a-f]*:[0-9a-f]*:[0-9a-f]*/64 (metric 256 |)scope global temporary dynamic', ipv='-6') + + print('### ip -6 address show dev veth98 scope global') + output = check_output('ip -6 address show dev veth98 scope global') + print(output) + # address in IA_PD (Token=static) + self.assertRegex(output, 'inet6 2001:db8:6464:[0-9a-f]+09:1a:2b:3c:4d/64 (metric 256 |)scope global dynamic mngtmpaddr') + # address in IA_PD (Token=eui64) + self.assertRegex(output, 'inet6 2001:db8:6464:[0-9a-f]+09:1034:56ff:fe78:9abe/64 (metric 256 |)scope global dynamic mngtmpaddr') + # address in IA_PD (temporary) + self.wait_address('veth98', 'inet6 2001:db8:6464:[0-9a-f]+09:[0-9a-f]*:[0-9a-f]*:[0-9a-f]*:[0-9a-f]*/64 (metric 256 |)scope global temporary dynamic', ipv='-6') + + print('### ip -6 address show dev veth98-peer scope global') + output = check_output('ip -6 address show dev veth98-peer scope global') + print(output) + # NDisc address (Token=static) + self.assertRegex(output, 'inet6 2001:db8:6464:[0-9a-f]+09:1a:2b:3c:4e/64 (metric 256 |)scope global dynamic mngtmpaddr') + # NDisc address (Token=eui64) + self.assertRegex(output, 'inet6 2001:db8:6464:[0-9a-f]+09:1034:56ff:fe78:9abf/64 (metric 256 |)scope global dynamic mngtmpaddr') + # NDisc address (temporary) + self.wait_address('veth98-peer', 'inet6 2001:db8:6464:[0-9a-f]+09:[0-9a-f]*:[0-9a-f]*:[0-9a-f]*:[0-9a-f]*/64 (metric 256 |)scope global temporary dynamic', ipv='-6') + + print('### ip -6 route show type unreachable') + output = check_output('ip -6 route show type unreachable') + print(output) + self.assertRegex(output, 'unreachable 2001:db8:6464:[0-9a-f]+00::/56 dev lo proto dhcp') + + print('### ip -6 route show dev veth99') + output = check_output('ip -6 route show dev veth99') + print(output) + self.assertRegex(output, '2001:db8:6464:[0-9a-f]+10::/64 proto kernel metric [0-9]* expires') + + print('### ip -6 route show dev test1') + output = check_output('ip -6 route show dev test1') + print(output) + self.assertRegex(output, '2001:db8:6464:[0-9a-f]+00::/64 proto kernel metric [0-9]* expires') + + print('### ip -6 route show dev dummy98') + output = check_output('ip -6 route show dev dummy98') + print(output) + self.assertRegex(output, '2001:db8:6464:[0-9a-f]+00::/64 proto kernel metric [0-9]* expires') + + print('### ip -6 route show dev dummy99') + output = check_output('ip -6 route show dev dummy99') + print(output) + self.assertRegex(output, '2001:db8:6464:[0-9a-f]+0[23]::/64 proto dhcp metric [0-9]* expires') + + print('### ip -6 route show dev veth97') + output = check_output('ip -6 route show dev veth97') + print(output) + self.assertRegex(output, '2001:db8:6464:[0-9a-f]+08::/64 proto kernel metric [0-9]* expires') + + print('### ip -6 route show dev veth97-peer') + output = check_output('ip -6 route show dev veth97-peer') + print(output) + self.assertRegex(output, '2001:db8:6464:[0-9a-f]+08::/64 proto ra metric [0-9]* expires') + + print('### ip -6 route show dev veth98') + output = check_output('ip -6 route show dev veth98') + print(output) + self.assertRegex(output, '2001:db8:6464:[0-9a-f]+09::/64 proto kernel metric [0-9]* expires') + + print('### ip -6 route show dev veth98-peer') + output = check_output('ip -6 route show dev veth98-peer') + print(output) + self.assertRegex(output, '2001:db8:6464:[0-9a-f]+09::/64 proto ra metric [0-9]* expires') + + print('### ip -6 address show dev dummy97 scope global') + output = check_output('ip -6 address show dev dummy97 scope global') + print(output) + # address in IA_PD (Token=static) + self.assertRegex(output, 'inet6 2001:db8:6464:[0-9a-f]+01:1a:2b:3c:4d/64 (metric 256 |)scope global dynamic mngtmpaddr') + # address in IA_PD (temporary) + self.wait_address('dummy97', 'inet6 2001:db8:6464:[0-9a-f]+01:[0-9a-f]*:[0-9a-f]*:[0-9a-f]*:[0-9a-f]*/64 (metric 256 |)scope global temporary dynamic', ipv='-6') + + print('### ip -6 route show dev dummy97') + output = check_output('ip -6 route show dev dummy97') + print(output) + self.assertRegex(output, '2001:db8:6464:[0-9a-f]+01::/64 proto kernel metric [0-9]* expires') + + print(f'### ip -d link show dev {tunnel_name}') + output = check_output(f'ip -d link show dev {tunnel_name}') + print(output) + self.assertIn('link/sit 10.100.100.', output) + self.assertIn('local 10.100.100.', output) + self.assertIn('ttl 64', output) + self.assertIn('6rd-prefix 2001:db8::/32', output) + self.assertIn('6rd-relay_prefix 10.0.0.0/8', output) + + print(f'### ip -6 address show dev {tunnel_name}') + output = check_output(f'ip -6 address show dev {tunnel_name}') + print(output) + self.assertRegex(output, 'inet6 2001:db8:6464:[0-9a-f]+0[23]:[0-9a-f]*:[0-9a-f]*:[0-9a-f]*:[0-9a-f]*/64 (metric 256 |)scope global dynamic') + self.assertRegex(output, 'inet6 ::10.100.100.[0-9]+/96 scope global') + + print(f'### ip -6 route show dev {tunnel_name}') + output = check_output(f'ip -6 route show dev {tunnel_name}') + print(output) + self.assertRegex(output, '2001:db8:6464:[0-9a-f]+0[23]::/64 proto kernel metric [0-9]* expires') + self.assertRegex(output, '::/96 proto kernel metric [0-9]*') + + print('### ip -6 route show default') + output = check_output('ip -6 route show default') + print(output) + self.assertIn('default', output) + self.assertIn(f'via ::10.0.0.1 dev {tunnel_name}', output) + + def test_dhcp4_6rd(self): + copy_network_unit('25-veth.netdev', '25-dhcp4-6rd-server.network', '25-dhcp4-6rd-upstream.network', + '25-veth-downstream-veth97.netdev', '25-dhcp-pd-downstream-veth97.network', '25-dhcp-pd-downstream-veth97-peer.network', + '25-veth-downstream-veth98.netdev', '25-dhcp-pd-downstream-veth98.network', '25-dhcp-pd-downstream-veth98-peer.network', + '11-dummy.netdev', '25-dhcp-pd-downstream-test1.network', + '25-dhcp-pd-downstream-dummy97.network', + '12-dummy.netdev', '25-dhcp-pd-downstream-dummy98.network', + '13-dummy.netdev', '25-dhcp-pd-downstream-dummy99.network', + '80-6rd-tunnel.network') + + start_networkd() + self.wait_online(['veth-peer:routable']) + + # ipv4masklen: 8 + # 6rd-prefix: 2001:db8::/32 + # br-addresss: 10.0.0.1 + + start_dnsmasq('--dhcp-option=212,08:20:20:01:0d:b8:00:00:00:00:00:00:00:00:00:00:00:00:0a:00:00:01', + ipv4_range='10.100.100.100,10.100.100.200', + ipv4_router='10.0.0.1') + self.wait_online(['veth99:routable', 'test1:routable', 'dummy98:routable', 'dummy99:degraded', + 'veth97:routable', 'veth97-peer:routable', 'veth98:routable', 'veth98-peer:routable']) + + # Test case for a downstream which appears later + check_output('ip link add dummy97 type dummy') + self.wait_online(['dummy97:routable']) + + # Find tunnel name + tunnel_name = None + for name in os.listdir('/sys/class/net/'): + if name.startswith('6rd-'): + tunnel_name = name + break + + self.wait_online([f'{tunnel_name}:routable']) + + self.verify_dhcp4_6rd(tunnel_name) + + # Test case for reconfigure + networkctl_reconfigure('dummy98', 'dummy99') + self.wait_online(['dummy98:routable', 'dummy99:degraded']) + + self.verify_dhcp4_6rd(tunnel_name) + + print('Wait for the DHCP lease to be renewed/rebind') + time.sleep(120) + + self.wait_online(['veth99:routable', 'test1:routable', 'dummy97:routable', 'dummy98:routable', 'dummy99:degraded', + 'veth97:routable', 'veth97-peer:routable', 'veth98:routable', 'veth98-peer:routable']) + + self.verify_dhcp4_6rd(tunnel_name) + +class NetworkdIPv6PrefixTests(unittest.TestCase, Utilities): + + def setUp(self): + setup_common() + + def tearDown(self): + tear_down_common() + + def test_ipv6_route_prefix(self): + copy_network_unit('25-veth.netdev', '25-ipv6ra-prefix-client.network', '25-ipv6ra-prefix.network', + '12-dummy.netdev', '25-ipv6ra-uplink.network') + + start_networkd() + self.wait_online(['veth99:routable', 'veth-peer:routable', 'dummy98:routable']) + + output = check_output('ip address show dev veth-peer') + print(output) + self.assertIn('inet6 2001:db8:0:1:', output) + self.assertNotIn('inet6 2001:db8:0:2:', output) + self.assertNotIn('inet6 2001:db8:0:3:', output) + + output = check_output('ip -6 route show dev veth-peer') + print(output) + self.assertIn('2001:db8:0:1::/64 proto ra', output) + self.assertNotIn('2001:db8:0:2::/64 proto ra', output) + self.assertNotIn('2001:db8:0:3::/64 proto ra', output) + self.assertIn('2001:db0:fff::/64 via ', output) + self.assertNotIn('2001:db1:fff::/64 via ', output) + self.assertNotIn('2001:db2:fff::/64 via ', output) + + output = check_output('ip address show dev veth99') + print(output) + self.assertNotIn('inet6 2001:db8:0:1:', output) + self.assertIn('inet6 2001:db8:0:2:1a:2b:3c:4d', output) + self.assertIn('inet6 2001:db8:0:2:fa:de:ca:fe', output) + self.assertNotIn('inet6 2001:db8:0:3:', output) + + output = check_output(*resolvectl_cmd, 'dns', 'veth-peer', env=env) + print(output) + self.assertRegex(output, '2001:db8:1:1::2') + + output = check_output(*resolvectl_cmd, 'domain', 'veth-peer', env=env) + print(output) + self.assertIn('example.com', output) + + # TODO: check json string + check_output(*networkctl_cmd, '--json=short', 'status', env=env) + + def test_ipv6_route_prefix_deny_list(self): + copy_network_unit('25-veth.netdev', '25-ipv6ra-prefix-client-deny-list.network', '25-ipv6ra-prefix.network', + '12-dummy.netdev', '25-ipv6ra-uplink.network') + + start_networkd() + self.wait_online(['veth99:routable', 'veth-peer:routable', 'dummy98:routable']) + + output = check_output('ip address show dev veth-peer') + print(output) + self.assertIn('inet6 2001:db8:0:1:', output) + self.assertNotIn('inet6 2001:db8:0:2:', output) + + output = check_output('ip -6 route show dev veth-peer') + print(output) + self.assertIn('2001:db8:0:1::/64 proto ra', output) + self.assertNotIn('2001:db8:0:2::/64 proto ra', output) + self.assertIn('2001:db0:fff::/64 via ', output) + self.assertNotIn('2001:db1:fff::/64 via ', output) + + output = check_output('ip address show dev veth99') + print(output) + self.assertNotIn('inet6 2001:db8:0:1:', output) + self.assertIn('inet6 2001:db8:0:2:', output) + + output = check_output(*resolvectl_cmd, 'dns', 'veth-peer', env=env) + print(output) + self.assertRegex(output, '2001:db8:1:1::2') + + output = check_output(*resolvectl_cmd, 'domain', 'veth-peer', env=env) + print(output) + self.assertIn('example.com', output) + +class NetworkdMTUTests(unittest.TestCase, Utilities): + + def setUp(self): + setup_common() + + def tearDown(self): + tear_down_common() + + def check_mtu(self, mtu, ipv6_mtu=None, reset=True): + if not ipv6_mtu: + ipv6_mtu = mtu + + # test normal start + start_networkd() + self.wait_online(['dummy98:routable']) + self.check_link_attr('dummy98', 'mtu', mtu) + self.check_ipv6_sysctl_attr('dummy98', 'mtu', ipv6_mtu) + + # test normal restart + restart_networkd() + self.wait_online(['dummy98:routable']) + self.check_link_attr('dummy98', 'mtu', mtu) + self.check_ipv6_sysctl_attr('dummy98', 'mtu', ipv6_mtu) + + if reset: + self.reset_check_mtu(mtu, ipv6_mtu) + + def reset_check_mtu(self, mtu, ipv6_mtu=None): + ''' test setting mtu/ipv6_mtu with interface already up ''' + stop_networkd() + + # note - changing the device mtu resets the ipv6 mtu + check_output('ip link set up mtu 1501 dev dummy98') + check_output('ip link set up mtu 1500 dev dummy98') + self.check_link_attr('dummy98', 'mtu', '1500') + self.check_ipv6_sysctl_attr('dummy98', 'mtu', '1500') + + self.check_mtu(mtu, ipv6_mtu, reset=False) + + def test_mtu_network(self): + copy_network_unit('12-dummy.netdev', '12-dummy.network.d/mtu.conf') + self.check_mtu('1600') + + def test_mtu_netdev(self): + copy_network_unit('12-dummy-mtu.netdev', '12-dummy.network', copy_dropins=False) + # note - MTU set by .netdev happens ONLY at device creation! + self.check_mtu('1600', reset=False) + + def test_mtu_link(self): + copy_network_unit('12-dummy.netdev', '12-dummy-mtu.link', '12-dummy.network', copy_dropins=False) + # note - MTU set by .link happens ONLY at udev processing of device 'add' uevent! + self.check_mtu('1600', reset=False) + + def test_ipv6_mtu(self): + ''' set ipv6 mtu without setting device mtu ''' + copy_network_unit('12-dummy.netdev', '12-dummy.network.d/ipv6-mtu-1400.conf') + self.check_mtu('1500', '1400') + + def test_ipv6_mtu_toolarge(self): + ''' try set ipv6 mtu over device mtu (it shouldn't work) ''' + copy_network_unit('12-dummy.netdev', '12-dummy.network.d/ipv6-mtu-1550.conf') + self.check_mtu('1500', '1500') + + def test_mtu_network_ipv6_mtu(self): + ''' set ipv6 mtu and set device mtu via network file ''' + copy_network_unit('12-dummy.netdev', '12-dummy.network.d/mtu.conf', '12-dummy.network.d/ipv6-mtu-1550.conf') + self.check_mtu('1600', '1550') + + def test_mtu_netdev_ipv6_mtu(self): + ''' set ipv6 mtu and set device mtu via netdev file ''' + copy_network_unit('12-dummy-mtu.netdev', '12-dummy.network.d/ipv6-mtu-1550.conf') + self.check_mtu('1600', '1550', reset=False) + + def test_mtu_link_ipv6_mtu(self): + ''' set ipv6 mtu and set device mtu via link file ''' + copy_network_unit('12-dummy.netdev', '12-dummy-mtu.link', '12-dummy.network.d/ipv6-mtu-1550.conf') + self.check_mtu('1600', '1550', reset=False) + + +if __name__ == '__main__': + parser = argparse.ArgumentParser() + parser.add_argument('--build-dir', help='Path to build dir', dest='build_dir') + parser.add_argument('--source-dir', help='Path to source dir/git tree', dest='source_dir') + parser.add_argument('--networkd', help='Path to systemd-networkd', dest='networkd_bin') + parser.add_argument('--resolved', help='Path to systemd-resolved', dest='resolved_bin') + parser.add_argument('--timesyncd', help='Path to systemd-timesyncd', dest='timesyncd_bin') + parser.add_argument('--udevd', help='Path to systemd-udevd', dest='udevd_bin') + parser.add_argument('--wait-online', help='Path to systemd-networkd-wait-online', dest='wait_online_bin') + parser.add_argument('--networkctl', help='Path to networkctl', dest='networkctl_bin') + parser.add_argument('--resolvectl', help='Path to resolvectl', dest='resolvectl_bin') + parser.add_argument('--timedatectl', help='Path to timedatectl', dest='timedatectl_bin') + parser.add_argument('--udevadm', help='Path to udevadm', dest='udevadm_bin') + parser.add_argument('--valgrind', help='Enable valgrind', dest='use_valgrind', type=bool, nargs='?', const=True, default=use_valgrind) + parser.add_argument('--debug', help='Generate debugging logs', dest='enable_debug', type=bool, nargs='?', const=True, default=enable_debug) + parser.add_argument('--asan-options', help='ASAN options', dest='asan_options') + parser.add_argument('--lsan-options', help='LSAN options', dest='lsan_options') + parser.add_argument('--ubsan-options', help='UBSAN options', dest='ubsan_options') + parser.add_argument('--with-coverage', help='Loosen certain sandbox restrictions to make gcov happy', dest='with_coverage', type=bool, nargs='?', const=True, default=with_coverage) + ns, unknown_args = parser.parse_known_args(namespace=unittest) + + if ns.build_dir: + if ns.networkd_bin or ns.resolved_bin or ns.timesyncd_bin or ns.udevd_bin or \ + ns.wait_online_bin or ns.networkctl_bin or ns.resolvectl_bin or ns.timedatectl_bin or ns.udevadm_bin: + print('WARNING: --networkd, --resolved, --timesyncd, --udevd, --wait-online, --networkctl, --resolvectl, --timedatectl, or --udevadm options are ignored when --build-dir is specified.') + networkd_bin = os.path.join(ns.build_dir, 'systemd-networkd') + resolved_bin = os.path.join(ns.build_dir, 'systemd-resolved') + timesyncd_bin = os.path.join(ns.build_dir, 'systemd-timesyncd') + udevd_bin = os.path.join(ns.build_dir, 'systemd-udevd') + wait_online_bin = os.path.join(ns.build_dir, 'systemd-networkd-wait-online') + networkctl_bin = os.path.join(ns.build_dir, 'networkctl') + resolvectl_bin = os.path.join(ns.build_dir, 'resolvectl') + timedatectl_bin = os.path.join(ns.build_dir, 'timedatectl') + udevadm_bin = os.path.join(ns.build_dir, 'udevadm') + systemd_udev_rules_build_dir = os.path.join(ns.build_dir, 'rules.d') + else: + if ns.networkd_bin: + networkd_bin = ns.networkd_bin + if ns.resolved_bin: + resolved_bin = ns.resolved_bin + if ns.timesyncd_bin: + timesyncd_bin = ns.timesyncd_bin + if ns.udevd_bin: + udevd_bin = ns.udevd_bin + if ns.wait_online_bin: + wait_online_bin = ns.wait_online_bin + if ns.networkctl_bin: + networkctl_bin = ns.networkctl_bin + if ns.resolvectl_bin: + resolvectl_bin = ns.resolvectl_bin + if ns.timedatectl_bin: + timedatectl_bin = ns.timedatectl_bin + if ns.udevadm_bin: + udevadm_bin = ns.udevadm_bin + + if ns.source_dir: + systemd_source_dir = ns.source_dir + else: + systemd_source_dir = os.path.normpath(os.path.join(os.path.dirname(os.path.abspath(__file__)), "../../")) + if not os.path.exists(os.path.join(systemd_source_dir, "meson_options.txt")): + raise RuntimeError(f"{systemd_source_dir} doesn't appear to be a systemd source tree") + + use_valgrind = ns.use_valgrind + enable_debug = ns.enable_debug + asan_options = ns.asan_options + lsan_options = ns.lsan_options + ubsan_options = ns.ubsan_options + with_coverage = ns.with_coverage + + if use_valgrind: + # Do not forget the trailing space. + valgrind_cmd = 'valgrind --track-origins=yes --leak-check=full --show-leak-kinds=all ' + + networkctl_cmd = valgrind_cmd.split() + [networkctl_bin] + resolvectl_cmd = valgrind_cmd.split() + [resolvectl_bin] + timedatectl_cmd = valgrind_cmd.split() + [timedatectl_bin] + udevadm_cmd = valgrind_cmd.split() + [udevadm_bin] + wait_online_cmd = valgrind_cmd.split() + [wait_online_bin] + + if asan_options: + env.update({'ASAN_OPTIONS': asan_options}) + if lsan_options: + env.update({'LSAN_OPTIONS': lsan_options}) + if ubsan_options: + env.update({'UBSAN_OPTIONS': ubsan_options}) + if use_valgrind: + env.update({'SYSTEMD_MEMPOOL': '0'}) + + wait_online_env = env.copy() + if enable_debug: + wait_online_env.update({'SYSTEMD_LOG_LEVEL': 'debug'}) + + sys.argv[1:] = unknown_args + unittest.main(verbosity=3) |