summaryrefslogtreecommitdiffstats
path: root/test/test-network
diff options
context:
space:
mode:
Diffstat (limited to '')
-rwxr-xr-xtest/test-network-generator-conversion.sh300
-rw-r--r--test/test-network-generator-conversion/.gitattributes1
-rw-r--r--test/test-network-generator-conversion/test-01-dhcp.expected/91-default.network12
-rw-r--r--test/test-network-generator-conversion/test-01-dhcp.input1
-rw-r--r--test/test-network-generator-conversion/test-02-bridge.expected/90-bridge99.netdev5
-rw-r--r--test/test-network-generator-conversion/test-02-bridge.expected/90-bridge99.network13
-rw-r--r--test/test-network-generator-conversion/test-02-bridge.expected/90-eth0.network21
-rw-r--r--test/test-network-generator-conversion/test-02-bridge.expected/90-eth1.network21
-rw-r--r--test/test-network-generator-conversion/test-02-bridge.input4
-rw-r--r--test/test-network-generator-conversion/test-03-issue-14319.expected/90-enp3s0.network17
-rw-r--r--test/test-network-generator-conversion/test-03-issue-14319.input1
-rw-r--r--test/test-network/.gitattributes1
-rw-r--r--test/test-network/conf/00-debug-net.rules2
-rw-r--r--test/test-network/conf/10-dropin-test.netdev5
-rw-r--r--test/test-network/conf/10-dropin-test.netdev.d/mac.conf2
-rw-r--r--test/test-network/conf/10-dropin-test.netdev.d/name.conf2
-rw-r--r--test/test-network/conf/11-dummy-mtu.netdev5
-rw-r--r--test/test-network/conf/11-dummy.netdev4
-rw-r--r--test/test-network/conf/11-dummy.network6
-rw-r--r--test/test-network/conf/12-dummy-mtu.link6
-rw-r--r--test/test-network/conf/12-dummy-mtu.netdev5
-rw-r--r--test/test-network/conf/12-dummy-no-address.network6
-rw-r--r--test/test-network/conf/12-dummy-rename-to-altname.link7
-rw-r--r--test/test-network/conf/12-dummy.link6
-rw-r--r--test/test-network/conf/12-dummy.netdev4
-rw-r--r--test/test-network/conf/12-dummy.network8
-rw-r--r--test/test-network/conf/12-dummy.network.d/ipv6-mtu-1400.conf2
-rw-r--r--test/test-network/conf/12-dummy.network.d/ipv6-mtu-1550.conf2
-rw-r--r--test/test-network/conf/12-dummy.network.d/mtu.conf2
-rw-r--r--test/test-network/conf/13-dummy.netdev4
-rw-r--r--test/test-network/conf/13-not-match-udev-property.network7
-rw-r--r--test/test-network/conf/14-match-udev-property.network8
-rw-r--r--test/test-network/conf/15-name-conflict-test.netdev5
-rw-r--r--test/test-network/conf/21-bond-802.3ad.netdev8
-rw-r--r--test/test-network/conf/21-bond-802.3ad.network8
-rw-r--r--test/test-network/conf/21-dummy-bond-slave.network7
-rw-r--r--test/test-network/conf/21-macvlan.netdev5
-rw-r--r--test/test-network/conf/21-macvtap.netdev4
-rw-r--r--test/test-network/conf/21-vlan-on-bond.netdev7
-rw-r--r--test/test-network/conf/21-vlan-on-bond.network8
-rw-r--r--test/test-network/conf/21-vlan-test1.network3
-rw-r--r--test/test-network/conf/21-vlan-test1.network.d/override.conf5
-rw-r--r--test/test-network/conf/21-vlan.netdev4
-rw-r--r--test/test-network/conf/21-vlan.netdev.d/override.conf11
-rw-r--r--test/test-network/conf/21-vlan.network8
-rw-r--r--test/test-network/conf/23-active-slave.network7
-rw-r--r--test/test-network/conf/23-bond199.network6
-rw-r--r--test/test-network/conf/23-emit-lldp.network7
-rw-r--r--test/test-network/conf/23-keep-master.network22
-rw-r--r--test/test-network/conf/23-primary-slave.network7
-rw-r--r--test/test-network/conf/24-keep-configuration-static.network7
-rw-r--r--test/test-network/conf/24-lldp.network7
-rw-r--r--test/test-network/conf/24-search-domain.network9
-rw-r--r--test/test-network/conf/25-6rd-tunnel.netdev8
-rw-r--r--test/test-network/conf/25-6rd.network7
-rw-r--r--test/test-network/conf/25-activation-policy.network9
-rw-r--r--test/test-network/conf/25-activation-policy.network.d/always-down.conf2
-rw-r--r--test/test-network/conf/25-activation-policy.network.d/always-up.conf2
-rw-r--r--test/test-network/conf/25-activation-policy.network.d/bound.conf5
-rw-r--r--test/test-network/conf/25-activation-policy.network.d/down.conf2
-rw-r--r--test/test-network/conf/25-activation-policy.network.d/manual.conf2
-rw-r--r--test/test-network/conf/25-activation-policy.network.d/required-no.conf2
-rw-r--r--test/test-network/conf/25-activation-policy.network.d/required-yes.conf2
-rw-r--r--test/test-network/conf/25-activation-policy.network.d/up.conf2
-rw-r--r--test/test-network/conf/25-address-ipv4acd-veth99.network10
-rw-r--r--test/test-network/conf/25-address-ipv4acd-veth99.network.d/conflict-address.conf3
-rw-r--r--test/test-network/conf/25-address-link-section.network9
-rw-r--r--test/test-network/conf/25-address-peer-ipv4.network10
-rw-r--r--test/test-network/conf/25-address-static.network368
-rw-r--r--test/test-network/conf/25-agent-client-peer.network15
-rw-r--r--test/test-network/conf/25-agent-client.network8
-rw-r--r--test/test-network/conf/25-agent-server-peer.network8
-rw-r--r--test/test-network/conf/25-agent-server.network16
-rw-r--r--test/test-network/conf/25-agent-veth-client.netdev9
-rw-r--r--test/test-network/conf/25-agent-veth-server.netdev9
-rw-r--r--test/test-network/conf/25-bareudp.netdev8
-rw-r--r--test/test-network/conf/25-batadv.netdev15
-rw-r--r--test/test-network/conf/25-bind-carrier.network9
-rw-r--r--test/test-network/conf/25-bond-active-backup-slave.netdev7
-rw-r--r--test/test-network/conf/25-bond-balanced-tlb.netdev8
-rw-r--r--test/test-network/conf/25-bond-slave.network13
-rw-r--r--test/test-network/conf/25-bond.netdev19
-rw-r--r--test/test-network/conf/25-bond99.network7
-rw-r--r--test/test-network/conf/25-bridge-configure-without-carrier.network7
-rw-r--r--test/test-network/conf/25-bridge.netdev19
-rw-r--r--test/test-network/conf/25-bridge.network6
-rw-r--r--test/test-network/conf/25-bridge99-ignore-carrier-loss.network14
-rw-r--r--test/test-network/conf/25-bridge99.network11
-rw-r--r--test/test-network/conf/25-dhcp-client-allow-list.network12
-rw-r--r--test/test-network/conf/25-dhcp-client-anonymize.network17
-rw-r--r--test/test-network/conf/25-dhcp-client-gateway-onlink-implicit.network15
-rw-r--r--test/test-network/conf/25-dhcp-client-ipv4-only.network44
-rw-r--r--test/test-network/conf/25-dhcp-client-ipv4-use-routes-use-gateway.network7
-rw-r--r--test/test-network/conf/25-dhcp-client-ipv4-use-routes-use-gateway.network.d/use-dns-and-ntp-routes-False.conf3
-rw-r--r--test/test-network/conf/25-dhcp-client-ipv4-use-routes-use-gateway.network.d/use-dns-and-ntp-routes-True.conf3
-rw-r--r--test/test-network/conf/25-dhcp-client-ipv4-use-routes-use-gateway.network.d/use-gateway-False.conf2
-rw-r--r--test/test-network/conf/25-dhcp-client-ipv4-use-routes-use-gateway.network.d/use-gateway-True.conf2
-rw-r--r--test/test-network/conf/25-dhcp-client-ipv4-use-routes-use-gateway.network.d/use-routes-False.conf2
-rw-r--r--test/test-network/conf/25-dhcp-client-ipv4-use-routes-use-gateway.network.d/use-routes-True.conf2
-rw-r--r--test/test-network/conf/25-dhcp-client-ipv6-only.network11
-rw-r--r--test/test-network/conf/25-dhcp-client-keep-configuration-dhcp-on-stop.network8
-rw-r--r--test/test-network/conf/25-dhcp-client-keep-configuration-dhcp.network8
-rw-r--r--test/test-network/conf/25-dhcp-client-static-lease.network10
-rw-r--r--test/test-network/conf/25-dhcp-client-timezone-router.network11
-rw-r--r--test/test-network/conf/25-dhcp-client-use-dns-ipv4-and-ra.network12
-rw-r--r--test/test-network/conf/25-dhcp-client-use-dns-ipv4.network15
-rw-r--r--test/test-network/conf/25-dhcp-client-use-dns-no.network15
-rw-r--r--test/test-network/conf/25-dhcp-client-use-dns-yes.network15
-rw-r--r--test/test-network/conf/25-dhcp-client-vrf.network8
-rw-r--r--test/test-network/conf/25-dhcp-client-with-ipv4ll.network9
-rw-r--r--test/test-network/conf/25-dhcp-client-with-static-address.network8
-rw-r--r--test/test-network/conf/25-dhcp-client.network6
-rw-r--r--test/test-network/conf/25-dhcp-pd-downstream-dummy97.network16
-rw-r--r--test/test-network/conf/25-dhcp-pd-downstream-dummy98.network18
-rw-r--r--test/test-network/conf/25-dhcp-pd-downstream-dummy99.network14
-rw-r--r--test/test-network/conf/25-dhcp-pd-downstream-test1.network16
-rw-r--r--test/test-network/conf/25-dhcp-pd-downstream-veth97-peer.network11
-rw-r--r--test/test-network/conf/25-dhcp-pd-downstream-veth97.network20
-rw-r--r--test/test-network/conf/25-dhcp-pd-downstream-veth98-peer.network11
-rw-r--r--test/test-network/conf/25-dhcp-pd-downstream-veth98.network21
-rw-r--r--test/test-network/conf/25-dhcp-server-downstream.network14
-rw-r--r--test/test-network/conf/25-dhcp-server-static-lease.network18
-rw-r--r--test/test-network/conf/25-dhcp-server-timezone-router.network18
-rw-r--r--test/test-network/conf/25-dhcp-server-uplink.network9
-rw-r--r--test/test-network/conf/25-dhcp-server-veth-peer.network8
-rw-r--r--test/test-network/conf/25-dhcp-server.network15
-rw-r--r--test/test-network/conf/25-dhcp4-6rd-server.network7
-rw-r--r--test/test-network/conf/25-dhcp4-6rd-upstream.network20
-rw-r--r--test/test-network/conf/25-dhcp6pd-server.network7
-rw-r--r--test/test-network/conf/25-dhcp6pd-upstream.network19
-rw-r--r--test/test-network/conf/25-erspan.network8
-rw-r--r--test/test-network/conf/25-erspan0-tunnel-local-any.netdev15
-rw-r--r--test/test-network/conf/25-erspan0-tunnel.netdev15
-rw-r--r--test/test-network/conf/25-erspan1-tunnel-local-any.netdev15
-rw-r--r--test/test-network/conf/25-erspan1-tunnel.netdev15
-rw-r--r--test/test-network/conf/25-erspan2-tunnel-local-any.netdev15
-rw-r--r--test/test-network/conf/25-erspan2-tunnel.netdev15
-rw-r--r--test/test-network/conf/25-fibrule-invert.network14
-rw-r--r--test/test-network/conf/25-fibrule-port-range.network15
-rw-r--r--test/test-network/conf/25-fibrule-uidrange.network13
-rw-r--r--test/test-network/conf/25-fou-gre.netdev15
-rw-r--r--test/test-network/conf/25-fou-gretap.netdev14
-rw-r--r--test/test-network/conf/25-fou-ipip.netdev13
-rw-r--r--test/test-network/conf/25-fou-ipproto-gre.netdev9
-rw-r--r--test/test-network/conf/25-fou-ipproto-ipip.netdev9
-rw-r--r--test/test-network/conf/25-fou-sit.netdev12
-rw-r--r--test/test-network/conf/25-gateway-next-static.network8
-rw-r--r--test/test-network/conf/25-gateway-static.network8
-rw-r--r--test/test-network/conf/25-geneve.netdev13
-rw-r--r--test/test-network/conf/25-gre-tunnel-any-any.netdev10
-rw-r--r--test/test-network/conf/25-gre-tunnel-local-any.netdev10
-rw-r--r--test/test-network/conf/25-gre-tunnel-remote-any.netdev10
-rw-r--r--test/test-network/conf/25-gre-tunnel.netdev11
-rw-r--r--test/test-network/conf/25-gretap-tunnel-local-any.netdev10
-rw-r--r--test/test-network/conf/25-gretap-tunnel.netdev10
-rw-r--r--test/test-network/conf/25-gretap.network8
-rw-r--r--test/test-network/conf/25-gretun.network10
-rw-r--r--test/test-network/conf/25-ifb.netdev4
-rw-r--r--test/test-network/conf/25-ip6gre-tunnel-any-any.netdev8
-rw-r--r--test/test-network/conf/25-ip6gre-tunnel-local-any.netdev8
-rw-r--r--test/test-network/conf/25-ip6gre-tunnel-remote-any.netdev8
-rw-r--r--test/test-network/conf/25-ip6gre-tunnel.netdev8
-rw-r--r--test/test-network/conf/25-ip6gretap-tunnel-local-any.netdev8
-rw-r--r--test/test-network/conf/25-ip6gretap-tunnel.netdev8
-rw-r--r--test/test-network/conf/25-ip6gretap.network8
-rw-r--r--test/test-network/conf/25-ip6gretun.network10
-rw-r--r--test/test-network/conf/25-ip6tnl-slaac.network10
-rw-r--r--test/test-network/conf/25-ip6tnl-tunnel-external.netdev8
-rw-r--r--test/test-network/conf/25-ip6tnl-tunnel-local-any.netdev9
-rw-r--r--test/test-network/conf/25-ip6tnl-tunnel-local-slaac.netdev9
-rw-r--r--test/test-network/conf/25-ip6tnl-tunnel-local-slaac.network10
-rw-r--r--test/test-network/conf/25-ip6tnl-tunnel-remote-any.netdev9
-rw-r--r--test/test-network/conf/25-ip6tnl-tunnel.netdev9
-rw-r--r--test/test-network/conf/25-ip6tnl.network9
-rw-r--r--test/test-network/conf/25-ipip-tunnel-any-any.netdev9
-rw-r--r--test/test-network/conf/25-ipip-tunnel-independent-loopback.netdev11
-rw-r--r--test/test-network/conf/25-ipip-tunnel-independent.netdev10
-rw-r--r--test/test-network/conf/25-ipip-tunnel-local-any.netdev9
-rw-r--r--test/test-network/conf/25-ipip-tunnel-remote-any.netdev9
-rw-r--r--test/test-network/conf/25-ipip-tunnel.netdev9
-rw-r--r--test/test-network/conf/25-ipip.network10
-rw-r--r--test/test-network/conf/25-ipv6-address-label-section.network34
-rw-r--r--test/test-network/conf/25-ipv6-prefix-veth-token-prefixstable-without-address.network10
-rw-r--r--test/test-network/conf/25-ipv6-prefix-veth-token-prefixstable.network19
-rw-r--r--test/test-network/conf/25-ipv6-prefix-veth-token-static.network13
-rw-r--r--test/test-network/conf/25-ipv6-prefix-veth.network11
-rw-r--r--test/test-network/conf/25-ipv6-prefix.network22
-rw-r--r--test/test-network/conf/25-ipv6-proxy-ndp.network25
-rw-r--r--test/test-network/conf/25-ipv6ra-prefix-client-deny-list.network13
-rw-r--r--test/test-network/conf/25-ipv6ra-prefix-client.network14
-rw-r--r--test/test-network/conf/25-ipv6ra-prefix.network34
-rw-r--r--test/test-network/conf/25-ipv6ra-uplink.network9
-rw-r--r--test/test-network/conf/25-ipvlan.netdev4
-rw-r--r--test/test-network/conf/25-ipvlan.network7
-rw-r--r--test/test-network/conf/25-ipvtap.netdev4
-rw-r--r--test/test-network/conf/25-ipvtap.network7
-rw-r--r--test/test-network/conf/25-isatap-tunnel.netdev9
-rw-r--r--test/test-network/conf/25-isatap.network7
-rw-r--r--test/test-network/conf/25-l2tp-dummy.network7
-rw-r--r--test/test-network/conf/25-l2tp-ip.netdev21
-rw-r--r--test/test-network/conf/25-l2tp-udp.netdev26
-rw-r--r--test/test-network/conf/25-l2tp.network7
-rw-r--r--test/test-network/conf/25-link-local-addressing-no.network6
-rw-r--r--test/test-network/conf/25-link-local-addressing-yes.network8
-rw-r--r--test/test-network/conf/25-link-section-unmanaged.network7
-rw-r--r--test/test-network/conf/25-macsec.key1
-rw-r--r--test/test-network/conf/25-macsec.netdev69
-rw-r--r--test/test-network/conf/25-macsec.network8
-rw-r--r--test/test-network/conf/25-macvlan.network7
-rw-r--r--test/test-network/conf/25-macvtap.network7
-rw-r--r--test/test-network/conf/25-neighbor-ip-dummy.network8
-rw-r--r--test/test-network/conf/25-neighbor-ip.network11
-rw-r--r--test/test-network/conf/25-neighbor-ipv6.network12
-rw-r--r--test/test-network/conf/25-neighbor-next.network10
-rw-r--r--test/test-network/conf/25-neighbor-section.network14
-rw-r--r--test/test-network/conf/25-nexthop-dummy.network15
-rw-r--r--test/test-network/conf/25-nexthop-nothing.network9
-rw-r--r--test/test-network/conf/25-nexthop.network83
-rw-r--r--test/test-network/conf/25-nlmon.netdev4
-rw-r--r--test/test-network/conf/25-prefix-route-with-vrf.network27
-rw-r--r--test/test-network/conf/25-prefix-route-without-vrf.network26
-rw-r--r--test/test-network/conf/25-qdisc-cake.network23
-rw-r--r--test/test-network/conf/25-qdisc-clsact.network10
-rw-r--r--test/test-network/conf/25-qdisc-codel.network16
-rw-r--r--test/test-network/conf/25-qdisc-drr.network16
-rw-r--r--test/test-network/conf/25-qdisc-ets.network21
-rw-r--r--test/test-network/conf/25-qdisc-fq.network20
-rw-r--r--test/test-network/conf/25-qdisc-fq_codel.network19
-rw-r--r--test/test-network/conf/25-qdisc-fq_pie.network12
-rw-r--r--test/test-network/conf/25-qdisc-gred.network14
-rw-r--r--test/test-network/conf/25-qdisc-hhf.network12
-rw-r--r--test/test-network/conf/25-qdisc-htb-fifo.network65
-rw-r--r--test/test-network/conf/25-qdisc-ingress.network10
-rw-r--r--test/test-network/conf/25-qdisc-netem-compat.network14
-rw-r--r--test/test-network/conf/25-qdisc-netem.network15
-rw-r--r--test/test-network/conf/25-qdisc-pie.network12
-rw-r--r--test/test-network/conf/25-qdisc-qfq.network23
-rw-r--r--test/test-network/conf/25-qdisc-sfb.network12
-rw-r--r--test/test-network/conf/25-qdisc-sfq.network12
-rw-r--r--test/test-network/conf/25-qdisc-tbf.network16
-rw-r--r--test/test-network/conf/25-qdisc-teql.network12
-rw-r--r--test/test-network/conf/25-route-congctl.network16
-rw-r--r--test/test-network/conf/25-route-ipv6-src.network17
-rw-r--r--test/test-network/conf/25-route-preferred-source.network12
-rw-r--r--test/test-network/conf/25-route-static.network107
-rw-r--r--test/test-network/conf/25-route-via-ipv6.network15
-rw-r--r--test/test-network/conf/25-route-vrf.network9
-rw-r--r--test/test-network/conf/25-routing-policy-rule-dummy98.network14
-rw-r--r--test/test-network/conf/25-routing-policy-rule-reconfigure1.network34
-rw-r--r--test/test-network/conf/25-routing-policy-rule-reconfigure2.network34
-rw-r--r--test/test-network/conf/25-routing-policy-rule-test1.network33
-rw-r--r--test/test-network/conf/25-sit-tunnel-any-any.netdev8
-rw-r--r--test/test-network/conf/25-sit-tunnel-local-any.netdev8
-rw-r--r--test/test-network/conf/25-sit-tunnel-remote-any.netdev8
-rw-r--r--test/test-network/conf/25-sit-tunnel.netdev8
-rw-r--r--test/test-network/conf/25-sit.network10
-rw-r--r--test/test-network/conf/25-sriov-udev.network7
-rw-r--r--test/test-network/conf/25-sriov.link40
-rw-r--r--test/test-network/conf/25-sriov.network39
-rw-r--r--test/test-network/conf/25-state-file-tests.network19
-rw-r--r--test/test-network/conf/25-sysctl-disable-ipv6.network19
-rw-r--r--test/test-network/conf/25-sysctl.network13
-rw-r--r--test/test-network/conf/25-tap.netdev10
-rw-r--r--test/test-network/conf/25-test1.network8
-rw-r--r--test/test-network/conf/25-test1.network.d/configure-without-carrier.conf2
-rw-r--r--test/test-network/conf/25-test1.network.d/ignore-carrier-loss-no.conf2
-rw-r--r--test/test-network/conf/25-tun.netdev10
-rw-r--r--test/test-network/conf/25-tunnel-any-any.network9
-rw-r--r--test/test-network/conf/25-tunnel-local-any.network9
-rw-r--r--test/test-network/conf/25-tunnel-remote-any.network9
-rw-r--r--test/test-network/conf/25-tunnel.network9
-rw-r--r--test/test-network/conf/25-vcan.netdev5
-rw-r--r--test/test-network/conf/25-vcan98.netdev4
-rw-r--r--test/test-network/conf/25-vcan98.network6
-rw-r--r--test/test-network/conf/25-veth-downstream-veth97.netdev9
-rw-r--r--test/test-network/conf/25-veth-downstream-veth98.netdev9
-rw-r--r--test/test-network/conf/25-veth-mtu.netdev10
-rw-r--r--test/test-network/conf/25-veth-peer.network8
-rw-r--r--test/test-network/conf/25-veth.netdev9
-rw-r--r--test/test-network/conf/25-vrf.netdev7
-rw-r--r--test/test-network/conf/25-vrf.network6
-rw-r--r--test/test-network/conf/25-vti-tunnel-any-any.netdev8
-rw-r--r--test/test-network/conf/25-vti-tunnel-local-any.netdev8
-rw-r--r--test/test-network/conf/25-vti-tunnel-remote-any.netdev8
-rw-r--r--test/test-network/conf/25-vti-tunnel.netdev8
-rw-r--r--test/test-network/conf/25-vti.network10
-rw-r--r--test/test-network/conf/25-vti6-tunnel-local-any.netdev8
-rw-r--r--test/test-network/conf/25-vti6-tunnel-remote-any.netdev8
-rw-r--r--test/test-network/conf/25-vti6-tunnel.netdev8
-rw-r--r--test/test-network/conf/25-vti6.network9
-rw-r--r--test/test-network/conf/25-vxcan.netdev7
-rw-r--r--test/test-network/conf/25-vxlan-independent.netdev18
-rw-r--r--test/test-network/conf/25-vxlan-ipv6.netdev8
-rw-r--r--test/test-network/conf/25-vxlan-ipv6.network25
-rw-r--r--test/test-network/conf/25-vxlan-local-slaac.netdev8
-rw-r--r--test/test-network/conf/25-vxlan-local-slaac.network7
-rw-r--r--test/test-network/conf/25-vxlan-test1.network9
-rw-r--r--test/test-network/conf/25-vxlan-veth99.network10
-rw-r--r--test/test-network/conf/25-vxlan.netdev17
-rw-r--r--test/test-network/conf/25-vxlan.network20
-rw-r--r--test/test-network/conf/25-wireguard-23-peers.netdev153
-rw-r--r--test/test-network/conf/25-wireguard-23-peers.network8
-rw-r--r--test/test-network/conf/25-wireguard-no-peer.netdev9
-rw-r--r--test/test-network/conf/25-wireguard-no-peer.network3
-rw-r--r--test/test-network/conf/25-wireguard-preshared-key.txt3
-rw-r--r--test/test-network/conf/25-wireguard-private-key.txt6
-rw-r--r--test/test-network/conf/25-wireguard.netdev21
-rw-r--r--test/test-network/conf/25-wireguard.netdev.d/peer.conf5
-rw-r--r--test/test-network/conf/25-wireguard.netdev.d/peer1.conf5
-rw-r--r--test/test-network/conf/25-wireguard.netdev.d/peer2.conf5
-rw-r--r--test/test-network/conf/25-wireguard.netdev.d/private-key.conf2
-rw-r--r--test/test-network/conf/25-wireguard.network9
-rw-r--r--test/test-network/conf/25-xfrm-independent.netdev8
-rw-r--r--test/test-network/conf/25-xfrm.netdev7
-rw-r--r--test/test-network/conf/25-xfrm.network7
-rw-r--r--test/test-network/conf/26-bridge-configure-without-carrier.network10
-rw-r--r--test/test-network/conf/26-bridge-issue-20373.netdev13
-rw-r--r--test/test-network/conf/26-bridge-mdb-master.network14
-rw-r--r--test/test-network/conf/26-bridge-mdb-slave.network15
-rw-r--r--test/test-network/conf/26-bridge-slave-interface-1.network23
-rw-r--r--test/test-network/conf/26-bridge-slave-interface-2.network12
-rw-r--r--test/test-network/conf/26-bridge-vlan-master-issue-20373.network21
-rw-r--r--test/test-network/conf/26-bridge-vlan-master.network9
-rw-r--r--test/test-network/conf/26-bridge-vlan-slave-issue-20373.network30
-rw-r--r--test/test-network/conf/26-bridge-vlan-slave.network10
-rw-r--r--test/test-network/conf/26-bridge.netdev4
-rw-r--r--test/test-network/conf/26-link-local-addressing-ipv6.network7
-rw-r--r--test/test-network/conf/26-macsec.network11
-rw-r--r--test/test-network/conf/26-netdev-link-local-addressing-yes.network30
-rw-r--r--test/test-network/conf/80-6rd-tunnel.network18
-rw-r--r--test/test-network/conf/isc-dhcpd-dhcp6pd.conf21
-rw-r--r--test/test-network/conf/networkd-manage-foreign-routes-no.conf3
-rwxr-xr-xtest/test-network/systemd-networkd-tests.py5734
333 files changed, 10373 insertions, 0 deletions
diff --git a/test/test-network-generator-conversion.sh b/test/test-network-generator-conversion.sh
new file mode 100755
index 0000000..c0e74c1
--- /dev/null
+++ b/test/test-network-generator-conversion.sh
@@ -0,0 +1,300 @@
+#!/usr/bin/env bash
+# SPDX-License-Identifier: LGPL-2.1-or-later
+# shellcheck disable=SC2235
+set -eux
+set -o pipefail
+
+# TODO/FIXME:
+# - we should probably have something like "udevadm verify" but for .network files
+# (networkctl verify?) so we can check that all directives are in correct sections
+# - according to dracut.cmdline(7) <peer> address can also be followed by /CIDR,
+# but this doesn't seem to work with sd-network-generator
+
+if [[ -n "${1:-}" ]]; then
+ GENERATOR_BIN=$1
+elif [[ -x /usr/lib/systemd/systemd-network-generator ]]; then
+ GENERATOR_BIN=/usr/lib/systemd/systemd-network-generator
+elif [[ -x /lib/systemd/systemd-network-generator ]]; then
+ GENERATOR_BIN=/lib/systemd/systemd-network-generator
+else
+ exit 1
+fi
+
+# See: https://github.com/systemd/systemd/pull/29888#issuecomment-1796187440
+unset NOTIFY_SOCKET
+
+WORK_DIR="$(mktemp --directory --tmpdir "test-network-generator-conversion.XXXXXX")"
+# shellcheck disable=SC2064
+trap "rm -rf '$WORK_DIR'" EXIT
+
+# Convert octal netmask to CIDR notation (e.g. 255.255.255.0 => 24)
+netmask_to_cidr() (
+ set +x
+
+ local netmask="${1:?}"
+ local x bits=0
+
+ # shellcheck disable=SC2086
+ x="0$(printf "%o" ${netmask//./ })"
+ while [[ "$x" -gt 0 ]]; do
+ ((bits += x % 2))
+ ((x >>= 1))
+ done
+
+ echo "$bits"
+)
+
+run_network_generator() {
+ local stderr
+
+ rm -rf "${WORK_DIR:?}"/*
+ stderr="$WORK_DIR/stderr"
+ if ! "$GENERATOR_BIN" --root "$WORK_DIR" 2>"$stderr"; then
+ echo >&2 "Generator failed when parsing $SYSTEMD_PROC_CMDLINE"
+ cat "$stderr"
+ return 1
+ fi
+
+ if [[ -s "$stderr" ]]; then
+ echo >&2 "Generator generated unexpected messages on stderr"
+ cat "$stderr"
+ return 1
+ fi
+
+ ls -l "$WORK_DIR/run/systemd/network/"
+
+ rm -f "$stderr"
+ return 0
+}
+
+check_dhcp() {
+ local dhcp="${1:?}"
+ local network_file="${2:?}"
+
+ case "$dhcp" in
+ dhcp)
+ grep -q "^DHCP=ipv4$" "$network_file"
+ ;;
+ dhcp6)
+ grep -q "^DHCP=ipv6$" "$network_file"
+ ;;
+ on|any)
+ grep -q "^DHCP=yes$" "$network_file"
+ ;;
+ none|off)
+ grep -q "^DHCP=no$" "$network_file"
+ ;;
+ auto6|ibft)
+ grep -q "^DHCP=no$" "$network_file"
+ ;;
+ either6)
+ grep -q "^DHCP=ipv6$" "$network_file"
+ ;;
+ link6)
+ grep -q "^DHCP=no$" "$network_file"
+ ;;
+ *)
+ echo >&2 "Invalid assignment $cmdline"
+ return 1
+ esac
+
+ return 0
+}
+
+# Check the shortest ip= variant, i.e.:
+# ip={dhcp|on|any|dhcp6|auto6|either6|link6}
+#
+# Note:
+# - dracut also supports single-dhcp
+check_one_dhcp() {
+ local cmdline="${1:?}"
+ local dhcp="${cmdline#ip=}"
+ local network_file
+
+ SYSTEMD_LOG_LEVEL=debug SYSTEMD_PROC_CMDLINE="$cmdline" run_network_generator
+ network_file="${WORK_DIR:?}/run/systemd/network/91-default.network"
+ cat "$network_file"
+
+ check_dhcp "$dhcp" "$network_file"
+
+ return 0
+}
+
+# Similar to the previous one, but with slightly more fields:
+# ip=<interface>:{dhcp|on|any|dhcp6|auto6|link6}[:[<mtu>][:<macaddr>]]
+#
+# Same notes apply as well.
+check_one_interface_dhcp() {
+ local cmdline="${1:?}"
+ local ifname dhcp mtu mac network_file
+
+ IFS=":" read -r ifname dhcp mtu mac <<< "${cmdline#ip=}"
+
+ SYSTEMD_LOG_LEVEL=debug SYSTEMD_PROC_CMDLINE="$cmdline" run_network_generator
+ network_file="${WORK_DIR:?}/run/systemd/network/90-$ifname.network"
+ cat "$network_file"
+
+ grep -q "^Name=$ifname$" "$network_file"
+ check_dhcp "$dhcp" "$network_file"
+ [[ -n "$mtu" ]] && grep -q "^MTUBytes=$mtu$" "$network_file"
+ [[ -n "$mac" ]] && grep -q "^MACAddress=$mac$" "$network_file"
+
+ return 0
+}
+
+# Check the "long" ip= formats, i.e:
+# ip=<client-IP>:[<peer>]:<gateway-IP>:<netmask>:<client_hostname>:<interface>:{none|off|dhcp|on|any|dhcp6|auto6|ibft}[:[<mtu>][:<macaddr>]
+# ip=<client-IP>:[<peer>]:<gateway-IP>:<netmask>:<client_hostname>:<interface>:{none|off|dhcp|on|any|dhcp6|auto6|ibft}[:[<dns1>][:<dns2>]]
+check_one_long() {
+ local cmdline="${1:?}"
+ local ip peer gateway netmask hostname ifname dhcp arg1 arg2 network_file cidr stderr tmp
+
+ # To make parsing a bit easier when IPv6 is involved, replace all colons between [] with #, ...
+ tmp="$(echo "${cmdline#ip=}" | sed -re ':l; s/(\[[^]:]*):/\1#/; tl')"
+ # ... drop the now unnecessary [] and split the string into colon separated fields as usual, ...
+ IFS=":" read -r ip peer gateway netmask hostname ifname dhcp arg1 arg2 <<<"${tmp//[\[\]]}"
+ # ... and then replace # back to colons for fields that might contain an IPv6 address.
+ ip="${ip//#/:}"
+ peer="${peer//#/:}"
+ gateway="${gateway//#/:}"
+ arg1="${arg1//#/:}"
+ arg2="${arg2//#/:}"
+
+ SYSTEMD_LOG_LEVEL=debug SYSTEMD_PROC_CMDLINE="$cmdline" run_network_generator
+
+ if [[ -n "$ifname" ]]; then
+ network_file="${WORK_DIR:?}/run/systemd/network/90-$ifname.network"
+ grep -q "^Name=$ifname$" "$network_file"
+ else
+ network_file="${WORK_DIR:?}/run/systemd/network/91-default.network"
+ grep -q "^Kind=!\*$" "$network_file"
+ fi
+
+ cat "$network_file"
+
+ if [[ -n "$ip" && -n "$netmask" ]]; then
+ # The "ip" and "netmask" fields are merged together into an IP/CIDR value
+ if [[ "$netmask" =~ ^[0-9]+$ ]]; then
+ cidr="$netmask"
+ else
+ cidr="$(netmask_to_cidr "$netmask")"
+ fi
+
+ grep -q "^Address=$ip/$cidr$" "$network_file"
+ else
+ (! grep -q "^Address=" "$network_file")
+ fi
+ # If the "dhcp" field is empty, it defaults to "off"
+ [[ -z "$dhcp" ]] && dhcp="off"
+ [[ -n "$peer" ]] && grep -q "^Peer=$peer$" "$network_file"
+ [[ -n "$gateway" ]] && grep -q "^Gateway=$gateway$" "$network_file"
+ [[ -n "$hostname" ]] && grep -q "^Hostname=$hostname$" "$network_file"
+ check_dhcp "$dhcp" "$network_file"
+
+ # If the first optional argument is empty, assume the first variant
+ # See: https://github.com/dracutdevs/dracut/blob/4d594210d6ef4f04a9dbadacea73e9461ded352d/modules.d/40network/net-lib.sh#L533
+ if [[ -z "$arg1" || "$arg1" =~ ^[0-9]+$ ]]; then
+ # => [:[<mtu>][:<macaddr>]
+ [[ -n "$arg1" ]] && grep -q "^MTUBytes=$arg1$" "$network_file"
+ [[ -n "$arg2" ]] && grep -q "^MACAddress=$arg2$" "$network_file"
+ else
+ # => [:[<dns1>][:<dns2>]]
+ grep -q "^DNS=$arg1$" "$network_file"
+ [[ -n "$arg2" ]] && grep -q "^DNS=$arg2$" "$network_file"
+ fi
+
+ return 0
+}
+
+# Check if the generated .network files match the expected stored ones
+TEST_DATA="$(dirname "$0")/testdata/test-network-generator-conversion"
+for f in "$TEST_DATA"/test-*.input; do
+ fname="${f##*/}"
+ out="$(mktemp --directory "${WORK_DIR:?}/${fname%%.input}.XXX")"
+
+ # shellcheck disable=SC2046
+ "$GENERATOR_BIN" --root "$out" -- $(cat "$f")
+
+ if ! diff -u "$out/run/systemd/network" "${f%.input}.expected"; then
+ echo "**** Unexpected output for $f"
+ exit 1
+ fi
+
+ rm -rf "${out:?}"
+done
+
+# Now generate bunch of .network units on the fly and check if they contain expected
+# directives & values
+
+# ip={dhcp|on|any|dhcp6|auto6|either6|link6}
+for dhcp in dhcp on any dhcp6 auto6 either6 link6 off none ibft; do
+ check_one_dhcp "ip=$dhcp"
+done
+
+# ip=<interface>:{dhcp|on|any|dhcp6|auto6|link6}[:[<mtu>][:<macaddr>]]
+COMMAND_LINES=(
+ "ip=foo:dhcp"
+ "ip=bar:dhcp6"
+ "ip=baz1:any:666"
+ "ip=baz1:any:128:52:54:00:a7:8f:ac"
+)
+for cmdline in "${COMMAND_LINES[@]}"; do
+ check_one_interface_dhcp "$cmdline"
+done
+
+# ip=<client-IP>:[<peer>]:<gateway-IP>:<netmask>:<client_hostname>:<interface>:{none|off|dhcp|on|any|dhcp6|auto6|ibft}[:[<mtu>][:<macaddr>]
+# ip=<client-IP>:[<peer>]:<gateway-IP>:<netmask>:<client_hostname>:<interface>:{none|off|dhcp|on|any|dhcp6|auto6|ibft}[:[<dns1>][:<dns2>]]
+COMMAND_LINES=(
+ "ip=1.2.3.4:2.3.4.5:1.2.3.1:255.255.255.0:hello-world.local:dummy99:off"
+ "ip=1.2.3.4:2.3.4.5:1.2.3.1:24:hello-world.local:dummy99:off"
+ "ip=1.2.3.4:2.3.4.5:1.2.3.1:255.255.255.0:hello-world.local:dummy99:off:123"
+ "ip=1.2.3.4:2.3.4.5:1.2.3.1:255.255.255.0:hello-world.local:dummy99:off:123:52:54:00:a7:8f:ac"
+ "ip=1.2.3.4:2.3.4.5:1.2.3.1:255.255.255.0:hello-world.local:dummy99:off::52:54:00:a7:8f:ac"
+ "ip=1.2.3.4:2.3.4.5:1.2.3.1:255.255.255.0:hello-world.local:dummy99:off::"
+ "ip=1.2.3.4:2.3.4.5:1.2.3.1:255.255.255.0:hello-world.local:dummy99:off:1.2.3.2"
+ "ip=1.2.3.4:2.3.4.5:1.2.3.1:255.255.255.0:hello-world.local:dummy99:off:1.2.3.2:1.2.3.3"
+ "ip=192.168.0.2::192.168.0.1:255.255.128.0::foo1:off"
+ "ip=192.168.0.2::192.168.0.1:17::foo1:off"
+ "ip=10.0.0.1:::255.255.255.0::foo99:off"
+ "ip=[fdef:c400:bd01:1096::2]::[fdef:c400:bd01:1096::1]:64::ipv6:off"
+ "ip=[fdef:c400:bd01:1096::2]:[fdef:c400:bd01:1096::99]::64::ipv6:off"
+ "ip=[fdef:c400:bd01:1096::2]::[fdef:c400:bd01:1096::1]:64::ipv6:off:666"
+ "ip=[fdef:c400:bd01:1096::2]::[fdef:c400:bd01:1096::1]:64::ipv6:off:666:52:54:00:a7:8f:ac"
+ "ip=[fdef:c400:bd01:1096::2]::[fdef:c400:bd01:1096::1]:64::ipv6:off::52:54:00:a7:8f:ac"
+ "ip=[fdef:c400:bd01:1096::2]::[fdef:c400:bd01:1096::1]:64::ipv6:off::"
+ "ip=[fdef:c400:bd01:1096::2]::[fdef:c400:bd01:1096::1]:64::ipv6:off:[fdef:c400:bd01:1096::aaaa]"
+ "ip=[fdef:c400:bd01:1096::2]::[fdef:c400:bd01:1096::1]:64::ipv6:off:[fdef:c400:bd01:1096::aaaa]:[fdef:c400:bd01:1096::bbbb]"
+ "ip=:::::dhcp99:any"
+ "ip=:::::dhcp99:dhcp6:666"
+ "ip=:::::dhcp99:dhcp6:666:52:54:00:a7:8f:ac"
+ "ip=:::::dhcp99:dhcp6:10.0.0.128"
+ "ip=:::::dhcp99:dhcp6:10.0.0.128:10.0.0.129"
+ "ip=:::::dhcp99:dhcp6:10.0.0.128:[fdef:c400:bd01:1096::bbbb]"
+ "ip=::::::any"
+ "ip=::::::ibft"
+)
+for cmdline in "${COMMAND_LINES[@]}"; do
+ check_one_long "$cmdline"
+done
+
+INVALID_COMMAND_LINES=(
+ "ip=foo"
+ "ip=:::::::"
+ "ip=:::::::foo"
+ "ip=10.0.0:::255.255.255.0::foo99:off"
+ "ip=10.0.0.1:::255.255.255::foo99:off"
+ "ip=10.0.0.1:::255.255.255.0:invalid_hostname:foo99:off"
+ "ip=10.0.0.1:::255.255.255.0::verylonginterfacename:off"
+ "ip=:::::dhcp99:dhcp6:4294967296"
+ "ip=:::::dhcp99:dhcp6:-1"
+ "ip=:::::dhcp99:dhcp6:666:52:54:00"
+ "ip=fdef:c400:bd01:1096::2::[fdef:c400:bd01:1096::1]:64::ipv6:off:[fdef:c400:bd01:1096::aaaa]"
+ "ip=[fdef:c400:bd01:1096::2]::[fdef:c400:bd01:1096::1]:64::ipv6:off:foo"
+ "ip=[fdef:c400:bd01:1096::2]::[fdef:c400:bd01:1096::1]:64::ipv6:off:[fdef:c400:bd01:1096::aaaa]:foo"
+ "ip=[fdef:c400:bd01:1096::2]::[fdef:c400:bd01:1096::1]:64::ipv6:off:[fdef:c400:bd01:1096::aaaa]:[fdef:c400:bd01:1096::bbbb]:"
+ "ip=:::::dhcp99:dhcp6:10.0.0.128:10.0.0.129:"
+ "ip=:::::dhcp99:dhcp6:10.0.0.128:[fdef:c400:bd01:1096::bbbb]:"
+)
+for cmdline in "${INVALID_COMMAND_LINES[@]}"; do
+ (! SYSTEMD_LOG_LEVEL=debug SYSTEMD_PROC_CMDLINE="$cmdline" "$GENERATOR_BIN" --root "$WORK_DIR")
+done
diff --git a/test/test-network-generator-conversion/.gitattributes b/test/test-network-generator-conversion/.gitattributes
new file mode 100644
index 0000000..6df434f
--- /dev/null
+++ b/test/test-network-generator-conversion/.gitattributes
@@ -0,0 +1 @@
+* generated
diff --git a/test/test-network-generator-conversion/test-01-dhcp.expected/91-default.network b/test/test-network-generator-conversion/test-01-dhcp.expected/91-default.network
new file mode 100644
index 0000000..657cde7
--- /dev/null
+++ b/test/test-network-generator-conversion/test-01-dhcp.expected/91-default.network
@@ -0,0 +1,12 @@
+# Automatically generated by systemd-network-generator
+
+[Match]
+Kind=!*
+Type=!loopback
+
+[Link]
+
+[Network]
+DHCP=ipv4
+
+[DHCP]
diff --git a/test/test-network-generator-conversion/test-01-dhcp.input b/test/test-network-generator-conversion/test-01-dhcp.input
new file mode 100644
index 0000000..e55893e
--- /dev/null
+++ b/test/test-network-generator-conversion/test-01-dhcp.input
@@ -0,0 +1 @@
+ip=dhcp
diff --git a/test/test-network-generator-conversion/test-02-bridge.expected/90-bridge99.netdev b/test/test-network-generator-conversion/test-02-bridge.expected/90-bridge99.netdev
new file mode 100644
index 0000000..97c2248
--- /dev/null
+++ b/test/test-network-generator-conversion/test-02-bridge.expected/90-bridge99.netdev
@@ -0,0 +1,5 @@
+# Automatically generated by systemd-network-generator
+
+[NetDev]
+Kind=bridge
+Name=bridge99
diff --git a/test/test-network-generator-conversion/test-02-bridge.expected/90-bridge99.network b/test/test-network-generator-conversion/test-02-bridge.expected/90-bridge99.network
new file mode 100644
index 0000000..f8d19ba
--- /dev/null
+++ b/test/test-network-generator-conversion/test-02-bridge.expected/90-bridge99.network
@@ -0,0 +1,13 @@
+# Automatically generated by systemd-network-generator
+
+[Match]
+Name=bridge99
+
+[Link]
+MACAddress=00:11:22:33:44:55
+MTUBytes=1530
+
+[Network]
+DHCP=ipv4
+
+[DHCP]
diff --git a/test/test-network-generator-conversion/test-02-bridge.expected/90-eth0.network b/test/test-network-generator-conversion/test-02-bridge.expected/90-eth0.network
new file mode 100644
index 0000000..8842b57
--- /dev/null
+++ b/test/test-network-generator-conversion/test-02-bridge.expected/90-eth0.network
@@ -0,0 +1,21 @@
+# Automatically generated by systemd-network-generator
+
+[Match]
+Name=eth0
+
+[Link]
+
+[Network]
+DHCP=no
+DNS=10.10.10.10
+DNS=10.10.10.11
+Bridge=bridge99
+
+[DHCP]
+Hostname=hogehoge
+
+[Address]
+Address=192.168.0.10/24
+
+[Route]
+Gateway=192.168.0.1
diff --git a/test/test-network-generator-conversion/test-02-bridge.expected/90-eth1.network b/test/test-network-generator-conversion/test-02-bridge.expected/90-eth1.network
new file mode 100644
index 0000000..feff4f5
--- /dev/null
+++ b/test/test-network-generator-conversion/test-02-bridge.expected/90-eth1.network
@@ -0,0 +1,21 @@
+# Automatically generated by systemd-network-generator
+
+[Match]
+Name=eth1
+
+[Link]
+
+[Network]
+DHCP=no
+DNS=10.10.10.10
+DNS=10.10.10.11
+Bridge=bridge99
+
+[DHCP]
+Hostname=hogehoge
+
+[Address]
+Address=192.168.0.11/24
+
+[Route]
+Gateway=192.168.0.1
diff --git a/test/test-network-generator-conversion/test-02-bridge.input b/test/test-network-generator-conversion/test-02-bridge.input
new file mode 100644
index 0000000..0c863fc
--- /dev/null
+++ b/test/test-network-generator-conversion/test-02-bridge.input
@@ -0,0 +1,4 @@
+ip=192.168.0.10::192.168.0.1:255.255.255.0:hogehoge:eth0:off:10.10.10.10:10.10.10.11
+ip=192.168.0.11::192.168.0.1:255.255.255.0:hogehoge:eth1:off:10.10.10.10:10.10.10.11
+ip=bridge99:dhcp:1530:00:11:22:33:44:55
+bridge=bridge99:eth0,eth1
diff --git a/test/test-network-generator-conversion/test-03-issue-14319.expected/90-enp3s0.network b/test/test-network-generator-conversion/test-03-issue-14319.expected/90-enp3s0.network
new file mode 100644
index 0000000..28ccfdd
--- /dev/null
+++ b/test/test-network-generator-conversion/test-03-issue-14319.expected/90-enp3s0.network
@@ -0,0 +1,17 @@
+# Automatically generated by systemd-network-generator
+
+[Match]
+Name=enp3s0
+
+[Link]
+
+[Network]
+DHCP=no
+
+[DHCP]
+
+[Address]
+Address=10.99.37.44/16
+
+[Route]
+Gateway=10.99.10.1
diff --git a/test/test-network-generator-conversion/test-03-issue-14319.input b/test/test-network-generator-conversion/test-03-issue-14319.input
new file mode 100644
index 0000000..3be7520
--- /dev/null
+++ b/test/test-network-generator-conversion/test-03-issue-14319.input
@@ -0,0 +1 @@
+root=/dev/nfs nfsroot=10.99.37.240:/srv/netroot,v3,tcp ip=10.99.37.44::10.99.10.1:255.255.0.0::enp3s0:off
diff --git a/test/test-network/.gitattributes b/test/test-network/.gitattributes
new file mode 100644
index 0000000..e99a2c3
--- /dev/null
+++ b/test/test-network/.gitattributes
@@ -0,0 +1 @@
+/conf/*.key generated
diff --git a/test/test-network/conf/00-debug-net.rules b/test/test-network/conf/00-debug-net.rules
new file mode 100644
index 0000000..5146b90
--- /dev/null
+++ b/test/test-network/conf/00-debug-net.rules
@@ -0,0 +1,2 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+SUBSYSTEM=="net", OPTIONS="log_level=debug"
diff --git a/test/test-network/conf/10-dropin-test.netdev b/test/test-network/conf/10-dropin-test.netdev
new file mode 100644
index 0000000..074ab17
--- /dev/null
+++ b/test/test-network/conf/10-dropin-test.netdev
@@ -0,0 +1,5 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[NetDev]
+Name=hoge
+Kind=dummy
+MACAddress=00:50:56:c0:00:18
diff --git a/test/test-network/conf/10-dropin-test.netdev.d/mac.conf b/test/test-network/conf/10-dropin-test.netdev.d/mac.conf
new file mode 100644
index 0000000..0b3f765
--- /dev/null
+++ b/test/test-network/conf/10-dropin-test.netdev.d/mac.conf
@@ -0,0 +1,2 @@
+[NetDev]
+MACAddress=00:50:56:c0:00:28
diff --git a/test/test-network/conf/10-dropin-test.netdev.d/name.conf b/test/test-network/conf/10-dropin-test.netdev.d/name.conf
new file mode 100644
index 0000000..9905932
--- /dev/null
+++ b/test/test-network/conf/10-dropin-test.netdev.d/name.conf
@@ -0,0 +1,2 @@
+[NetDev]
+Name=dropin-test
diff --git a/test/test-network/conf/11-dummy-mtu.netdev b/test/test-network/conf/11-dummy-mtu.netdev
new file mode 100644
index 0000000..877231d
--- /dev/null
+++ b/test/test-network/conf/11-dummy-mtu.netdev
@@ -0,0 +1,5 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[NetDev]
+Name=test1
+Kind=dummy
+MTUBytes=1600
diff --git a/test/test-network/conf/11-dummy.netdev b/test/test-network/conf/11-dummy.netdev
new file mode 100644
index 0000000..86af17f
--- /dev/null
+++ b/test/test-network/conf/11-dummy.netdev
@@ -0,0 +1,4 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[NetDev]
+Name=test1
+Kind=dummy
diff --git a/test/test-network/conf/11-dummy.network b/test/test-network/conf/11-dummy.network
new file mode 100644
index 0000000..0a4511b
--- /dev/null
+++ b/test/test-network/conf/11-dummy.network
@@ -0,0 +1,6 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=test1
+
+[Network]
+IPv6AcceptRA=no
diff --git a/test/test-network/conf/12-dummy-mtu.link b/test/test-network/conf/12-dummy-mtu.link
new file mode 100644
index 0000000..cd08d0f
--- /dev/null
+++ b/test/test-network/conf/12-dummy-mtu.link
@@ -0,0 +1,6 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+OriginalName=dummy98
+
+[Link]
+MTUBytes=1600
diff --git a/test/test-network/conf/12-dummy-mtu.netdev b/test/test-network/conf/12-dummy-mtu.netdev
new file mode 100644
index 0000000..1320b38
--- /dev/null
+++ b/test/test-network/conf/12-dummy-mtu.netdev
@@ -0,0 +1,5 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[NetDev]
+Name=dummy98
+Kind=dummy
+MTUBytes=1600
diff --git a/test/test-network/conf/12-dummy-no-address.network b/test/test-network/conf/12-dummy-no-address.network
new file mode 100644
index 0000000..fef18c2
--- /dev/null
+++ b/test/test-network/conf/12-dummy-no-address.network
@@ -0,0 +1,6 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=dummy98
+
+[Network]
+IPv6AcceptRA=no
diff --git a/test/test-network/conf/12-dummy-rename-to-altname.link b/test/test-network/conf/12-dummy-rename-to-altname.link
new file mode 100644
index 0000000..bef4bf3
--- /dev/null
+++ b/test/test-network/conf/12-dummy-rename-to-altname.link
@@ -0,0 +1,7 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+OriginalName=dummy98
+
+[Link]
+Name=dummyalt
+AlternativeName=dummyalt hogehogehogehogehogehoge
diff --git a/test/test-network/conf/12-dummy.link b/test/test-network/conf/12-dummy.link
new file mode 100644
index 0000000..b00ed4c
--- /dev/null
+++ b/test/test-network/conf/12-dummy.link
@@ -0,0 +1,6 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+OriginalName=dummy98
+
+[Link]
+AlternativeName=hogehogehogehogehogehoge
diff --git a/test/test-network/conf/12-dummy.netdev b/test/test-network/conf/12-dummy.netdev
new file mode 100644
index 0000000..d0b0eca
--- /dev/null
+++ b/test/test-network/conf/12-dummy.netdev
@@ -0,0 +1,4 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[NetDev]
+Name=dummy98
+Kind=dummy
diff --git a/test/test-network/conf/12-dummy.network b/test/test-network/conf/12-dummy.network
new file mode 100644
index 0000000..6643be1
--- /dev/null
+++ b/test/test-network/conf/12-dummy.network
@@ -0,0 +1,8 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=dummy98
+
+[Network]
+IPv6AcceptRA=no
+Address=10.1.2.3/16
+Address=2001:db8:0:f101::15/64
diff --git a/test/test-network/conf/12-dummy.network.d/ipv6-mtu-1400.conf b/test/test-network/conf/12-dummy.network.d/ipv6-mtu-1400.conf
new file mode 100644
index 0000000..7a2eb53
--- /dev/null
+++ b/test/test-network/conf/12-dummy.network.d/ipv6-mtu-1400.conf
@@ -0,0 +1,2 @@
+[Network]
+IPv6MTUBytes=1400
diff --git a/test/test-network/conf/12-dummy.network.d/ipv6-mtu-1550.conf b/test/test-network/conf/12-dummy.network.d/ipv6-mtu-1550.conf
new file mode 100644
index 0000000..6a88073
--- /dev/null
+++ b/test/test-network/conf/12-dummy.network.d/ipv6-mtu-1550.conf
@@ -0,0 +1,2 @@
+[Network]
+IPv6MTUBytes=1550
diff --git a/test/test-network/conf/12-dummy.network.d/mtu.conf b/test/test-network/conf/12-dummy.network.d/mtu.conf
new file mode 100644
index 0000000..6e7da63
--- /dev/null
+++ b/test/test-network/conf/12-dummy.network.d/mtu.conf
@@ -0,0 +1,2 @@
+[Link]
+MTUBytes=1600
diff --git a/test/test-network/conf/13-dummy.netdev b/test/test-network/conf/13-dummy.netdev
new file mode 100644
index 0000000..5f34b2f
--- /dev/null
+++ b/test/test-network/conf/13-dummy.netdev
@@ -0,0 +1,4 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[NetDev]
+Name=dummy99
+Kind=dummy
diff --git a/test/test-network/conf/13-not-match-udev-property.network b/test/test-network/conf/13-not-match-udev-property.network
new file mode 100644
index 0000000..a7d9fe9
--- /dev/null
+++ b/test/test-network/conf/13-not-match-udev-property.network
@@ -0,0 +1,7 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=dummy98
+Property=INTERFACE=hoge
+
+[Network]
+IPv6AcceptRA=false
diff --git a/test/test-network/conf/14-match-udev-property.network b/test/test-network/conf/14-match-udev-property.network
new file mode 100644
index 0000000..23b222a
--- /dev/null
+++ b/test/test-network/conf/14-match-udev-property.network
@@ -0,0 +1,8 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=dummy98
+Property=INTERFACE=dummy98
+
+[Network]
+IPv6AcceptRA=false
+Address=10.1.2.3/16
diff --git a/test/test-network/conf/15-name-conflict-test.netdev b/test/test-network/conf/15-name-conflict-test.netdev
new file mode 100644
index 0000000..4b9feb1
--- /dev/null
+++ b/test/test-network/conf/15-name-conflict-test.netdev
@@ -0,0 +1,5 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[NetDev]
+Name=dropin-test
+Kind=dummy
+MACAddress=00:50:56:c0:00:38
diff --git a/test/test-network/conf/21-bond-802.3ad.netdev b/test/test-network/conf/21-bond-802.3ad.netdev
new file mode 100644
index 0000000..ccb8228
--- /dev/null
+++ b/test/test-network/conf/21-bond-802.3ad.netdev
@@ -0,0 +1,8 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[NetDev]
+Name=bond99
+Kind=bond
+
+[Bond]
+Mode=802.3ad
+TransmitHashPolicy=layer3+4
diff --git a/test/test-network/conf/21-bond-802.3ad.network b/test/test-network/conf/21-bond-802.3ad.network
new file mode 100644
index 0000000..9bed020
--- /dev/null
+++ b/test/test-network/conf/21-bond-802.3ad.network
@@ -0,0 +1,8 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=bond99
+
+[Network]
+VLAN=vlan99
+BindCarrier=test1 dummy98
+LinkLocalAddressing=no
diff --git a/test/test-network/conf/21-dummy-bond-slave.network b/test/test-network/conf/21-dummy-bond-slave.network
new file mode 100644
index 0000000..4c7c9d7
--- /dev/null
+++ b/test/test-network/conf/21-dummy-bond-slave.network
@@ -0,0 +1,7 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=test1
+Name=dummy98
+
+[Network]
+Bond=bond99
diff --git a/test/test-network/conf/21-macvlan.netdev b/test/test-network/conf/21-macvlan.netdev
new file mode 100644
index 0000000..fdc81ea
--- /dev/null
+++ b/test/test-network/conf/21-macvlan.netdev
@@ -0,0 +1,5 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[NetDev]
+Name=macvlan99
+Kind=macvlan
+MTUBytes=2000
diff --git a/test/test-network/conf/21-macvtap.netdev b/test/test-network/conf/21-macvtap.netdev
new file mode 100644
index 0000000..9655925
--- /dev/null
+++ b/test/test-network/conf/21-macvtap.netdev
@@ -0,0 +1,4 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[NetDev]
+Name=macvtap99
+Kind=macvtap
diff --git a/test/test-network/conf/21-vlan-on-bond.netdev b/test/test-network/conf/21-vlan-on-bond.netdev
new file mode 100644
index 0000000..caa217a
--- /dev/null
+++ b/test/test-network/conf/21-vlan-on-bond.netdev
@@ -0,0 +1,7 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[NetDev]
+Name=vlan99
+Kind=vlan
+
+[VLAN]
+Id=20
diff --git a/test/test-network/conf/21-vlan-on-bond.network b/test/test-network/conf/21-vlan-on-bond.network
new file mode 100644
index 0000000..6536b7b
--- /dev/null
+++ b/test/test-network/conf/21-vlan-on-bond.network
@@ -0,0 +1,8 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=vlan99
+
+[Network]
+IPv6AcceptRA=false
+Address=192.168.23.5/24
+LinkLocalAddressing=yes
diff --git a/test/test-network/conf/21-vlan-test1.network b/test/test-network/conf/21-vlan-test1.network
new file mode 100644
index 0000000..d7c0378
--- /dev/null
+++ b/test/test-network/conf/21-vlan-test1.network
@@ -0,0 +1,3 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=test1
diff --git a/test/test-network/conf/21-vlan-test1.network.d/override.conf b/test/test-network/conf/21-vlan-test1.network.d/override.conf
new file mode 100644
index 0000000..06307ff
--- /dev/null
+++ b/test/test-network/conf/21-vlan-test1.network.d/override.conf
@@ -0,0 +1,5 @@
+[Network]
+VLAN=vlan99
+Address=192.168.24.5/24
+Address=192.168.25.5/24
+IPv6AcceptRA=false
diff --git a/test/test-network/conf/21-vlan.netdev b/test/test-network/conf/21-vlan.netdev
new file mode 100644
index 0000000..0d28187
--- /dev/null
+++ b/test/test-network/conf/21-vlan.netdev
@@ -0,0 +1,4 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[NetDev]
+Name=vlan99
+Kind=vlan
diff --git a/test/test-network/conf/21-vlan.netdev.d/override.conf b/test/test-network/conf/21-vlan.netdev.d/override.conf
new file mode 100644
index 0000000..c71077d
--- /dev/null
+++ b/test/test-network/conf/21-vlan.netdev.d/override.conf
@@ -0,0 +1,11 @@
+[NetDev]
+MTUBytes=2000
+
+[VLAN]
+Id=99
+GVRP=yes
+MVRP=yes
+LooseBinding=yes
+ReorderHeader=yes
+EgressQOSMaps=0-1 1-3 10-3 6-6 7-7
+IngressQOSMaps=15-13 20-100
diff --git a/test/test-network/conf/21-vlan.network b/test/test-network/conf/21-vlan.network
new file mode 100644
index 0000000..6536b7b
--- /dev/null
+++ b/test/test-network/conf/21-vlan.network
@@ -0,0 +1,8 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=vlan99
+
+[Network]
+IPv6AcceptRA=false
+Address=192.168.23.5/24
+LinkLocalAddressing=yes
diff --git a/test/test-network/conf/23-active-slave.network b/test/test-network/conf/23-active-slave.network
new file mode 100644
index 0000000..944eff5
--- /dev/null
+++ b/test/test-network/conf/23-active-slave.network
@@ -0,0 +1,7 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=dummy98
+
+[Network]
+Bond=bond199
+ActiveSlave=true
diff --git a/test/test-network/conf/23-bond199.network b/test/test-network/conf/23-bond199.network
new file mode 100644
index 0000000..9f4879f
--- /dev/null
+++ b/test/test-network/conf/23-bond199.network
@@ -0,0 +1,6 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=bond199
+
+[Network]
+IPv6AcceptRA=no
diff --git a/test/test-network/conf/23-emit-lldp.network b/test/test-network/conf/23-emit-lldp.network
new file mode 100644
index 0000000..11b86bc
--- /dev/null
+++ b/test/test-network/conf/23-emit-lldp.network
@@ -0,0 +1,7 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=veth-peer
+
+[Network]
+IPv6AcceptRA=no
+EmitLLDP=yes
diff --git a/test/test-network/conf/23-keep-master.network b/test/test-network/conf/23-keep-master.network
new file mode 100644
index 0000000..2ffb9ba
--- /dev/null
+++ b/test/test-network/conf/23-keep-master.network
@@ -0,0 +1,22 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=dummy98
+
+[Network]
+LinkLocalAddressing=no
+IPv6AcceptRA=no
+KeepMaster=true
+ActiveSlave=true
+
+[Bridge]
+Cost=400
+HairPin = true
+FastLeave = true
+UnicastFlood = true
+MulticastFlood = false
+MulticastToUnicast = true
+NeighborSuppression = true
+Learning = false
+Priority = 23
+UseBPDU = true
+AllowPortToBeRoot=true
diff --git a/test/test-network/conf/23-primary-slave.network b/test/test-network/conf/23-primary-slave.network
new file mode 100644
index 0000000..bf84572
--- /dev/null
+++ b/test/test-network/conf/23-primary-slave.network
@@ -0,0 +1,7 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=dummy98
+
+[Network]
+Bond=bond199
+PrimarySlave=true
diff --git a/test/test-network/conf/24-keep-configuration-static.network b/test/test-network/conf/24-keep-configuration-static.network
new file mode 100644
index 0000000..5123f31
--- /dev/null
+++ b/test/test-network/conf/24-keep-configuration-static.network
@@ -0,0 +1,7 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=dummy98
+
+[Network]
+IPv6AcceptRA=no
+KeepConfiguration=static
diff --git a/test/test-network/conf/24-lldp.network b/test/test-network/conf/24-lldp.network
new file mode 100644
index 0000000..d5352e2
--- /dev/null
+++ b/test/test-network/conf/24-lldp.network
@@ -0,0 +1,7 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=veth99
+
+[Network]
+IPv6AcceptRA=no
+LLDP=yes
diff --git a/test/test-network/conf/24-search-domain.network b/test/test-network/conf/24-search-domain.network
new file mode 100644
index 0000000..91c4814
--- /dev/null
+++ b/test/test-network/conf/24-search-domain.network
@@ -0,0 +1,9 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=dummy98
+
+[Network]
+IPv6AcceptRA=no
+Address=192.168.42.100/24
+DNS=192.168.42.1
+Domains= one two three four five six seven eight nine ten
diff --git a/test/test-network/conf/25-6rd-tunnel.netdev b/test/test-network/conf/25-6rd-tunnel.netdev
new file mode 100644
index 0000000..85f5e0d
--- /dev/null
+++ b/test/test-network/conf/25-6rd-tunnel.netdev
@@ -0,0 +1,8 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[NetDev]
+Name=sittun99
+Kind=sit
+
+[Tunnel]
+Local=10.65.223.238
+IPv6RapidDeploymentPrefix=2602::/24
diff --git a/test/test-network/conf/25-6rd.network b/test/test-network/conf/25-6rd.network
new file mode 100644
index 0000000..0caa396
--- /dev/null
+++ b/test/test-network/conf/25-6rd.network
@@ -0,0 +1,7 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=dummy98
+
+[Network]
+IPv6AcceptRA=no
+Tunnel=sittun99
diff --git a/test/test-network/conf/25-activation-policy.network b/test/test-network/conf/25-activation-policy.network
new file mode 100644
index 0000000..401d355
--- /dev/null
+++ b/test/test-network/conf/25-activation-policy.network
@@ -0,0 +1,9 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=test1
+Name=vlan99
+
+[Network]
+Address=192.168.10.30/24
+Gateway=192.168.10.1
+IPv6AcceptRA=no
diff --git a/test/test-network/conf/25-activation-policy.network.d/always-down.conf b/test/test-network/conf/25-activation-policy.network.d/always-down.conf
new file mode 100644
index 0000000..edfd12e
--- /dev/null
+++ b/test/test-network/conf/25-activation-policy.network.d/always-down.conf
@@ -0,0 +1,2 @@
+[Link]
+ActivationPolicy=always-down
diff --git a/test/test-network/conf/25-activation-policy.network.d/always-up.conf b/test/test-network/conf/25-activation-policy.network.d/always-up.conf
new file mode 100644
index 0000000..b8e0fff
--- /dev/null
+++ b/test/test-network/conf/25-activation-policy.network.d/always-up.conf
@@ -0,0 +1,2 @@
+[Link]
+ActivationPolicy=always-up
diff --git a/test/test-network/conf/25-activation-policy.network.d/bound.conf b/test/test-network/conf/25-activation-policy.network.d/bound.conf
new file mode 100644
index 0000000..c6d73f0
--- /dev/null
+++ b/test/test-network/conf/25-activation-policy.network.d/bound.conf
@@ -0,0 +1,5 @@
+[Link]
+ActivationPolicy=bound
+
+[Network]
+BindCarrier=dummy98
diff --git a/test/test-network/conf/25-activation-policy.network.d/down.conf b/test/test-network/conf/25-activation-policy.network.d/down.conf
new file mode 100644
index 0000000..65af49f
--- /dev/null
+++ b/test/test-network/conf/25-activation-policy.network.d/down.conf
@@ -0,0 +1,2 @@
+[Link]
+ActivationPolicy=down
diff --git a/test/test-network/conf/25-activation-policy.network.d/manual.conf b/test/test-network/conf/25-activation-policy.network.d/manual.conf
new file mode 100644
index 0000000..8b81ccc
--- /dev/null
+++ b/test/test-network/conf/25-activation-policy.network.d/manual.conf
@@ -0,0 +1,2 @@
+[Link]
+ActivationPolicy=manual
diff --git a/test/test-network/conf/25-activation-policy.network.d/required-no.conf b/test/test-network/conf/25-activation-policy.network.d/required-no.conf
new file mode 100644
index 0000000..b97b85a
--- /dev/null
+++ b/test/test-network/conf/25-activation-policy.network.d/required-no.conf
@@ -0,0 +1,2 @@
+[Link]
+RequiredForOnline=no
diff --git a/test/test-network/conf/25-activation-policy.network.d/required-yes.conf b/test/test-network/conf/25-activation-policy.network.d/required-yes.conf
new file mode 100644
index 0000000..84e0f05
--- /dev/null
+++ b/test/test-network/conf/25-activation-policy.network.d/required-yes.conf
@@ -0,0 +1,2 @@
+[Link]
+RequiredForOnline=yes
diff --git a/test/test-network/conf/25-activation-policy.network.d/up.conf b/test/test-network/conf/25-activation-policy.network.d/up.conf
new file mode 100644
index 0000000..537380b
--- /dev/null
+++ b/test/test-network/conf/25-activation-policy.network.d/up.conf
@@ -0,0 +1,2 @@
+[Link]
+ActivationPolicy=up
diff --git a/test/test-network/conf/25-address-ipv4acd-veth99.network b/test/test-network/conf/25-address-ipv4acd-veth99.network
new file mode 100644
index 0000000..2abe2f7
--- /dev/null
+++ b/test/test-network/conf/25-address-ipv4acd-veth99.network
@@ -0,0 +1,10 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=veth99
+
+[Network]
+IPv6AcceptRA=no
+
+[Address]
+Address=192.168.100.11/24
+DuplicateAddressDetection=ipv4
diff --git a/test/test-network/conf/25-address-ipv4acd-veth99.network.d/conflict-address.conf b/test/test-network/conf/25-address-ipv4acd-veth99.network.d/conflict-address.conf
new file mode 100644
index 0000000..cec39e4
--- /dev/null
+++ b/test/test-network/conf/25-address-ipv4acd-veth99.network.d/conflict-address.conf
@@ -0,0 +1,3 @@
+[Address]
+Address=192.168.100.10/24
+DuplicateAddressDetection=ipv4
diff --git a/test/test-network/conf/25-address-link-section.network b/test/test-network/conf/25-address-link-section.network
new file mode 100644
index 0000000..644b23f
--- /dev/null
+++ b/test/test-network/conf/25-address-link-section.network
@@ -0,0 +1,9 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=dummy98
+
+[Link]
+MACAddress=00:01:02:aa:bb:cc
+
+[Network]
+IPv6AcceptRA=no
diff --git a/test/test-network/conf/25-address-peer-ipv4.network b/test/test-network/conf/25-address-peer-ipv4.network
new file mode 100644
index 0000000..0108d43
--- /dev/null
+++ b/test/test-network/conf/25-address-peer-ipv4.network
@@ -0,0 +1,10 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=dummy98
+
+[Network]
+IPv6AcceptRA=no
+
+[Address]
+Address=100.64.0.1/32
+Peer=100.64.0.2/32
diff --git a/test/test-network/conf/25-address-static.network b/test/test-network/conf/25-address-static.network
new file mode 100644
index 0000000..6d2baa3
--- /dev/null
+++ b/test/test-network/conf/25-address-static.network
@@ -0,0 +1,368 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=dummy98
+
+[Network]
+IPv6AcceptRA=no
+Address=10.1.2.3/16
+Address=10.1.2.4/16
+Address=10.2.2.4/16
+Address=2001:db8:0:f101::15/64
+Address=2001:db8:0:f101::16/64
+Address=2001:db8:0:f102::15/64
+# these lines are ignored
+Address=hogehoge
+Address=foofoo
+
+[Address]
+Address=10.3.2.3/16
+Label=32
+
+[Address]
+Address=10.4.2.3/16
+Peer=10.4.2.4/16
+Label=33
+
+[Address]
+Address=0.0.0.0/24
+Label=34
+
+[Address]
+Address=0.0.0.0/16
+Label=35
+
+[Address]
+# this section must be ignored
+Peer=hoge
+Address=10.10.0.1/16
+Label=30
+
+[Address]
+# this section must be ignored
+Label=30
+Peer=hoge
+Address=10.10.0.2/16
+
+[Address]
+# address and peer must be in the same family
+Address=10.10.0.3/16
+Peer=2001:db8:0:f103::10/128
+
+[Address]
+Address=2001:db8:0:f102::16/64
+
+[Address]
+Address=2001:db8:0:f103::20/128
+Peer=2001:db8:0:f103::10/128
+
+[Address]
+Address=::/64
+
+[Network]
+# this will later deduped by the following section
+Address=10.7.8.9/16
+
+[Address]
+Address=10.7.8.9/16
+PreferredLifetime=0
+Scope=link
+
+[Address]
+# this will also deduped
+Address=2001:0db8:1:f101::1/64
+PreferredLifetime=infinity
+
+[Address]
+Address=2001:0db8:1:f101::1/64
+PreferredLifetime=0
+
+[Address]
+Address=10.8.8.1/16
+Broadcast=yes
+Broadcast=
+Broadcast=no
+
+[Address]
+Address=10.8.8.2/16
+Broadcast=10.8.8.128
+
+[Address]
+# Invalid broadcast
+Address=10.8.8.2/16
+Broadcast=::1
+
+[Address]
+# broadcast cannot set for IPv6 address
+Address=2001:0db8:1:f101::2/64
+Broadcast=::1
+
+[Address]
+Address=10.9.0.1/16
+RouteMetric=128
+
+[Address]
+# invalid metric
+Address=10.9.0.1/16
+RouteMetric=hoge
+
+# test for ENOBUFS issue #17012
+[Network]
+Address=10.3.3.1/16
+Address=10.3.3.2/16
+Address=10.3.3.3/16
+Address=10.3.3.4/16
+Address=10.3.3.5/16
+Address=10.3.3.6/16
+Address=10.3.3.7/16
+Address=10.3.3.8/16
+Address=10.3.3.9/16
+Address=10.3.3.10/16
+Address=10.3.3.11/16
+Address=10.3.3.12/16
+Address=10.3.3.13/16
+Address=10.3.3.14/16
+Address=10.3.3.15/16
+Address=10.3.3.16/16
+Address=10.3.3.17/16
+Address=10.3.3.18/16
+Address=10.3.3.19/16
+Address=10.3.3.20/16
+Address=10.3.3.21/16
+Address=10.3.3.22/16
+Address=10.3.3.23/16
+Address=10.3.3.24/16
+Address=10.3.3.25/16
+Address=10.3.3.26/16
+Address=10.3.3.27/16
+Address=10.3.3.28/16
+Address=10.3.3.29/16
+Address=10.3.3.30/16
+Address=10.3.3.31/16
+Address=10.3.3.32/16
+Address=10.3.3.33/16
+Address=10.3.3.34/16
+Address=10.3.3.35/16
+Address=10.3.3.36/16
+Address=10.3.3.37/16
+Address=10.3.3.38/16
+Address=10.3.3.39/16
+Address=10.3.3.40/16
+Address=10.3.3.41/16
+Address=10.3.3.42/16
+Address=10.3.3.43/16
+Address=10.3.3.44/16
+Address=10.3.3.45/16
+Address=10.3.3.46/16
+Address=10.3.3.47/16
+Address=10.3.3.48/16
+Address=10.3.3.49/16
+Address=10.3.3.50/16
+Address=10.3.3.51/16
+Address=10.3.3.52/16
+Address=10.3.3.53/16
+Address=10.3.3.54/16
+Address=10.3.3.55/16
+Address=10.3.3.56/16
+Address=10.3.3.57/16
+Address=10.3.3.58/16
+Address=10.3.3.59/16
+Address=10.3.3.60/16
+Address=10.3.3.61/16
+Address=10.3.3.62/16
+Address=10.3.3.63/16
+Address=10.3.3.64/16
+Address=10.3.3.65/16
+Address=10.3.3.66/16
+Address=10.3.3.67/16
+Address=10.3.3.68/16
+Address=10.3.3.69/16
+Address=10.3.3.70/16
+Address=10.3.3.71/16
+Address=10.3.3.72/16
+Address=10.3.3.73/16
+Address=10.3.3.74/16
+Address=10.3.3.75/16
+Address=10.3.3.76/16
+Address=10.3.3.77/16
+Address=10.3.3.78/16
+Address=10.3.3.79/16
+Address=10.3.3.80/16
+Address=10.3.3.81/16
+Address=10.3.3.82/16
+Address=10.3.3.83/16
+Address=10.3.3.84/16
+Address=10.3.3.85/16
+Address=10.3.3.86/16
+Address=10.3.3.87/16
+Address=10.3.3.88/16
+Address=10.3.3.89/16
+Address=10.3.3.90/16
+Address=10.3.3.91/16
+Address=10.3.3.92/16
+Address=10.3.3.93/16
+Address=10.3.3.94/16
+Address=10.3.3.95/16
+Address=10.3.3.96/16
+Address=10.3.3.97/16
+Address=10.3.3.98/16
+Address=10.3.3.99/16
+Address=10.3.3.100/16
+Address=10.3.3.101/16
+Address=10.3.3.102/16
+Address=10.3.3.103/16
+Address=10.3.3.104/16
+Address=10.3.3.105/16
+Address=10.3.3.106/16
+Address=10.3.3.107/16
+Address=10.3.3.108/16
+Address=10.3.3.109/16
+Address=10.3.3.110/16
+Address=10.3.3.111/16
+Address=10.3.3.112/16
+Address=10.3.3.113/16
+Address=10.3.3.114/16
+Address=10.3.3.115/16
+Address=10.3.3.116/16
+Address=10.3.3.117/16
+Address=10.3.3.118/16
+Address=10.3.3.119/16
+Address=10.3.3.120/16
+Address=10.3.3.121/16
+Address=10.3.3.122/16
+Address=10.3.3.123/16
+Address=10.3.3.124/16
+Address=10.3.3.125/16
+Address=10.3.3.126/16
+Address=10.3.3.127/16
+Address=10.3.3.128/16
+Address=10.3.3.129/16
+Address=10.3.3.130/16
+Address=10.3.3.131/16
+Address=10.3.3.132/16
+Address=10.3.3.133/16
+Address=10.3.3.134/16
+Address=10.3.3.135/16
+Address=10.3.3.136/16
+Address=10.3.3.137/16
+Address=10.3.3.138/16
+Address=10.3.3.139/16
+Address=10.3.3.140/16
+Address=10.3.3.141/16
+Address=10.3.3.142/16
+Address=10.3.3.143/16
+Address=10.3.3.144/16
+Address=10.3.3.145/16
+Address=10.3.3.146/16
+Address=10.3.3.147/16
+Address=10.3.3.148/16
+Address=10.3.3.149/16
+Address=10.3.3.150/16
+Address=10.3.3.151/16
+Address=10.3.3.152/16
+Address=10.3.3.153/16
+Address=10.3.3.154/16
+Address=10.3.3.155/16
+Address=10.3.3.156/16
+Address=10.3.3.157/16
+Address=10.3.3.158/16
+Address=10.3.3.159/16
+Address=10.3.3.160/16
+Address=10.3.3.161/16
+Address=10.3.3.162/16
+Address=10.3.3.163/16
+Address=10.3.3.164/16
+Address=10.3.3.165/16
+Address=10.3.3.166/16
+Address=10.3.3.167/16
+Address=10.3.3.168/16
+Address=10.3.3.169/16
+Address=10.3.3.170/16
+Address=10.3.3.171/16
+Address=10.3.3.172/16
+Address=10.3.3.173/16
+Address=10.3.3.174/16
+Address=10.3.3.175/16
+Address=10.3.3.176/16
+Address=10.3.3.177/16
+Address=10.3.3.178/16
+Address=10.3.3.179/16
+Address=10.3.3.180/16
+Address=10.3.3.181/16
+Address=10.3.3.182/16
+Address=10.3.3.183/16
+Address=10.3.3.184/16
+Address=10.3.3.185/16
+Address=10.3.3.186/16
+Address=10.3.3.187/16
+Address=10.3.3.188/16
+Address=10.3.3.189/16
+Address=10.3.3.190/16
+Address=10.3.3.191/16
+Address=10.3.3.192/16
+Address=10.3.3.193/16
+Address=10.3.3.194/16
+Address=10.3.3.195/16
+Address=10.3.3.196/16
+Address=10.3.3.197/16
+Address=10.3.3.198/16
+Address=10.3.3.199/16
+Address=10.3.3.200/16
+Address=10.3.3.201/16
+Address=10.3.3.202/16
+Address=10.3.3.203/16
+Address=10.3.3.204/16
+Address=10.3.3.205/16
+Address=10.3.3.206/16
+Address=10.3.3.207/16
+Address=10.3.3.208/16
+Address=10.3.3.209/16
+Address=10.3.3.210/16
+Address=10.3.3.211/16
+Address=10.3.3.212/16
+Address=10.3.3.213/16
+Address=10.3.3.214/16
+Address=10.3.3.215/16
+Address=10.3.3.216/16
+Address=10.3.3.217/16
+Address=10.3.3.218/16
+Address=10.3.3.219/16
+Address=10.3.3.220/16
+Address=10.3.3.221/16
+Address=10.3.3.222/16
+Address=10.3.3.223/16
+Address=10.3.3.224/16
+Address=10.3.3.225/16
+Address=10.3.3.226/16
+Address=10.3.3.227/16
+Address=10.3.3.228/16
+Address=10.3.3.229/16
+Address=10.3.3.230/16
+Address=10.3.3.231/16
+Address=10.3.3.232/16
+Address=10.3.3.233/16
+Address=10.3.3.234/16
+Address=10.3.3.235/16
+Address=10.3.3.236/16
+Address=10.3.3.237/16
+Address=10.3.3.238/16
+Address=10.3.3.239/16
+Address=10.3.3.240/16
+Address=10.3.3.241/16
+Address=10.3.3.242/16
+Address=10.3.3.243/16
+Address=10.3.3.244/16
+Address=10.3.3.245/16
+Address=10.3.3.246/16
+Address=10.3.3.247/16
+Address=10.3.3.248/16
+Address=10.3.3.249/16
+Address=10.3.3.250/16
+Address=10.3.3.251/16
+Address=10.3.3.252/16
+Address=10.3.3.253/16
+Address=10.3.3.254/16
+
+[Address]
+Address=10.4.3.2/24
+# just a random label which should exist
+NetLabel=system_u:object_r:root_t:s0
diff --git a/test/test-network/conf/25-agent-client-peer.network b/test/test-network/conf/25-agent-client-peer.network
new file mode 100644
index 0000000..e31108b
--- /dev/null
+++ b/test/test-network/conf/25-agent-client-peer.network
@@ -0,0 +1,15 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=client-peer
+
+[Network]
+Address=192.168.6.2/24
+DHCPServer=yes
+IPForward=ipv4
+IPv6AcceptRA=no
+
+[DHCPServer]
+RelayTarget=192.168.5.1
+BindToInterface=no
+RelayAgentCircuitId=string:sample_circuit_id
+RelayAgentRemoteId=string:sample_remote_id
diff --git a/test/test-network/conf/25-agent-client.network b/test/test-network/conf/25-agent-client.network
new file mode 100644
index 0000000..cfa7e5a
--- /dev/null
+++ b/test/test-network/conf/25-agent-client.network
@@ -0,0 +1,8 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=client
+
+[Network]
+DHCP=yes
+IPForward=ipv4
+IPv6AcceptRA=no
diff --git a/test/test-network/conf/25-agent-server-peer.network b/test/test-network/conf/25-agent-server-peer.network
new file mode 100644
index 0000000..1f6fa4b
--- /dev/null
+++ b/test/test-network/conf/25-agent-server-peer.network
@@ -0,0 +1,8 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=server-peer
+
+[Network]
+Address=192.168.5.2/24
+IPForward=ipv4
+IPv6AcceptRA=no
diff --git a/test/test-network/conf/25-agent-server.network b/test/test-network/conf/25-agent-server.network
new file mode 100644
index 0000000..905508f
--- /dev/null
+++ b/test/test-network/conf/25-agent-server.network
@@ -0,0 +1,16 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=server
+
+[Network]
+Address=192.168.5.1/24
+IPForward=ipv4
+DHCPServer=yes
+IPv6AcceptRA=no
+
+[DHCPServer]
+BindToInterface=no
+PoolOffset=150
+PoolSize=1
+DNS=192.168.5.1
+NTP=192.168.5.1
diff --git a/test/test-network/conf/25-agent-veth-client.netdev b/test/test-network/conf/25-agent-veth-client.netdev
new file mode 100644
index 0000000..e52e43a
--- /dev/null
+++ b/test/test-network/conf/25-agent-veth-client.netdev
@@ -0,0 +1,9 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[NetDev]
+Name=client
+Kind=veth
+MACAddress=12:34:56:78:9a:bc
+
+[Peer]
+Name=client-peer
+MACAddress=12:34:56:78:9a:bd
diff --git a/test/test-network/conf/25-agent-veth-server.netdev b/test/test-network/conf/25-agent-veth-server.netdev
new file mode 100644
index 0000000..1427024
--- /dev/null
+++ b/test/test-network/conf/25-agent-veth-server.netdev
@@ -0,0 +1,9 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[NetDev]
+Name=server
+Kind=veth
+MACAddress=12:34:56:78:9b:bc
+
+[Peer]
+Name=server-peer
+MACAddress=12:34:56:78:9b:bd
diff --git a/test/test-network/conf/25-bareudp.netdev b/test/test-network/conf/25-bareudp.netdev
new file mode 100644
index 0000000..4fd9242
--- /dev/null
+++ b/test/test-network/conf/25-bareudp.netdev
@@ -0,0 +1,8 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[NetDev]
+Kind=bareudp
+Name=bareudp99
+
+[BareUDP]
+DestinationPort=1000
+EtherType=ipv4
diff --git a/test/test-network/conf/25-batadv.netdev b/test/test-network/conf/25-batadv.netdev
new file mode 100644
index 0000000..06d51b0
--- /dev/null
+++ b/test/test-network/conf/25-batadv.netdev
@@ -0,0 +1,15 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[NetDev]
+Name=batadv99
+Kind=batadv
+Description=Batman test
+
+[BatmanAdvanced]
+GatewayMode=server
+RoutingAlgorithm=batman-iv
+DistributedArpTable=1
+Fragmentation=0
+HopPenalty=10
+OriginatorIntervalSec=1000ms
+GatewayBandwidthDown=205M
+GatewayBandwidthUp=2G
diff --git a/test/test-network/conf/25-bind-carrier.network b/test/test-network/conf/25-bind-carrier.network
new file mode 100644
index 0000000..81517f4
--- /dev/null
+++ b/test/test-network/conf/25-bind-carrier.network
@@ -0,0 +1,9 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=test1
+
+[Network]
+BindCarrier=dummy99 dummy98
+Address=192.168.10.30/24
+Gateway=192.168.10.1
+IPv6AcceptRA=no
diff --git a/test/test-network/conf/25-bond-active-backup-slave.netdev b/test/test-network/conf/25-bond-active-backup-slave.netdev
new file mode 100644
index 0000000..6de5497
--- /dev/null
+++ b/test/test-network/conf/25-bond-active-backup-slave.netdev
@@ -0,0 +1,7 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[NetDev]
+Name=bond199
+Kind=bond
+
+[Bond]
+Mode=active-backup
diff --git a/test/test-network/conf/25-bond-balanced-tlb.netdev b/test/test-network/conf/25-bond-balanced-tlb.netdev
new file mode 100644
index 0000000..67829f3
--- /dev/null
+++ b/test/test-network/conf/25-bond-balanced-tlb.netdev
@@ -0,0 +1,8 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[NetDev]
+Name=bond98
+Kind=bond
+
+[Bond]
+Mode=balance-tlb
+DynamicTransmitLoadBalancing=true
diff --git a/test/test-network/conf/25-bond-slave.network b/test/test-network/conf/25-bond-slave.network
new file mode 100644
index 0000000..12228a3
--- /dev/null
+++ b/test/test-network/conf/25-bond-slave.network
@@ -0,0 +1,13 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=dummy98 test1
+
+[Network]
+Bond=bond99
+
+# Settings below should be ignored
+IPv6AcceptRA=yes
+LinkLocalAddressing=yes
+DHCP=yes
+Address=192.168.25.3/24
+Gateway=192.168.25.1
diff --git a/test/test-network/conf/25-bond.netdev b/test/test-network/conf/25-bond.netdev
new file mode 100644
index 0000000..ff0222a
--- /dev/null
+++ b/test/test-network/conf/25-bond.netdev
@@ -0,0 +1,19 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[NetDev]
+Name=bond99
+Kind=bond
+
+[Bond]
+Mode=802.3ad
+TransmitHashPolicy=layer3+4
+MIIMonitorSec=1s
+LACPTransmitRate=fast
+UpDelaySec=2s
+DownDelaySec=2s
+ResendIGMP=4
+MinLinks=1
+AdActorSystemPriority=1218
+AdUserPortKey=811
+AdActorSystem=00:11:22:33:44:55
+# feed the sanitizer
+AdActorSystem=00:11:22:33:44:55
diff --git a/test/test-network/conf/25-bond99.network b/test/test-network/conf/25-bond99.network
new file mode 100644
index 0000000..09da6a0
--- /dev/null
+++ b/test/test-network/conf/25-bond99.network
@@ -0,0 +1,7 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=bond99
+
+[Network]
+IPv6AcceptRA=no
+Address=192.168.123.45/24
diff --git a/test/test-network/conf/25-bridge-configure-without-carrier.network b/test/test-network/conf/25-bridge-configure-without-carrier.network
new file mode 100644
index 0000000..6a8d491
--- /dev/null
+++ b/test/test-network/conf/25-bridge-configure-without-carrier.network
@@ -0,0 +1,7 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=bridge99
+
+[Network]
+IPv6AcceptRA=no
+ConfigureWithoutCarrier=yes
diff --git a/test/test-network/conf/25-bridge.netdev b/test/test-network/conf/25-bridge.netdev
new file mode 100644
index 0000000..d9d6f6e
--- /dev/null
+++ b/test/test-network/conf/25-bridge.netdev
@@ -0,0 +1,19 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[NetDev]
+Name=bridge99
+Kind=bridge
+
+[Bridge]
+HelloTimeSec=9
+MaxAgeSec=9
+AgeingTimeSec=9
+ForwardDelaySec=9
+Priority=9
+#GroupForwardMask=9 # This interferes other other settings
+DefaultPVID=9
+MulticastQuerier=yes
+MulticastSnooping=yes
+VLANFiltering=yes
+VLANProtocol=802.1ad
+STP=true
+MulticastIGMPVersion=3
diff --git a/test/test-network/conf/25-bridge.network b/test/test-network/conf/25-bridge.network
new file mode 100644
index 0000000..c718892
--- /dev/null
+++ b/test/test-network/conf/25-bridge.network
@@ -0,0 +1,6 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=bridge99
+
+[Network]
+IPv6AcceptRA=no
diff --git a/test/test-network/conf/25-bridge99-ignore-carrier-loss.network b/test/test-network/conf/25-bridge99-ignore-carrier-loss.network
new file mode 100644
index 0000000..1c1b342
--- /dev/null
+++ b/test/test-network/conf/25-bridge99-ignore-carrier-loss.network
@@ -0,0 +1,14 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=bridge99
+
+[Network]
+Address=192.168.0.15/24
+Gateway=192.168.0.1
+IPv6AcceptRA=no
+IgnoreCarrierLoss=true
+ConfigureWithoutCarrier=true
+
+[RoutingPolicyRule]
+To=8.8.8.8
+Table=100
diff --git a/test/test-network/conf/25-bridge99.network b/test/test-network/conf/25-bridge99.network
new file mode 100644
index 0000000..dbeb04e
--- /dev/null
+++ b/test/test-network/conf/25-bridge99.network
@@ -0,0 +1,11 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=bridge99
+
+[Link]
+MTUBytes=9000
+
+[Network]
+Address=192.168.0.15/24
+Gateway=192.168.0.1
+IPv6AcceptRA=no
diff --git a/test/test-network/conf/25-dhcp-client-allow-list.network b/test/test-network/conf/25-dhcp-client-allow-list.network
new file mode 100644
index 0000000..b8a49a0
--- /dev/null
+++ b/test/test-network/conf/25-dhcp-client-allow-list.network
@@ -0,0 +1,12 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=veth99
+
+[Network]
+DHCP=ipv4
+IPv6AcceptRA=false
+
+[DHCPv4]
+# DenyList= will be ignored
+AllowList=192.168.5.0/24 192.168.6.0/24
+DenyList=192.168.5.0/24
diff --git a/test/test-network/conf/25-dhcp-client-anonymize.network b/test/test-network/conf/25-dhcp-client-anonymize.network
new file mode 100644
index 0000000..fb356ce
--- /dev/null
+++ b/test/test-network/conf/25-dhcp-client-anonymize.network
@@ -0,0 +1,17 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=veth99
+
+[Network]
+DHCP=ipv4
+IPv6AcceptRA=false
+
+[DHCPv4]
+Anonymize=true
+UseMTU=true
+UseRoutes=true
+SendHostname=true
+UseHostname=true
+Hostname=test-hostname
+ClientIdentifier=mac
+VendorClassIdentifier=SusantVendorTest
diff --git a/test/test-network/conf/25-dhcp-client-gateway-onlink-implicit.network b/test/test-network/conf/25-dhcp-client-gateway-onlink-implicit.network
new file mode 100644
index 0000000..e133051
--- /dev/null
+++ b/test/test-network/conf/25-dhcp-client-gateway-onlink-implicit.network
@@ -0,0 +1,15 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=veth99
+
+[Network]
+DHCP=ipv4
+IPv6AcceptRA=no
+
+[Route]
+Gateway=192.168.0.1
+Destination=10.0.0.0/8
+
+[Route]
+Gateway=192.168.0.1
+Destination=192.168.100.0/24
diff --git a/test/test-network/conf/25-dhcp-client-ipv4-only.network b/test/test-network/conf/25-dhcp-client-ipv4-only.network
new file mode 100644
index 0000000..bd8843b
--- /dev/null
+++ b/test/test-network/conf/25-dhcp-client-ipv4-only.network
@@ -0,0 +1,44 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=veth99
+
+[Network]
+DHCP=ipv4
+IPv6AcceptRA=no
+Address=192.168.5.250
+
+[DHCPv4]
+UseDomains=yes
+UseMTU=yes
+UseRoutes=yes
+RoutesToDNS=yes
+RouteTable=211
+RouteMetric=24
+UseHostname=yes
+Hostname=test-hostname
+SendOption=12:string:test
+SendHostname=yes
+ClientIdentifier=mac
+VendorClassIdentifier=FooBarVendorTest
+Label=test-label
+ListenPort=5555
+SendDecline=yes
+# DenyList= will be ignored
+AllowList=192.168.5.0/24 192.168.6.0/24
+DenyList=192.168.5.0/24
+# just a random label which should exist
+NetLabel=system_u:object_r:root_t:s0
+
+[Route]
+Destination=192.168.5.0/24
+
+[Route]
+Destination=192.168.6.0/24
+
+[Route]
+Destination=192.168.7.0/24
+
+[Route]
+Gateway=_dhcp4
+Destination=10.0.0.0/8
+Table=211
diff --git a/test/test-network/conf/25-dhcp-client-ipv4-use-routes-use-gateway.network b/test/test-network/conf/25-dhcp-client-ipv4-use-routes-use-gateway.network
new file mode 100644
index 0000000..43702d5
--- /dev/null
+++ b/test/test-network/conf/25-dhcp-client-ipv4-use-routes-use-gateway.network
@@ -0,0 +1,7 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=veth99
+
+[Network]
+DHCP=ipv4
+IPv6AcceptRA=false
diff --git a/test/test-network/conf/25-dhcp-client-ipv4-use-routes-use-gateway.network.d/use-dns-and-ntp-routes-False.conf b/test/test-network/conf/25-dhcp-client-ipv4-use-routes-use-gateway.network.d/use-dns-and-ntp-routes-False.conf
new file mode 100644
index 0000000..76383ab
--- /dev/null
+++ b/test/test-network/conf/25-dhcp-client-ipv4-use-routes-use-gateway.network.d/use-dns-and-ntp-routes-False.conf
@@ -0,0 +1,3 @@
+[DHCPv4]
+RoutesToDNS=no
+RoutesToNTP=no
diff --git a/test/test-network/conf/25-dhcp-client-ipv4-use-routes-use-gateway.network.d/use-dns-and-ntp-routes-True.conf b/test/test-network/conf/25-dhcp-client-ipv4-use-routes-use-gateway.network.d/use-dns-and-ntp-routes-True.conf
new file mode 100644
index 0000000..6d6b1ed
--- /dev/null
+++ b/test/test-network/conf/25-dhcp-client-ipv4-use-routes-use-gateway.network.d/use-dns-and-ntp-routes-True.conf
@@ -0,0 +1,3 @@
+[DHCPv4]
+RoutesToDNS=yes
+RoutesToNTP=yes
diff --git a/test/test-network/conf/25-dhcp-client-ipv4-use-routes-use-gateway.network.d/use-gateway-False.conf b/test/test-network/conf/25-dhcp-client-ipv4-use-routes-use-gateway.network.d/use-gateway-False.conf
new file mode 100644
index 0000000..78d0493
--- /dev/null
+++ b/test/test-network/conf/25-dhcp-client-ipv4-use-routes-use-gateway.network.d/use-gateway-False.conf
@@ -0,0 +1,2 @@
+[DHCPv4]
+UseGateway=no
diff --git a/test/test-network/conf/25-dhcp-client-ipv4-use-routes-use-gateway.network.d/use-gateway-True.conf b/test/test-network/conf/25-dhcp-client-ipv4-use-routes-use-gateway.network.d/use-gateway-True.conf
new file mode 100644
index 0000000..f6f597b
--- /dev/null
+++ b/test/test-network/conf/25-dhcp-client-ipv4-use-routes-use-gateway.network.d/use-gateway-True.conf
@@ -0,0 +1,2 @@
+[DHCPv4]
+UseGateway=yes
diff --git a/test/test-network/conf/25-dhcp-client-ipv4-use-routes-use-gateway.network.d/use-routes-False.conf b/test/test-network/conf/25-dhcp-client-ipv4-use-routes-use-gateway.network.d/use-routes-False.conf
new file mode 100644
index 0000000..38fa983
--- /dev/null
+++ b/test/test-network/conf/25-dhcp-client-ipv4-use-routes-use-gateway.network.d/use-routes-False.conf
@@ -0,0 +1,2 @@
+[DHCPv4]
+UseRoutes=no
diff --git a/test/test-network/conf/25-dhcp-client-ipv4-use-routes-use-gateway.network.d/use-routes-True.conf b/test/test-network/conf/25-dhcp-client-ipv4-use-routes-use-gateway.network.d/use-routes-True.conf
new file mode 100644
index 0000000..3b2d0ab
--- /dev/null
+++ b/test/test-network/conf/25-dhcp-client-ipv4-use-routes-use-gateway.network.d/use-routes-True.conf
@@ -0,0 +1,2 @@
+[DHCPv4]
+UseRoutes=yes
diff --git a/test/test-network/conf/25-dhcp-client-ipv6-only.network b/test/test-network/conf/25-dhcp-client-ipv6-only.network
new file mode 100644
index 0000000..eb5bd02
--- /dev/null
+++ b/test/test-network/conf/25-dhcp-client-ipv6-only.network
@@ -0,0 +1,11 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=veth99
+
+[Network]
+DHCP=ipv6
+IPv6Token=::1a:2b:3c:4d
+
+[Route]
+Gateway=_ipv6ra
+Destination=2001:1234:5:9fff:ff:ff:ff:ff/128
diff --git a/test/test-network/conf/25-dhcp-client-keep-configuration-dhcp-on-stop.network b/test/test-network/conf/25-dhcp-client-keep-configuration-dhcp-on-stop.network
new file mode 100644
index 0000000..9a737f3
--- /dev/null
+++ b/test/test-network/conf/25-dhcp-client-keep-configuration-dhcp-on-stop.network
@@ -0,0 +1,8 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=veth99
+
+[Network]
+DHCP=ipv4
+IPv6AcceptRA=false
+KeepConfiguration=dhcp-on-stop
diff --git a/test/test-network/conf/25-dhcp-client-keep-configuration-dhcp.network b/test/test-network/conf/25-dhcp-client-keep-configuration-dhcp.network
new file mode 100644
index 0000000..c72af56
--- /dev/null
+++ b/test/test-network/conf/25-dhcp-client-keep-configuration-dhcp.network
@@ -0,0 +1,8 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=veth99
+
+[Network]
+DHCP=ipv4
+IPv6AcceptRA=false
+KeepConfiguration=dhcp
diff --git a/test/test-network/conf/25-dhcp-client-static-lease.network b/test/test-network/conf/25-dhcp-client-static-lease.network
new file mode 100644
index 0000000..f9405f8
--- /dev/null
+++ b/test/test-network/conf/25-dhcp-client-static-lease.network
@@ -0,0 +1,10 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=veth99
+
+[Network]
+IPv6AcceptRA=no
+DHCP=ipv4
+
+[DHCPv4]
+ClientIdentifier=mac
diff --git a/test/test-network/conf/25-dhcp-client-timezone-router.network b/test/test-network/conf/25-dhcp-client-timezone-router.network
new file mode 100644
index 0000000..ae04827
--- /dev/null
+++ b/test/test-network/conf/25-dhcp-client-timezone-router.network
@@ -0,0 +1,11 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=veth99
+
+[Network]
+IPv6AcceptRA=false
+DHCP=ipv4
+
+[DHCPv4]
+UseRoutes=true
+UseTimezone=true
diff --git a/test/test-network/conf/25-dhcp-client-use-dns-ipv4-and-ra.network b/test/test-network/conf/25-dhcp-client-use-dns-ipv4-and-ra.network
new file mode 100644
index 0000000..b11a578
--- /dev/null
+++ b/test/test-network/conf/25-dhcp-client-use-dns-ipv4-and-ra.network
@@ -0,0 +1,12 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=veth99
+
+[Network]
+DHCP=ipv4
+
+[DHCPv4]
+UseDNS=yes
+
+[IPv6AcceptRA]
+UseDNS=yes
diff --git a/test/test-network/conf/25-dhcp-client-use-dns-ipv4.network b/test/test-network/conf/25-dhcp-client-use-dns-ipv4.network
new file mode 100644
index 0000000..5fbda20
--- /dev/null
+++ b/test/test-network/conf/25-dhcp-client-use-dns-ipv4.network
@@ -0,0 +1,15 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=veth99
+
+[Network]
+DHCP=ipv4
+
+[DHCPv4]
+UseDNS=yes
+
+[DHCPv6]
+UseDNS=no
+
+[IPv6AcceptRA]
+UseDNS=no
diff --git a/test/test-network/conf/25-dhcp-client-use-dns-no.network b/test/test-network/conf/25-dhcp-client-use-dns-no.network
new file mode 100644
index 0000000..9b651c1
--- /dev/null
+++ b/test/test-network/conf/25-dhcp-client-use-dns-no.network
@@ -0,0 +1,15 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=veth99
+
+[Network]
+DHCP=yes
+
+[DHCPv4]
+UseDNS=no
+
+[DHCPv6]
+UseDNS=no
+
+[IPv6AcceptRA]
+UseDNS=no
diff --git a/test/test-network/conf/25-dhcp-client-use-dns-yes.network b/test/test-network/conf/25-dhcp-client-use-dns-yes.network
new file mode 100644
index 0000000..787a84d
--- /dev/null
+++ b/test/test-network/conf/25-dhcp-client-use-dns-yes.network
@@ -0,0 +1,15 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=veth99
+
+[Network]
+DHCP=yes
+
+[DHCPv4]
+UseDNS=yes
+
+[DHCPv6]
+UseDNS=yes
+
+[IPv6AcceptRA]
+UseDNS=no
diff --git a/test/test-network/conf/25-dhcp-client-vrf.network b/test/test-network/conf/25-dhcp-client-vrf.network
new file mode 100644
index 0000000..98388eb
--- /dev/null
+++ b/test/test-network/conf/25-dhcp-client-vrf.network
@@ -0,0 +1,8 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=veth99
+
+[Network]
+DHCP=yes
+IPv6AcceptRA=yes
+VRF=vrf99
diff --git a/test/test-network/conf/25-dhcp-client-with-ipv4ll.network b/test/test-network/conf/25-dhcp-client-with-ipv4ll.network
new file mode 100644
index 0000000..6ea9aff
--- /dev/null
+++ b/test/test-network/conf/25-dhcp-client-with-ipv4ll.network
@@ -0,0 +1,9 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=veth99
+
+[Network]
+DHCP=ipv4
+LinkLocalAddressing=yes
+IPv6AcceptRA=no
+IPv4LLStartAddress=169.254.133.11
diff --git a/test/test-network/conf/25-dhcp-client-with-static-address.network b/test/test-network/conf/25-dhcp-client-with-static-address.network
new file mode 100644
index 0000000..7c9d949
--- /dev/null
+++ b/test/test-network/conf/25-dhcp-client-with-static-address.network
@@ -0,0 +1,8 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=veth99
+
+[Network]
+DHCP=ipv4
+IPv6AcceptRA=no
+Address=192.168.5.250
diff --git a/test/test-network/conf/25-dhcp-client.network b/test/test-network/conf/25-dhcp-client.network
new file mode 100644
index 0000000..c633839
--- /dev/null
+++ b/test/test-network/conf/25-dhcp-client.network
@@ -0,0 +1,6 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=veth99
+
+[Network]
+DHCP=yes
diff --git a/test/test-network/conf/25-dhcp-pd-downstream-dummy97.network b/test/test-network/conf/25-dhcp-pd-downstream-dummy97.network
new file mode 100644
index 0000000..e3e41a0
--- /dev/null
+++ b/test/test-network/conf/25-dhcp-pd-downstream-dummy97.network
@@ -0,0 +1,16 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=dummy97
+
+[Network]
+IPv6PrivacyExtensions=yes
+IPv6AcceptRA=no
+DHCP=no
+DHCPPrefixDelegation=yes
+
+[DHCPPrefixDelegation]
+UplinkInterface=veth99
+SubnetId=1
+Announce=no
+Token=eui64
+Token=::1a:2b:3c:4d
diff --git a/test/test-network/conf/25-dhcp-pd-downstream-dummy98.network b/test/test-network/conf/25-dhcp-pd-downstream-dummy98.network
new file mode 100644
index 0000000..2babc43
--- /dev/null
+++ b/test/test-network/conf/25-dhcp-pd-downstream-dummy98.network
@@ -0,0 +1,18 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=dummy98
+
+[Network]
+IPv6PrivacyExtensions=yes
+IPv6AcceptRA=no
+DHCP=no
+DHCPPrefixDelegation=yes
+
+[DHCPPrefixDelegation]
+UplinkInterface=veth99
+SubnetId=0
+Announce=no
+Token=eui64
+Token=::1a:2b:3c:4d
+# just a random label which should exist
+NetLabel=system_u:object_r:root_t:s0
diff --git a/test/test-network/conf/25-dhcp-pd-downstream-dummy99.network b/test/test-network/conf/25-dhcp-pd-downstream-dummy99.network
new file mode 100644
index 0000000..01c1d55
--- /dev/null
+++ b/test/test-network/conf/25-dhcp-pd-downstream-dummy99.network
@@ -0,0 +1,14 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=dummy99
+
+[Network]
+IPv6PrivacyExtensions=yes
+IPv6AcceptRA=no
+DHCP=no
+DHCPPrefixDelegation=yes
+
+[DHCPPrefixDelegation]
+UplinkInterface=veth99
+Assign=no
+Announce=no
diff --git a/test/test-network/conf/25-dhcp-pd-downstream-test1.network b/test/test-network/conf/25-dhcp-pd-downstream-test1.network
new file mode 100644
index 0000000..a8720c3
--- /dev/null
+++ b/test/test-network/conf/25-dhcp-pd-downstream-test1.network
@@ -0,0 +1,16 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=test1
+
+[Network]
+IPv6PrivacyExtensions=yes
+IPv6AcceptRA=no
+DHCP=no
+DHCPPrefixDelegation=yes
+
+[DHCPPrefixDelegation]
+UplinkInterface=veth99
+SubnetId=0
+Announce=no
+Token=eui64
+Token=::1a:2b:3c:4d
diff --git a/test/test-network/conf/25-dhcp-pd-downstream-veth97-peer.network b/test/test-network/conf/25-dhcp-pd-downstream-veth97-peer.network
new file mode 100644
index 0000000..555fefa
--- /dev/null
+++ b/test/test-network/conf/25-dhcp-pd-downstream-veth97-peer.network
@@ -0,0 +1,11 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=veth97-peer
+
+[Network]
+IPv6PrivacyExtensions=yes
+IPv6AcceptRA=yes
+
+[IPv6AcceptRA]
+Token=eui64
+Token=::1a:2b:3c:4e
diff --git a/test/test-network/conf/25-dhcp-pd-downstream-veth97.network b/test/test-network/conf/25-dhcp-pd-downstream-veth97.network
new file mode 100644
index 0000000..daf1e9d
--- /dev/null
+++ b/test/test-network/conf/25-dhcp-pd-downstream-veth97.network
@@ -0,0 +1,20 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=veth97
+
+[Network]
+IPv6PrivacyExtensions=yes
+IPv6AcceptRA=no
+DHCP=no
+DHCPPrefixDelegation=yes
+IPv6SendRA=yes
+
+[DHCPPrefixDelegation]
+SubnetId=8
+Announce=yes
+Token=eui64
+Token=::1a:2b:3c:4d
+
+[IPv6SendRA]
+EmitDNS=no
+EmitDomains=no
diff --git a/test/test-network/conf/25-dhcp-pd-downstream-veth98-peer.network b/test/test-network/conf/25-dhcp-pd-downstream-veth98-peer.network
new file mode 100644
index 0000000..db0aec1
--- /dev/null
+++ b/test/test-network/conf/25-dhcp-pd-downstream-veth98-peer.network
@@ -0,0 +1,11 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=veth98-peer
+
+[Network]
+IPv6PrivacyExtensions=yes
+IPv6AcceptRA=yes
+
+[IPv6AcceptRA]
+Token=eui64
+Token=::1a:2b:3c:4e
diff --git a/test/test-network/conf/25-dhcp-pd-downstream-veth98.network b/test/test-network/conf/25-dhcp-pd-downstream-veth98.network
new file mode 100644
index 0000000..ef37700
--- /dev/null
+++ b/test/test-network/conf/25-dhcp-pd-downstream-veth98.network
@@ -0,0 +1,21 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=veth98
+
+[Network]
+IPv6PrivacyExtensions=yes
+IPv6AcceptRA=no
+DHCP=no
+DHCPPrefixDelegation=yes
+IPv6SendRA=yes
+
+[DHCPPrefixDelegation]
+UplinkInterface=veth99
+SubnetId=9
+Announce=yes
+Token=eui64
+Token=::1a:2b:3c:4d
+
+[IPv6SendRA]
+EmitDNS=no
+EmitDomains=no
diff --git a/test/test-network/conf/25-dhcp-server-downstream.network b/test/test-network/conf/25-dhcp-server-downstream.network
new file mode 100644
index 0000000..3eb931f
--- /dev/null
+++ b/test/test-network/conf/25-dhcp-server-downstream.network
@@ -0,0 +1,14 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=veth-peer
+
+[Network]
+IPv6AcceptRA=false
+DHCPServer=yes
+
+[DHCPServer]
+ServerAddress=192.168.5.1/24
+PoolOffset=10
+PoolSize=50
+UplinkInterface=dummy98
+Router=192.168.5.3
diff --git a/test/test-network/conf/25-dhcp-server-static-lease.network b/test/test-network/conf/25-dhcp-server-static-lease.network
new file mode 100644
index 0000000..1f2783d
--- /dev/null
+++ b/test/test-network/conf/25-dhcp-server-static-lease.network
@@ -0,0 +1,18 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=veth-peer
+
+[Network]
+IPv6AcceptRA=no
+Address=10.1.1.1/24
+DHCPServer=yes
+
+[DHCPServer]
+PoolOffset=0
+PoolSize=20
+EmitDNS=yes
+DNS=9.9.9.9
+
+[DHCPServerStaticLease]
+MACAddress=12:34:56:78:9a:bc
+Address=10.1.1.200
diff --git a/test/test-network/conf/25-dhcp-server-timezone-router.network b/test/test-network/conf/25-dhcp-server-timezone-router.network
new file mode 100644
index 0000000..89a8db1
--- /dev/null
+++ b/test/test-network/conf/25-dhcp-server-timezone-router.network
@@ -0,0 +1,18 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=veth-peer
+
+[Network]
+IPv6AcceptRA=false
+Address=192.168.5.1/24
+Address=192.168.5.2/24
+DHCPServer=yes
+
+[DHCPServer]
+ServerAddress=192.168.5.1/24
+PoolOffset=10
+PoolSize=50
+EmitRouter=yes
+Timezone=Europe/Berlin
+DNS=192.168.5.1
+NTP=192.168.5.1
diff --git a/test/test-network/conf/25-dhcp-server-uplink.network b/test/test-network/conf/25-dhcp-server-uplink.network
new file mode 100644
index 0000000..59e0b6a
--- /dev/null
+++ b/test/test-network/conf/25-dhcp-server-uplink.network
@@ -0,0 +1,9 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=dummy98
+
+[Network]
+IPv6AcceptRA=no
+Address=192.168.5.2/24
+DNS=192.168.5.1
+NTP=192.168.5.1
diff --git a/test/test-network/conf/25-dhcp-server-veth-peer.network b/test/test-network/conf/25-dhcp-server-veth-peer.network
new file mode 100644
index 0000000..d5cc6d3
--- /dev/null
+++ b/test/test-network/conf/25-dhcp-server-veth-peer.network
@@ -0,0 +1,8 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=veth-peer
+
+[Network]
+IPv6AcceptRA=no
+Address=2600::1/0
+Address=192.168.5.1/24
diff --git a/test/test-network/conf/25-dhcp-server.network b/test/test-network/conf/25-dhcp-server.network
new file mode 100644
index 0000000..d9f2aa4
--- /dev/null
+++ b/test/test-network/conf/25-dhcp-server.network
@@ -0,0 +1,15 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=veth-peer
+
+[Network]
+IPv6AcceptRA=false
+DHCPServer=yes
+
+[DHCPServer]
+ServerAddress=192.168.5.1/24
+PoolOffset=10
+PoolSize=50
+Router=192.168.5.3
+DNS=_server_address 192.168.5.10
+NTP=_server_address 192.168.5.11
diff --git a/test/test-network/conf/25-dhcp4-6rd-server.network b/test/test-network/conf/25-dhcp4-6rd-server.network
new file mode 100644
index 0000000..91dc71a
--- /dev/null
+++ b/test/test-network/conf/25-dhcp4-6rd-server.network
@@ -0,0 +1,7 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=veth-peer
+
+[Network]
+IPv6AcceptRA=no
+Address=10.0.0.1/8
diff --git a/test/test-network/conf/25-dhcp4-6rd-upstream.network b/test/test-network/conf/25-dhcp4-6rd-upstream.network
new file mode 100644
index 0000000..fd0d894
--- /dev/null
+++ b/test/test-network/conf/25-dhcp4-6rd-upstream.network
@@ -0,0 +1,20 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=veth99
+
+[Network]
+IPv6PrivacyExtensions=yes
+IPv6AcceptRA=no
+DHCP=ipv4
+DHCPPrefixDelegation=yes
+
+[DHCPv4]
+Use6RD=yes
+SendDecline=yes
+
+[DHCPPrefixDelegation]
+UplinkInterface=:self
+SubnetId=10
+Announce=no
+Token=eui64
+Token=::1a:2b:3c:4d
diff --git a/test/test-network/conf/25-dhcp6pd-server.network b/test/test-network/conf/25-dhcp6pd-server.network
new file mode 100644
index 0000000..f7a8526
--- /dev/null
+++ b/test/test-network/conf/25-dhcp6pd-server.network
@@ -0,0 +1,7 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=veth-peer
+
+[Network]
+IPv6AcceptRA=no
+Address=3ffe:501:ffff:100::1/64
diff --git a/test/test-network/conf/25-dhcp6pd-upstream.network b/test/test-network/conf/25-dhcp6pd-upstream.network
new file mode 100644
index 0000000..4b8cd7d
--- /dev/null
+++ b/test/test-network/conf/25-dhcp6pd-upstream.network
@@ -0,0 +1,19 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=veth99
+
+[Network]
+IPv6PrivacyExtensions=yes
+IPv6AcceptRA=no
+DHCP=ipv6
+DHCPPrefixDelegation=yes
+
+[DHCPv6]
+WithoutRA=solicit
+
+[DHCPPrefixDelegation]
+UplinkInterface=:self
+SubnetId=10
+Announce=no
+Token=eui64
+Token=::1a:2b:3c:4d
diff --git a/test/test-network/conf/25-erspan.network b/test/test-network/conf/25-erspan.network
new file mode 100644
index 0000000..c862bae
--- /dev/null
+++ b/test/test-network/conf/25-erspan.network
@@ -0,0 +1,8 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=dummy98
+
+[Network]
+IPv6AcceptRA=no
+Tunnel=erspan99
+Tunnel=erspan98
diff --git a/test/test-network/conf/25-erspan0-tunnel-local-any.netdev b/test/test-network/conf/25-erspan0-tunnel-local-any.netdev
new file mode 100644
index 0000000..03db72a
--- /dev/null
+++ b/test/test-network/conf/25-erspan0-tunnel-local-any.netdev
@@ -0,0 +1,15 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[NetDev]
+Name=erspan98
+Kind=erspan
+
+[Tunnel]
+ERSPANVersion=0
+# The three settings below will be ignored
+ERSPANIndex=124
+ERSPANDirection=egress
+ERSPANHardwareId=0x2f
+Local = any
+Remote = 172.16.1.100
+Key=102
+SerializeTunneledPackets=true
diff --git a/test/test-network/conf/25-erspan0-tunnel.netdev b/test/test-network/conf/25-erspan0-tunnel.netdev
new file mode 100644
index 0000000..ee295d9
--- /dev/null
+++ b/test/test-network/conf/25-erspan0-tunnel.netdev
@@ -0,0 +1,15 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[NetDev]
+Name=erspan99
+Kind=erspan
+
+[Tunnel]
+ERSPANVersion=0
+# The three settings below will be ignored
+ERSPANIndex=123
+ERSPANDirection=ingress
+ERSPANHardwareId=0x1f
+Local = 172.16.1.200
+Remote = 172.16.1.100
+Key=101
+SerializeTunneledPackets=true
diff --git a/test/test-network/conf/25-erspan1-tunnel-local-any.netdev b/test/test-network/conf/25-erspan1-tunnel-local-any.netdev
new file mode 100644
index 0000000..beac91b
--- /dev/null
+++ b/test/test-network/conf/25-erspan1-tunnel-local-any.netdev
@@ -0,0 +1,15 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[NetDev]
+Name=erspan98
+Kind=erspan
+
+[Tunnel]
+ERSPANVersion=1
+ERSPANIndex=124
+# The two settings below will be ignored
+ERSPANDirection=egress
+ERSPANHardwareId=0x2f
+Local = any
+Remote = 172.16.1.100
+Key=102
+SerializeTunneledPackets=true
diff --git a/test/test-network/conf/25-erspan1-tunnel.netdev b/test/test-network/conf/25-erspan1-tunnel.netdev
new file mode 100644
index 0000000..661ae90
--- /dev/null
+++ b/test/test-network/conf/25-erspan1-tunnel.netdev
@@ -0,0 +1,15 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[NetDev]
+Name=erspan99
+Kind=erspan
+
+[Tunnel]
+ERSPANVersion=1
+ERSPANIndex=123
+# The two settings below will be ignored
+ERSPANDirection=ingress
+ERSPANHardwareId=0x1f
+Local = 172.16.1.200
+Remote = 172.16.1.100
+Key=101
+SerializeTunneledPackets=true
diff --git a/test/test-network/conf/25-erspan2-tunnel-local-any.netdev b/test/test-network/conf/25-erspan2-tunnel-local-any.netdev
new file mode 100644
index 0000000..010cf67
--- /dev/null
+++ b/test/test-network/conf/25-erspan2-tunnel-local-any.netdev
@@ -0,0 +1,15 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[NetDev]
+Name=erspan98
+Kind=erspan
+
+[Tunnel]
+ERSPANVersion=2
+# ERSPANIndex= will be ignored
+ERSPANIndex=124
+ERSPANDirection=egress
+ERSPANHardwareId=0x2f
+Local = any
+Remote = 172.16.1.100
+Key=102
+SerializeTunneledPackets=true
diff --git a/test/test-network/conf/25-erspan2-tunnel.netdev b/test/test-network/conf/25-erspan2-tunnel.netdev
new file mode 100644
index 0000000..b91bbaf
--- /dev/null
+++ b/test/test-network/conf/25-erspan2-tunnel.netdev
@@ -0,0 +1,15 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[NetDev]
+Name=erspan99
+Kind=erspan
+
+[Tunnel]
+ERSPANVersion=2
+# ERSPANIndex= will be ignored
+ERSPANIndex=123
+ERSPANDirection=ingress
+ERSPANHardwareId=0x1f
+Local = 172.16.1.200
+Remote = 172.16.1.100
+Key=101
+SerializeTunneledPackets=true
diff --git a/test/test-network/conf/25-fibrule-invert.network b/test/test-network/conf/25-fibrule-invert.network
new file mode 100644
index 0000000..3d4cbbc
--- /dev/null
+++ b/test/test-network/conf/25-fibrule-invert.network
@@ -0,0 +1,14 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=test1
+
+[Network]
+IPv6AcceptRA=no
+
+[RoutingPolicyRule]
+TypeOfService=0x08
+Table=7
+From= 192.168.100.18
+Priority=111
+IPProtocol = tcp
+InvertRule=true
diff --git a/test/test-network/conf/25-fibrule-port-range.network b/test/test-network/conf/25-fibrule-port-range.network
new file mode 100644
index 0000000..973225d
--- /dev/null
+++ b/test/test-network/conf/25-fibrule-port-range.network
@@ -0,0 +1,15 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=test1
+
+[Network]
+IPv6AcceptRA=no
+
+[RoutingPolicyRule]
+TypeOfService=0x08
+Table=7
+From= 192.168.100.18
+Priority=111
+SourcePort = 1123-1150
+DestinationPort = 3224-3290
+IPProtocol = tcp
diff --git a/test/test-network/conf/25-fibrule-uidrange.network b/test/test-network/conf/25-fibrule-uidrange.network
new file mode 100644
index 0000000..a363d87
--- /dev/null
+++ b/test/test-network/conf/25-fibrule-uidrange.network
@@ -0,0 +1,13 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=test1
+
+[Network]
+IPv6AcceptRA=no
+
+[RoutingPolicyRule]
+TypeOfService=0x08
+Table=7
+From= 192.168.100.18
+Priority=111
+User=100-200
diff --git a/test/test-network/conf/25-fou-gre.netdev b/test/test-network/conf/25-fou-gre.netdev
new file mode 100644
index 0000000..a2d36d9
--- /dev/null
+++ b/test/test-network/conf/25-fou-gre.netdev
@@ -0,0 +1,15 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[NetDev]
+Name=gretun96
+Kind=gre
+
+[Tunnel]
+Local=10.65.223.238
+Remote=10.65.223.239
+Key=1.2.5.103
+SerializeTunneledPackets=true
+Independent=true
+
+FooOverUDP=yes
+FOUDestinationPort=55556
+FOUSourcePort=1001
diff --git a/test/test-network/conf/25-fou-gretap.netdev b/test/test-network/conf/25-fou-gretap.netdev
new file mode 100644
index 0000000..7992bec
--- /dev/null
+++ b/test/test-network/conf/25-fou-gretap.netdev
@@ -0,0 +1,14 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[NetDev]
+Name=gretap96
+Kind=gretap
+
+[Tunnel]
+Local=10.65.223.238
+Remote=10.65.223.239
+Key=1.2.5.106
+SerializeTunneledPackets=true
+Independent=true
+
+FooOverUDP=yes
+FOUDestinationPort=55556
diff --git a/test/test-network/conf/25-fou-ipip.netdev b/test/test-network/conf/25-fou-ipip.netdev
new file mode 100644
index 0000000..1a98a40
--- /dev/null
+++ b/test/test-network/conf/25-fou-ipip.netdev
@@ -0,0 +1,13 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[NetDev]
+Name=ipiptun96
+Kind=ipip
+MTUBytes=1480
+
+[Tunnel]
+Local=192.168.223.238
+Remote=192.169.224.239
+Independent=true
+
+FooOverUDP=yes
+FOUDestinationPort=55555
diff --git a/test/test-network/conf/25-fou-ipproto-gre.netdev b/test/test-network/conf/25-fou-ipproto-gre.netdev
new file mode 100644
index 0000000..d48bb87
--- /dev/null
+++ b/test/test-network/conf/25-fou-ipproto-gre.netdev
@@ -0,0 +1,9 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[NetDev]
+Name=fou98
+Kind=fou
+
+[FooOverUDP]
+Encapsulation=FooOverUDP
+Port=55556
+Protocol=GRE
diff --git a/test/test-network/conf/25-fou-ipproto-ipip.netdev b/test/test-network/conf/25-fou-ipproto-ipip.netdev
new file mode 100644
index 0000000..8aeb40b
--- /dev/null
+++ b/test/test-network/conf/25-fou-ipproto-ipip.netdev
@@ -0,0 +1,9 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[NetDev]
+Name=fou99
+Kind=fou
+
+[FooOverUDP]
+Encapsulation=FooOverUDP
+Port=55555
+Protocol=ipip
diff --git a/test/test-network/conf/25-fou-sit.netdev b/test/test-network/conf/25-fou-sit.netdev
new file mode 100644
index 0000000..f7f2238
--- /dev/null
+++ b/test/test-network/conf/25-fou-sit.netdev
@@ -0,0 +1,12 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[NetDev]
+Name=sittun96
+Kind=sit
+
+[Tunnel]
+Local=10.65.223.238
+Remote=10.65.223.239
+Independent=true
+
+FooOverUDP=yes
+FOUDestinationPort=55555
diff --git a/test/test-network/conf/25-gateway-next-static.network b/test/test-network/conf/25-gateway-next-static.network
new file mode 100644
index 0000000..2e74664
--- /dev/null
+++ b/test/test-network/conf/25-gateway-next-static.network
@@ -0,0 +1,8 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=dummy98
+
+[Network]
+IPv6AcceptRA=no
+Address=149.10.124.58/28
+Gateway=149.10.124.60
diff --git a/test/test-network/conf/25-gateway-static.network b/test/test-network/conf/25-gateway-static.network
new file mode 100644
index 0000000..3b43f56
--- /dev/null
+++ b/test/test-network/conf/25-gateway-static.network
@@ -0,0 +1,8 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=dummy98
+
+[Network]
+IPv6AcceptRA=no
+Address=149.10.124.58/28
+Gateway=149.10.124.59
diff --git a/test/test-network/conf/25-geneve.netdev b/test/test-network/conf/25-geneve.netdev
new file mode 100644
index 0000000..ddd5ecb
--- /dev/null
+++ b/test/test-network/conf/25-geneve.netdev
@@ -0,0 +1,13 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[NetDev]
+Name=geneve99
+Kind=geneve
+
+[GENEVE]
+Id=99
+Remote=192.168.22.1
+TTL=1
+UDPChecksum=true
+UDP6ZeroChecksumTx=true
+UDP6ZeroChecksumRx=true
+DestinationPort=6082
diff --git a/test/test-network/conf/25-gre-tunnel-any-any.netdev b/test/test-network/conf/25-gre-tunnel-any-any.netdev
new file mode 100644
index 0000000..58b2bb3
--- /dev/null
+++ b/test/test-network/conf/25-gre-tunnel-any-any.netdev
@@ -0,0 +1,10 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[NetDev]
+Name=gretun96
+Kind=gre
+
+[Tunnel]
+Local=any
+Remote=any
+Key=106
+SerializeTunneledPackets=false
diff --git a/test/test-network/conf/25-gre-tunnel-local-any.netdev b/test/test-network/conf/25-gre-tunnel-local-any.netdev
new file mode 100644
index 0000000..120bcfb
--- /dev/null
+++ b/test/test-network/conf/25-gre-tunnel-local-any.netdev
@@ -0,0 +1,10 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[NetDev]
+Name=gretun98
+Kind=gre
+
+[Tunnel]
+Local=any
+Remote=10.65.223.239
+Key=104
+SerializeTunneledPackets=false
diff --git a/test/test-network/conf/25-gre-tunnel-remote-any.netdev b/test/test-network/conf/25-gre-tunnel-remote-any.netdev
new file mode 100644
index 0000000..f94578f
--- /dev/null
+++ b/test/test-network/conf/25-gre-tunnel-remote-any.netdev
@@ -0,0 +1,10 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[NetDev]
+Name=gretun97
+Kind=gre
+
+[Tunnel]
+Local=10.65.223.238
+Remote=any
+Key=105
+SerializeTunneledPackets=false
diff --git a/test/test-network/conf/25-gre-tunnel.netdev b/test/test-network/conf/25-gre-tunnel.netdev
new file mode 100644
index 0000000..9fc2371
--- /dev/null
+++ b/test/test-network/conf/25-gre-tunnel.netdev
@@ -0,0 +1,11 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[NetDev]
+Name=gretun99
+Kind=gre
+
+[Tunnel]
+Local=10.65.223.238
+Remote=10.65.223.239
+InputKey=1.2.3.103
+OutputKey=1.2.4.103
+SerializeTunneledPackets=true
diff --git a/test/test-network/conf/25-gretap-tunnel-local-any.netdev b/test/test-network/conf/25-gretap-tunnel-local-any.netdev
new file mode 100644
index 0000000..5e3bd82
--- /dev/null
+++ b/test/test-network/conf/25-gretap-tunnel-local-any.netdev
@@ -0,0 +1,10 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[NetDev]
+Name=gretap98
+Kind=gretap
+
+[Tunnel]
+Local=any
+Remote=10.65.223.239
+Key=107
+SerializeTunneledPackets=true
diff --git a/test/test-network/conf/25-gretap-tunnel.netdev b/test/test-network/conf/25-gretap-tunnel.netdev
new file mode 100644
index 0000000..86ac3f7
--- /dev/null
+++ b/test/test-network/conf/25-gretap-tunnel.netdev
@@ -0,0 +1,10 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[NetDev]
+Name=gretap99
+Kind=gretap
+
+[Tunnel]
+Local=10.65.223.238
+Remote=10.65.223.239
+Key=106
+SerializeTunneledPackets=true
diff --git a/test/test-network/conf/25-gretap.network b/test/test-network/conf/25-gretap.network
new file mode 100644
index 0000000..5e940ed
--- /dev/null
+++ b/test/test-network/conf/25-gretap.network
@@ -0,0 +1,8 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=dummy98
+
+[Network]
+IPv6AcceptRA=no
+Tunnel=gretap99
+Tunnel=gretap98
diff --git a/test/test-network/conf/25-gretun.network b/test/test-network/conf/25-gretun.network
new file mode 100644
index 0000000..3e81bed
--- /dev/null
+++ b/test/test-network/conf/25-gretun.network
@@ -0,0 +1,10 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=dummy98
+
+[Network]
+IPv6AcceptRA=no
+Tunnel=gretun99
+Tunnel=gretun98
+Tunnel=gretun97
+Tunnel=gretun96
diff --git a/test/test-network/conf/25-ifb.netdev b/test/test-network/conf/25-ifb.netdev
new file mode 100644
index 0000000..e166364
--- /dev/null
+++ b/test/test-network/conf/25-ifb.netdev
@@ -0,0 +1,4 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[NetDev]
+Kind=ifb
+Name=ifb99
diff --git a/test/test-network/conf/25-ip6gre-tunnel-any-any.netdev b/test/test-network/conf/25-ip6gre-tunnel-any-any.netdev
new file mode 100644
index 0000000..67ebdd0
--- /dev/null
+++ b/test/test-network/conf/25-ip6gre-tunnel-any-any.netdev
@@ -0,0 +1,8 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[NetDev]
+Name=ip6gretun96
+Kind=ip6gre
+
+[Tunnel]
+Local=any
+Remote=any
diff --git a/test/test-network/conf/25-ip6gre-tunnel-local-any.netdev b/test/test-network/conf/25-ip6gre-tunnel-local-any.netdev
new file mode 100644
index 0000000..6d92129
--- /dev/null
+++ b/test/test-network/conf/25-ip6gre-tunnel-local-any.netdev
@@ -0,0 +1,8 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[NetDev]
+Name=ip6gretun98
+Kind=ip6gre
+
+[Tunnel]
+Local=any
+Remote=2001:473:fece:cafe::5179
diff --git a/test/test-network/conf/25-ip6gre-tunnel-remote-any.netdev b/test/test-network/conf/25-ip6gre-tunnel-remote-any.netdev
new file mode 100644
index 0000000..b242e87
--- /dev/null
+++ b/test/test-network/conf/25-ip6gre-tunnel-remote-any.netdev
@@ -0,0 +1,8 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[NetDev]
+Name=ip6gretun97
+Kind=ip6gre
+
+[Tunnel]
+Local=2a00:ffde:4567:edde::4987
+Remote=any
diff --git a/test/test-network/conf/25-ip6gre-tunnel.netdev b/test/test-network/conf/25-ip6gre-tunnel.netdev
new file mode 100644
index 0000000..deb1b29
--- /dev/null
+++ b/test/test-network/conf/25-ip6gre-tunnel.netdev
@@ -0,0 +1,8 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[NetDev]
+Name=ip6gretun99
+Kind=ip6gre
+
+[Tunnel]
+Local=2a00:ffde:4567:edde::4987
+Remote=2001:473:fece:cafe::5179
diff --git a/test/test-network/conf/25-ip6gretap-tunnel-local-any.netdev b/test/test-network/conf/25-ip6gretap-tunnel-local-any.netdev
new file mode 100644
index 0000000..f1940c2
--- /dev/null
+++ b/test/test-network/conf/25-ip6gretap-tunnel-local-any.netdev
@@ -0,0 +1,8 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[NetDev]
+Name=ip6gretap98
+Kind=ip6gretap
+
+[Tunnel]
+Local=any
+Remote=2001:473:fece:cafe::5179
diff --git a/test/test-network/conf/25-ip6gretap-tunnel.netdev b/test/test-network/conf/25-ip6gretap-tunnel.netdev
new file mode 100644
index 0000000..09ea116
--- /dev/null
+++ b/test/test-network/conf/25-ip6gretap-tunnel.netdev
@@ -0,0 +1,8 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[NetDev]
+Name=ip6gretap99
+Kind=ip6gretap
+
+[Tunnel]
+Local=2a00:ffde:4567:edde::4987
+Remote=2001:473:fece:cafe::5179
diff --git a/test/test-network/conf/25-ip6gretap.network b/test/test-network/conf/25-ip6gretap.network
new file mode 100644
index 0000000..472072b
--- /dev/null
+++ b/test/test-network/conf/25-ip6gretap.network
@@ -0,0 +1,8 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=dummy98
+
+[Network]
+IPv6AcceptRA=no
+Tunnel=ip6gretap99
+Tunnel=ip6gretap98
diff --git a/test/test-network/conf/25-ip6gretun.network b/test/test-network/conf/25-ip6gretun.network
new file mode 100644
index 0000000..17ad558
--- /dev/null
+++ b/test/test-network/conf/25-ip6gretun.network
@@ -0,0 +1,10 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=dummy98
+
+[Network]
+IPv6AcceptRA=no
+Tunnel=ip6gretun99
+Tunnel=ip6gretun98
+Tunnel=ip6gretun97
+Tunnel=ip6gretun96
diff --git a/test/test-network/conf/25-ip6tnl-slaac.network b/test/test-network/conf/25-ip6tnl-slaac.network
new file mode 100644
index 0000000..80de59d
--- /dev/null
+++ b/test/test-network/conf/25-ip6tnl-slaac.network
@@ -0,0 +1,10 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=veth99
+
+[Network]
+IPv6AcceptRA=yes
+Tunnel=ip6tnl-slaac
+
+[IPv6AcceptRA]
+PrefixAllowList=2002:da8:1::/64
diff --git a/test/test-network/conf/25-ip6tnl-tunnel-external.netdev b/test/test-network/conf/25-ip6tnl-tunnel-external.netdev
new file mode 100644
index 0000000..68926cd
--- /dev/null
+++ b/test/test-network/conf/25-ip6tnl-tunnel-external.netdev
@@ -0,0 +1,8 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[NetDev]
+Name=ip6tnl-external
+Kind=ip6tnl
+
+[Tunnel]
+Mode=ip6ip6
+External=yes
diff --git a/test/test-network/conf/25-ip6tnl-tunnel-local-any.netdev b/test/test-network/conf/25-ip6tnl-tunnel-local-any.netdev
new file mode 100644
index 0000000..3521d33
--- /dev/null
+++ b/test/test-network/conf/25-ip6tnl-tunnel-local-any.netdev
@@ -0,0 +1,9 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[NetDev]
+Name=ip6tnl98
+Kind=ip6tnl
+
+[Tunnel]
+Mode=ip6ip6
+Local=any
+Remote=2001:473:fece:cafe::5179
diff --git a/test/test-network/conf/25-ip6tnl-tunnel-local-slaac.netdev b/test/test-network/conf/25-ip6tnl-tunnel-local-slaac.netdev
new file mode 100644
index 0000000..b07dc4a
--- /dev/null
+++ b/test/test-network/conf/25-ip6tnl-tunnel-local-slaac.netdev
@@ -0,0 +1,9 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[NetDev]
+Name=ip6tnl-slaac
+Kind=ip6tnl
+
+[Tunnel]
+Mode=ip6ip6
+Local=slaac
+Remote=2001:473:fece:cafe::5179
diff --git a/test/test-network/conf/25-ip6tnl-tunnel-local-slaac.network b/test/test-network/conf/25-ip6tnl-tunnel-local-slaac.network
new file mode 100644
index 0000000..34fa0ca
--- /dev/null
+++ b/test/test-network/conf/25-ip6tnl-tunnel-local-slaac.network
@@ -0,0 +1,10 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=ip6tnl-slaac
+
+[Network]
+IPv6AcceptRA=no
+LinkLocalAddressing=yes
+
+[Route]
+Destination=0.0.0.0/0
diff --git a/test/test-network/conf/25-ip6tnl-tunnel-remote-any.netdev b/test/test-network/conf/25-ip6tnl-tunnel-remote-any.netdev
new file mode 100644
index 0000000..df22dd8
--- /dev/null
+++ b/test/test-network/conf/25-ip6tnl-tunnel-remote-any.netdev
@@ -0,0 +1,9 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[NetDev]
+Name=ip6tnl97
+Kind=ip6tnl
+
+[Tunnel]
+Mode=ip6ip6
+Local=2a00:ffde:4567:edde::4987
+Remote=any
diff --git a/test/test-network/conf/25-ip6tnl-tunnel.netdev b/test/test-network/conf/25-ip6tnl-tunnel.netdev
new file mode 100644
index 0000000..486bfbd
--- /dev/null
+++ b/test/test-network/conf/25-ip6tnl-tunnel.netdev
@@ -0,0 +1,9 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[NetDev]
+Name=ip6tnl99
+Kind=ip6tnl
+
+[Tunnel]
+Mode=ip6ip6
+Local=2a00:ffde:4567:edde::4987
+Remote=2001:473:fece:cafe::5179
diff --git a/test/test-network/conf/25-ip6tnl.network b/test/test-network/conf/25-ip6tnl.network
new file mode 100644
index 0000000..a773210
--- /dev/null
+++ b/test/test-network/conf/25-ip6tnl.network
@@ -0,0 +1,9 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=dummy98
+
+[Network]
+IPv6AcceptRA=no
+Tunnel=ip6tnl99
+Tunnel=ip6tnl98
+Tunnel=ip6tnl97
diff --git a/test/test-network/conf/25-ipip-tunnel-any-any.netdev b/test/test-network/conf/25-ipip-tunnel-any-any.netdev
new file mode 100644
index 0000000..414795a
--- /dev/null
+++ b/test/test-network/conf/25-ipip-tunnel-any-any.netdev
@@ -0,0 +1,9 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[NetDev]
+Name=ipiptun96
+Kind=ipip
+MTUBytes=1480
+
+[Tunnel]
+Local=any
+Remote=any
diff --git a/test/test-network/conf/25-ipip-tunnel-independent-loopback.netdev b/test/test-network/conf/25-ipip-tunnel-independent-loopback.netdev
new file mode 100644
index 0000000..c675029
--- /dev/null
+++ b/test/test-network/conf/25-ipip-tunnel-independent-loopback.netdev
@@ -0,0 +1,11 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[NetDev]
+Name=ipiptun99
+Kind=ipip
+MTUBytes=1480
+
+[Tunnel]
+Local=192.168.223.238
+Remote=192.169.224.239
+Independent=true
+AssignToLoopback=yes
diff --git a/test/test-network/conf/25-ipip-tunnel-independent.netdev b/test/test-network/conf/25-ipip-tunnel-independent.netdev
new file mode 100644
index 0000000..757b751
--- /dev/null
+++ b/test/test-network/conf/25-ipip-tunnel-independent.netdev
@@ -0,0 +1,10 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[NetDev]
+Name=ipiptun99
+Kind=ipip
+MTUBytes=1480
+
+[Tunnel]
+Local=192.168.223.238
+Remote=192.169.224.239
+Independent=true
diff --git a/test/test-network/conf/25-ipip-tunnel-local-any.netdev b/test/test-network/conf/25-ipip-tunnel-local-any.netdev
new file mode 100644
index 0000000..3702cde
--- /dev/null
+++ b/test/test-network/conf/25-ipip-tunnel-local-any.netdev
@@ -0,0 +1,9 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[NetDev]
+Name=ipiptun98
+Kind=ipip
+MTUBytes=1480
+
+[Tunnel]
+Local=any
+Remote=192.169.224.239
diff --git a/test/test-network/conf/25-ipip-tunnel-remote-any.netdev b/test/test-network/conf/25-ipip-tunnel-remote-any.netdev
new file mode 100644
index 0000000..792d7d3
--- /dev/null
+++ b/test/test-network/conf/25-ipip-tunnel-remote-any.netdev
@@ -0,0 +1,9 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[NetDev]
+Name=ipiptun97
+Kind=ipip
+MTUBytes=1480
+
+[Tunnel]
+Local=192.168.223.238
+Remote=any
diff --git a/test/test-network/conf/25-ipip-tunnel.netdev b/test/test-network/conf/25-ipip-tunnel.netdev
new file mode 100644
index 0000000..e31bfb6
--- /dev/null
+++ b/test/test-network/conf/25-ipip-tunnel.netdev
@@ -0,0 +1,9 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[NetDev]
+Name=ipiptun99
+Kind=ipip
+MTUBytes=1480
+
+[Tunnel]
+Local=192.168.223.238
+Remote=192.169.224.239
diff --git a/test/test-network/conf/25-ipip.network b/test/test-network/conf/25-ipip.network
new file mode 100644
index 0000000..f359329
--- /dev/null
+++ b/test/test-network/conf/25-ipip.network
@@ -0,0 +1,10 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=dummy98
+
+[Network]
+IPv6AcceptRA=no
+Tunnel=ipiptun99
+Tunnel=ipiptun98
+Tunnel=ipiptun97
+Tunnel=ipiptun96
diff --git a/test/test-network/conf/25-ipv6-address-label-section.network b/test/test-network/conf/25-ipv6-address-label-section.network
new file mode 100644
index 0000000..89a5c2a
--- /dev/null
+++ b/test/test-network/conf/25-ipv6-address-label-section.network
@@ -0,0 +1,34 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=dummy98
+
+[Network]
+IPv6AcceptRA=no
+
+[IPv6AddressLabel]
+Label=4444
+Prefix=2004:da8:1:0::/64
+
+# invalid sections
+[IPv6AddressLabel]
+# No Label=
+Prefix=2004:da8:1:1::/64
+
+[IPv6AddressLabel]
+# No Prefix=
+Label=4445
+
+[IPv6AddressLabel]
+# Invalid label
+Label=0xffffffff
+Prefix=2004:da8:1:2::/64
+
+[IPv6AddressLabel]
+# IPv4 mapped prefix
+Label=4446
+Prefix=::ffff:c0a8:0/120
+
+[IPv6AddressLabel]
+# Invalid prefix
+Label=4447
+Prefix=192.168.1.0/24
diff --git a/test/test-network/conf/25-ipv6-prefix-veth-token-prefixstable-without-address.network b/test/test-network/conf/25-ipv6-prefix-veth-token-prefixstable-without-address.network
new file mode 100644
index 0000000..eda4ce1
--- /dev/null
+++ b/test/test-network/conf/25-ipv6-prefix-veth-token-prefixstable-without-address.network
@@ -0,0 +1,10 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=veth99
+
+[Network]
+IPv6AcceptRA=true
+
+[IPv6AcceptRA]
+Token=prefixstable
+Token=prefixstable,86b123b969ba4b7eb8b3d8605123525a
diff --git a/test/test-network/conf/25-ipv6-prefix-veth-token-prefixstable.network b/test/test-network/conf/25-ipv6-prefix-veth-token-prefixstable.network
new file mode 100644
index 0000000..ac50700
--- /dev/null
+++ b/test/test-network/conf/25-ipv6-prefix-veth-token-prefixstable.network
@@ -0,0 +1,19 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=veth99
+
+[Network]
+IPv6AcceptRA=true
+
+[IPv6AcceptRA]
+Token=prefixstable:2002:da8:1::
+Token=prefixstable:2002:da8:1::,86b123b969ba4b7eb8b3d8605123525a
+# invalid tokens
+Token=prefixstable:2002:da8:1::,00000000000000000000000000000000
+Token=prefixstable:2002:da8:1::,
+Token=prefixstable,00000000000000000000000000000000
+Token=prefixstable,
+Token=prefixstable@
+Token=static
+Token=static:
+Token=static:::
diff --git a/test/test-network/conf/25-ipv6-prefix-veth-token-static.network b/test/test-network/conf/25-ipv6-prefix-veth-token-static.network
new file mode 100644
index 0000000..7c3ae33
--- /dev/null
+++ b/test/test-network/conf/25-ipv6-prefix-veth-token-static.network
@@ -0,0 +1,13 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=veth99
+
+[Network]
+IPv6AcceptRA=true
+
+[IPv6AcceptRA]
+Token=::1a:2b:3c:4d
+Token=static:::fa:de:ca:fe
+Token=::1a:2b:3c:4d
+Token=static:::1a:2b:3c:4d
+Token=::fa:de:ca:fe
diff --git a/test/test-network/conf/25-ipv6-prefix-veth.network b/test/test-network/conf/25-ipv6-prefix-veth.network
new file mode 100644
index 0000000..905e2fd
--- /dev/null
+++ b/test/test-network/conf/25-ipv6-prefix-veth.network
@@ -0,0 +1,11 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=veth99
+
+[Network]
+IPv6AcceptRA=true
+
+[IPv6AcceptRA]
+UseDomains=yes
+# just a random label which should exist
+NetLabel=system_u:object_r:root_t:s0
diff --git a/test/test-network/conf/25-ipv6-prefix.network b/test/test-network/conf/25-ipv6-prefix.network
new file mode 100644
index 0000000..9cf8f25
--- /dev/null
+++ b/test/test-network/conf/25-ipv6-prefix.network
@@ -0,0 +1,22 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=veth-peer
+
+[Network]
+IPv6AcceptRA=no
+IPv6SendRA=yes
+
+[IPv6SendRA]
+DNS=_link_local 2002:da8:1:0::1
+DNSLifetimeSec=1min
+Domains=hogehoge.test
+
+[IPv6Prefix]
+Prefix=2002:da8:1:0::/64
+PreferredLifetimeSec=1000s
+ValidLifetimeSec=2100s
+
+[IPv6Prefix]
+Prefix=2002:da8:2:0::/64
+PreferredLifetimeSec=1000s
+ValidLifetimeSec=2100s
diff --git a/test/test-network/conf/25-ipv6-proxy-ndp.network b/test/test-network/conf/25-ipv6-proxy-ndp.network
new file mode 100644
index 0000000..81302ab
--- /dev/null
+++ b/test/test-network/conf/25-ipv6-proxy-ndp.network
@@ -0,0 +1,25 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=dummy98
+
+[Network]
+IPv6ProxyNDPAddress=2607:5300:203:5215:5::1
+IPv6ProxyNDPAddress=2607:5300:203:5215:4::1
+IPv6ProxyNDPAddress=2607:5300:203:5215:3::1
+IPv6ProxyNDPAddress=2607:5300:203:5215:2::1
+IPv6ProxyNDPAddress=2607:5300:203:5215:1::1
+IPv6AcceptRA=no
+IPForward=yes
+Address=66.70.129.136/32
+Address=66.70.129.142/32
+Address=66.70.129.143/32
+
+[Address]
+Address=2607:5300:203:5215::1/64
+
+[Route]
+Destination=2607:5300:203:52ff:ff:ff:ff:ff
+
+[Route]
+Gateway=2607:5300:203:52ff:ff:ff:ff:ff
+Destination=::/0
diff --git a/test/test-network/conf/25-ipv6ra-prefix-client-deny-list.network b/test/test-network/conf/25-ipv6ra-prefix-client-deny-list.network
new file mode 100644
index 0000000..a8b7b0b
--- /dev/null
+++ b/test/test-network/conf/25-ipv6ra-prefix-client-deny-list.network
@@ -0,0 +1,13 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=veth-peer
+
+[Network]
+DHCP=no
+IPv6AcceptRA=yes
+
+[IPv6AcceptRA]
+RouterDenyList=2001::1
+PrefixDenyList=2001:db8:0:2::
+RouteDenyList=2001:db1:fff::
+UseDomains=yes
diff --git a/test/test-network/conf/25-ipv6ra-prefix-client.network b/test/test-network/conf/25-ipv6ra-prefix-client.network
new file mode 100644
index 0000000..a98f61e
--- /dev/null
+++ b/test/test-network/conf/25-ipv6ra-prefix-client.network
@@ -0,0 +1,14 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=veth-peer
+
+[Network]
+DHCP=no
+IPv6AcceptRA=yes
+
+[IPv6AcceptRA]
+# PrefixDenyList= will be ignored.
+PrefixAllowList=2001:db8:0:1:: 2001:db8:0:1:: 2001:db8:0:1::/64
+PrefixDenyList=2001:db8:0:1::/64 2001:db8:0:1:: 2001:db8:0:3::/64
+RouteDenyList=2001:db1:fff::/64 2001:db1:fff:: 2001:db2:fff::/64
+UseDomains=yes
diff --git a/test/test-network/conf/25-ipv6ra-prefix.network b/test/test-network/conf/25-ipv6ra-prefix.network
new file mode 100644
index 0000000..0afdda5
--- /dev/null
+++ b/test/test-network/conf/25-ipv6ra-prefix.network
@@ -0,0 +1,34 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=veth99
+
+[Network]
+DHCP=no
+IPv6SendRA=yes
+
+[IPv6SendRA]
+UplinkInterface=dummy98
+
+[IPv6Prefix]
+Prefix=2001:db8:0:1::/64
+
+[IPv6Prefix]
+Prefix=2001:db8:0:2::/64
+Assign=yes
+Token=::1a:2b:3c:4d
+Token=static:::fa:de:ca:fe
+
+[IPv6Prefix]
+Prefix=2001:db8:0:3::/64
+
+[IPv6RoutePrefix]
+Route=2001:db0:fff::/64
+LifetimeSec=1000
+
+[IPv6RoutePrefix]
+Route=2001:db1:fff::/64
+LifetimeSec=1000
+
+[IPv6RoutePrefix]
+Route=2001:db2:fff::/64
+LifetimeSec=1000
diff --git a/test/test-network/conf/25-ipv6ra-uplink.network b/test/test-network/conf/25-ipv6ra-uplink.network
new file mode 100644
index 0000000..78de566
--- /dev/null
+++ b/test/test-network/conf/25-ipv6ra-uplink.network
@@ -0,0 +1,9 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=dummy98
+
+[Network]
+IPv6AcceptRA=no
+Address=2001:db8:1:1::1/64
+DNS=2001:db8:1:1::2
+Domains=example.com
diff --git a/test/test-network/conf/25-ipvlan.netdev b/test/test-network/conf/25-ipvlan.netdev
new file mode 100644
index 0000000..0b1fd4b
--- /dev/null
+++ b/test/test-network/conf/25-ipvlan.netdev
@@ -0,0 +1,4 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[NetDev]
+Name=ipvlan99
+Kind=ipvlan
diff --git a/test/test-network/conf/25-ipvlan.network b/test/test-network/conf/25-ipvlan.network
new file mode 100644
index 0000000..c0c919b
--- /dev/null
+++ b/test/test-network/conf/25-ipvlan.network
@@ -0,0 +1,7 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=test1
+
+[Network]
+IPv6AcceptRA=no
+IPVLAN=ipvlan99
diff --git a/test/test-network/conf/25-ipvtap.netdev b/test/test-network/conf/25-ipvtap.netdev
new file mode 100644
index 0000000..fd06264
--- /dev/null
+++ b/test/test-network/conf/25-ipvtap.netdev
@@ -0,0 +1,4 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[NetDev]
+Name=ipvtap99
+Kind=ipvtap
diff --git a/test/test-network/conf/25-ipvtap.network b/test/test-network/conf/25-ipvtap.network
new file mode 100644
index 0000000..d66d98a
--- /dev/null
+++ b/test/test-network/conf/25-ipvtap.network
@@ -0,0 +1,7 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=test1
+
+[Network]
+IPv6AcceptRA=no
+IPVTAP=ipvtap99
diff --git a/test/test-network/conf/25-isatap-tunnel.netdev b/test/test-network/conf/25-isatap-tunnel.netdev
new file mode 100644
index 0000000..9557e27
--- /dev/null
+++ b/test/test-network/conf/25-isatap-tunnel.netdev
@@ -0,0 +1,9 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[NetDev]
+Name=isataptun99
+Kind=sit
+
+[Tunnel]
+Local=10.65.223.238
+Remote=10.65.223.239
+ISATAP=true
diff --git a/test/test-network/conf/25-isatap.network b/test/test-network/conf/25-isatap.network
new file mode 100644
index 0000000..0f80426
--- /dev/null
+++ b/test/test-network/conf/25-isatap.network
@@ -0,0 +1,7 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=dummy98
+
+[Network]
+IPv6AcceptRA=no
+Tunnel=isataptun99
diff --git a/test/test-network/conf/25-l2tp-dummy.network b/test/test-network/conf/25-l2tp-dummy.network
new file mode 100644
index 0000000..507ccd3
--- /dev/null
+++ b/test/test-network/conf/25-l2tp-dummy.network
@@ -0,0 +1,7 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=test1
+
+[Network]
+Address=192.168.30.100/24
+IPv6AcceptRA=false
diff --git a/test/test-network/conf/25-l2tp-ip.netdev b/test/test-network/conf/25-l2tp-ip.netdev
new file mode 100644
index 0000000..882c83a
--- /dev/null
+++ b/test/test-network/conf/25-l2tp-ip.netdev
@@ -0,0 +1,21 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[NetDev]
+Kind=l2tp
+Name=l2tp99
+
+[L2TP]
+TunnelId=10
+PeerTunnelId=12
+Local=static@test1
+Remote=192.168.30.101
+EncapsulationType=ip
+
+[L2TPSession]
+SessionId=25
+PeerSessionId=26
+Name=l2tp-ses3
+
+[L2TPSession]
+SessionId=27
+PeerSessionId=28
+Name=l2tp-ses4
diff --git a/test/test-network/conf/25-l2tp-udp.netdev b/test/test-network/conf/25-l2tp-udp.netdev
new file mode 100644
index 0000000..79824df
--- /dev/null
+++ b/test/test-network/conf/25-l2tp-udp.netdev
@@ -0,0 +1,26 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[NetDev]
+Kind=l2tp
+Name=l2tp99
+
+[L2TP]
+TunnelId=10
+PeerTunnelId=11
+UDPSourcePort=3000
+UDPDestinationPort=4000
+Local=static@test1
+Remote=192.168.30.101
+EncapsulationType=udp
+UDPCheckSum=true
+UDP6CheckSumRx=true
+UDP6CheckSumTx=true
+
+[L2TPSession]
+SessionId=15
+PeerSessionId=16
+Name=l2tp-ses1
+
+[L2TPSession]
+SessionId=17
+PeerSessionId=18
+Name=l2tp-ses2
diff --git a/test/test-network/conf/25-l2tp.network b/test/test-network/conf/25-l2tp.network
new file mode 100644
index 0000000..412f6d5
--- /dev/null
+++ b/test/test-network/conf/25-l2tp.network
@@ -0,0 +1,7 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=l2tp-ses*
+
+[Network]
+IPv6AcceptRA=no
+LinkLocalAddressing=yes
diff --git a/test/test-network/conf/25-link-local-addressing-no.network b/test/test-network/conf/25-link-local-addressing-no.network
new file mode 100644
index 0000000..a6974ba
--- /dev/null
+++ b/test/test-network/conf/25-link-local-addressing-no.network
@@ -0,0 +1,6 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=dummy98
+
+[Network]
+LinkLocalAddressing=no
diff --git a/test/test-network/conf/25-link-local-addressing-yes.network b/test/test-network/conf/25-link-local-addressing-yes.network
new file mode 100644
index 0000000..3c99de1
--- /dev/null
+++ b/test/test-network/conf/25-link-local-addressing-yes.network
@@ -0,0 +1,8 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=test1
+
+[Network]
+LinkLocalAddressing=yes
+IPv6AcceptRA=no
+IPv6StableSecretAddress=0123:4567:89ab:cdef:0123:4567:89ab:cdef
diff --git a/test/test-network/conf/25-link-section-unmanaged.network b/test/test-network/conf/25-link-section-unmanaged.network
new file mode 100644
index 0000000..f06b615
--- /dev/null
+++ b/test/test-network/conf/25-link-section-unmanaged.network
@@ -0,0 +1,7 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=dummy98
+
+[Link]
+MACAddress=00:01:02:aa:bb:cc
+Unmanaged=true
diff --git a/test/test-network/conf/25-macsec.key b/test/test-network/conf/25-macsec.key
new file mode 100644
index 0000000..56c51fa
--- /dev/null
+++ b/test/test-network/conf/25-macsec.key
@@ -0,0 +1 @@
+85858585858585858585858585858585
diff --git a/test/test-network/conf/25-macsec.netdev b/test/test-network/conf/25-macsec.netdev
new file mode 100644
index 0000000..9036cb5
--- /dev/null
+++ b/test/test-network/conf/25-macsec.netdev
@@ -0,0 +1,69 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[NetDev]
+Name=macsec99
+Kind=macsec
+
+[MACsec]
+Port=11
+Encrypt=yes
+
+[MACsecTransmitAssociation]
+PacketNumber=1024
+KeyId=01
+Key=81818181818181818181818181818181
+Activate=yes
+
+[MACsecTransmitAssociation]
+PacketNumber=512
+KeyId=0203
+Key=82828282828282828282828282828282
+UseForEncoding=yes
+
+[MACsecReceiveChannel]
+Port=2
+MACAddress=8c:16:45:6c:83:a9
+
+[MACsecReceiveAssociation]
+Port=2
+MACAddress=8c:16:45:6c:83:a9
+PacketNumber=16
+KeyId=020304
+Key=83838383838383838383838383838383
+
+[MACsecReceiveAssociation]
+Port=256
+MACAddress=c6:19:52:8f:e6:a0
+PacketNumber=32
+KeyId=02030405
+Key=84848484848484848484848484848484
+Activate=yes
+
+[MACsecReceiveAssociation]
+Port=256
+MACAddress=c6:19:52:8f:e6:a0
+PacketNumber=128
+KeyId=0203040506
+KeyFile=/run/systemd/network/25-macsec.key
+Activate=yes
+
+[MACsecReceiveAssociation]
+Port=256
+MACAddress=c6:19:52:8f:e6:a0
+KeyId=020304050607
+Key=86868686868686868686868686868686
+Activate=no
+
+[MACsecReceiveAssociation]
+Port=256
+MACAddress=c6:19:52:8f:e6:a0
+KeyId=02030405060708
+Key=87878787878787878787878787878787
+Activate=no
+
+[MACsecReceiveAssociation]
+# This section should be dropped.
+Port=256
+MACAddress=c6:19:52:8f:e6:a0
+KeyId=0203040506070809
+Key=88888888888888888888888888888888
+Activate=no
diff --git a/test/test-network/conf/25-macsec.network b/test/test-network/conf/25-macsec.network
new file mode 100644
index 0000000..4dcccac
--- /dev/null
+++ b/test/test-network/conf/25-macsec.network
@@ -0,0 +1,8 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=macsec99
+
+[Network]
+IPv6AcceptRA=no
+Address=10.1.2.3/16
+LinkLocalAddressing=yes
diff --git a/test/test-network/conf/25-macvlan.network b/test/test-network/conf/25-macvlan.network
new file mode 100644
index 0000000..d34d7bd
--- /dev/null
+++ b/test/test-network/conf/25-macvlan.network
@@ -0,0 +1,7 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=test1
+
+[Network]
+IPv6AcceptRA=no
+MACVLAN=macvlan99
diff --git a/test/test-network/conf/25-macvtap.network b/test/test-network/conf/25-macvtap.network
new file mode 100644
index 0000000..163c0de
--- /dev/null
+++ b/test/test-network/conf/25-macvtap.network
@@ -0,0 +1,7 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=test1
+
+[Network]
+IPv6AcceptRA=no
+MACVTAP=macvtap99
diff --git a/test/test-network/conf/25-neighbor-ip-dummy.network b/test/test-network/conf/25-neighbor-ip-dummy.network
new file mode 100644
index 0000000..f1b1151
--- /dev/null
+++ b/test/test-network/conf/25-neighbor-ip-dummy.network
@@ -0,0 +1,8 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=dummy98
+
+[Network]
+IPv6AcceptRA=no
+Tunnel=gretun97
+Tunnel=ip6gretun97
diff --git a/test/test-network/conf/25-neighbor-ip.network b/test/test-network/conf/25-neighbor-ip.network
new file mode 100644
index 0000000..8ef6e3f
--- /dev/null
+++ b/test/test-network/conf/25-neighbor-ip.network
@@ -0,0 +1,11 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=gretun97
+
+[Network]
+IPv6AcceptRA=no
+Address=10.0.0.21
+
+[Neighbor]
+Address=10.0.0.22
+LinkLayerAddress=10.65.223.239
diff --git a/test/test-network/conf/25-neighbor-ipv6.network b/test/test-network/conf/25-neighbor-ipv6.network
new file mode 100644
index 0000000..f7480fa
--- /dev/null
+++ b/test/test-network/conf/25-neighbor-ipv6.network
@@ -0,0 +1,12 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=ip6gretun97
+
+[Network]
+IPv6AcceptRA=no
+Address=2001:db8:0:f102::16/64
+LinkLocalAddressing=no
+
+[Neighbor]
+Address=2001:db8:0:f102::17
+LinkLayerAddress=2a00:ffde:4567:edde::4988
diff --git a/test/test-network/conf/25-neighbor-next.network b/test/test-network/conf/25-neighbor-next.network
new file mode 100644
index 0000000..6911f48
--- /dev/null
+++ b/test/test-network/conf/25-neighbor-next.network
@@ -0,0 +1,10 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=dummy98
+
+[Network]
+IPv6AcceptRA=no
+
+[Neighbor]
+Address=192.168.10.1
+LinkLayerAddress=00:00:5e:00:02:66
diff --git a/test/test-network/conf/25-neighbor-section.network b/test/test-network/conf/25-neighbor-section.network
new file mode 100644
index 0000000..38f6b02
--- /dev/null
+++ b/test/test-network/conf/25-neighbor-section.network
@@ -0,0 +1,14 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=dummy98
+
+[Network]
+IPv6AcceptRA=no
+
+[Neighbor]
+Address=192.168.10.1
+LinkLayerAddress=00:00:5e:00:02:65
+
+[Neighbor]
+Address=2004:da8:1:0::1
+LinkLayerAddress=00:00:5e:00:02:66
diff --git a/test/test-network/conf/25-nexthop-dummy.network b/test/test-network/conf/25-nexthop-dummy.network
new file mode 100644
index 0000000..a7bdaa9
--- /dev/null
+++ b/test/test-network/conf/25-nexthop-dummy.network
@@ -0,0 +1,15 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=dummy98
+
+[Network]
+Address=192.168.20.20/24
+IPv6AcceptRA=no
+
+[NextHop]
+Id=20
+Gateway=192.168.20.1
+
+[NextHop]
+Id=21
+Group=1:3 20:1
diff --git a/test/test-network/conf/25-nexthop-nothing.network b/test/test-network/conf/25-nexthop-nothing.network
new file mode 100644
index 0000000..9481175
--- /dev/null
+++ b/test/test-network/conf/25-nexthop-nothing.network
@@ -0,0 +1,9 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=veth99
+
+[Network]
+IPv6AcceptRA=no
+Address=2001:1234:5:8f63::1/120
+Address=192.168.5.10/24
+Gateway=192.168.5.1
diff --git a/test/test-network/conf/25-nexthop.network b/test/test-network/conf/25-nexthop.network
new file mode 100644
index 0000000..f53a58b
--- /dev/null
+++ b/test/test-network/conf/25-nexthop.network
@@ -0,0 +1,83 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=veth99
+
+[Network]
+IPv6AcceptRA=no
+Address=2001:1234:5:8f63::1/120
+Address=192.168.5.10/24
+Gateway=192.168.5.1
+
+[NextHop]
+Id=1
+Gateway=192.168.5.1
+
+[NextHop]
+Id=2
+Gateway=2001:1234:5:8f63::2
+
+[NextHop]
+Id=3
+Family=ipv6
+
+[NextHop]
+Id=4
+Family=ipv4
+
+[NextHop]
+Id=5
+Gateway=192.168.10.1
+OnLink=yes
+
+[NextHop]
+Id=6
+Family=ipv4
+Blackhole=yes
+
+[NextHop]
+Id=7
+Family=ipv6
+Blackhole=yes
+
+[NextHop]
+Id=8
+Gateway=fe80::222:4dff:ff:ff:ff:ff
+
+[NextHop]
+Gateway=192.168.5.2
+
+[NextHop]
+Family=ipv4
+Blackhole=yes
+
+[NextHop]
+Family=ipv6
+Blackhole=yes
+
+[Route]
+NextHop=1
+Destination=10.10.10.10
+
+[Route]
+NextHop=2
+Destination=10.10.10.11
+
+[Route]
+NextHop=2
+Destination=2001:1234:5:8f62::1
+
+[Route]
+NextHop=5
+Destination=10.10.10.12
+
+[Route]
+NextHop=6
+Destination=10.10.10.13
+
+[Route]
+NextHop=7
+Destination=2001:1234:5:8f62::2
+
+[Route]
+NextHop=21
+Destination=10.10.10.14
diff --git a/test/test-network/conf/25-nlmon.netdev b/test/test-network/conf/25-nlmon.netdev
new file mode 100644
index 0000000..5e344d9
--- /dev/null
+++ b/test/test-network/conf/25-nlmon.netdev
@@ -0,0 +1,4 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[NetDev]
+Kind=nlmon
+Name=nlmon99
diff --git a/test/test-network/conf/25-prefix-route-with-vrf.network b/test/test-network/conf/25-prefix-route-with-vrf.network
new file mode 100644
index 0000000..ac41a32
--- /dev/null
+++ b/test/test-network/conf/25-prefix-route-with-vrf.network
@@ -0,0 +1,27 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=dummy98
+
+[Network]
+IPv6AcceptRA=no
+VRF=vrf99
+Address=fdde:11:22::1/128
+Address=fdde:11:33::1/64
+Address=10.20.22.1/32
+Address=10.20.33.1/24
+
+[Address]
+Address=fdde:11:44::1/128
+AddPrefixRoute=no
+
+[Address]
+Address=fdde:11:55::1/64
+AddPrefixRoute=no
+
+[Address]
+Address=10.20.44.1/32
+AddPrefixRoute=no
+
+[Address]
+Address=10.20.55.1/24
+AddPrefixRoute=no
diff --git a/test/test-network/conf/25-prefix-route-without-vrf.network b/test/test-network/conf/25-prefix-route-without-vrf.network
new file mode 100644
index 0000000..d5338ce
--- /dev/null
+++ b/test/test-network/conf/25-prefix-route-without-vrf.network
@@ -0,0 +1,26 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=test1
+
+[Network]
+IPv6AcceptRA=no
+Address=fdde:12:22::1/128
+Address=fdde:12:33::1/64
+Address=10.21.22.1/32
+Address=10.21.33.1/24
+
+[Address]
+Address=fdde:12:44::1/128
+AddPrefixRoute=no
+
+[Address]
+Address=fdde:12:55::1/64
+AddPrefixRoute=no
+
+[Address]
+Address=10.21.44.1/32
+AddPrefixRoute=no
+
+[Address]
+Address=10.21.55.1/24
+AddPrefixRoute=no
diff --git a/test/test-network/conf/25-qdisc-cake.network b/test/test-network/conf/25-qdisc-cake.network
new file mode 100644
index 0000000..b13720c
--- /dev/null
+++ b/test/test-network/conf/25-qdisc-cake.network
@@ -0,0 +1,23 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=dummy98
+
+[Network]
+IPv6AcceptRA=no
+Address=10.1.2.3/16
+
+[CAKE]
+Parent=root
+Handle=3a
+Bandwidth=500M
+AutoRateIngress=yes
+OverheadBytes=128
+MPUBytes=20
+CompensationMode=atm
+UseRawPacketSize=yes
+FlowIsolationMode=dual-dst-host
+NAT=yes
+PriorityQueueingPreset=diffserv8
+FirewallMark=0xff00
+Wash=yes
+SplitGSO=yes
diff --git a/test/test-network/conf/25-qdisc-clsact.network b/test/test-network/conf/25-qdisc-clsact.network
new file mode 100644
index 0000000..8a16618
--- /dev/null
+++ b/test/test-network/conf/25-qdisc-clsact.network
@@ -0,0 +1,10 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=dummy98
+
+[Network]
+IPv6AcceptRA=no
+Address=10.1.2.3/16
+
+[QDisc]
+Parent=clsact
diff --git a/test/test-network/conf/25-qdisc-codel.network b/test/test-network/conf/25-qdisc-codel.network
new file mode 100644
index 0000000..a332fa8
--- /dev/null
+++ b/test/test-network/conf/25-qdisc-codel.network
@@ -0,0 +1,16 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=dummy98
+
+[Network]
+IPv6AcceptRA=no
+Address=10.1.2.3/16
+
+[ControlledDelay]
+Parent=root
+Handle=0033
+PacketLimit=2000
+TargetSec=10ms
+IntervalSec=50ms
+ECN=yes
+CEThresholdSec=100ms
diff --git a/test/test-network/conf/25-qdisc-drr.network b/test/test-network/conf/25-qdisc-drr.network
new file mode 100644
index 0000000..b5fca76
--- /dev/null
+++ b/test/test-network/conf/25-qdisc-drr.network
@@ -0,0 +1,16 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=dummy98
+
+[Network]
+IPv6AcceptRA=no
+Address=10.1.2.3/16
+
+[DeficitRoundRobinScheduler]
+Parent=root
+Handle=0002
+
+[DeficitRoundRobinSchedulerClass]
+Parent=root
+ClassId=0002:0030
+QuantumBytes=2000
diff --git a/test/test-network/conf/25-qdisc-ets.network b/test/test-network/conf/25-qdisc-ets.network
new file mode 100644
index 0000000..81ca718
--- /dev/null
+++ b/test/test-network/conf/25-qdisc-ets.network
@@ -0,0 +1,21 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=dummy98
+
+[Network]
+IPv6AcceptRA=no
+Address=10.1.2.3/16
+
+[EnhancedTransmissionSelection]
+Parent=root
+Handle=3a
+Bands=10
+StrictBands=3
+QuantumBytes=2 4 6
+QuantumBytes=
+QuantumBytes=1 2 3
+QuantumBytes=4 5
+PriorityMap=8 7 6 5
+PriorityMap=
+PriorityMap=3 4 5
+PriorityMap=6 7
diff --git a/test/test-network/conf/25-qdisc-fq.network b/test/test-network/conf/25-qdisc-fq.network
new file mode 100644
index 0000000..5539a64
--- /dev/null
+++ b/test/test-network/conf/25-qdisc-fq.network
@@ -0,0 +1,20 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=dummy98
+
+[Network]
+IPv6AcceptRA=no
+Address=10.1.2.3/16
+
+[FairQueueing]
+Parent=root
+Handle=0032
+PacketLimit=1000
+FlowLimit=200
+QuantumBytes=1500
+InitialQuantumBytes=13000
+MaximumRate=1M
+Buckets=512
+OrphanMask=511
+Pacing=yes
+CEThresholdSec=100ms
diff --git a/test/test-network/conf/25-qdisc-fq_codel.network b/test/test-network/conf/25-qdisc-fq_codel.network
new file mode 100644
index 0000000..0e7d62d
--- /dev/null
+++ b/test/test-network/conf/25-qdisc-fq_codel.network
@@ -0,0 +1,19 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=dummy98
+
+[Network]
+IPv6AcceptRA=no
+Address=10.1.2.3/16
+
+[FairQueueingControlledDelay]
+Parent=root
+Handle=0034
+PacketLimit=20480
+MemoryLimitBytes=64M
+Flows=2048
+TargetSec=10ms
+IntervalSec=200ms
+QuantumBytes=1400
+ECN=yes
+CEThresholdSec=100ms
diff --git a/test/test-network/conf/25-qdisc-fq_pie.network b/test/test-network/conf/25-qdisc-fq_pie.network
new file mode 100644
index 0000000..5f567d3
--- /dev/null
+++ b/test/test-network/conf/25-qdisc-fq_pie.network
@@ -0,0 +1,12 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=dummy98
+
+[Network]
+IPv6AcceptRA=no
+Address=10.1.2.3/16
+
+[FlowQueuePIE]
+Parent=root
+Handle=3a
+PacketLimit=200000
diff --git a/test/test-network/conf/25-qdisc-gred.network b/test/test-network/conf/25-qdisc-gred.network
new file mode 100644
index 0000000..a49955f
--- /dev/null
+++ b/test/test-network/conf/25-qdisc-gred.network
@@ -0,0 +1,14 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=dummy98
+
+[Network]
+IPv6AcceptRA=no
+Address=10.1.2.3/16
+
+[GenericRandomEarlyDetection]
+Parent=root
+Handle=0038
+VirtualQueues=12
+DefaultVirtualQueue=10
+GenericRIO=yes
diff --git a/test/test-network/conf/25-qdisc-hhf.network b/test/test-network/conf/25-qdisc-hhf.network
new file mode 100644
index 0000000..0b1c9d3
--- /dev/null
+++ b/test/test-network/conf/25-qdisc-hhf.network
@@ -0,0 +1,12 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=dummy98
+
+[Network]
+IPv6AcceptRA=no
+Address=10.1.2.3/16
+
+[HeavyHitterFilter]
+Parent=root
+Handle=3a
+PacketLimit=1022
diff --git a/test/test-network/conf/25-qdisc-htb-fifo.network b/test/test-network/conf/25-qdisc-htb-fifo.network
new file mode 100644
index 0000000..1e092a9
--- /dev/null
+++ b/test/test-network/conf/25-qdisc-htb-fifo.network
@@ -0,0 +1,65 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=dummy98
+
+[Network]
+IPv6AcceptRA=no
+Address=10.1.2.3/16
+
+[HierarchyTokenBucket]
+Parent=root
+Handle=0002
+DefaultClass=30
+RateToQuantum=20
+
+[HierarchyTokenBucketClass]
+Parent=root
+ClassId=0002:0037
+Priority=1
+Rate=1M
+CeilRate=0.5M
+QuantumBytes=4000
+MTUBytes=1700
+OverheadBytes=100
+BufferBytes=123456
+CeilBufferBytes=123457
+
+[PFIFO]
+Parent=2:37
+Handle=0037
+PacketLimit=100000
+
+[HierarchyTokenBucketClass]
+Parent=root
+ClassId=0002:003a
+Priority=1
+Rate=1M
+CeilRate=0.5M
+
+[BFIFO]
+Parent=2:3a
+Handle=003a
+LimitBytes=1000000
+
+[HierarchyTokenBucketClass]
+Parent=root
+ClassId=0002:003b
+Priority=1
+Rate=1M
+CeilRate=0.5M
+
+[PFIFOHeadDrop]
+Parent=2:3b
+Handle=003b
+PacketLimit=1023
+
+[HierarchyTokenBucketClass]
+Parent=root
+ClassId=0002:003c
+Priority=1
+Rate=1M
+CeilRate=0.5M
+
+[PFIFOFast]
+Parent=2:3c
+Handle=003c
diff --git a/test/test-network/conf/25-qdisc-ingress.network b/test/test-network/conf/25-qdisc-ingress.network
new file mode 100644
index 0000000..6fb5fef
--- /dev/null
+++ b/test/test-network/conf/25-qdisc-ingress.network
@@ -0,0 +1,10 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=test1
+
+[Network]
+IPv6AcceptRA=no
+Address=10.1.2.4/16
+
+[QDisc]
+Parent=ingress
diff --git a/test/test-network/conf/25-qdisc-netem-compat.network b/test/test-network/conf/25-qdisc-netem-compat.network
new file mode 100644
index 0000000..15e0f7f
--- /dev/null
+++ b/test/test-network/conf/25-qdisc-netem-compat.network
@@ -0,0 +1,14 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=test1
+
+[Network]
+IPv6AcceptRA=no
+Address=10.1.2.4/16
+
+[TrafficControlQueueingDiscipline]
+Parent=root
+NetworkEmulatorDelaySec=50ms
+NetworkEmulatorDelayJitterSec=10ms
+NetworkEmulatorLossRate=20%
+NetworkEmulatorPacketLimit=100
diff --git a/test/test-network/conf/25-qdisc-netem.network b/test/test-network/conf/25-qdisc-netem.network
new file mode 100644
index 0000000..9848788
--- /dev/null
+++ b/test/test-network/conf/25-qdisc-netem.network
@@ -0,0 +1,15 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=dummy98
+
+[Network]
+IPv6AcceptRA=no
+Address=10.1.2.3/16
+
+[NetworkEmulator]
+Parent=root
+Handle=0030
+DelaySec=50ms
+DelayJitterSec=10ms
+LossRate=20%
+PacketLimit=100
diff --git a/test/test-network/conf/25-qdisc-pie.network b/test/test-network/conf/25-qdisc-pie.network
new file mode 100644
index 0000000..119423b
--- /dev/null
+++ b/test/test-network/conf/25-qdisc-pie.network
@@ -0,0 +1,12 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=dummy98
+
+[Network]
+IPv6AcceptRA=no
+Address=10.1.2.3/16
+
+[PIE]
+Parent=root
+Handle=3a
+PacketLimit=200000
diff --git a/test/test-network/conf/25-qdisc-qfq.network b/test/test-network/conf/25-qdisc-qfq.network
new file mode 100644
index 0000000..b09e99c
--- /dev/null
+++ b/test/test-network/conf/25-qdisc-qfq.network
@@ -0,0 +1,23 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=dummy98
+
+[Network]
+IPv6AcceptRA=no
+Address=10.1.2.3/16
+
+[QuickFairQueueing]
+Parent=root
+Handle=0002
+
+[QuickFairQueueingClass]
+Parent=root
+ClassId=0002:0030
+Weight=2
+MaxPacketBytes=16000
+
+[QuickFairQueueingClass]
+Parent=root
+ClassId=0002:0031
+Weight=10
+MaxPacketBytes=8000
diff --git a/test/test-network/conf/25-qdisc-sfb.network b/test/test-network/conf/25-qdisc-sfb.network
new file mode 100644
index 0000000..bfcda00
--- /dev/null
+++ b/test/test-network/conf/25-qdisc-sfb.network
@@ -0,0 +1,12 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=dummy98
+
+[Network]
+IPv6AcceptRA=no
+Address=10.1.2.3/16
+
+[StochasticFairBlue]
+Parent=root
+Handle=0039
+PacketLimit=200000
diff --git a/test/test-network/conf/25-qdisc-sfq.network b/test/test-network/conf/25-qdisc-sfq.network
new file mode 100644
index 0000000..263cd6d
--- /dev/null
+++ b/test/test-network/conf/25-qdisc-sfq.network
@@ -0,0 +1,12 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=dummy98
+
+[Network]
+IPv6AcceptRA=no
+Address=10.1.2.3/16
+
+[StochasticFairnessQueueing]
+Parent=root
+Handle=0036
+PerturbPeriodSec=5sec
diff --git a/test/test-network/conf/25-qdisc-tbf.network b/test/test-network/conf/25-qdisc-tbf.network
new file mode 100644
index 0000000..c5f28fb
--- /dev/null
+++ b/test/test-network/conf/25-qdisc-tbf.network
@@ -0,0 +1,16 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=dummy98
+
+[Network]
+IPv6AcceptRA=no
+Address=10.1.2.3/16
+
+[TokenBucketFilter]
+Parent=root
+Handle=0035
+Rate=1G
+BurstBytes=5000
+LatencySec=70msec
+PeakRate=100G
+MTUBytes=1000000
diff --git a/test/test-network/conf/25-qdisc-teql.network b/test/test-network/conf/25-qdisc-teql.network
new file mode 100644
index 0000000..ed7e21f
--- /dev/null
+++ b/test/test-network/conf/25-qdisc-teql.network
@@ -0,0 +1,12 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=dummy98
+
+[Network]
+IPv6AcceptRA=no
+Address=10.1.2.3/16
+
+[TrivialLinkEqualizer]
+Parent=root
+Handle=0031
+Id=1
diff --git a/test/test-network/conf/25-route-congctl.network b/test/test-network/conf/25-route-congctl.network
new file mode 100644
index 0000000..f924d73
--- /dev/null
+++ b/test/test-network/conf/25-route-congctl.network
@@ -0,0 +1,16 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=dummy98
+
+[Network]
+IPv6AcceptRA=no
+Address=2001:1234:5:8f63::1/128
+Address=149.10.124.58/28
+
+[Route]
+Destination=2001:1234:5:8fff:ff:ff:ff:ff/128
+TCPCongestionControlAlgorithm=dctcp
+
+[Route]
+Destination=149.10.124.66
+TCPCongestionControlAlgorithm=dctcp
diff --git a/test/test-network/conf/25-route-ipv6-src.network b/test/test-network/conf/25-route-ipv6-src.network
new file mode 100644
index 0000000..f2f8e45
--- /dev/null
+++ b/test/test-network/conf/25-route-ipv6-src.network
@@ -0,0 +1,17 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+# This test cannot use a dummy interface: IPv6 addresses
+# are added without having to go through tentative state
+
+[Match]
+Name=bond199
+
+[Network]
+LinkLocalAddressing=ipv6
+Address=2001:1234:56:8f63::1/64
+Address=2001:1234:56:8f63::2/64
+IPv6AcceptRA=no
+
+[Route]
+Destination=abcd::/16
+Gateway=2001:1234:56:8f63::1:1
+PreferredSource=2001:1234:56:8f63::2
diff --git a/test/test-network/conf/25-route-preferred-source.network b/test/test-network/conf/25-route-preferred-source.network
new file mode 100644
index 0000000..5a55460
--- /dev/null
+++ b/test/test-network/conf/25-route-preferred-source.network
@@ -0,0 +1,12 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=dummy98
+
+[Network]
+Address=2001:1234:56:8f63::1/64
+IPv6AcceptRA=no
+
+[Route]
+Destination=abcd::/16
+Gateway=2001:1234:56:8f63::1:1
+PreferredSource=2001:1234:56:8f63::1
diff --git a/test/test-network/conf/25-route-static.network b/test/test-network/conf/25-route-static.network
new file mode 100644
index 0000000..46ef0c4
--- /dev/null
+++ b/test/test-network/conf/25-route-static.network
@@ -0,0 +1,107 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=dummy98
+
+[Network]
+IPv6AcceptRA=no
+Address=2001:1234:5:8f63::1/128
+Address=149.10.124.58/28
+DefaultRouteOnDevice=yes
+IPv4LLRoute=yes
+
+[Route]
+Destination=2001:1234:5:8fff:ff:ff:ff:ff/128
+
+[Route]
+Destination=2001:1234:5:9fff:ff:ff:ff:ff/128
+
+[Route]
+Gateway=2001:1234:5:8fff:ff:ff:ff:ff
+
+[Route]
+Destination=2001:1234:5:afff:ff:ff:ff:ff/128
+Gateway=fe80::222:4dff:ff:ff:ff:ff
+
+[Route]
+Destination=149.10.124.64
+
+[Route]
+Gateway=149.10.124.64
+
+[Route]
+Gateway=149.10.125.65
+GatewayOnLink=yes
+
+[Route]
+Destination=192.168.1.1
+InitialCongestionWindow=20
+
+[Route]
+Destination=192.168.1.2
+InitialAdvertisedReceiveWindow=30
+
+[Route]
+Destination=192.168.1.3
+TCPAdvertisedMaximumSegmentSize=30
+
+[Route]
+Type=blackhole
+Destination=202.54.1.2
+
+[Route]
+Type=unreachable
+Destination=202.54.1.3
+
+[Route]
+Type=prohibit
+Destination=202.54.1.4
+
+[Route]
+Type=blackhole
+Destination=2001:1234:5678::2
+
+[Route]
+Type=unreachable
+Destination=2001:1234:5678::3
+
+[Route]
+Type=prohibit
+Destination=2001:1234:5678::4
+
+[Route]
+Type=local
+Destination=149.10.123.1
+
+[Route]
+Type=anycast
+Destination=149.10.123.2
+
+[Route]
+Type=broadcast
+Destination=149.10.123.3
+
+[Route]
+Type=multicast
+Destination=149.10.123.4
+
+[Route]
+Destination=192.168.10.1/32
+MultiPathRoute=149.10.124.59 10
+MultiPathRoute=149.10.124.60 5
+
+[Route]
+Destination=2001:1234:5:7fff:ff:ff:ff:ff/128
+MultiPathRoute=2001:1234:5:8fff:ff:ff:ff:ff@dummy98 10
+MultiPathRoute=2001:1234:5:9fff:ff:ff:ff:ff@dummy98 5
+
+[Route]
+Destination=192.168.10.2/32
+MultiPathRoute=2001:1234:5:8fff:ff:ff:ff:ff@dummy98 10
+MultiPathRoute=2001:1234:5:9fff:ff:ff:ff:ff@dummy98 5
+
+[Address]
+Address=1.1.8.105/31
+Peer=1.1.8.104/31
+
+[Route]
+Gateway=1.1.8.104
diff --git a/test/test-network/conf/25-route-via-ipv6.network b/test/test-network/conf/25-route-via-ipv6.network
new file mode 100644
index 0000000..aa12781
--- /dev/null
+++ b/test/test-network/conf/25-route-via-ipv6.network
@@ -0,0 +1,15 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=dummy98
+
+[Network]
+IPv6AcceptRA=no
+Address=2001:1234:5:8f63::1/128
+Address=149.10.124.58/28
+
+[Route]
+Destination=2001:1234:5:8fff:ff:ff:ff:ff/128
+
+[Route]
+Destination=149.10.124.66
+Gateway=2001:1234:5:8fff:ff:ff:ff:ff
diff --git a/test/test-network/conf/25-route-vrf.network b/test/test-network/conf/25-route-vrf.network
new file mode 100644
index 0000000..1bc94f9
--- /dev/null
+++ b/test/test-network/conf/25-route-vrf.network
@@ -0,0 +1,9 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=dummy98
+
+[Network]
+IPv6AcceptRA=no
+VRF=vrf99
+Address=192.168.100.2/24
+Gateway=192.168.100.1
diff --git a/test/test-network/conf/25-routing-policy-rule-dummy98.network b/test/test-network/conf/25-routing-policy-rule-dummy98.network
new file mode 100644
index 0000000..d4c579f
--- /dev/null
+++ b/test/test-network/conf/25-routing-policy-rule-dummy98.network
@@ -0,0 +1,14 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=dummy98
+
+[Network]
+IPv6AcceptRA=no
+
+[RoutingPolicyRule]
+TypeOfService=0x08
+Table=8
+From= 192.168.101.18
+Priority=112
+IncomingInterface=dummy98
+OutgoingInterface=dummy98
diff --git a/test/test-network/conf/25-routing-policy-rule-reconfigure1.network b/test/test-network/conf/25-routing-policy-rule-reconfigure1.network
new file mode 100644
index 0000000..d0c05c5
--- /dev/null
+++ b/test/test-network/conf/25-routing-policy-rule-reconfigure1.network
@@ -0,0 +1,34 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=test1
+
+[Network]
+IPv6AcceptRA=no
+
+# fwmark
+[RoutingPolicyRule]
+Table=1011
+Family=ipv4
+Priority=10111
+FirewallMark=1011
+
+# oif
+[RoutingPolicyRule]
+Table=1011
+Family=ipv4
+Priority=10112
+OutgoingInterface=test1
+
+# iif
+[RoutingPolicyRule]
+Table=1011
+Family=both
+Priority=10113
+IncomingInterface=test1
+
+# source
+[RoutingPolicyRule]
+Table=1011
+Family=ipv4
+Priority=10114
+From=192.168.8.254
diff --git a/test/test-network/conf/25-routing-policy-rule-reconfigure2.network b/test/test-network/conf/25-routing-policy-rule-reconfigure2.network
new file mode 100644
index 0000000..47bf4bb
--- /dev/null
+++ b/test/test-network/conf/25-routing-policy-rule-reconfigure2.network
@@ -0,0 +1,34 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=test1
+
+[Network]
+IPv6AcceptRA=no
+
+# fwmark
+[RoutingPolicyRule]
+Table=1011
+Family=ipv4
+Priority=10111
+FirewallMark=1011
+
+# oif
+[RoutingPolicyRule]
+Table=1011
+Family=both
+Priority=10112
+OutgoingInterface=test1
+
+# iif
+[RoutingPolicyRule]
+Table=1011
+Family=ipv4
+Priority=10113
+IncomingInterface=test1
+
+# source
+[RoutingPolicyRule]
+Table=1011
+Family=ipv4
+Priority=10114
+From=192.168.8.254
diff --git a/test/test-network/conf/25-routing-policy-rule-test1.network b/test/test-network/conf/25-routing-policy-rule-test1.network
new file mode 100644
index 0000000..7d6e17c
--- /dev/null
+++ b/test/test-network/conf/25-routing-policy-rule-test1.network
@@ -0,0 +1,33 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=test1
+
+[Network]
+IPv6AcceptRA=no
+
+[RoutingPolicyRule]
+TypeOfService=0x08
+Table=7
+From= 192.168.100.18
+Priority=111
+IncomingInterface=test1
+OutgoingInterface=test1
+
+[RoutingPolicyRule]
+IncomingInterface=test1
+From=::/0
+Table=8
+Priority=100
+Family=ipv6
+
+[RoutingPolicyRule]
+IncomingInterface=test1
+Table=9
+Priority=101
+Family=both
+
+[RoutingPolicyRule]
+IncomingInterface=test1
+From=0.0.0.0/8
+Table=10
+Priority=102
diff --git a/test/test-network/conf/25-sit-tunnel-any-any.netdev b/test/test-network/conf/25-sit-tunnel-any-any.netdev
new file mode 100644
index 0000000..a25cf3e
--- /dev/null
+++ b/test/test-network/conf/25-sit-tunnel-any-any.netdev
@@ -0,0 +1,8 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[NetDev]
+Name=sittun96
+Kind=sit
+
+[Tunnel]
+Local=any
+Remote=any
diff --git a/test/test-network/conf/25-sit-tunnel-local-any.netdev b/test/test-network/conf/25-sit-tunnel-local-any.netdev
new file mode 100644
index 0000000..3c92ccc
--- /dev/null
+++ b/test/test-network/conf/25-sit-tunnel-local-any.netdev
@@ -0,0 +1,8 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[NetDev]
+Name=sittun98
+Kind=sit
+
+[Tunnel]
+Local=any
+Remote=10.65.223.239
diff --git a/test/test-network/conf/25-sit-tunnel-remote-any.netdev b/test/test-network/conf/25-sit-tunnel-remote-any.netdev
new file mode 100644
index 0000000..c8f18a6
--- /dev/null
+++ b/test/test-network/conf/25-sit-tunnel-remote-any.netdev
@@ -0,0 +1,8 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[NetDev]
+Name=sittun97
+Kind=sit
+
+[Tunnel]
+Local=10.65.223.238
+Remote=any
diff --git a/test/test-network/conf/25-sit-tunnel.netdev b/test/test-network/conf/25-sit-tunnel.netdev
new file mode 100644
index 0000000..1215797
--- /dev/null
+++ b/test/test-network/conf/25-sit-tunnel.netdev
@@ -0,0 +1,8 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[NetDev]
+Name=sittun99
+Kind=sit
+
+[Tunnel]
+Local=10.65.223.238
+Remote=10.65.223.239
diff --git a/test/test-network/conf/25-sit.network b/test/test-network/conf/25-sit.network
new file mode 100644
index 0000000..e05bf82
--- /dev/null
+++ b/test/test-network/conf/25-sit.network
@@ -0,0 +1,10 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=dummy98
+
+[Network]
+IPv6AcceptRA=no
+Tunnel=sittun99
+Tunnel=sittun98
+Tunnel=sittun97
+Tunnel=sittun96
diff --git a/test/test-network/conf/25-sriov-udev.network b/test/test-network/conf/25-sriov-udev.network
new file mode 100644
index 0000000..e914131
--- /dev/null
+++ b/test/test-network/conf/25-sriov-udev.network
@@ -0,0 +1,7 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=eni99np1
+
+[Network]
+Address=192.168.100.100/24
+IPv6AcceptRA=no
diff --git a/test/test-network/conf/25-sriov.link b/test/test-network/conf/25-sriov.link
new file mode 100644
index 0000000..cc19561
--- /dev/null
+++ b/test/test-network/conf/25-sriov.link
@@ -0,0 +1,40 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Driver=netdevsim
+
+[Link]
+NamePolicy=keep kernel database onboard slot path
+AlternativeNamesPolicy=database onboard slot path mac
+MACAddressPolicy=persistent
+
+[SR-IOV]
+VirtualFunction=0
+VLANId=5
+VLANProtocol=802.1ad
+QualityOfService=1
+MACSpoofCheck=yes
+QueryReceiveSideScaling=yes
+Trust=yes
+LinkState=yes
+MACAddress=00:11:22:33:44:55
+
+[SR-IOV]
+VirtualFunction=1
+VLANId=6
+VLANProtocol=802.1Q
+QualityOfService=2
+MACSpoofCheck=no
+QueryReceiveSideScaling=no
+Trust=no
+LinkState=no
+MACAddress=00:11:22:33:44:56
+
+[SR-IOV]
+VirtualFunction=2
+VLANId=7
+QualityOfService=3
+MACSpoofCheck=no
+QueryReceiveSideScaling=no
+Trust=no
+LinkState=auto
+MACAddress=00:11:22:33:44:57
diff --git a/test/test-network/conf/25-sriov.network b/test/test-network/conf/25-sriov.network
new file mode 100644
index 0000000..d87615e
--- /dev/null
+++ b/test/test-network/conf/25-sriov.network
@@ -0,0 +1,39 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=eni99np1
+
+[Network]
+Address=192.168.100.100/24
+IPv6AcceptRA=no
+
+[SR-IOV]
+VirtualFunction=0
+VLANId=5
+VLANProtocol=802.1ad
+QualityOfService=1
+MACSpoofCheck=yes
+QueryReceiveSideScaling=yes
+Trust=yes
+LinkState=yes
+MACAddress=00:11:22:33:44:55
+
+[SR-IOV]
+VirtualFunction=1
+VLANId=6
+VLANProtocol=802.1Q
+QualityOfService=2
+MACSpoofCheck=no
+QueryReceiveSideScaling=no
+Trust=no
+LinkState=no
+MACAddress=00:11:22:33:44:56
+
+[SR-IOV]
+VirtualFunction=2
+VLANId=7
+QualityOfService=3
+MACSpoofCheck=no
+QueryReceiveSideScaling=no
+Trust=no
+LinkState=auto
+MACAddress=00:11:22:33:44:57
diff --git a/test/test-network/conf/25-state-file-tests.network b/test/test-network/conf/25-state-file-tests.network
new file mode 100644
index 0000000..d321d60
--- /dev/null
+++ b/test/test-network/conf/25-state-file-tests.network
@@ -0,0 +1,19 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=dummy98
+
+[Link]
+RequiredForOnline=routable
+RequiredFamilyForOnline=both
+
+[Network]
+IPv6AcceptRA=no
+DNS=10.10.10.10#aaa.com 10.10.10.11:1111#bbb.com [1111:2222::3333]:1234#ccc.com
+NTP=0.fedora.pool.ntp.org 1.fedora.pool.ntp.org
+Domains=hogehoge ~foofoo
+LLMNR=no
+MulticastDNS=yes
+DNSSEC=no
+Address=192.168.10.10/24
+Address=192.168.12.12/24
+Address=2002:da8:1:0:1034:56ff:fe78:9abc/64
diff --git a/test/test-network/conf/25-sysctl-disable-ipv6.network b/test/test-network/conf/25-sysctl-disable-ipv6.network
new file mode 100644
index 0000000..9e423c4
--- /dev/null
+++ b/test/test-network/conf/25-sysctl-disable-ipv6.network
@@ -0,0 +1,19 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=dummy98
+
+[Network]
+IPv6AcceptRA=no
+Address=10.2.3.4/16
+
+# This should be ignored when ipv6 is disabled
+Gateway=2607:5300:0203:39ff:ff:ff:ff:ff
+
+[Address]
+# This should be ignored when ipv6 is disabled
+Address=2607:5300:0203:3906::/64
+
+[Route]
+# This should be ignored when ipv6 is disabled
+Destination=2607:5300:0203:39ff:ff:ff:ff:ff
+Scope=link
diff --git a/test/test-network/conf/25-sysctl.network b/test/test-network/conf/25-sysctl.network
new file mode 100644
index 0000000..72575ee
--- /dev/null
+++ b/test/test-network/conf/25-sysctl.network
@@ -0,0 +1,13 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=dummy98
+
+[Network]
+IPForward=true
+IPv6PrivacyExtensions=true
+IPv6DuplicateAddressDetection=3
+IPv6HopLimit=5
+IPv4ProxyARP=true
+IPv6ProxyNDP=true
+IPv6AcceptRA=no
+IPv4AcceptLocal=yes
diff --git a/test/test-network/conf/25-tap.netdev b/test/test-network/conf/25-tap.netdev
new file mode 100644
index 0000000..5cbfd0e
--- /dev/null
+++ b/test/test-network/conf/25-tap.netdev
@@ -0,0 +1,10 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[NetDev]
+Name=testtap99
+Kind=tap
+
+[Tap]
+MultiQueue=true
+PacketInfo=true
+VNetHeader=true
+KeepCarrier=yes
diff --git a/test/test-network/conf/25-test1.network b/test/test-network/conf/25-test1.network
new file mode 100644
index 0000000..c7ad431
--- /dev/null
+++ b/test/test-network/conf/25-test1.network
@@ -0,0 +1,8 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=test1
+
+[Network]
+Address=192.168.0.15/24
+Gateway=192.168.0.1
+IPv6AcceptRA=no
diff --git a/test/test-network/conf/25-test1.network.d/configure-without-carrier.conf b/test/test-network/conf/25-test1.network.d/configure-without-carrier.conf
new file mode 100644
index 0000000..fed3b0e
--- /dev/null
+++ b/test/test-network/conf/25-test1.network.d/configure-without-carrier.conf
@@ -0,0 +1,2 @@
+[Network]
+ConfigureWithoutCarrier=true
diff --git a/test/test-network/conf/25-test1.network.d/ignore-carrier-loss-no.conf b/test/test-network/conf/25-test1.network.d/ignore-carrier-loss-no.conf
new file mode 100644
index 0000000..b091e98
--- /dev/null
+++ b/test/test-network/conf/25-test1.network.d/ignore-carrier-loss-no.conf
@@ -0,0 +1,2 @@
+[Network]
+IgnoreCarrierLoss=false
diff --git a/test/test-network/conf/25-tun.netdev b/test/test-network/conf/25-tun.netdev
new file mode 100644
index 0000000..a354ebb
--- /dev/null
+++ b/test/test-network/conf/25-tun.netdev
@@ -0,0 +1,10 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[NetDev]
+Name=testtun99
+Kind=tun
+
+[Tun]
+MultiQueue=true
+PacketInfo=true
+VNetHeader=true
+KeepCarrier=yes
diff --git a/test/test-network/conf/25-tunnel-any-any.network b/test/test-network/conf/25-tunnel-any-any.network
new file mode 100644
index 0000000..8ce56a3
--- /dev/null
+++ b/test/test-network/conf/25-tunnel-any-any.network
@@ -0,0 +1,9 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=*tun96
+
+[Network]
+IPv6AcceptRA=no
+Address=2001:db8:0:f102::19/64
+Address=10.3.2.6/16
+LinkLocalAddressing=yes
diff --git a/test/test-network/conf/25-tunnel-local-any.network b/test/test-network/conf/25-tunnel-local-any.network
new file mode 100644
index 0000000..e65530e
--- /dev/null
+++ b/test/test-network/conf/25-tunnel-local-any.network
@@ -0,0 +1,9 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=*tun98 *tap98 ip6tnl98 erspan98
+
+[Network]
+IPv6AcceptRA=no
+Address=2001:db8:0:f102::17/64
+Address=10.3.2.4/16
+LinkLocalAddressing=yes
diff --git a/test/test-network/conf/25-tunnel-remote-any.network b/test/test-network/conf/25-tunnel-remote-any.network
new file mode 100644
index 0000000..eb7bda9
--- /dev/null
+++ b/test/test-network/conf/25-tunnel-remote-any.network
@@ -0,0 +1,9 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=*tun97 ip6tnl97
+
+[Network]
+IPv6AcceptRA=no
+Address=2001:db8:0:f102::18/64
+Address=10.3.2.5/16
+LinkLocalAddressing=yes
diff --git a/test/test-network/conf/25-tunnel.network b/test/test-network/conf/25-tunnel.network
new file mode 100644
index 0000000..9e269bd
--- /dev/null
+++ b/test/test-network/conf/25-tunnel.network
@@ -0,0 +1,9 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=*tun99 *tap99 ip6tnl99 erspan99
+
+[Network]
+IPv6AcceptRA=no
+Address=2001:db8:0:f102::16/64
+Address=10.3.2.3/16
+LinkLocalAddressing=yes
diff --git a/test/test-network/conf/25-vcan.netdev b/test/test-network/conf/25-vcan.netdev
new file mode 100644
index 0000000..2762dd2
--- /dev/null
+++ b/test/test-network/conf/25-vcan.netdev
@@ -0,0 +1,5 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[NetDev]
+Name=vcan99
+Kind=vcan
+MTUBytes=16
diff --git a/test/test-network/conf/25-vcan98.netdev b/test/test-network/conf/25-vcan98.netdev
new file mode 100644
index 0000000..5333c82
--- /dev/null
+++ b/test/test-network/conf/25-vcan98.netdev
@@ -0,0 +1,4 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[NetDev]
+Name=vcan98
+Kind=vcan
diff --git a/test/test-network/conf/25-vcan98.network b/test/test-network/conf/25-vcan98.network
new file mode 100644
index 0000000..97f824d
--- /dev/null
+++ b/test/test-network/conf/25-vcan98.network
@@ -0,0 +1,6 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=vcan98
+
+[Link]
+MTUBytes=16
diff --git a/test/test-network/conf/25-veth-downstream-veth97.netdev b/test/test-network/conf/25-veth-downstream-veth97.netdev
new file mode 100644
index 0000000..5ba18ce
--- /dev/null
+++ b/test/test-network/conf/25-veth-downstream-veth97.netdev
@@ -0,0 +1,9 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[NetDev]
+Name=veth97
+Kind=veth
+MACAddress=12:34:56:78:9a:ce
+
+[Peer]
+Name=veth97-peer
+MACAddress=12:34:56:78:9a:cf
diff --git a/test/test-network/conf/25-veth-downstream-veth98.netdev b/test/test-network/conf/25-veth-downstream-veth98.netdev
new file mode 100644
index 0000000..1329d91
--- /dev/null
+++ b/test/test-network/conf/25-veth-downstream-veth98.netdev
@@ -0,0 +1,9 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[NetDev]
+Name=veth98
+Kind=veth
+MACAddress=12:34:56:78:9a:be
+
+[Peer]
+Name=veth98-peer
+MACAddress=12:34:56:78:9a:bf
diff --git a/test/test-network/conf/25-veth-mtu.netdev b/test/test-network/conf/25-veth-mtu.netdev
new file mode 100644
index 0000000..f5ffe9e
--- /dev/null
+++ b/test/test-network/conf/25-veth-mtu.netdev
@@ -0,0 +1,10 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[NetDev]
+Name=veth-mtu
+Kind=veth
+MACAddress=12:34:56:78:9a:be
+MTUBytes=1800
+
+[Peer]
+Name=veth-mtu-peer
+MACAddress=12:34:56:78:9a:bf
diff --git a/test/test-network/conf/25-veth-peer.network b/test/test-network/conf/25-veth-peer.network
new file mode 100644
index 0000000..d5cc6d3
--- /dev/null
+++ b/test/test-network/conf/25-veth-peer.network
@@ -0,0 +1,8 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=veth-peer
+
+[Network]
+IPv6AcceptRA=no
+Address=2600::1/0
+Address=192.168.5.1/24
diff --git a/test/test-network/conf/25-veth.netdev b/test/test-network/conf/25-veth.netdev
new file mode 100644
index 0000000..84bfa8f
--- /dev/null
+++ b/test/test-network/conf/25-veth.netdev
@@ -0,0 +1,9 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[NetDev]
+Name=veth99
+Kind=veth
+MACAddress=12:34:56:78:9a:bc
+
+[Peer]
+Name=veth-peer
+MACAddress=12:34:56:78:9a:bd
diff --git a/test/test-network/conf/25-vrf.netdev b/test/test-network/conf/25-vrf.netdev
new file mode 100644
index 0000000..001ca87
--- /dev/null
+++ b/test/test-network/conf/25-vrf.netdev
@@ -0,0 +1,7 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[NetDev]
+Name=vrf99
+Kind=vrf
+
+[VRF]
+TableId=42
diff --git a/test/test-network/conf/25-vrf.network b/test/test-network/conf/25-vrf.network
new file mode 100644
index 0000000..914efee
--- /dev/null
+++ b/test/test-network/conf/25-vrf.network
@@ -0,0 +1,6 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=vrf99
+
+[Network]
+IPv6AcceptRA=no
diff --git a/test/test-network/conf/25-vti-tunnel-any-any.netdev b/test/test-network/conf/25-vti-tunnel-any-any.netdev
new file mode 100644
index 0000000..e1e1d65
--- /dev/null
+++ b/test/test-network/conf/25-vti-tunnel-any-any.netdev
@@ -0,0 +1,8 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[NetDev]
+Name=vtitun96
+Kind=vti
+
+[Tunnel]
+Local=any
+Remote=any
diff --git a/test/test-network/conf/25-vti-tunnel-local-any.netdev b/test/test-network/conf/25-vti-tunnel-local-any.netdev
new file mode 100644
index 0000000..c1c94cf
--- /dev/null
+++ b/test/test-network/conf/25-vti-tunnel-local-any.netdev
@@ -0,0 +1,8 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[NetDev]
+Name=vtitun98
+Kind=vti
+
+[Tunnel]
+Local=remote
+Remote=10.65.223.239
diff --git a/test/test-network/conf/25-vti-tunnel-remote-any.netdev b/test/test-network/conf/25-vti-tunnel-remote-any.netdev
new file mode 100644
index 0000000..2367ed9
--- /dev/null
+++ b/test/test-network/conf/25-vti-tunnel-remote-any.netdev
@@ -0,0 +1,8 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[NetDev]
+Name=vtitun97
+Kind=vti
+
+[Tunnel]
+Local=10.65.223.238
+Remote=any
diff --git a/test/test-network/conf/25-vti-tunnel.netdev b/test/test-network/conf/25-vti-tunnel.netdev
new file mode 100644
index 0000000..5a8a1ce
--- /dev/null
+++ b/test/test-network/conf/25-vti-tunnel.netdev
@@ -0,0 +1,8 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[NetDev]
+Name=vtitun99
+Kind=vti
+
+[Tunnel]
+Local=10.65.223.238
+Remote=10.65.223.239
diff --git a/test/test-network/conf/25-vti.network b/test/test-network/conf/25-vti.network
new file mode 100644
index 0000000..af80aad
--- /dev/null
+++ b/test/test-network/conf/25-vti.network
@@ -0,0 +1,10 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=dummy98
+
+[Network]
+IPv6AcceptRA=no
+Tunnel=vtitun99
+Tunnel=vtitun98
+Tunnel=vtitun97
+Tunnel=vtitun96
diff --git a/test/test-network/conf/25-vti6-tunnel-local-any.netdev b/test/test-network/conf/25-vti6-tunnel-local-any.netdev
new file mode 100644
index 0000000..546999f
--- /dev/null
+++ b/test/test-network/conf/25-vti6-tunnel-local-any.netdev
@@ -0,0 +1,8 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[NetDev]
+Name=vti6tun98
+Kind=vti6
+
+[Tunnel]
+Local=any
+Remote=2001:473:fece:cafe::5179
diff --git a/test/test-network/conf/25-vti6-tunnel-remote-any.netdev b/test/test-network/conf/25-vti6-tunnel-remote-any.netdev
new file mode 100644
index 0000000..6f33315
--- /dev/null
+++ b/test/test-network/conf/25-vti6-tunnel-remote-any.netdev
@@ -0,0 +1,8 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[NetDev]
+Name=vti6tun97
+Kind=vti6
+
+[Tunnel]
+Local=2a00:ffde:4567:edde::4987
+Remote=any
diff --git a/test/test-network/conf/25-vti6-tunnel.netdev b/test/test-network/conf/25-vti6-tunnel.netdev
new file mode 100644
index 0000000..68cbcbf
--- /dev/null
+++ b/test/test-network/conf/25-vti6-tunnel.netdev
@@ -0,0 +1,8 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[NetDev]
+Name=vti6tun99
+Kind=vti6
+
+[Tunnel]
+Local=2a00:ffde:4567:edde::4987
+Remote=2001:473:fece:cafe::5179
diff --git a/test/test-network/conf/25-vti6.network b/test/test-network/conf/25-vti6.network
new file mode 100644
index 0000000..2f73a99
--- /dev/null
+++ b/test/test-network/conf/25-vti6.network
@@ -0,0 +1,9 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=dummy98
+
+[Network]
+IPv6AcceptRA=no
+Tunnel=vti6tun99
+Tunnel=vti6tun98
+Tunnel=vti6tun97
diff --git a/test/test-network/conf/25-vxcan.netdev b/test/test-network/conf/25-vxcan.netdev
new file mode 100644
index 0000000..49c0a17
--- /dev/null
+++ b/test/test-network/conf/25-vxcan.netdev
@@ -0,0 +1,7 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[NetDev]
+Name=vxcan99
+Kind=vxcan
+
+[VXCAN]
+Peer=vxcan-peer
diff --git a/test/test-network/conf/25-vxlan-independent.netdev b/test/test-network/conf/25-vxlan-independent.netdev
new file mode 100644
index 0000000..44b819d
--- /dev/null
+++ b/test/test-network/conf/25-vxlan-independent.netdev
@@ -0,0 +1,18 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[NetDev]
+Name=vxlan98
+Kind=vxlan
+
+[VXLAN]
+VNI=1000
+L2MissNotification=true
+L3MissNotification=true
+RouteShortCircuit=true
+UDPChecksum=true
+UDP6ZeroChecksumTx=true
+UDP6ZeroChecksumRx=true
+RemoteChecksumTx=true
+RemoteChecksumRx=true
+GroupPolicyExtension=true
+DestinationPort=5556
+Independent=yes
diff --git a/test/test-network/conf/25-vxlan-ipv6.netdev b/test/test-network/conf/25-vxlan-ipv6.netdev
new file mode 100644
index 0000000..b5079fd
--- /dev/null
+++ b/test/test-network/conf/25-vxlan-ipv6.netdev
@@ -0,0 +1,8 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[NetDev]
+Name=vxlan97
+Kind=vxlan
+
+[VXLAN]
+VNI=4831583
+Local=fe80::281:8eff:fef0:73aa
diff --git a/test/test-network/conf/25-vxlan-ipv6.network b/test/test-network/conf/25-vxlan-ipv6.network
new file mode 100644
index 0000000..fd22387
--- /dev/null
+++ b/test/test-network/conf/25-vxlan-ipv6.network
@@ -0,0 +1,25 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=vxlan97
+
+[Network]
+IPv6AcceptRA=no
+LinkLocalAddressing=yes
+
+[BridgeFDB]
+MACAddress=00:00:00:00:00:00
+Destination=fe80::27c:16ff:fec0:6c74
+OutgoingInterface=test1
+VNI=4831583
+
+[BridgeFDB]
+MACAddress=00:00:00:00:00:00
+Destination=fe80::2a2:e4ff:fef9:2269
+OutgoingInterface=test1
+VNI=4831583
+
+[BridgeFDB]
+MACAddress=00:00:00:00:00:00
+Destination=fe80::23b:d2ff:fe95:967f
+OutgoingInterface=test1
+VNI=4831583
diff --git a/test/test-network/conf/25-vxlan-local-slaac.netdev b/test/test-network/conf/25-vxlan-local-slaac.netdev
new file mode 100644
index 0000000..43f5934
--- /dev/null
+++ b/test/test-network/conf/25-vxlan-local-slaac.netdev
@@ -0,0 +1,8 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[NetDev]
+Name=vxlan-slaac
+Kind=vxlan
+
+[VXLAN]
+VNI=4831584
+Local=slaac
diff --git a/test/test-network/conf/25-vxlan-local-slaac.network b/test/test-network/conf/25-vxlan-local-slaac.network
new file mode 100644
index 0000000..4ea1eae
--- /dev/null
+++ b/test/test-network/conf/25-vxlan-local-slaac.network
@@ -0,0 +1,7 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=vxlan-slaac
+
+[Network]
+IPv6AcceptRA=no
+LinkLocalAddressing=yes
diff --git a/test/test-network/conf/25-vxlan-test1.network b/test/test-network/conf/25-vxlan-test1.network
new file mode 100644
index 0000000..4e9501c
--- /dev/null
+++ b/test/test-network/conf/25-vxlan-test1.network
@@ -0,0 +1,9 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=test1
+
+[Network]
+IPv6AcceptRA=false
+LinkLocalAddressing=yes
+VXLAN=vxlan99
+VXLAN=vxlan97
diff --git a/test/test-network/conf/25-vxlan-veth99.network b/test/test-network/conf/25-vxlan-veth99.network
new file mode 100644
index 0000000..b67b746
--- /dev/null
+++ b/test/test-network/conf/25-vxlan-veth99.network
@@ -0,0 +1,10 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=veth99
+
+[Network]
+IPv6AcceptRA=yes
+VXLAN=vxlan-slaac
+
+[IPv6AcceptRA]
+PrefixAllowList=2002:da8:1::/64
diff --git a/test/test-network/conf/25-vxlan.netdev b/test/test-network/conf/25-vxlan.netdev
new file mode 100644
index 0000000..0b41fc5
--- /dev/null
+++ b/test/test-network/conf/25-vxlan.netdev
@@ -0,0 +1,17 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[NetDev]
+Name=vxlan99
+Kind=vxlan
+
+[VXLAN]
+VNI=999
+L2MissNotification=true
+L3MissNotification=true
+RouteShortCircuit=true
+UDPChecksum=true
+UDP6ZeroChecksumTx=true
+UDP6ZeroChecksumRx=true
+RemoteChecksumTx=true
+RemoteChecksumRx=true
+GroupPolicyExtension=true
+DestinationPort=5555
diff --git a/test/test-network/conf/25-vxlan.network b/test/test-network/conf/25-vxlan.network
new file mode 100644
index 0000000..683291f
--- /dev/null
+++ b/test/test-network/conf/25-vxlan.network
@@ -0,0 +1,20 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=vxlan99
+
+[Network]
+IPv6AcceptRA=no
+LinkLocalAddressing=yes
+
+[BridgeFDB]
+MACAddress=00:11:22:33:44:55
+Destination=10.0.0.5
+
+[BridgeFDB]
+MACAddress=00:11:22:33:44:66
+Destination=10.0.0.6
+
+[BridgeFDB]
+MACAddress=00:11:22:33:44:77
+Destination=10.0.0.7
+OutgoingInterface=test1
diff --git a/test/test-network/conf/25-wireguard-23-peers.netdev b/test/test-network/conf/25-wireguard-23-peers.netdev
new file mode 100644
index 0000000..86f1440
--- /dev/null
+++ b/test/test-network/conf/25-wireguard-23-peers.netdev
@@ -0,0 +1,153 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[NetDev]
+Name=wg98
+Kind=wireguard
+Description=For issue #11404
+# Generated by the script https://launchpadlibrarian.net/405947185/systemd-wg
+
+[WireGuard]
+# 51820 is common port for Wireguard, 4500 is IPSec/UDP
+ListenPort=4500
+# The key below should be overridden by PrivateKeyFile=
+PrivateKey=EEGlnEPYJV//kbvvIqxKkQwOiS+UENyPncC4bF46ong=
+PrivateKeyFile=/run/systemd/network/25-wireguard-private-key.txt
+RouteTable=1234
+RouteMetric=123
+
+# peer 1
+[WireGuardPeer]
+PublicKey=TxVmU/YJ2R3G3cbGKUiIx02y6CgcKlElVGAkzrwJuXg=
+AllowedIPs=fd8d:4d6d:3ccb:0500:0c79:2339:edce:ece1/128
+AllowedIPs=fd8d:4d6d:3ccb:0c79:2339:edce::/96
+
+# peer 2
+[WireGuardPeer]
+PublicKey=coGr5lLn1RsCeh1RWBXn1GvcDqKSQ82HSeN0GrUugHg=
+AllowedIPs=fd8d:4d6d:3ccb:0500:a072:80da:de4f:add1/128
+AllowedIPs=fd8d:4d6d:3ccb:a072:80da:de4f::/96
+
+# peer 3
+[WireGuardPeer]
+PublicKey=PeiULTZjyfjqg/OOqnzKtLSWnrU+ipinqMsMw0hY+1w=
+AllowedIPs=fd8d:4d6d:3ccb:0500:f349:c4f0:10c1:06b4/128
+AllowedIPs=fd8d:4d6d:3ccb:f349:c4f0:10c1::/96
+
+# peer 4
+[WireGuardPeer]
+PublicKey=PjdC8+BmQPdgheY7gle9s3gvM7r07L6A+gMBe5bOZXk=
+AllowedIPs=fd8d:4d6d:3ccb:0500:b684:4f81:2e3e:132e/128
+AllowedIPs=fd8d:4d6d:3ccb:b684:4f81:2e3e::/96
+
+# peer 5
+[WireGuardPeer]
+PublicKey=1MGQurlRaQIAgdH/sd0qDNamDKAepMy/+pzZUx9oEDI=
+AllowedIPs=fd8d:4d6d:3ccb:0500:c624:6bf7:4c09:3b59/128
+AllowedIPs=fd8d:4d6d:3ccb:c624:6bf7:4c09::/96
+
+# peer 6
+[WireGuardPeer]
+PublicKey=+FgzhoGfPIzNBvtIZfBwNtWls2FSGt/6Kve3M9Z1ZlE=
+AllowedIPs=fd8d:4d6d:3ccb:0500:9c11:d820:2e96:9be0/128
+AllowedIPs=fd8d:4d6d:3ccb:9c11:d820:2e96::/96
+
+# peer 7
+[WireGuardPeer]
+PublicKey=Kb2ozFhzg9huKmV4miLlWgh05ToP+xVqd2N0e7Ebmyc=
+AllowedIPs=fd8d:4d6d:3ccb:0500:bad5:495d:8e9c:3427/128
+AllowedIPs=fd8d:4d6d:3ccb:bad5:495d:8e9c::/96
+
+# peer 8
+[WireGuardPeer]
+PublicKey=p2kY786d4vFO/PpstaQrn7UPuakoHRABUHmcDKzXVi4=
+AllowedIPs=fd8d:4d6d:3ccb:0500:1e54:1415:35d0:a47c/128
+AllowedIPs=fd8d:4d6d:3ccb:1e54:1415:35d0::/96
+
+# peer 9
+[WireGuardPeer]
+PublicKey=FNiQqmeizNXTmd9jEU/gvNkuEs1MoWovNp8IpPkoqz4=
+AllowedIPs=fd8d:4d6d:3ccb:0500:1dbf:ca8a:32d3:dd81/128
+AllowedIPs=fd8d:4d6d:3ccb:1dbf:ca8a:32d3::/96
+
+# peer 10
+[WireGuardPeer]
+PublicKey=wAwyAuLSQTO7lwQnUQHTumrMgkwigIExGR26AthWTU8=
+AllowedIPs=fd8d:4d6d:3ccb:0500:dcdd:d33b:90c9:6088/128
+AllowedIPs=fd8d:4d6d:3ccb:dcdd:d33b:90c9::/96
+
+# peer 11
+[WireGuardPeer]
+PublicKey=8gRYdXRyhgjiMSbqk3sj5kzXGsQqkZ4defvK2ONqHA0=
+AllowedIPs=fd8d:4d6d:3ccb:0500:6f2e:6888:c6fd:dfb9/128
+AllowedIPs=fd8d:4d6d:3ccb:6f2e:6888:c6fd::/96
+
+# peer 12
+[WireGuardPeer]
+PublicKey=4Bj9Dalwnq2Trf5Bl7iJCpSOaxC83YEbxgrgBl0ljQk=
+AllowedIPs=fd8d:4d6d:3ccb:0500:d4f9:05dc:9296:0a1a/128
+AllowedIPs=fd8d:4d6d:3ccb:d4f9:05dc:9296::/96
+
+# peer 13
+[WireGuardPeer]
+PublicKey=BOTxUDlPSIzYucVmML4IYcTIaX0TiqC7DOnfLUI7RRg=
+AllowedIPs=fd8d:4d6d:3ccb:0500:b39c:9cdc:755a:ead3/128
+AllowedIPs=fd8d:4d6d:3ccb:b39c:9cdc:755a::/96
+
+# peer 14
+[WireGuardPeer]
+PublicKey=PiqEvBzow5vElGD2uOtRtZG6G60tM82kmjbyJP02mFQ=
+AllowedIPs=fd8d:4d6d:3ccb:0500:bfe5:c3c3:5d77:0fcb/128
+AllowedIPs=fd8d:4d6d:3ccb:bfe5:c3c3:5d77::/96
+
+# peer 15
+[WireGuardPeer]
+PublicKey=Eor9QBsIoUG6C3ZKsKdqm4Vkt0n2N7qpSh2LzphQeho=
+AllowedIPs=fd8d:4d6d:3ccb:0500:900c:d437:ec27:8822/128
+AllowedIPs=fd8d:4d6d:3ccb:900c:d437:ec27::/96
+
+# peer 16
+[WireGuardPeer]
+PublicKey=acXPW0Ar+TiTOqKuUDpop9AVLuPNdzqf0l+V8k5t7CM=
+AllowedIPs=fd8d:4d6d:3ccb:0500:270d:b5dd:4a3f:8909/128
+AllowedIPs=fd8d:4d6d:3ccb:270d:b5dd:4a3f::/96
+
+# peer 17
+[WireGuardPeer]
+PublicKey=+0g/5jzbitHyfhB4gbJnWrhSMsSjCcOE2rftWTDEW3E=
+AllowedIPs=fd8d:4d6d:3ccb:0500:e2e1:ae15:103f:f376/128
+AllowedIPs=fd8d:4d6d:3ccb:e2e1:ae15:103f::/96
+
+# peer 18
+[WireGuardPeer]
+PublicKey=FC7mjuWpkM8bjM3vaLPbba2HwHGbTSDK9QsLEZvUZ2I=
+AllowedIPs=fd8d:4d6d:3ccb:0500:5660:679d:3532:94d8/128
+AllowedIPs=fd8d:4d6d:3ccb:5660:679d:3532::/96
+
+# peer 19
+[WireGuardPeer]
+PublicKey=fRdm/tbE2jGuLd6zMxSQYMP6pPfMmXYW84TUPJCPjHM=
+AllowedIPs=fd8d:4d6d:3ccb:0500:6825:573f:30f3:9472/128
+AllowedIPs=fd8d:4d6d:3ccb:6825:573f:30f3::/96
+
+# peer 20
+[WireGuardPeer]
+PublicKey=xm540z0UwfTF5f0YwfjmCX0eGdHY8bOb/4ovVA2SgCI=
+AllowedIPs=fd8d:4d6d:3ccb:0500:a94b:cd6a:a32d:90e6/128
+AllowedIPs=fd8d:4d6d:3ccb:a94b:cd6a:a32d::/96
+
+# peer 21
+[WireGuardPeer]
+PublicKey=5X5+9IiRBjaadazEKNO+CozpomiKPMIBQT7uJ4SnbVs=
+AllowedIPs=fd8d:4d6d:3ccb:0500:8d4d:0bab:7280:a09a/128
+AllowedIPs=fd8d:4d6d:3ccb:8d4d:0bab:7280::/96
+
+# peer 22
+[WireGuardPeer]
+PublicKey=d61T4K0wmS4Z3lK9M8/Z48IXzldLCOCm7a6Mx1r/A3I=
+AllowedIPs=fd8d:4d6d:3ccb:0500:a3f3:df38:19b0:0721/128
+AllowedIPs=fd8d:4d6d:3ccb:a3f3:df38:19b0::/96
+
+# peer 23
+[WireGuardPeer]
+PublicKey=Nt7N3hXfpMWsIsx9me4ID77okka+0Oe5eqnFDp00IFI=
+AllowedIPs=fd8d:4d6d:3ccb:0500:9742:9931:5217:18d5/128
+AllowedIPs=fd8d:4d6d:3ccb:9742:9931:5217::/96
diff --git a/test/test-network/conf/25-wireguard-23-peers.network b/test/test-network/conf/25-wireguard-23-peers.network
new file mode 100644
index 0000000..6f4c2d0
--- /dev/null
+++ b/test/test-network/conf/25-wireguard-23-peers.network
@@ -0,0 +1,8 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=wg98
+
+[Network]
+Address=192.168.123.123/24
+Address=fd8d:4d6d:3ccb:0500::1/64
+IPv6AcceptRA=no
diff --git a/test/test-network/conf/25-wireguard-no-peer.netdev b/test/test-network/conf/25-wireguard-no-peer.netdev
new file mode 100644
index 0000000..ce3b31a
--- /dev/null
+++ b/test/test-network/conf/25-wireguard-no-peer.netdev
@@ -0,0 +1,9 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[NetDev]
+Name=wg97
+Kind=wireguard
+
+[WireGuard]
+PrivateKey=EEGlnEPYJV//kbvvIqxKkQwOiS+UENyPncC4bF46ong=
+ListenPort=51821
+FwMark=1235
diff --git a/test/test-network/conf/25-wireguard-no-peer.network b/test/test-network/conf/25-wireguard-no-peer.network
new file mode 100644
index 0000000..62238a1
--- /dev/null
+++ b/test/test-network/conf/25-wireguard-no-peer.network
@@ -0,0 +1,3 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=wg97
diff --git a/test/test-network/conf/25-wireguard-preshared-key.txt b/test/test-network/conf/25-wireguard-preshared-key.txt
new file mode 100644
index 0000000..021c443
--- /dev/null
+++ b/test/test-network/conf/25-wireguard-preshared-key.txt
@@ -0,0 +1,3 @@
+cPLOy1YUrEI0EM
+ MIycPJmOo0aTu3RZnw8bL5
+ meVD6m0=
diff --git a/test/test-network/conf/25-wireguard-private-key.txt b/test/test-network/conf/25-wireguard-private-key.txt
new file mode 100644
index 0000000..469acd0
--- /dev/null
+++ b/test/test-network/conf/25-wireguard-private-key.txt
@@ -0,0 +1,6 @@
+CJQUtcS9emY2fLY
+ qDlpSZiE/QJyHkP
+ Wr+WHtZ
+
+
+LZ90FU=
diff --git a/test/test-network/conf/25-wireguard.netdev b/test/test-network/conf/25-wireguard.netdev
new file mode 100644
index 0000000..4fed38e
--- /dev/null
+++ b/test/test-network/conf/25-wireguard.netdev
@@ -0,0 +1,21 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[NetDev]
+Name=wg99
+Kind=wireguard
+
+[WireGuard]
+ListenPort=51820
+FwMark=1234
+# settings below are ignored.
+RouteTable=off
+RouteMetric=456
+
+[WireGuardPeer]
+PublicKey=RDf+LSpeEre7YEIKaxg+wbpsNV7du+ktR99uBEtIiCA=
+AllowedIPs=fd31:bf08:57cb::/48,192.168.26.3/24
+#Endpoint=wireguard.example.com:51820
+Endpoint=192.168.27.3:51820
+PresharedKey=IIWIV17wutHv7t4cR6pOT91z6NSz/T8Arh0yaywhw3M=
+PersistentKeepalive=20
+RouteTable=1234
+RouteMetric=123
diff --git a/test/test-network/conf/25-wireguard.netdev.d/peer.conf b/test/test-network/conf/25-wireguard.netdev.d/peer.conf
new file mode 100644
index 0000000..f559ea6
--- /dev/null
+++ b/test/test-network/conf/25-wireguard.netdev.d/peer.conf
@@ -0,0 +1,5 @@
+[WireGuardPeer]
+PublicKey=lsDtM3AbjxNlauRKzHEPfgS1Zp7cp/VX5Use/P4PQSc=
+AllowedIPs=fdbc:bae2:7871:0500:e1fe:0793:8636:dad1/128
+AllowedIPs=fdbc:bae2:7871:e1fe:0793:8636::/96
+PresharedKeyFile=/run/systemd/network/25-wireguard-preshared-key.txt
diff --git a/test/test-network/conf/25-wireguard.netdev.d/peer1.conf b/test/test-network/conf/25-wireguard.netdev.d/peer1.conf
new file mode 100644
index 0000000..47848fc
--- /dev/null
+++ b/test/test-network/conf/25-wireguard.netdev.d/peer1.conf
@@ -0,0 +1,5 @@
+[WireGuardPeer]
+PublicKey=TTiCUpCxS7zDn/ax4p5W6Evg41r8hOrnWQw2Sq6Nh10=
+PresharedKey=it7nd33chCT/tKT2ZZWfYyp43Zs+6oif72hexnSNMqA=
+
+AllowedIPs=192.168.124.2
diff --git a/test/test-network/conf/25-wireguard.netdev.d/peer2.conf b/test/test-network/conf/25-wireguard.netdev.d/peer2.conf
new file mode 100644
index 0000000..bf99a5a
--- /dev/null
+++ b/test/test-network/conf/25-wireguard.netdev.d/peer2.conf
@@ -0,0 +1,5 @@
+[WireGuardPeer]
+PublicKey=9uioxkGzjvGjkse3V35I9AhorWfIjBcrf3UPMS0bw2c=
+PresharedKey=6Fsg8XN0DE6aPQgAX4r2oazEYJOGqyHUz3QRH/jCB+I=
+
+AllowedIPs=192.168.124.3
diff --git a/test/test-network/conf/25-wireguard.netdev.d/private-key.conf b/test/test-network/conf/25-wireguard.netdev.d/private-key.conf
new file mode 100644
index 0000000..9b04cf7
--- /dev/null
+++ b/test/test-network/conf/25-wireguard.netdev.d/private-key.conf
@@ -0,0 +1,2 @@
+[WireGuard]
+PrivateKey=EEGlnEPYJV//kbvvIqxKkQwOiS+UENyPncC4bF46ong=
diff --git a/test/test-network/conf/25-wireguard.network b/test/test-network/conf/25-wireguard.network
new file mode 100644
index 0000000..bd3c735
--- /dev/null
+++ b/test/test-network/conf/25-wireguard.network
@@ -0,0 +1,9 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=wg99
+
+[Network]
+Address=192.168.124.1/24
+Address=fe80::1/64
+Address=169.254.11.1/24
+IPv6AcceptRA=no
diff --git a/test/test-network/conf/25-xfrm-independent.netdev b/test/test-network/conf/25-xfrm-independent.netdev
new file mode 100644
index 0000000..b54c659
--- /dev/null
+++ b/test/test-network/conf/25-xfrm-independent.netdev
@@ -0,0 +1,8 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[NetDev]
+Kind=xfrm
+Name=xfrm99
+
+[Xfrm]
+InterfaceId=0x99
+Independent=yes
diff --git a/test/test-network/conf/25-xfrm.netdev b/test/test-network/conf/25-xfrm.netdev
new file mode 100644
index 0000000..8e1d5c8
--- /dev/null
+++ b/test/test-network/conf/25-xfrm.netdev
@@ -0,0 +1,7 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[NetDev]
+Kind=xfrm
+Name=xfrm98
+
+[Xfrm]
+InterfaceId=0x98
diff --git a/test/test-network/conf/25-xfrm.network b/test/test-network/conf/25-xfrm.network
new file mode 100644
index 0000000..19f2214
--- /dev/null
+++ b/test/test-network/conf/25-xfrm.network
@@ -0,0 +1,7 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=dummy98
+
+[Network]
+IPv6AcceptRA=no
+Xfrm=xfrm98
diff --git a/test/test-network/conf/26-bridge-configure-without-carrier.network b/test/test-network/conf/26-bridge-configure-without-carrier.network
new file mode 100644
index 0000000..ad7f007
--- /dev/null
+++ b/test/test-network/conf/26-bridge-configure-without-carrier.network
@@ -0,0 +1,10 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=bridge99
+
+[Network]
+LinkLocalAddressing=yes
+IPv6AcceptRA=no
+ConfigureWithoutCarrier=yes
+Address=10.1.2.3/24
+Gateway=10.1.2.1
diff --git a/test/test-network/conf/26-bridge-issue-20373.netdev b/test/test-network/conf/26-bridge-issue-20373.netdev
new file mode 100644
index 0000000..4ee5ba0
--- /dev/null
+++ b/test/test-network/conf/26-bridge-issue-20373.netdev
@@ -0,0 +1,13 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[NetDev]
+Name=bridge99
+Kind=bridge
+
+[Bridge]
+MulticastQuerier=yes
+MulticastSnooping=yes
+Priority=10
+STP=yes
+ForwardDelaySec=5
+MulticastIGMPVersion=2
+VLANFiltering=yes
diff --git a/test/test-network/conf/26-bridge-mdb-master.network b/test/test-network/conf/26-bridge-mdb-master.network
new file mode 100644
index 0000000..d92762d
--- /dev/null
+++ b/test/test-network/conf/26-bridge-mdb-master.network
@@ -0,0 +1,14 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=bridge99
+
+[Network]
+IPv6AcceptRA=false
+
+[BridgeMDB]
+VLANId=4066
+MulticastGroupAddress=ff02:aaaa:fee5:0000:0000:0000:0001:0004
+
+[BridgeMDB]
+VLANId=4067
+MulticastGroupAddress=224.0.1.2
diff --git a/test/test-network/conf/26-bridge-mdb-slave.network b/test/test-network/conf/26-bridge-mdb-slave.network
new file mode 100644
index 0000000..301d22a
--- /dev/null
+++ b/test/test-network/conf/26-bridge-mdb-slave.network
@@ -0,0 +1,15 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=test1
+
+[Network]
+IPv6AcceptRA=no
+Bridge=bridge99
+
+[BridgeMDB]
+VLANId=4064
+MulticastGroupAddress=ff02:aaaa:fee5:0000:0000:0000:0001:0003
+
+[BridgeMDB]
+VLANId=4065
+MulticastGroupAddress=224.0.1.1
diff --git a/test/test-network/conf/26-bridge-slave-interface-1.network b/test/test-network/conf/26-bridge-slave-interface-1.network
new file mode 100644
index 0000000..cdb3daa
--- /dev/null
+++ b/test/test-network/conf/26-bridge-slave-interface-1.network
@@ -0,0 +1,23 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=dummy98
+
+[Link]
+MTUBytes=9000
+
+[Network]
+Bridge=bridge99
+
+[Bridge]
+Cost=400
+HairPin = true
+Isolated = true
+FastLeave = true
+UnicastFlood = true
+MulticastFlood = false
+MulticastToUnicast = true
+NeighborSuppression = true
+Learning = false
+Priority = 23
+UseBPDU = true
+AllowPortToBeRoot=true
diff --git a/test/test-network/conf/26-bridge-slave-interface-2.network b/test/test-network/conf/26-bridge-slave-interface-2.network
new file mode 100644
index 0000000..42b197e
--- /dev/null
+++ b/test/test-network/conf/26-bridge-slave-interface-2.network
@@ -0,0 +1,12 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=test1
+
+[Link]
+MTUBytes=9000
+
+[Network]
+Bridge=bridge99
+
+[Bridge]
+Priority=0
diff --git a/test/test-network/conf/26-bridge-vlan-master-issue-20373.network b/test/test-network/conf/26-bridge-vlan-master-issue-20373.network
new file mode 100644
index 0000000..7a69757
--- /dev/null
+++ b/test/test-network/conf/26-bridge-vlan-master-issue-20373.network
@@ -0,0 +1,21 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=bridge99
+
+[Network]
+VLAN=vlan99
+IPForward=yes
+ConfigureWithoutCarrier=yes
+LLDP=yes
+IPv6AcceptRA=false
+
+[Bridge]
+Learning=yes
+MulticastRouter=no
+UseBPDU=yes
+
+[BridgeVLAN]
+VLAN=100
+
+[BridgeVLAN]
+VLAN=600
diff --git a/test/test-network/conf/26-bridge-vlan-master.network b/test/test-network/conf/26-bridge-vlan-master.network
new file mode 100644
index 0000000..4bbbc56
--- /dev/null
+++ b/test/test-network/conf/26-bridge-vlan-master.network
@@ -0,0 +1,9 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=bridge99
+
+[Network]
+IPv6AcceptRA=false
+
+[BridgeVLAN]
+VLAN=4060-4094
diff --git a/test/test-network/conf/26-bridge-vlan-slave-issue-20373.network b/test/test-network/conf/26-bridge-vlan-slave-issue-20373.network
new file mode 100644
index 0000000..876219f
--- /dev/null
+++ b/test/test-network/conf/26-bridge-vlan-slave-issue-20373.network
@@ -0,0 +1,30 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=test1
+
+[Network]
+IPv6AcceptRA=no
+IPForward=yes
+Bridge=bridge99
+LinkLocalAddressing=no
+EmitLLDP=nearest-bridge
+LLDP=yes
+
+[Link]
+RequiredForOnline=no
+
+[Bridge]
+Learning=yes
+MulticastRouter=query
+UseBPDU=yes
+
+[BridgeVLAN]
+VLAN=100
+EgressUntagged=100
+PVID=100
+
+[BridgeVLAN]
+VLAN=560
+
+[BridgeVLAN]
+VLAN=600
diff --git a/test/test-network/conf/26-bridge-vlan-slave.network b/test/test-network/conf/26-bridge-vlan-slave.network
new file mode 100644
index 0000000..9ac8510
--- /dev/null
+++ b/test/test-network/conf/26-bridge-vlan-slave.network
@@ -0,0 +1,10 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=test1
+
+[Network]
+IPv6AcceptRA=no
+Bridge=bridge99
+
+[BridgeVLAN]
+VLAN=4064-4094
diff --git a/test/test-network/conf/26-bridge.netdev b/test/test-network/conf/26-bridge.netdev
new file mode 100644
index 0000000..fda9cd6
--- /dev/null
+++ b/test/test-network/conf/26-bridge.netdev
@@ -0,0 +1,4 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[NetDev]
+Name=bridge99
+Kind=bridge
diff --git a/test/test-network/conf/26-link-local-addressing-ipv6.network b/test/test-network/conf/26-link-local-addressing-ipv6.network
new file mode 100644
index 0000000..931341b
--- /dev/null
+++ b/test/test-network/conf/26-link-local-addressing-ipv6.network
@@ -0,0 +1,7 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=dummy98
+
+[Network]
+LinkLocalAddressing=ipv6
+IPv6AcceptRA=no
diff --git a/test/test-network/conf/26-macsec.network b/test/test-network/conf/26-macsec.network
new file mode 100644
index 0000000..0066474
--- /dev/null
+++ b/test/test-network/conf/26-macsec.network
@@ -0,0 +1,11 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=dummy98
+
+[Link]
+MACAddress=00:50:56:c0:00:19
+
+[Network]
+IPv6AcceptRA=no
+LinkLocalAddressing=yes
+MACsec=macsec99
diff --git a/test/test-network/conf/26-netdev-link-local-addressing-yes.network b/test/test-network/conf/26-netdev-link-local-addressing-yes.network
new file mode 100644
index 0000000..7152125
--- /dev/null
+++ b/test/test-network/conf/26-netdev-link-local-addressing-yes.network
@@ -0,0 +1,30 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Match]
+Name=bareudp99
+Name=batadv99
+Name=ip6tnl-external
+Name=ipvlan99
+Name=ipvtap99
+Name=macvlan99
+Name=macvtap99
+Name=veth99
+Name=veth-peer
+Name=veth-mtu
+Name=veth-mtu-peer
+Name=vcan99
+Name=vxcan99
+Name=vxcan-peer
+Name=vrf99
+Name=geneve99
+Name=ifb99
+Name=ipiptun99
+Name=nlmon99
+Name=xfrm98 xfrm99
+Name=vxlan98
+Name=hogehogehogehogehogehoge
+Name=testtun99
+Name=testtap99
+
+[Network]
+LinkLocalAddressing=yes
+IPv6AcceptRA=no
diff --git a/test/test-network/conf/80-6rd-tunnel.network b/test/test-network/conf/80-6rd-tunnel.network
new file mode 100644
index 0000000..2e479eb
--- /dev/null
+++ b/test/test-network/conf/80-6rd-tunnel.network
@@ -0,0 +1,18 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+#
+# This file is part of systemd.
+#
+# systemd is free software; you can redistribute it and/or modify it
+# under the terms of the GNU Lesser General Public License as published by
+# the Free Software Foundation; either version 2.1 of the License, or
+# (at your option) any later version.
+
+# This network file matches 6rd-* SIT devices which is automatically created by
+# systemd-networkd when DHCPv4 6RD option is received.
+
+[Match]
+Name=6rd-*
+Type=sit
+
+[Network]
+DHCPPrefixDelegation=yes
diff --git a/test/test-network/conf/isc-dhcpd-dhcp6pd.conf b/test/test-network/conf/isc-dhcpd-dhcp6pd.conf
new file mode 100644
index 0000000..c95b00e
--- /dev/null
+++ b/test/test-network/conf/isc-dhcpd-dhcp6pd.conf
@@ -0,0 +1,21 @@
+default-lease-time 2592000;
+preferred-lifetime 604800;
+
+option dhcp-renewal-time 3600;
+option dhcp-rebinding-time 7200;
+
+# Enable RFC 5007 support (same than for DHCPv4)
+allow leasequery;
+
+option dhcp6.name-servers 3ffe:501:ffff:100:200:ff:fe00:3f3e;
+option dhcp6.domain-search "test.example.com","example.com";
+
+option dhcp6.info-refresh-time 21600;
+
+subnet6 3ffe:501:ffff:100::/64 {
+ # Addresses available to clients
+ range6 3ffe:501:ffff:100::10 3ffe:501:ffff:100::100;
+
+ # Some /64 prefixes available for Prefix Delegation (RFC 3633)
+ prefix6 3ffe:501:ffff:200:: 3ffe:501:ffff:f00:: /56;
+}
diff --git a/test/test-network/conf/networkd-manage-foreign-routes-no.conf b/test/test-network/conf/networkd-manage-foreign-routes-no.conf
new file mode 100644
index 0000000..7cfc56c
--- /dev/null
+++ b/test/test-network/conf/networkd-manage-foreign-routes-no.conf
@@ -0,0 +1,3 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+[Network]
+ManageForeignRoutes=no
diff --git a/test/test-network/systemd-networkd-tests.py b/test/test-network/systemd-networkd-tests.py
new file mode 100755
index 0000000..45aa1b0
--- /dev/null
+++ b/test/test-network/systemd-networkd-tests.py
@@ -0,0 +1,5734 @@
+#!/usr/bin/env python3
+# SPDX-License-Identifier: LGPL-2.1-or-later
+# pylint: disable=line-too-long,too-many-lines,too-many-branches,too-many-statements,too-many-arguments
+# pylint: disable=too-many-public-methods,too-many-boolean-expressions,invalid-name
+# pylint: disable=missing-function-docstring,missing-class-docstring,missing-module-docstring
+# systemd-networkd tests
+
+# These tests can be executed in the systemd mkosi image when booted in QEMU. After booting the QEMU VM,
+# simply run this file which can be found in the VM at /root/src/test/test-network/systemd-networkd-tests.py.
+
+import argparse
+import errno
+import itertools
+import os
+import pathlib
+import re
+import shutil
+import signal
+import subprocess
+import sys
+import time
+import unittest
+
+import psutil
+
+network_unit_dir = '/run/systemd/network'
+networkd_conf_dropin_dir = '/run/systemd/networkd.conf.d'
+networkd_ci_temp_dir = '/run/networkd-ci'
+udev_rules_dir = '/run/udev/rules.d'
+
+dnsmasq_pid_file = '/run/networkd-ci/test-dnsmasq.pid'
+dnsmasq_log_file = '/run/networkd-ci/test-dnsmasq.log'
+dnsmasq_lease_file = '/run/networkd-ci/test-dnsmasq.lease'
+
+isc_dhcpd_pid_file = '/run/networkd-ci/test-isc-dhcpd.pid'
+isc_dhcpd_lease_file = '/run/networkd-ci/test-isc-dhcpd.lease'
+
+systemd_lib_paths = ['/usr/lib/systemd', '/lib/systemd']
+which_paths = ':'.join(systemd_lib_paths + os.getenv('PATH', os.defpath).lstrip(':').split(':'))
+systemd_source_dir = None
+
+networkd_bin = shutil.which('systemd-networkd', path=which_paths)
+resolved_bin = shutil.which('systemd-resolved', path=which_paths)
+timesyncd_bin = shutil.which('systemd-timesyncd', path=which_paths)
+udevd_bin = shutil.which('systemd-udevd', path=which_paths)
+wait_online_bin = shutil.which('systemd-networkd-wait-online', path=which_paths)
+networkctl_bin = shutil.which('networkctl', path=which_paths)
+resolvectl_bin = shutil.which('resolvectl', path=which_paths)
+timedatectl_bin = shutil.which('timedatectl', path=which_paths)
+udevadm_bin = shutil.which('udevadm', path=which_paths)
+systemd_udev_rules_build_dir = None
+
+use_valgrind = False
+valgrind_cmd = ''
+enable_debug = True
+env = {}
+wait_online_env = {}
+asan_options = None
+lsan_options = None
+ubsan_options = None
+with_coverage = False
+
+active_units = []
+protected_links = {
+ 'erspan0',
+ 'gre0',
+ 'gretap0',
+ 'ifb0',
+ 'ifb1',
+ 'ip6_vti0',
+ 'ip6gre0',
+ 'ip6tnl0',
+ 'ip_vti0',
+ 'lo',
+ 'sit0',
+ 'tunl0',
+}
+saved_routes = None
+saved_ipv4_rules = None
+saved_ipv6_rules = None
+saved_timezone = None
+
+def rm_f(path):
+ if os.path.exists(path):
+ os.remove(path)
+
+def rm_rf(path):
+ shutil.rmtree(path, ignore_errors=True)
+
+def cp(src, dst):
+ shutil.copy(src, dst)
+
+def cp_r(src, dst):
+ shutil.copytree(src, dst, copy_function=shutil.copy)
+
+def mkdir_p(path):
+ os.makedirs(path, exist_ok=True)
+
+def touch(path):
+ pathlib.Path(path).touch()
+
+# pylint: disable=R1710
+def check_output(*command, **kwargs):
+ # This checks the result and returns stdout (and stderr) on success.
+ command = command[0].split() + list(command[1:])
+ ret = subprocess.run(command, check=False, universal_newlines=True, stdout=subprocess.PIPE, stderr=subprocess.STDOUT, **kwargs)
+ if ret.returncode == 0:
+ return ret.stdout.rstrip()
+ # When returncode != 0, print stdout and stderr, then trigger CalledProcessError.
+ print(ret.stdout)
+ ret.check_returncode()
+
+def call(*command, **kwargs):
+ # This returns returncode. stdout and stderr are merged and shown in console
+ command = command[0].split() + list(command[1:])
+ return subprocess.run(command, check=False, universal_newlines=True, stderr=subprocess.STDOUT, **kwargs).returncode
+
+def call_quiet(*command, **kwargs):
+ command = command[0].split() + list(command[1:])
+ return subprocess.run(command, check=False, universal_newlines=True, stdout=subprocess.DEVNULL, stderr=subprocess.DEVNULL, **kwargs).returncode
+
+def run(*command, **kwargs):
+ # This returns CompletedProcess instance.
+ command = command[0].split() + list(command[1:])
+ return subprocess.run(command, check=False, universal_newlines=True, stdout=subprocess.PIPE, stderr=subprocess.PIPE, **kwargs)
+
+def is_module_available(*module_names):
+ for module_name in module_names:
+ lsmod_output = check_output('lsmod')
+ module_re = re.compile(rf'^{re.escape(module_name)}\b', re.MULTILINE)
+ if not module_re.search(lsmod_output) and call_quiet('modprobe', module_name) != 0:
+ return False
+ return True
+
+def expectedFailureIfModuleIsNotAvailable(*module_names):
+ def f(func):
+ return func if is_module_available(*module_names) else unittest.expectedFailure(func)
+
+ return f
+
+def expectedFailureIfERSPANv0IsNotSupported():
+ # erspan version 0 is supported since f989d546a2d5a9f001f6f8be49d98c10ab9b1897 (v5.8)
+ def f(func):
+ rc = call_quiet('ip link add dev erspan99 type erspan seq key 30 local 192.168.1.4 remote 192.168.1.1 erspan_ver 0')
+ remove_link('erspan99')
+ return func if rc == 0 else unittest.expectedFailure(func)
+
+ return f
+
+def expectedFailureIfERSPANv2IsNotSupported():
+ # erspan version 2 is supported since f551c91de262ba36b20c3ac19538afb4f4507441 (v4.16)
+ def f(func):
+ rc = call_quiet('ip link add dev erspan99 type erspan seq key 30 local 192.168.1.4 remote 192.168.1.1 erspan_ver 2')
+ remove_link('erspan99')
+ return func if rc == 0 else unittest.expectedFailure(func)
+
+ return f
+
+def expectedFailureIfRoutingPolicyPortRangeIsNotAvailable():
+ def f(func):
+ rc = call_quiet('ip rule add from 192.168.100.19 sport 1123-1150 dport 3224-3290 table 7')
+ call_quiet('ip rule del from 192.168.100.19 sport 1123-1150 dport 3224-3290 table 7')
+ return func if rc == 0 else unittest.expectedFailure(func)
+
+ return f
+
+def expectedFailureIfRoutingPolicyIPProtoIsNotAvailable():
+ def f(func):
+ rc = call_quiet('ip rule add not from 192.168.100.19 ipproto tcp table 7')
+ call_quiet('ip rule del not from 192.168.100.19 ipproto tcp table 7')
+ return func if rc == 0 else unittest.expectedFailure(func)
+
+ return f
+
+def expectedFailureIfRoutingPolicyUIDRangeIsNotAvailable():
+ def f(func):
+ supported = False
+ if call_quiet('ip rule add from 192.168.100.19 table 7 uidrange 200-300') == 0:
+ ret = run('ip rule list from 192.168.100.19 table 7')
+ supported = ret.returncode == 0 and 'uidrange 200-300' in ret.stdout
+ call_quiet('ip rule del from 192.168.100.19 table 7 uidrange 200-300')
+ return func if supported else unittest.expectedFailure(func)
+
+ return f
+
+def expectedFailureIfLinkFileFieldIsNotSet():
+ def f(func):
+ call_quiet('ip link add name dummy99 type dummy')
+ ret = run('udevadm info -w10s /sys/class/net/dummy99')
+ supported = ret.returncode == 0 and 'E: ID_NET_LINK_FILE=' in ret.stdout
+ remove_link('dummy99')
+ return func if supported else unittest.expectedFailure(func)
+
+ return f
+
+def expectedFailureIfNexthopIsNotAvailable():
+ def f(func):
+ rc = call_quiet('ip nexthop list')
+ return func if rc == 0 else unittest.expectedFailure(func)
+
+ return f
+
+def expectedFailureIfRTA_VIAIsNotSupported():
+ def f(func):
+ call_quiet('ip link add dummy98 type dummy')
+ call_quiet('ip link set up dev dummy98')
+ call_quiet('ip route add 2001:1234:5:8fff:ff:ff:ff:fe/128 dev dummy98')
+ rc = call_quiet('ip route add 10.10.10.10 via inet6 2001:1234:5:8fff:ff:ff:ff:fe dev dummy98')
+ remove_link('dummy98')
+ return func if rc == 0 else unittest.expectedFailure(func)
+
+ return f
+
+def expectedFailureIfAlternativeNameIsNotAvailable():
+ def f(func):
+ call_quiet('ip link add dummy98 type dummy')
+ supported = \
+ call_quiet('ip link prop add dev dummy98 altname hogehogehogehogehoge') == 0 and \
+ call_quiet('ip link show dev hogehogehogehogehoge') == 0
+ remove_link('dummy98')
+ return func if supported else unittest.expectedFailure(func)
+
+ return f
+
+def expectedFailureIfNetdevsimWithSRIOVIsNotAvailable():
+ def f(func):
+ def finalize(func, supported):
+ call_quiet('rmmod netdevsim')
+ return func if supported else unittest.expectedFailure(func)
+
+ call_quiet('rmmod netdevsim')
+ if call_quiet('modprobe netdevsim') != 0:
+ return finalize(func, False)
+
+ try:
+ with open('/sys/bus/netdevsim/new_device', mode='w', encoding='utf-8') as f:
+ f.write('99 1')
+ except OSError:
+ return finalize(func, False)
+
+ if not os.path.exists('/sys/bus/netdevsim/devices/netdevsim99/sriov_numvfs'):
+ return finalize(func, False)
+
+ # Also checks if udevd supports .link files, as it seems disabled on CentOS CI (Arch).
+ rc = call_quiet('udevadm info -w10s /sys/class/net/eni99np1')
+ return finalize(func, rc == 0)
+
+ return f
+
+# pylint: disable=C0415
+def compare_kernel_version(min_kernel_version):
+ try:
+ import platform
+ from packaging import version
+ except ImportError:
+ print('Failed to import either platform or packaging module, assuming the comparison failed')
+ return False
+
+ # Get only the actual kernel version without any build/distro/arch stuff
+ # e.g. '5.18.5-200.fc36.x86_64' -> '5.18.5'
+ kver = platform.release().split('-')[0]
+
+ return version.parse(kver) >= version.parse(min_kernel_version)
+
+def udev_reload():
+ check_output(*udevadm_cmd, 'control', '--reload')
+
+def copy_network_unit(*units, copy_dropins=True):
+ """
+ Copy networkd unit files into the testbed.
+
+ Any networkd unit file type can be specified, as well as drop-in files.
+
+ By default, all drop-ins for a specified unit file are copied in;
+ to avoid that specify dropins=False.
+
+ When a drop-in file is specified, its unit file is also copied in automatically.
+ """
+ has_link = False
+ mkdir_p(network_unit_dir)
+ for unit in units:
+ if copy_dropins and os.path.exists(os.path.join(networkd_ci_temp_dir, unit + '.d')):
+ cp_r(os.path.join(networkd_ci_temp_dir, unit + '.d'), os.path.join(network_unit_dir, unit + '.d'))
+
+ if unit.endswith('.conf'):
+ dropin = unit
+ unit = os.path.dirname(dropin).rstrip('.d')
+ dropindir = os.path.join(network_unit_dir, unit + '.d')
+ mkdir_p(dropindir)
+ cp(os.path.join(networkd_ci_temp_dir, dropin), dropindir)
+
+ cp(os.path.join(networkd_ci_temp_dir, unit), network_unit_dir)
+
+ if unit.endswith('.link'):
+ has_link = True
+
+ if has_link:
+ udev_reload()
+
+def remove_network_unit(*units):
+ """
+ Remove previously copied unit files from the testbed.
+
+ Drop-ins will be removed automatically.
+ """
+ has_link = False
+ for unit in units:
+ rm_f(os.path.join(network_unit_dir, unit))
+ rm_rf(os.path.join(network_unit_dir, unit + '.d'))
+
+ if unit.endswith('.link') or unit.endswith('.link.d'):
+ has_link = True
+
+ if has_link:
+ udev_reload()
+
+def clear_network_units():
+ has_link = False
+ if os.path.exists(network_unit_dir):
+ units = os.listdir(network_unit_dir)
+ for unit in units:
+ if unit.endswith('.link') or unit.endswith('.link.d'):
+ has_link = True
+
+ rm_rf(network_unit_dir)
+
+ if has_link:
+ udev_reload()
+
+def copy_networkd_conf_dropin(*dropins):
+ """Copy networkd.conf dropin files into the testbed."""
+ mkdir_p(networkd_conf_dropin_dir)
+ for dropin in dropins:
+ cp(os.path.join(networkd_ci_temp_dir, dropin), networkd_conf_dropin_dir)
+
+def remove_networkd_conf_dropin(*dropins):
+ """Remove previously copied networkd.conf dropin files from the testbed."""
+ for dropin in dropins:
+ rm_f(os.path.join(networkd_conf_dropin_dir, dropin))
+
+def clear_networkd_conf_dropins():
+ rm_rf(networkd_conf_dropin_dir)
+
+def setup_systemd_udev_rules():
+ if not systemd_udev_rules_build_dir:
+ return
+
+ mkdir_p(udev_rules_dir)
+
+ for path in [systemd_udev_rules_build_dir, os.path.join(systemd_source_dir, "rules.d")]:
+ print(f"Copying udev rules from {path} to {udev_rules_dir}")
+
+ for rule in os.listdir(path):
+ if not rule.endswith(".rules"):
+ continue
+ cp(os.path.join(path, rule), udev_rules_dir)
+
+def copy_udev_rule(*rules):
+ """Copy udev rules"""
+ mkdir_p(udev_rules_dir)
+ for rule in rules:
+ cp(os.path.join(networkd_ci_temp_dir, rule), udev_rules_dir)
+
+def remove_udev_rule(*rules):
+ """Remove previously copied udev rules"""
+ for rule in rules:
+ rm_f(os.path.join(udev_rules_dir, rule))
+
+def clear_udev_rules():
+ rm_rf(udev_rules_dir)
+
+def save_active_units():
+ for u in ['systemd-networkd.socket', 'systemd-networkd.service',
+ 'systemd-resolved.service', 'systemd-timesyncd.service',
+ 'firewalld.service']:
+ if call(f'systemctl is-active --quiet {u}') == 0:
+ call(f'systemctl stop {u}')
+ active_units.append(u)
+
+def restore_active_units():
+ if 'systemd-networkd.socket' in active_units:
+ call('systemctl stop systemd-networkd.socket systemd-networkd.service')
+ for u in active_units:
+ call(f'systemctl restart {u}')
+
+def create_unit_dropin(unit, contents):
+ mkdir_p(f'/run/systemd/system/{unit}.d')
+ with open(f'/run/systemd/system/{unit}.d/00-override.conf', mode='w', encoding='utf-8') as f:
+ f.write('\n'.join(contents))
+
+def create_service_dropin(service, command, reload_command=None, additional_settings=None):
+ drop_in = [
+ '[Service]',
+ 'ExecStart=',
+ f'ExecStart=!!{valgrind_cmd}{command}',
+ ]
+ if reload_command:
+ drop_in += [
+ 'ExecReload=',
+ f'ExecReload={valgrind_cmd}{reload_command}',
+ ]
+ if enable_debug:
+ drop_in += ['Environment=SYSTEMD_LOG_LEVEL=debug']
+ if asan_options:
+ drop_in += [f'Environment=ASAN_OPTIONS="{asan_options}"']
+ if lsan_options:
+ drop_in += [f'Environment=LSAN_OPTIONS="{lsan_options}"']
+ if ubsan_options:
+ drop_in += [f'Environment=UBSAN_OPTIONS="{ubsan_options}"']
+ if asan_options or lsan_options or ubsan_options:
+ drop_in += ['SystemCallFilter=']
+ if use_valgrind or asan_options or lsan_options or ubsan_options:
+ drop_in += ['MemoryDenyWriteExecute=no']
+ if use_valgrind:
+ drop_in += [
+ 'Environment=SYSTEMD_MEMPOOL=0',
+ 'PrivateTmp=yes',
+ ]
+ if with_coverage:
+ drop_in += [
+ 'ProtectSystem=no',
+ 'ProtectHome=no',
+ ]
+ if additional_settings:
+ drop_in += additional_settings
+
+ create_unit_dropin(f'{service}.service', drop_in)
+
+def link_exists(link):
+ return os.path.exists(os.path.join('/sys/class/net', link, 'ifindex'))
+
+def remove_link(*links, protect=False):
+ for link in links:
+ if protect and link in protected_links:
+ continue
+ if link_exists(link):
+ call(f'ip link del dev {link}')
+
+def save_existing_links():
+ links = os.listdir('/sys/class/net')
+ for link in links:
+ if link_exists(link):
+ protected_links.add(link)
+
+ print('### The following links will be protected:')
+ print(', '.join(sorted(list(protected_links))))
+
+def flush_links():
+ links = os.listdir('/sys/class/net')
+ remove_link(*links, protect=True)
+
+def flush_nexthops():
+ # Currently, the 'ip nexthop' command does not have 'save' and 'restore'.
+ # Hence, we cannot restore nexthops in a simple way.
+ # Let's assume there is no nexthop used in the system
+ call_quiet('ip nexthop flush')
+
+def save_routes():
+ # pylint: disable=global-statement
+ global saved_routes
+ saved_routes = check_output('ip route show table all')
+ print('### The following routes will be protected:')
+ print(saved_routes)
+
+def flush_routes():
+ have = False
+ output = check_output('ip route show table all')
+ for line in output.splitlines():
+ if line in saved_routes:
+ continue
+ if 'proto kernel' in line:
+ continue
+ if ' dev ' in line and not ' dev lo ' in line:
+ continue
+ if not have:
+ have = True
+ print('### Removing routes that did not exist when the test started.')
+ print(f'# {line}')
+ call(f'ip route del {line}')
+
+def save_routing_policy_rules():
+ # pylint: disable=global-statement
+ global saved_ipv4_rules, saved_ipv6_rules
+ def save(ipv):
+ output = check_output(f'ip -{ipv} rule show')
+ print(f'### The following IPv{ipv} routing policy rules will be protected:')
+ print(output)
+ return output
+
+ saved_ipv4_rules = save(4)
+ saved_ipv6_rules = save(6)
+
+def flush_routing_policy_rules():
+ def flush(ipv, saved_rules):
+ have = False
+ output = check_output(f'ip -{ipv} rule show')
+ for line in output.splitlines():
+ if line in saved_rules:
+ continue
+ if not have:
+ have = True
+ print(f'### Removing IPv{ipv} routing policy rules that did not exist when the test started.')
+ print(f'# {line}')
+ words = line.replace('lookup [l3mdev-table]', 'l3mdev').split()
+ priority = words[0].rstrip(':')
+ call(f'ip -{ipv} rule del priority {priority} ' + ' '.join(words[1:]))
+
+ flush(4, saved_ipv4_rules)
+ flush(6, saved_ipv6_rules)
+
+def flush_fou_ports():
+ ret = run('ip fou show')
+ if ret.returncode != 0:
+ return # fou may not be supported
+ for line in ret.stdout.splitlines():
+ port = line.split()[1]
+ call(f'ip fou del port {port}')
+
+def flush_l2tp_tunnels():
+ tids = []
+ ret = run('ip l2tp show tunnel')
+ if ret.returncode != 0:
+ return # l2tp may not be supported
+ for line in ret.stdout.splitlines():
+ words = line.split()
+ if words[0] == 'Tunnel':
+ tid = words[1].rstrip(',')
+ call(f'ip l2tp del tunnel tunnel_id {tid}')
+ tids.append(tid)
+
+ # Removing L2TP tunnel is asynchronous and slightly takes a time.
+ for tid in tids:
+ for _ in range(50):
+ r = run(f'ip l2tp show tunnel tunnel_id {tid}')
+ if r.returncode != 0 or len(r.stdout.rstrip()) == 0:
+ break
+ time.sleep(.2)
+ else:
+ print(f'Cannot remove L2TP tunnel {tid}, ignoring.')
+
+def save_timezone():
+ # pylint: disable=global-statement
+ global saved_timezone
+ r = run(*timedatectl_cmd, 'show', '--value', '--property', 'Timezone', env=env)
+ if r.returncode == 0:
+ saved_timezone = r.stdout.rstrip()
+ print(f'### Saved timezone: {saved_timezone}')
+
+def restore_timezone():
+ if saved_timezone:
+ call(*timedatectl_cmd, 'set-timezone', f'{saved_timezone}', env=env)
+
+def read_link_attr(*args):
+ with open(os.path.join('/sys/class/net', *args), encoding='utf-8') as f:
+ return f.readline().strip()
+
+def read_link_state_file(link):
+ ifindex = read_link_attr(link, 'ifindex')
+ path = os.path.join('/run/systemd/netif/links', ifindex)
+ with open(path, encoding='utf-8') as f:
+ return f.read()
+
+def read_ip_sysctl_attr(link, attribute, ipv):
+ with open(os.path.join('/proc/sys/net', ipv, 'conf', link, attribute), encoding='utf-8') as f:
+ return f.readline().strip()
+
+def read_ipv6_sysctl_attr(link, attribute):
+ return read_ip_sysctl_attr(link, attribute, 'ipv6')
+
+def read_ipv4_sysctl_attr(link, attribute):
+ return read_ip_sysctl_attr(link, attribute, 'ipv4')
+
+def start_dnsmasq(*additional_options, interface='veth-peer', lease_time='2m', ipv4_range='192.168.5.10,192.168.5.200', ipv4_router='192.168.5.1', ipv6_range='2600::10,2600::20'):
+ command = (
+ 'dnsmasq',
+ f'--log-facility={dnsmasq_log_file}',
+ '--log-queries=extra',
+ '--log-dhcp',
+ f'--pid-file={dnsmasq_pid_file}',
+ '--conf-file=/dev/null',
+ '--bind-interfaces',
+ f'--interface={interface}',
+ f'--dhcp-leasefile={dnsmasq_lease_file}',
+ '--enable-ra',
+ f'--dhcp-range={ipv6_range},{lease_time}',
+ f'--dhcp-range={ipv4_range},{lease_time}',
+ '--dhcp-option=option:mtu,1492',
+ f'--dhcp-option=option:router,{ipv4_router}',
+ '--port=0',
+ '--no-resolv',
+ ) + additional_options
+ check_output(*command)
+
+def stop_by_pid_file(pid_file):
+ if not os.path.exists(pid_file):
+ return
+ with open(pid_file, 'r', encoding='utf-8') as f:
+ pid = f.read().rstrip(' \t\r\n\0')
+ os.kill(int(pid), signal.SIGTERM)
+ for _ in range(25):
+ try:
+ os.kill(int(pid), 0)
+ print(f"PID {pid} is still alive, waiting...")
+ time.sleep(.2)
+ except OSError as e:
+ if e.errno == errno.ESRCH:
+ break
+ print(f"Unexpected exception when waiting for {pid} to die: {e.errno}")
+ os.remove(pid_file)
+
+def stop_dnsmasq():
+ stop_by_pid_file(dnsmasq_pid_file)
+ rm_f(dnsmasq_lease_file)
+ rm_f(dnsmasq_log_file)
+
+def read_dnsmasq_log_file():
+ with open(dnsmasq_log_file, encoding='utf-8') as f:
+ return f.read()
+
+def start_isc_dhcpd(conf_file, ipv, interface='veth-peer'):
+ conf_file_path = os.path.join(networkd_ci_temp_dir, conf_file)
+ isc_dhcpd_command = f'dhcpd {ipv} -cf {conf_file_path} -lf {isc_dhcpd_lease_file} -pf {isc_dhcpd_pid_file} {interface}'
+ touch(isc_dhcpd_lease_file)
+ check_output(isc_dhcpd_command)
+
+def stop_isc_dhcpd():
+ stop_by_pid_file(isc_dhcpd_pid_file)
+ rm_f(isc_dhcpd_lease_file)
+
+def networkd_invocation_id():
+ return check_output('systemctl show --value -p InvocationID systemd-networkd.service')
+
+def read_networkd_log(invocation_id=None):
+ if not invocation_id:
+ invocation_id = networkd_invocation_id()
+ return check_output('journalctl _SYSTEMD_INVOCATION_ID=' + invocation_id)
+
+def stop_networkd(show_logs=True):
+ if show_logs:
+ invocation_id = networkd_invocation_id()
+ check_output('systemctl stop systemd-networkd.socket')
+ check_output('systemctl stop systemd-networkd.service')
+ if show_logs:
+ print(read_networkd_log(invocation_id))
+
+def start_networkd():
+ check_output('systemctl start systemd-networkd')
+
+def restart_networkd(show_logs=True):
+ if show_logs:
+ invocation_id = networkd_invocation_id()
+ check_output('systemctl restart systemd-networkd.service')
+ if show_logs:
+ print(read_networkd_log(invocation_id))
+
+def networkd_pid():
+ return int(check_output('systemctl show --value -p MainPID systemd-networkd.service'))
+
+def networkctl_reconfigure(*links):
+ check_output(*networkctl_cmd, 'reconfigure', *links, env=env)
+
+def networkctl_reload(sleep_time=1):
+ check_output(*networkctl_cmd, 'reload', env=env)
+ # 'networkctl reload' asynchronously reconfigure links.
+ # Hence, we need to wait for a short time for link to be in configuring state.
+ if sleep_time > 0:
+ time.sleep(sleep_time)
+
+def setup_common():
+ print()
+
+def tear_down_common():
+ # 1. stop DHCP servers
+ stop_dnsmasq()
+ stop_isc_dhcpd()
+
+ # 2. remove modules
+ call_quiet('rmmod netdevsim')
+ call_quiet('rmmod sch_teql')
+
+ # 3. remove network namespace
+ call_quiet('ip netns del ns99')
+
+ # 4. remove links
+ flush_l2tp_tunnels()
+ flush_links()
+
+ # 5. stop networkd
+ stop_networkd()
+
+ # 6. remove configs
+ clear_network_units()
+ clear_networkd_conf_dropins()
+
+ # 7. flush settings
+ flush_fou_ports()
+ flush_nexthops()
+ flush_routing_policy_rules()
+ flush_routes()
+
+def setUpModule():
+ rm_rf(networkd_ci_temp_dir)
+ cp_r(os.path.join(os.path.dirname(os.path.abspath(__file__)), 'conf'), networkd_ci_temp_dir)
+
+ clear_network_units()
+ clear_networkd_conf_dropins()
+ clear_udev_rules()
+
+ setup_systemd_udev_rules()
+ copy_udev_rule('00-debug-net.rules')
+
+ # Save current state
+ save_active_units()
+ save_existing_links()
+ save_routes()
+ save_routing_policy_rules()
+ save_timezone()
+
+ create_service_dropin('systemd-networkd', networkd_bin,
+ f'{networkctl_bin} reload',
+ ['[Service]', 'Restart=no', '[Unit]', 'StartLimitIntervalSec=0'])
+ create_service_dropin('systemd-resolved', resolved_bin)
+ create_service_dropin('systemd-timesyncd', timesyncd_bin)
+
+ # TODO: also run udevd with sanitizers, valgrind, or coverage
+ #create_service_dropin('systemd-udevd', udevd_bin,
+ # f'{udevadm_bin} control --reload --timeout 0')
+ create_unit_dropin(
+ 'systemd-udevd.service',
+ [
+ '[Service]',
+ 'ExecStart=',
+ f'ExecStart=!!{udevd_bin}',
+ 'ExecReload=',
+ f'ExecReload={udevadm_bin} control --reload --timeout 0',
+ ]
+ )
+ create_unit_dropin(
+ 'systemd-networkd.socket',
+ [
+ '[Unit]',
+ 'StartLimitIntervalSec=0',
+ ]
+ )
+
+ check_output('systemctl daemon-reload')
+ print(check_output('systemctl cat systemd-networkd.service'))
+ print(check_output('systemctl cat systemd-resolved.service'))
+ print(check_output('systemctl cat systemd-timesyncd.service'))
+ print(check_output('systemctl cat systemd-udevd.service'))
+ check_output('systemctl restart systemd-resolved.service')
+ check_output('systemctl restart systemd-timesyncd.service')
+ check_output('systemctl restart systemd-udevd.service')
+
+def tearDownModule():
+ rm_rf(networkd_ci_temp_dir)
+ clear_udev_rules()
+ clear_network_units()
+ clear_networkd_conf_dropins()
+
+ restore_timezone()
+
+ rm_rf('/run/systemd/system/systemd-networkd.service.d')
+ rm_rf('/run/systemd/system/systemd-networkd.socket.d')
+ rm_rf('/run/systemd/system/systemd-resolved.service.d')
+ rm_rf('/run/systemd/system/systemd-timesyncd.service.d')
+ rm_rf('/run/systemd/system/systemd-udevd.service.d')
+ check_output('systemctl daemon-reload')
+ check_output('systemctl restart systemd-udevd.service')
+ restore_active_units()
+
+class Utilities():
+ # pylint: disable=no-member
+
+ def check_link_exists(self, link, expected=True):
+ if expected:
+ self.assertTrue(link_exists(link))
+ else:
+ self.assertFalse(link_exists(link))
+
+ def check_link_attr(self, *args):
+ self.assertEqual(read_link_attr(*args[:-1]), args[-1])
+
+ def check_bridge_port_attr(self, master, port, attribute, expected, allow_enoent=False):
+ path = os.path.join('/sys/devices/virtual/net', master, 'lower_' + port, 'brport', attribute)
+ if allow_enoent and not os.path.exists(path):
+ return
+ with open(path, encoding='utf-8') as f:
+ self.assertEqual(f.readline().strip(), expected)
+
+ def check_ipv4_sysctl_attr(self, link, attribute, expected):
+ self.assertEqual(read_ipv4_sysctl_attr(link, attribute), expected)
+
+ def check_ipv6_sysctl_attr(self, link, attribute, expected):
+ self.assertEqual(read_ipv6_sysctl_attr(link, attribute), expected)
+
+ def wait_links(self, *links, timeout=20, fail_assert=True):
+ def links_exist(*links):
+ for link in links:
+ if not link_exists(link):
+ return False
+ return True
+
+ for iteration in range(timeout + 1):
+ if iteration > 0:
+ time.sleep(1)
+
+ if links_exist(*links):
+ return True
+ if fail_assert:
+ self.fail('Timed out waiting for all links to be created: ' + ', '.join(list(links)))
+ return False
+
+ def wait_activated(self, link, state='down', timeout=20, fail_assert=True):
+ # wait for the interface is activated.
+ invocation_id = check_output('systemctl show systemd-networkd -p InvocationID --value')
+ needle = f'{link}: Bringing link {state}'
+ flag = state.upper()
+ for iteration in range(timeout + 1):
+ if iteration != 0:
+ time.sleep(1)
+ if not link_exists(link):
+ continue
+ output = check_output('journalctl _SYSTEMD_INVOCATION_ID=' + invocation_id)
+ if needle in output and flag in check_output(f'ip link show {link}'):
+ return True
+ if fail_assert:
+ self.fail(f'Timed out waiting for {link} activated.')
+ return False
+
+ def wait_operstate(self, link, operstate='degraded', setup_state='configured', setup_timeout=5, fail_assert=True):
+ """Wait for the link to reach the specified operstate and/or setup state.
+
+ Specify None or '' for either operstate or setup_state to ignore that state.
+ This will recheck until the state conditions are met or the timeout expires.
+
+ If the link successfully matches the requested state, this returns True.
+ If this times out waiting for the link to match, the behavior depends on the
+ 'fail_assert' parameter; if True, this causes a test assertion failure,
+ otherwise this returns False. The default is to cause assertion failure.
+
+ Note that this function matches on *exactly* the given operstate and setup_state.
+ To wait for a link to reach *or exceed* a given operstate, use wait_online().
+ """
+ if not operstate:
+ operstate = r'\S+'
+ if not setup_state:
+ setup_state = r'\S+'
+
+ for secs in range(setup_timeout + 1):
+ if secs != 0:
+ time.sleep(1)
+ if not link_exists(link):
+ continue
+ output = check_output(*networkctl_cmd, '-n', '0', 'status', link, env=env)
+ if re.search(rf'(?m)^\s*State:\s+{operstate}\s+\({setup_state}\)\s*$', output):
+ return True
+
+ print(output)
+ if fail_assert:
+ self.fail(f'Timed out waiting for {link} to reach state {operstate}/{setup_state}')
+ return False
+
+ def wait_online(self, links_with_operstate, timeout='20s', bool_any=False, ipv4=False, ipv6=False, setup_state='configured', setup_timeout=5):
+ """Wait for the links to reach the specified operstate and/or setup state.
+
+ This is similar to wait_operstate() but can be used for multiple links,
+ and it also calls systemd-networkd-wait-online to wait for the given operstate.
+ The operstate should be specified in the link name, like 'eth0:degraded'.
+ If just a link name is provided, wait-online's default operstate to wait for is degraded.
+
+ The 'timeout' parameter controls the systemd-networkd-wait-online timeout, and the
+ 'setup_timeout' controls the per-link timeout waiting for the setup_state.
+
+ Set 'bool_any' to True to wait for any (instead of all) of the given links.
+ If this is set, no setup_state checks are done.
+
+ Set 'ipv4' or 'ipv6' to True to wait for IPv4 address or IPv6 address, respectively, of each of the given links.
+ This is applied only for the operational state 'degraded' or above.
+
+ Note that this function waits for the links to reach *or exceed* the given operstate.
+ However, the setup_state, if specified, must be matched *exactly*.
+
+ This returns if the links reached the requested operstate/setup_state; otherwise it
+ raises CalledProcessError or fails test assertion.
+ """
+ args = wait_online_cmd + [f'--timeout={timeout}'] + [f'--interface={link}' for link in links_with_operstate] + [f'--ignore={link}' for link in protected_links]
+ if bool_any:
+ args += ['--any']
+ if ipv4:
+ args += ['--ipv4']
+ if ipv6:
+ args += ['--ipv6']
+ try:
+ check_output(*args, env=wait_online_env)
+ except subprocess.CalledProcessError:
+ # show detailed status on failure
+ for link in links_with_operstate:
+ name = link.split(':')[0]
+ if link_exists(name):
+ call(*networkctl_cmd, '-n', '0', 'status', name, env=env)
+ raise
+ if not bool_any and setup_state:
+ for link in links_with_operstate:
+ self.wait_operstate(link.split(':')[0], None, setup_state, setup_timeout)
+
+ def wait_address(self, link, address_regex, scope='global', ipv='', timeout_sec=100):
+ for i in range(timeout_sec):
+ if i > 0:
+ time.sleep(1)
+ output = check_output(f'ip {ipv} address show dev {link} scope {scope}')
+ if re.search(address_regex, output) and 'tentative' not in output:
+ break
+
+ self.assertRegex(output, address_regex)
+
+ def wait_address_dropped(self, link, address_regex, scope='global', ipv='', timeout_sec=100):
+ for i in range(timeout_sec):
+ if i > 0:
+ time.sleep(1)
+ output = check_output(f'ip {ipv} address show dev {link} scope {scope}')
+ if not re.search(address_regex, output):
+ break
+
+ self.assertNotRegex(output, address_regex)
+
+ def check_netlabel(self, interface, address, label='system_u:object_r:root_t:s0'):
+ if not shutil.which('selinuxenabled'):
+ print('## Checking NetLabel skipped: selinuxenabled command not found.')
+ elif call_quiet('selinuxenabled') != 0:
+ print('## Checking NetLabel skipped: SELinux disabled.')
+ elif not shutil.which('netlabelctl'): # not packaged by all distros
+ print('## Checking NetLabel skipped: netlabelctl command not found.')
+ else:
+ output = check_output('netlabelctl unlbl list')
+ print(output)
+ self.assertRegex(output, f'interface:{interface},address:{address},label:"{label}"')
+
+class NetworkctlTests(unittest.TestCase, Utilities):
+
+ def setUp(self):
+ setup_common()
+
+ def tearDown(self):
+ tear_down_common()
+
+ @expectedFailureIfAlternativeNameIsNotAvailable()
+ def test_altname(self):
+ copy_network_unit('26-netdev-link-local-addressing-yes.network', '12-dummy.netdev', '12-dummy.link')
+ start_networkd()
+ self.wait_online(['dummy98:degraded'])
+
+ output = check_output(*networkctl_cmd, '-n', '0', 'status', 'dummy98', env=env)
+ self.assertRegex(output, 'hogehogehogehogehogehoge')
+
+ @expectedFailureIfAlternativeNameIsNotAvailable()
+ def test_rename_to_altname(self):
+ copy_network_unit('26-netdev-link-local-addressing-yes.network',
+ '12-dummy.netdev', '12-dummy-rename-to-altname.link')
+ start_networkd()
+ self.wait_online(['dummyalt:degraded'])
+
+ output = check_output(*networkctl_cmd, '-n', '0', 'status', 'dummyalt', env=env)
+ self.assertIn('hogehogehogehogehogehoge', output)
+ self.assertNotIn('dummy98', output)
+
+ def test_reconfigure(self):
+ copy_network_unit('25-address-static.network', '12-dummy.netdev')
+ start_networkd()
+ self.wait_online(['dummy98:routable'])
+
+ output = check_output('ip -4 address show dev dummy98')
+ print(output)
+ self.assertIn('inet 10.1.2.3/16 brd 10.1.255.255 scope global dummy98', output)
+ self.assertIn('inet 10.1.2.4/16 brd 10.1.255.255 scope global secondary dummy98', output)
+ self.assertIn('inet 10.2.2.4/16 brd 10.2.255.255 scope global dummy98', output)
+
+ check_output('ip address del 10.1.2.3/16 dev dummy98')
+ check_output('ip address del 10.1.2.4/16 dev dummy98')
+ check_output('ip address del 10.2.2.4/16 dev dummy98')
+
+ networkctl_reconfigure('dummy98')
+ self.wait_online(['dummy98:routable'])
+
+ output = check_output('ip -4 address show dev dummy98')
+ print(output)
+ self.assertIn('inet 10.1.2.3/16 brd 10.1.255.255 scope global dummy98', output)
+ self.assertIn('inet 10.1.2.4/16 brd 10.1.255.255 scope global secondary dummy98', output)
+ self.assertIn('inet 10.2.2.4/16 brd 10.2.255.255 scope global dummy98', output)
+
+ remove_network_unit('25-address-static.network')
+
+ networkctl_reload()
+ self.wait_operstate('dummy98', 'degraded', setup_state='unmanaged')
+
+ output = check_output('ip -4 address show dev dummy98')
+ print(output)
+ self.assertNotIn('inet 10.1.2.3/16 brd 10.1.255.255 scope global dummy98', output)
+ self.assertNotIn('inet 10.1.2.4/16 brd 10.1.255.255 scope global secondary dummy98', output)
+ self.assertNotIn('inet 10.2.2.4/16 brd 10.2.255.255 scope global dummy98', output)
+
+ copy_network_unit('25-address-static.network')
+ networkctl_reload()
+ self.wait_online(['dummy98:routable'])
+
+ output = check_output('ip -4 address show dev dummy98')
+ print(output)
+ self.assertIn('inet 10.1.2.3/16 brd 10.1.255.255 scope global dummy98', output)
+ self.assertIn('inet 10.1.2.4/16 brd 10.1.255.255 scope global secondary dummy98', output)
+ self.assertIn('inet 10.2.2.4/16 brd 10.2.255.255 scope global dummy98', output)
+
+ def test_reload(self):
+ start_networkd()
+
+ copy_network_unit('11-dummy.netdev')
+ networkctl_reload()
+ self.wait_operstate('test1', 'off', setup_state='unmanaged')
+
+ copy_network_unit('11-dummy.network')
+ networkctl_reload()
+ self.wait_online(['test1:degraded'])
+
+ remove_network_unit('11-dummy.network')
+ networkctl_reload()
+ self.wait_operstate('test1', 'degraded', setup_state='unmanaged')
+
+ remove_network_unit('11-dummy.netdev')
+ networkctl_reload()
+ self.wait_operstate('test1', 'degraded', setup_state='unmanaged')
+
+ copy_network_unit('11-dummy.netdev', '11-dummy.network')
+ networkctl_reload()
+ self.wait_operstate('test1', 'degraded')
+
+ def test_glob(self):
+ copy_network_unit('11-dummy.netdev', '11-dummy.network')
+ start_networkd()
+
+ self.wait_online(['test1:degraded'])
+
+ output = check_output(*networkctl_cmd, 'list', env=env)
+ self.assertRegex(output, '1 lo ')
+ self.assertRegex(output, 'test1')
+
+ output = check_output(*networkctl_cmd, 'list', 'test1', env=env)
+ self.assertNotRegex(output, '1 lo ')
+ self.assertRegex(output, 'test1')
+
+ output = check_output(*networkctl_cmd, 'list', 'te*', env=env)
+ self.assertNotRegex(output, '1 lo ')
+ self.assertRegex(output, 'test1')
+
+ output = check_output(*networkctl_cmd, '-n', '0', 'status', 'te*', env=env)
+ self.assertNotRegex(output, '1: lo ')
+ self.assertRegex(output, 'test1')
+
+ output = check_output(*networkctl_cmd, '-n', '0', 'status', 'tes[a-z][0-9]', env=env)
+ self.assertNotRegex(output, '1: lo ')
+ self.assertRegex(output, 'test1')
+
+ def test_mtu(self):
+ copy_network_unit('11-dummy-mtu.netdev', '11-dummy.network')
+ start_networkd()
+
+ self.wait_online(['test1:degraded'])
+
+ output = check_output(*networkctl_cmd, '-n', '0', 'status', 'test1', env=env)
+ self.assertRegex(output, 'MTU: 1600')
+
+ def test_type(self):
+ copy_network_unit('11-dummy.netdev', '11-dummy.network')
+ start_networkd()
+ self.wait_online(['test1:degraded'])
+
+ output = check_output(*networkctl_cmd, '-n', '0', 'status', 'test1', env=env)
+ print(output)
+ self.assertRegex(output, 'Type: ether')
+
+ output = check_output(*networkctl_cmd, '-n', '0', 'status', 'lo', env=env)
+ print(output)
+ self.assertRegex(output, 'Type: loopback')
+
+ @expectedFailureIfLinkFileFieldIsNotSet()
+ def test_udev_link_file(self):
+ copy_network_unit('11-dummy.netdev', '11-dummy.network')
+ start_networkd()
+ self.wait_online(['test1:degraded'])
+
+ output = check_output(*networkctl_cmd, '-n', '0', 'status', 'test1', env=env)
+ print(output)
+ self.assertRegex(output, r'Link File: (/usr)?/lib/systemd/network/99-default.link')
+ self.assertRegex(output, r'Network File: /run/systemd/network/11-dummy.network')
+
+ # This test may be run on the system that has older udevd than 70f32a260b5ebb68c19ecadf5d69b3844896ba55 (v249).
+ # In that case, the udev DB for the loopback network interface may already have ID_NET_LINK_FILE property.
+ # Let's reprocess the interface and drop the property.
+ check_output(*udevadm_cmd, 'trigger', '--settle', '--action=add', '/sys/class/net/lo')
+ output = check_output(*networkctl_cmd, '-n', '0', 'status', 'lo', env=env)
+ print(output)
+ self.assertRegex(output, r'Link File: n/a')
+ self.assertRegex(output, r'Network File: n/a')
+
+ def test_delete_links(self):
+ copy_network_unit('11-dummy.netdev', '11-dummy.network',
+ '25-veth.netdev', '26-netdev-link-local-addressing-yes.network')
+ start_networkd()
+
+ self.wait_online(['test1:degraded', 'veth99:degraded', 'veth-peer:degraded'])
+
+ check_output(*networkctl_cmd, 'delete', 'test1', 'veth99', env=env)
+ self.check_link_exists('test1', expected=False)
+ self.check_link_exists('veth99', expected=False)
+ self.check_link_exists('veth-peer', expected=False)
+
+class WaitOnlineTests(unittest.TestCase, Utilities):
+
+ def setUp(self):
+ setup_common()
+
+ def tearDown(self):
+ tear_down_common()
+
+ def test_wait_online_any(self):
+ copy_network_unit('25-bridge.netdev', '25-bridge.network', '11-dummy.netdev', '11-dummy.network')
+ start_networkd()
+
+ self.wait_online(['bridge99', 'test1:degraded'], bool_any=True)
+
+ self.wait_operstate('bridge99', '(off|no-carrier)', setup_state='configuring')
+ self.wait_operstate('test1', 'degraded')
+
+class NetworkdNetDevTests(unittest.TestCase, Utilities):
+
+ def setUp(self):
+ setup_common()
+
+ def tearDown(self):
+ tear_down_common()
+
+ def test_dropin_and_name_conflict(self):
+ copy_network_unit('10-dropin-test.netdev', '15-name-conflict-test.netdev')
+ start_networkd()
+
+ self.wait_online(['dropin-test:off'], setup_state='unmanaged')
+
+ output = check_output('ip link show dropin-test')
+ print(output)
+ self.assertRegex(output, '00:50:56:c0:00:28')
+
+ def test_match_udev_property(self):
+ copy_network_unit('12-dummy.netdev', '13-not-match-udev-property.network', '14-match-udev-property.network')
+ start_networkd()
+ self.wait_online(['dummy98:routable'])
+
+ output = check_output(*networkctl_cmd, '-n', '0', 'status', 'dummy98', env=env)
+ print(output)
+ self.assertRegex(output, 'Network File: /run/systemd/network/14-match-udev-property')
+
+ @expectedFailureIfModuleIsNotAvailable('bareudp')
+ def test_bareudp(self):
+ copy_network_unit('25-bareudp.netdev', '26-netdev-link-local-addressing-yes.network')
+ start_networkd()
+
+ self.wait_online(['bareudp99:degraded'])
+
+ output = check_output('ip -d link show bareudp99')
+ print(output)
+ self.assertRegex(output, 'dstport 1000 ')
+ self.assertRegex(output, 'ethertype ip ')
+
+ @expectedFailureIfModuleIsNotAvailable('batman-adv')
+ def test_batadv(self):
+ copy_network_unit('25-batadv.netdev', '26-netdev-link-local-addressing-yes.network')
+ start_networkd()
+
+ self.wait_online(['batadv99:degraded'])
+
+ output = check_output('ip -d link show batadv99')
+ print(output)
+ self.assertRegex(output, 'batadv')
+
+ def test_bridge(self):
+ copy_network_unit('25-bridge.netdev', '25-bridge-configure-without-carrier.network')
+ start_networkd()
+
+ self.wait_online(['bridge99:no-carrier'])
+
+ tick = os.sysconf('SC_CLK_TCK')
+ self.assertEqual(9, round(float(read_link_attr('bridge99', 'bridge', 'hello_time')) / tick))
+ self.assertEqual(9, round(float(read_link_attr('bridge99', 'bridge', 'max_age')) / tick))
+ self.assertEqual(9, round(float(read_link_attr('bridge99', 'bridge', 'forward_delay')) / tick))
+ self.assertEqual(9, round(float(read_link_attr('bridge99', 'bridge', 'ageing_time')) / tick))
+ self.assertEqual(9, int(read_link_attr('bridge99', 'bridge', 'priority')))
+ self.assertEqual(1, int(read_link_attr('bridge99', 'bridge', 'multicast_querier')))
+ self.assertEqual(1, int(read_link_attr('bridge99', 'bridge', 'multicast_snooping')))
+ self.assertEqual(1, int(read_link_attr('bridge99', 'bridge', 'stp_state')))
+ self.assertEqual(3, int(read_link_attr('bridge99', 'bridge', 'multicast_igmp_version')))
+
+ output = check_output(*networkctl_cmd, '-n', '0', 'status', 'bridge99', env=env)
+ print(output)
+ self.assertRegex(output, 'Priority: 9')
+ self.assertRegex(output, 'STP: yes')
+ self.assertRegex(output, 'Multicast IGMP Version: 3')
+
+ output = check_output('ip -d link show bridge99')
+ print(output)
+ self.assertIn('vlan_filtering 1 ', output)
+ self.assertIn('vlan_protocol 802.1ad ', output)
+ self.assertIn('vlan_default_pvid 9 ', output)
+
+ def test_bond(self):
+ copy_network_unit('25-bond.netdev', '25-bond-balanced-tlb.netdev')
+ start_networkd()
+
+ self.wait_online(['bond99:off', 'bond98:off'], setup_state='unmanaged')
+
+ self.check_link_attr('bond99', 'bonding', 'mode', '802.3ad 4')
+ self.check_link_attr('bond99', 'bonding', 'xmit_hash_policy', 'layer3+4 1')
+ self.check_link_attr('bond99', 'bonding', 'miimon', '1000')
+ self.check_link_attr('bond99', 'bonding', 'lacp_rate', 'fast 1')
+ self.check_link_attr('bond99', 'bonding', 'updelay', '2000')
+ self.check_link_attr('bond99', 'bonding', 'downdelay', '2000')
+ self.check_link_attr('bond99', 'bonding', 'resend_igmp', '4')
+ self.check_link_attr('bond99', 'bonding', 'min_links', '1')
+ self.check_link_attr('bond99', 'bonding', 'ad_actor_sys_prio', '1218')
+ self.check_link_attr('bond99', 'bonding', 'ad_user_port_key', '811')
+ self.check_link_attr('bond99', 'bonding', 'ad_actor_system', '00:11:22:33:44:55')
+
+ self.check_link_attr('bond98', 'bonding', 'mode', 'balance-tlb 5')
+ self.check_link_attr('bond98', 'bonding', 'tlb_dynamic_lb', '1')
+
+ output = check_output(*networkctl_cmd, '-n', '0', 'status', 'bond99', env=env)
+ print(output)
+ self.assertIn('Mode: 802.3ad', output)
+ self.assertIn('Miimon: 1s', output)
+ self.assertIn('Updelay: 2s', output)
+ self.assertIn('Downdelay: 2s', output)
+
+ output = check_output(*networkctl_cmd, '-n', '0', 'status', 'bond98', env=env)
+ print(output)
+ self.assertIn('Mode: balance-tlb', output)
+
+ def test_vlan(self):
+ copy_network_unit('21-vlan.netdev', '11-dummy.netdev',
+ '21-vlan.network', '21-vlan-test1.network')
+ start_networkd()
+
+ self.wait_online(['test1:degraded', 'vlan99:routable'])
+
+ output = check_output('ip -d link show test1')
+ print(output)
+ self.assertRegex(output, ' mtu 2000 ')
+
+ output = check_output('ip -d link show vlan99')
+ print(output)
+ self.assertIn(' mtu 2000 ', output)
+ self.assertIn('REORDER_HDR', output)
+ self.assertIn('LOOSE_BINDING', output)
+ self.assertIn('GVRP', output)
+ self.assertIn('MVRP', output)
+ self.assertIn(' id 99 ', output)
+ self.assertIn('ingress-qos-map { 4:100 7:13 }', output)
+ self.assertIn('egress-qos-map { 0:1 1:3 6:6 7:7 10:3 }', output)
+
+ output = check_output('ip -4 address show dev test1')
+ print(output)
+ self.assertRegex(output, 'inet 192.168.24.5/24 brd 192.168.24.255 scope global test1')
+ self.assertRegex(output, 'inet 192.168.25.5/24 brd 192.168.25.255 scope global test1')
+
+ output = check_output('ip -4 address show dev vlan99')
+ print(output)
+ self.assertRegex(output, 'inet 192.168.23.5/24 brd 192.168.23.255 scope global vlan99')
+
+ def test_vlan_on_bond(self):
+ # For issue #24377 (https://github.com/systemd/systemd/issues/24377),
+ # which is fixed by b05e52000b4eee764b383cc3031da0a3739e996e (PR#24020).
+
+ copy_network_unit('21-bond-802.3ad.netdev', '21-bond-802.3ad.network',
+ '21-vlan-on-bond.netdev', '21-vlan-on-bond.network')
+ start_networkd()
+ self.wait_online(['bond99:off'])
+ self.wait_operstate('vlan99', operstate='off', setup_state='configuring', setup_timeout=10)
+
+ # The commit b05e52000b4eee764b383cc3031da0a3739e996e adds ", ignoring". To make it easily confirmed
+ # that the issue is fixed by the commit, let's allow to match both string.
+ log_re = re.compile('vlan99: Could not bring up interface(, ignoring|): Network is down$', re.MULTILINE)
+ for i in range(20):
+ if i > 0:
+ time.sleep(0.5)
+ if log_re.search(read_networkd_log()):
+ break
+ else:
+ self.fail()
+
+ copy_network_unit('11-dummy.netdev', '12-dummy.netdev', '21-dummy-bond-slave.network')
+ networkctl_reload()
+ self.wait_online(['test1:enslaved', 'dummy98:enslaved', 'bond99:carrier', 'vlan99:routable'])
+
+ def test_macvtap(self):
+ first = True
+ for mode in ['private', 'vepa', 'bridge', 'passthru']:
+ if first:
+ first = False
+ else:
+ self.tearDown()
+
+ print(f'### test_macvtap(mode={mode})')
+ with self.subTest(mode=mode):
+ copy_network_unit('21-macvtap.netdev', '26-netdev-link-local-addressing-yes.network',
+ '11-dummy.netdev', '25-macvtap.network')
+ with open(os.path.join(network_unit_dir, '21-macvtap.netdev'), mode='a', encoding='utf-8') as f:
+ f.write('[MACVTAP]\nMode=' + mode)
+ start_networkd()
+
+ self.wait_online(['macvtap99:degraded',
+ 'test1:carrier' if mode == 'passthru' else 'test1:degraded'])
+
+ output = check_output('ip -d link show macvtap99')
+ print(output)
+ self.assertRegex(output, 'macvtap mode ' + mode + ' ')
+
+ def test_macvlan(self):
+ first = True
+ for mode in ['private', 'vepa', 'bridge', 'passthru']:
+ if first:
+ first = False
+ else:
+ self.tearDown()
+
+ print(f'### test_macvlan(mode={mode})')
+ with self.subTest(mode=mode):
+ copy_network_unit('21-macvlan.netdev', '26-netdev-link-local-addressing-yes.network',
+ '11-dummy.netdev', '25-macvlan.network')
+ with open(os.path.join(network_unit_dir, '21-macvlan.netdev'), mode='a', encoding='utf-8') as f:
+ f.write('[MACVLAN]\nMode=' + mode)
+ start_networkd()
+
+ self.wait_online(['macvlan99:degraded',
+ 'test1:carrier' if mode == 'passthru' else 'test1:degraded'])
+
+ output = check_output('ip -d link show test1')
+ print(output)
+ self.assertRegex(output, ' mtu 2000 ')
+
+ output = check_output('ip -d link show macvlan99')
+ print(output)
+ self.assertRegex(output, ' mtu 2000 ')
+ self.assertRegex(output, 'macvlan mode ' + mode + ' ')
+
+ remove_link('test1')
+ time.sleep(1)
+
+ check_output("ip link add test1 type dummy")
+ self.wait_online(['macvlan99:degraded',
+ 'test1:carrier' if mode == 'passthru' else 'test1:degraded'])
+
+ output = check_output('ip -d link show test1')
+ print(output)
+ self.assertRegex(output, ' mtu 2000 ')
+
+ output = check_output('ip -d link show macvlan99')
+ print(output)
+ self.assertRegex(output, ' mtu 2000 ')
+ self.assertRegex(output, 'macvlan mode ' + mode + ' ')
+
+ @expectedFailureIfModuleIsNotAvailable('ipvlan')
+ def test_ipvlan(self):
+ first = True
+ for mode, flag in [['L2', 'private'], ['L3', 'vepa'], ['L3S', 'bridge']]:
+ if first:
+ first = False
+ else:
+ self.tearDown()
+
+ print(f'### test_ipvlan(mode={mode}, flag={flag})')
+ with self.subTest(mode=mode, flag=flag):
+ copy_network_unit('25-ipvlan.netdev', '26-netdev-link-local-addressing-yes.network',
+ '11-dummy.netdev', '25-ipvlan.network')
+ with open(os.path.join(network_unit_dir, '25-ipvlan.netdev'), mode='a', encoding='utf-8') as f:
+ f.write('[IPVLAN]\nMode=' + mode + '\nFlags=' + flag)
+
+ start_networkd()
+ self.wait_online(['ipvlan99:degraded', 'test1:degraded'])
+
+ output = check_output('ip -d link show ipvlan99')
+ print(output)
+ self.assertRegex(output, 'ipvlan *mode ' + mode.lower() + ' ' + flag)
+
+ @expectedFailureIfModuleIsNotAvailable('ipvtap')
+ def test_ipvtap(self):
+ first = True
+ for mode, flag in [['L2', 'private'], ['L3', 'vepa'], ['L3S', 'bridge']]:
+ if first:
+ first = False
+ else:
+ self.tearDown()
+
+ print(f'### test_ipvtap(mode={mode}, flag={flag})')
+ with self.subTest(mode=mode, flag=flag):
+ copy_network_unit('25-ipvtap.netdev', '26-netdev-link-local-addressing-yes.network',
+ '11-dummy.netdev', '25-ipvtap.network')
+ with open(os.path.join(network_unit_dir, '25-ipvtap.netdev'), mode='a', encoding='utf-8') as f:
+ f.write('[IPVTAP]\nMode=' + mode + '\nFlags=' + flag)
+
+ start_networkd()
+ self.wait_online(['ipvtap99:degraded', 'test1:degraded'])
+
+ output = check_output('ip -d link show ipvtap99')
+ print(output)
+ self.assertRegex(output, 'ipvtap *mode ' + mode.lower() + ' ' + flag)
+
+ def test_veth(self):
+ copy_network_unit('25-veth.netdev', '26-netdev-link-local-addressing-yes.network',
+ '25-veth-mtu.netdev')
+ start_networkd()
+
+ self.wait_online(['veth99:degraded', 'veth-peer:degraded', 'veth-mtu:degraded', 'veth-mtu-peer:degraded'])
+
+ output = check_output('ip -d link show veth99')
+ print(output)
+ self.assertRegex(output, 'link/ether 12:34:56:78:9a:bc')
+ output = check_output('ip -d link show veth-peer')
+ print(output)
+ self.assertRegex(output, 'link/ether 12:34:56:78:9a:bd')
+
+ output = check_output('ip -d link show veth-mtu')
+ print(output)
+ self.assertRegex(output, 'link/ether 12:34:56:78:9a:be')
+ self.assertRegex(output, 'mtu 1800')
+ output = check_output('ip -d link show veth-mtu-peer')
+ print(output)
+ self.assertRegex(output, 'link/ether 12:34:56:78:9a:bf')
+ self.assertRegex(output, 'mtu 1800')
+
+ def test_tuntap(self):
+ copy_network_unit('25-tun.netdev', '25-tap.netdev', '26-netdev-link-local-addressing-yes.network')
+ start_networkd()
+
+ self.wait_online(['testtun99:degraded', 'testtap99:degraded'])
+
+ pid = networkd_pid()
+ name = psutil.Process(pid).name()[:15]
+
+ output = check_output('ip -d tuntap show')
+ print(output)
+ self.assertRegex(output, fr'(?m)testtap99: tap pi (multi_queue |)vnet_hdr persist filter *(0x100|)\n\tAttached to processes:{name}\({pid}\)systemd\(1\)$')
+ self.assertRegex(output, fr'(?m)testtun99: tun pi (multi_queue |)vnet_hdr persist filter *(0x100|)\n\tAttached to processes:{name}\({pid}\)systemd\(1\)$')
+
+ output = check_output('ip -d link show testtun99')
+ print(output)
+ # Old ip command does not support IFF_ flags
+ self.assertRegex(output, 'tun (type tun pi on vnet_hdr on multi_queue|addrgenmode) ')
+ self.assertIn('UP,LOWER_UP', output)
+
+ output = check_output('ip -d link show testtap99')
+ print(output)
+ self.assertRegex(output, 'tun (type tap pi on vnet_hdr on multi_queue|addrgenmode) ')
+ self.assertIn('UP,LOWER_UP', output)
+
+ remove_network_unit('26-netdev-link-local-addressing-yes.network')
+
+ restart_networkd()
+ self.wait_online(['testtun99:degraded', 'testtap99:degraded'], setup_state='unmanaged')
+
+ pid = networkd_pid()
+ name = psutil.Process(pid).name()[:15]
+
+ output = check_output('ip -d tuntap show')
+ print(output)
+ self.assertRegex(output, fr'(?m)testtap99: tap pi (multi_queue |)vnet_hdr persist filter *(0x100|)\n\tAttached to processes:{name}\({pid}\)systemd\(1\)$')
+ self.assertRegex(output, fr'(?m)testtun99: tun pi (multi_queue |)vnet_hdr persist filter *(0x100|)\n\tAttached to processes:{name}\({pid}\)systemd\(1\)$')
+
+ output = check_output('ip -d link show testtun99')
+ print(output)
+ self.assertRegex(output, 'tun (type tun pi on vnet_hdr on multi_queue|addrgenmode) ')
+ self.assertIn('UP,LOWER_UP', output)
+
+ output = check_output('ip -d link show testtap99')
+ print(output)
+ self.assertRegex(output, 'tun (type tap pi on vnet_hdr on multi_queue|addrgenmode) ')
+ self.assertIn('UP,LOWER_UP', output)
+
+ clear_network_units()
+ restart_networkd()
+ self.wait_online(['testtun99:off', 'testtap99:off'], setup_state='unmanaged')
+
+ output = check_output('ip -d tuntap show')
+ print(output)
+ self.assertRegex(output, r'(?m)testtap99: tap pi (multi_queue |)vnet_hdr persist filter *(0x100|)\n\tAttached to processes:$')
+ self.assertRegex(output, r'(?m)testtun99: tun pi (multi_queue |)vnet_hdr persist filter *(0x100|)\n\tAttached to processes:$')
+
+ for i in range(10):
+ if i != 0:
+ time.sleep(1)
+ output = check_output('ip -d link show testtun99')
+ print(output)
+ self.assertRegex(output, 'tun (type tun pi on vnet_hdr on multi_queue|addrgenmode) ')
+ if 'NO-CARRIER' in output:
+ break
+ else:
+ self.fail()
+
+ for i in range(10):
+ if i != 0:
+ time.sleep(1)
+ output = check_output('ip -d link show testtap99')
+ print(output)
+ self.assertRegex(output, 'tun (type tap pi on vnet_hdr on multi_queue|addrgenmode) ')
+ if 'NO-CARRIER' in output:
+ break
+ else:
+ self.fail()
+
+ @expectedFailureIfModuleIsNotAvailable('vrf')
+ def test_vrf(self):
+ copy_network_unit('25-vrf.netdev', '26-netdev-link-local-addressing-yes.network')
+ start_networkd()
+
+ self.wait_online(['vrf99:carrier'])
+
+ @expectedFailureIfModuleIsNotAvailable('vcan')
+ def test_vcan(self):
+ copy_network_unit('25-vcan.netdev', '26-netdev-link-local-addressing-yes.network',
+ '25-vcan98.netdev', '25-vcan98.network')
+ start_networkd()
+
+ self.wait_online(['vcan99:carrier', 'vcan98:carrier'])
+
+ # https://github.com/systemd/systemd/issues/30140
+ output = check_output('ip -d link show vcan99')
+ print(output)
+ self.assertIn('mtu 16 ', output)
+
+ output = check_output('ip -d link show vcan98')
+ print(output)
+ self.assertIn('mtu 16 ', output)
+
+ @expectedFailureIfModuleIsNotAvailable('vxcan')
+ def test_vxcan(self):
+ copy_network_unit('25-vxcan.netdev', '26-netdev-link-local-addressing-yes.network')
+ start_networkd()
+
+ self.wait_online(['vxcan99:carrier', 'vxcan-peer:carrier'])
+
+ @expectedFailureIfModuleIsNotAvailable('wireguard')
+ def test_wireguard(self):
+ copy_network_unit('25-wireguard.netdev', '25-wireguard.network',
+ '25-wireguard-23-peers.netdev', '25-wireguard-23-peers.network',
+ '25-wireguard-preshared-key.txt', '25-wireguard-private-key.txt',
+ '25-wireguard-no-peer.netdev', '25-wireguard-no-peer.network')
+ start_networkd()
+ self.wait_online(['wg99:routable', 'wg98:routable', 'wg97:carrier'])
+
+ output = check_output('ip -4 address show dev wg99')
+ print(output)
+ self.assertIn('inet 192.168.124.1/24 scope global wg99', output)
+
+ output = check_output('ip -4 address show dev wg99')
+ print(output)
+ self.assertIn('inet 169.254.11.1/24 scope link wg99', output)
+
+ output = check_output('ip -6 address show dev wg99')
+ print(output)
+ self.assertIn('inet6 fe80::1/64 scope link', output)
+
+ output = check_output('ip -4 address show dev wg98')
+ print(output)
+ self.assertIn('inet 192.168.123.123/24 scope global wg98', output)
+
+ output = check_output('ip -6 address show dev wg98')
+ print(output)
+ self.assertIn('inet6 fd8d:4d6d:3ccb:500::1/64 scope global', output)
+
+ output = check_output('ip -4 route show dev wg99 table 1234')
+ print(output)
+ self.assertIn('192.168.26.0/24 proto static metric 123', output)
+
+ output = check_output('ip -6 route show dev wg99 table 1234')
+ print(output)
+ self.assertIn('fd31:bf08:57cb::/48 proto static metric 123 pref medium', output)
+
+ output = check_output('ip -6 route show dev wg98 table 1234')
+ print(output)
+ self.assertIn('fd8d:4d6d:3ccb:500:c79:2339:edce:ece1 proto static metric 123 pref medium', output)
+ self.assertIn('fd8d:4d6d:3ccb:500:1dbf:ca8a:32d3:dd81 proto static metric 123 pref medium', output)
+ self.assertIn('fd8d:4d6d:3ccb:500:1e54:1415:35d0:a47c proto static metric 123 pref medium', output)
+ self.assertIn('fd8d:4d6d:3ccb:500:270d:b5dd:4a3f:8909 proto static metric 123 pref medium', output)
+ self.assertIn('fd8d:4d6d:3ccb:500:5660:679d:3532:94d8 proto static metric 123 pref medium', output)
+ self.assertIn('fd8d:4d6d:3ccb:500:6825:573f:30f3:9472 proto static metric 123 pref medium', output)
+ self.assertIn('fd8d:4d6d:3ccb:500:6f2e:6888:c6fd:dfb9 proto static metric 123 pref medium', output)
+ self.assertIn('fd8d:4d6d:3ccb:500:8d4d:bab:7280:a09a proto static metric 123 pref medium', output)
+ self.assertIn('fd8d:4d6d:3ccb:500:900c:d437:ec27:8822 proto static metric 123 pref medium', output)
+ self.assertIn('fd8d:4d6d:3ccb:500:9742:9931:5217:18d5 proto static metric 123 pref medium', output)
+ self.assertIn('fd8d:4d6d:3ccb:500:9c11:d820:2e96:9be0 proto static metric 123 pref medium', output)
+ self.assertIn('fd8d:4d6d:3ccb:500:a072:80da:de4f:add1 proto static metric 123 pref medium', output)
+ self.assertIn('fd8d:4d6d:3ccb:500:a3f3:df38:19b0:721 proto static metric 123 pref medium', output)
+ self.assertIn('fd8d:4d6d:3ccb:500:a94b:cd6a:a32d:90e6 proto static metric 123 pref medium', output)
+ self.assertIn('fd8d:4d6d:3ccb:500:b39c:9cdc:755a:ead3 proto static metric 123 pref medium', output)
+ self.assertIn('fd8d:4d6d:3ccb:500:b684:4f81:2e3e:132e proto static metric 123 pref medium', output)
+ self.assertIn('fd8d:4d6d:3ccb:500:bad5:495d:8e9c:3427 proto static metric 123 pref medium', output)
+ self.assertIn('fd8d:4d6d:3ccb:500:bfe5:c3c3:5d77:fcb proto static metric 123 pref medium', output)
+ self.assertIn('fd8d:4d6d:3ccb:500:c624:6bf7:4c09:3b59 proto static metric 123 pref medium', output)
+ self.assertIn('fd8d:4d6d:3ccb:500:d4f9:5dc:9296:a1a proto static metric 123 pref medium', output)
+ self.assertIn('fd8d:4d6d:3ccb:500:dcdd:d33b:90c9:6088 proto static metric 123 pref medium', output)
+ self.assertIn('fd8d:4d6d:3ccb:500:e2e1:ae15:103f:f376 proto static metric 123 pref medium', output)
+ self.assertIn('fd8d:4d6d:3ccb:500:f349:c4f0:10c1:6b4 proto static metric 123 pref medium', output)
+ self.assertIn('fd8d:4d6d:3ccb:c79:2339:edce::/96 proto static metric 123 pref medium', output)
+ self.assertIn('fd8d:4d6d:3ccb:1dbf:ca8a:32d3::/96 proto static metric 123 pref medium', output)
+ self.assertIn('fd8d:4d6d:3ccb:1e54:1415:35d0::/96 proto static metric 123 pref medium', output)
+ self.assertIn('fd8d:4d6d:3ccb:270d:b5dd:4a3f::/96 proto static metric 123 pref medium', output)
+ self.assertIn('fd8d:4d6d:3ccb:5660:679d:3532::/96 proto static metric 123 pref medium', output)
+ self.assertIn('fd8d:4d6d:3ccb:6825:573f:30f3::/96 proto static metric 123 pref medium', output)
+ self.assertIn('fd8d:4d6d:3ccb:6f2e:6888:c6fd::/96 proto static metric 123 pref medium', output)
+ self.assertIn('fd8d:4d6d:3ccb:8d4d:bab:7280::/96 proto static metric 123 pref medium', output)
+ self.assertIn('fd8d:4d6d:3ccb:900c:d437:ec27::/96 proto static metric 123 pref medium', output)
+ self.assertIn('fd8d:4d6d:3ccb:9742:9931:5217::/96 proto static metric 123 pref medium', output)
+ self.assertIn('fd8d:4d6d:3ccb:9c11:d820:2e96::/96 proto static metric 123 pref medium', output)
+ self.assertIn('fd8d:4d6d:3ccb:a072:80da:de4f::/96 proto static metric 123 pref medium', output)
+ self.assertIn('fd8d:4d6d:3ccb:a3f3:df38:19b0::/96 proto static metric 123 pref medium', output)
+ self.assertIn('fd8d:4d6d:3ccb:a94b:cd6a:a32d::/96 proto static metric 123 pref medium', output)
+ self.assertIn('fd8d:4d6d:3ccb:b39c:9cdc:755a::/96 proto static metric 123 pref medium', output)
+ self.assertIn('fd8d:4d6d:3ccb:b684:4f81:2e3e::/96 proto static metric 123 pref medium', output)
+ self.assertIn('fd8d:4d6d:3ccb:bad5:495d:8e9c::/96 proto static metric 123 pref medium', output)
+ self.assertIn('fd8d:4d6d:3ccb:bfe5:c3c3:5d77::/96 proto static metric 123 pref medium', output)
+ self.assertIn('fd8d:4d6d:3ccb:c624:6bf7:4c09::/96 proto static metric 123 pref medium', output)
+ self.assertIn('fd8d:4d6d:3ccb:d4f9:5dc:9296::/96 proto static metric 123 pref medium', output)
+ self.assertIn('fd8d:4d6d:3ccb:dcdd:d33b:90c9::/96 proto static metric 123 pref medium', output)
+ self.assertIn('fd8d:4d6d:3ccb:e2e1:ae15:103f::/96 proto static metric 123 pref medium', output)
+ self.assertIn('fd8d:4d6d:3ccb:f349:c4f0:10c1::/96 proto static metric 123 pref medium', output)
+
+ if shutil.which('wg'):
+ call('wg')
+
+ output = check_output('wg show wg99 listen-port')
+ self.assertEqual(output, '51820')
+ output = check_output('wg show wg99 fwmark')
+ self.assertEqual(output, '0x4d2')
+ output = check_output('wg show wg99 private-key')
+ self.assertEqual(output, 'EEGlnEPYJV//kbvvIqxKkQwOiS+UENyPncC4bF46ong=')
+ output = check_output('wg show wg99 allowed-ips')
+ self.assertIn('9uioxkGzjvGjkse3V35I9AhorWfIjBcrf3UPMS0bw2c=\t192.168.124.3/32', output)
+ self.assertIn('TTiCUpCxS7zDn/ax4p5W6Evg41r8hOrnWQw2Sq6Nh10=\t192.168.124.2/32', output)
+ self.assertIn('lsDtM3AbjxNlauRKzHEPfgS1Zp7cp/VX5Use/P4PQSc=\tfdbc:bae2:7871:e1fe:793:8636::/96 fdbc:bae2:7871:500:e1fe:793:8636:dad1/128', output)
+ self.assertIn('RDf+LSpeEre7YEIKaxg+wbpsNV7du+ktR99uBEtIiCA=\t192.168.26.0/24 fd31:bf08:57cb::/48', output)
+ output = check_output('wg show wg99 persistent-keepalive')
+ self.assertIn('9uioxkGzjvGjkse3V35I9AhorWfIjBcrf3UPMS0bw2c=\toff', output)
+ self.assertIn('TTiCUpCxS7zDn/ax4p5W6Evg41r8hOrnWQw2Sq6Nh10=\toff', output)
+ self.assertIn('lsDtM3AbjxNlauRKzHEPfgS1Zp7cp/VX5Use/P4PQSc=\toff', output)
+ self.assertIn('RDf+LSpeEre7YEIKaxg+wbpsNV7du+ktR99uBEtIiCA=\t20', output)
+ output = check_output('wg show wg99 endpoints')
+ self.assertIn('9uioxkGzjvGjkse3V35I9AhorWfIjBcrf3UPMS0bw2c=\t(none)', output)
+ self.assertIn('TTiCUpCxS7zDn/ax4p5W6Evg41r8hOrnWQw2Sq6Nh10=\t(none)', output)
+ self.assertIn('lsDtM3AbjxNlauRKzHEPfgS1Zp7cp/VX5Use/P4PQSc=\t(none)', output)
+ self.assertIn('RDf+LSpeEre7YEIKaxg+wbpsNV7du+ktR99uBEtIiCA=\t192.168.27.3:51820', output)
+ output = check_output('wg show wg99 preshared-keys')
+ self.assertIn('9uioxkGzjvGjkse3V35I9AhorWfIjBcrf3UPMS0bw2c=\t6Fsg8XN0DE6aPQgAX4r2oazEYJOGqyHUz3QRH/jCB+I=', output)
+ self.assertIn('TTiCUpCxS7zDn/ax4p5W6Evg41r8hOrnWQw2Sq6Nh10=\tit7nd33chCT/tKT2ZZWfYyp43Zs+6oif72hexnSNMqA=', output)
+ self.assertIn('lsDtM3AbjxNlauRKzHEPfgS1Zp7cp/VX5Use/P4PQSc=\tcPLOy1YUrEI0EMMIycPJmOo0aTu3RZnw8bL5meVD6m0=', output)
+ self.assertIn('RDf+LSpeEre7YEIKaxg+wbpsNV7du+ktR99uBEtIiCA=\tIIWIV17wutHv7t4cR6pOT91z6NSz/T8Arh0yaywhw3M=', output)
+
+ output = check_output('wg show wg98 private-key')
+ self.assertEqual(output, 'CJQUtcS9emY2fLYqDlpSZiE/QJyHkPWr+WHtZLZ90FU=')
+
+ output = check_output('wg show wg97 listen-port')
+ self.assertEqual(output, '51821')
+ output = check_output('wg show wg97 fwmark')
+ self.assertEqual(output, '0x4d3')
+
+ def test_geneve(self):
+ copy_network_unit('25-geneve.netdev', '26-netdev-link-local-addressing-yes.network')
+ start_networkd()
+
+ self.wait_online(['geneve99:degraded'])
+
+ output = check_output('ip -d link show geneve99')
+ print(output)
+ self.assertRegex(output, '192.168.22.1')
+ self.assertRegex(output, '6082')
+ self.assertRegex(output, 'udpcsum')
+ self.assertRegex(output, 'udp6zerocsumrx')
+
+ def test_ipip_tunnel(self):
+ copy_network_unit('12-dummy.netdev', '25-ipip.network',
+ '25-ipip-tunnel.netdev', '25-tunnel.network',
+ '25-ipip-tunnel-local-any.netdev', '25-tunnel-local-any.network',
+ '25-ipip-tunnel-remote-any.netdev', '25-tunnel-remote-any.network',
+ '25-ipip-tunnel-any-any.netdev', '25-tunnel-any-any.network')
+ start_networkd()
+ self.wait_online(['ipiptun99:routable', 'ipiptun98:routable', 'ipiptun97:routable', 'ipiptun96:routable', 'dummy98:degraded'])
+
+ output = check_output('ip -d link show ipiptun99')
+ print(output)
+ self.assertRegex(output, 'ipip (ipip )?remote 192.169.224.239 local 192.168.223.238 dev dummy98')
+ output = check_output('ip -d link show ipiptun98')
+ print(output)
+ self.assertRegex(output, 'ipip (ipip )?remote 192.169.224.239 local any dev dummy98')
+ output = check_output('ip -d link show ipiptun97')
+ print(output)
+ self.assertRegex(output, 'ipip (ipip )?remote any local 192.168.223.238 dev dummy98')
+ output = check_output('ip -d link show ipiptun96')
+ print(output)
+ self.assertRegex(output, 'ipip (ipip )?remote any local any dev dummy98')
+
+ def test_gre_tunnel(self):
+ copy_network_unit('12-dummy.netdev', '25-gretun.network',
+ '25-gre-tunnel.netdev', '25-tunnel.network',
+ '25-gre-tunnel-local-any.netdev', '25-tunnel-local-any.network',
+ '25-gre-tunnel-remote-any.netdev', '25-tunnel-remote-any.network',
+ '25-gre-tunnel-any-any.netdev', '25-tunnel-any-any.network')
+ start_networkd()
+ self.wait_online(['gretun99:routable', 'gretun98:routable', 'gretun97:routable', 'gretun96:routable', 'dummy98:degraded'])
+
+ output = check_output('ip -d link show gretun99')
+ print(output)
+ self.assertRegex(output, 'gre remote 10.65.223.239 local 10.65.223.238 dev dummy98')
+ self.assertRegex(output, 'ikey 1.2.3.103')
+ self.assertRegex(output, 'okey 1.2.4.103')
+ self.assertRegex(output, 'iseq')
+ self.assertRegex(output, 'oseq')
+ output = check_output('ip -d link show gretun98')
+ print(output)
+ self.assertRegex(output, 'gre remote 10.65.223.239 local any dev dummy98')
+ self.assertRegex(output, 'ikey 0.0.0.104')
+ self.assertRegex(output, 'okey 0.0.0.104')
+ self.assertNotRegex(output, 'iseq')
+ self.assertNotRegex(output, 'oseq')
+ output = check_output('ip -d link show gretun97')
+ print(output)
+ self.assertRegex(output, 'gre remote any local 10.65.223.238 dev dummy98')
+ self.assertRegex(output, 'ikey 0.0.0.105')
+ self.assertRegex(output, 'okey 0.0.0.105')
+ self.assertNotRegex(output, 'iseq')
+ self.assertNotRegex(output, 'oseq')
+ output = check_output('ip -d link show gretun96')
+ print(output)
+ self.assertRegex(output, 'gre remote any local any dev dummy98')
+ self.assertRegex(output, 'ikey 0.0.0.106')
+ self.assertRegex(output, 'okey 0.0.0.106')
+ self.assertNotRegex(output, 'iseq')
+ self.assertNotRegex(output, 'oseq')
+
+ def test_ip6gre_tunnel(self):
+ copy_network_unit('12-dummy.netdev', '25-ip6gretun.network',
+ '25-ip6gre-tunnel.netdev', '25-tunnel.network',
+ '25-ip6gre-tunnel-local-any.netdev', '25-tunnel-local-any.network',
+ '25-ip6gre-tunnel-remote-any.netdev', '25-tunnel-remote-any.network',
+ '25-ip6gre-tunnel-any-any.netdev', '25-tunnel-any-any.network')
+ start_networkd()
+
+ # Old kernels seem not to support IPv6LL address on ip6gre tunnel, So please do not use wait_online() here.
+
+ self.wait_links('dummy98', 'ip6gretun99', 'ip6gretun98', 'ip6gretun97', 'ip6gretun96')
+
+ output = check_output('ip -d link show ip6gretun99')
+ print(output)
+ self.assertRegex(output, 'ip6gre remote 2001:473:fece:cafe::5179 local 2a00:ffde:4567:edde::4987 dev dummy98')
+ output = check_output('ip -d link show ip6gretun98')
+ print(output)
+ self.assertRegex(output, 'ip6gre remote 2001:473:fece:cafe::5179 local any dev dummy98')
+ output = check_output('ip -d link show ip6gretun97')
+ print(output)
+ self.assertRegex(output, 'ip6gre remote any local 2a00:ffde:4567:edde::4987 dev dummy98')
+ output = check_output('ip -d link show ip6gretun96')
+ print(output)
+ self.assertRegex(output, 'ip6gre remote any local any dev dummy98')
+
+ def test_gretap_tunnel(self):
+ copy_network_unit('12-dummy.netdev', '25-gretap.network',
+ '25-gretap-tunnel.netdev', '25-tunnel.network',
+ '25-gretap-tunnel-local-any.netdev', '25-tunnel-local-any.network')
+ start_networkd()
+ self.wait_online(['gretap99:routable', 'gretap98:routable', 'dummy98:degraded'])
+
+ output = check_output('ip -d link show gretap99')
+ print(output)
+ self.assertRegex(output, 'gretap remote 10.65.223.239 local 10.65.223.238 dev dummy98')
+ self.assertRegex(output, 'ikey 0.0.0.106')
+ self.assertRegex(output, 'okey 0.0.0.106')
+ self.assertRegex(output, 'iseq')
+ self.assertRegex(output, 'oseq')
+ output = check_output('ip -d link show gretap98')
+ print(output)
+ self.assertRegex(output, 'gretap remote 10.65.223.239 local any dev dummy98')
+ self.assertRegex(output, 'ikey 0.0.0.107')
+ self.assertRegex(output, 'okey 0.0.0.107')
+ self.assertRegex(output, 'iseq')
+ self.assertRegex(output, 'oseq')
+
+ def test_ip6gretap_tunnel(self):
+ copy_network_unit('12-dummy.netdev', '25-ip6gretap.network',
+ '25-ip6gretap-tunnel.netdev', '25-tunnel.network',
+ '25-ip6gretap-tunnel-local-any.netdev', '25-tunnel-local-any.network')
+ start_networkd()
+ self.wait_online(['ip6gretap99:routable', 'ip6gretap98:routable', 'dummy98:degraded'])
+
+ output = check_output('ip -d link show ip6gretap99')
+ print(output)
+ self.assertRegex(output, 'ip6gretap remote 2001:473:fece:cafe::5179 local 2a00:ffde:4567:edde::4987 dev dummy98')
+ output = check_output('ip -d link show ip6gretap98')
+ print(output)
+ self.assertRegex(output, 'ip6gretap remote 2001:473:fece:cafe::5179 local any dev dummy98')
+
+ def test_vti_tunnel(self):
+ copy_network_unit('12-dummy.netdev', '25-vti.network',
+ '25-vti-tunnel.netdev', '25-tunnel.network',
+ '25-vti-tunnel-local-any.netdev', '25-tunnel-local-any.network',
+ '25-vti-tunnel-remote-any.netdev', '25-tunnel-remote-any.network',
+ '25-vti-tunnel-any-any.netdev', '25-tunnel-any-any.network')
+ start_networkd()
+ self.wait_online(['vtitun99:routable', 'vtitun98:routable', 'vtitun97:routable', 'vtitun96:routable', 'dummy98:degraded'])
+
+ output = check_output('ip -d link show vtitun99')
+ print(output)
+ self.assertRegex(output, 'vti remote 10.65.223.239 local 10.65.223.238 dev dummy98')
+ output = check_output('ip -d link show vtitun98')
+ print(output)
+ self.assertRegex(output, 'vti remote 10.65.223.239 local any dev dummy98')
+ output = check_output('ip -d link show vtitun97')
+ print(output)
+ self.assertRegex(output, 'vti remote any local 10.65.223.238 dev dummy98')
+ output = check_output('ip -d link show vtitun96')
+ print(output)
+ self.assertRegex(output, 'vti remote any local any dev dummy98')
+
+ def test_vti6_tunnel(self):
+ copy_network_unit('12-dummy.netdev', '25-vti6.network',
+ '25-vti6-tunnel.netdev', '25-tunnel.network',
+ '25-vti6-tunnel-local-any.netdev', '25-tunnel-local-any.network',
+ '25-vti6-tunnel-remote-any.netdev', '25-tunnel-remote-any.network')
+ start_networkd()
+ self.wait_online(['vti6tun99:routable', 'vti6tun98:routable', 'vti6tun97:routable', 'dummy98:degraded'])
+
+ output = check_output('ip -d link show vti6tun99')
+ print(output)
+ self.assertRegex(output, 'vti6 remote 2001:473:fece:cafe::5179 local 2a00:ffde:4567:edde::4987 dev dummy98')
+ output = check_output('ip -d link show vti6tun98')
+ print(output)
+ self.assertRegex(output, 'vti6 remote 2001:473:fece:cafe::5179 local (any|::) dev dummy98')
+ output = check_output('ip -d link show vti6tun97')
+ print(output)
+ self.assertRegex(output, 'vti6 remote (any|::) local 2a00:ffde:4567:edde::4987 dev dummy98')
+
+ def test_ip6tnl_tunnel(self):
+ copy_network_unit('12-dummy.netdev', '25-ip6tnl.network',
+ '25-ip6tnl-tunnel.netdev', '25-tunnel.network',
+ '25-ip6tnl-tunnel-local-any.netdev', '25-tunnel-local-any.network',
+ '25-ip6tnl-tunnel-remote-any.netdev', '25-tunnel-remote-any.network',
+ '25-veth.netdev', '25-ip6tnl-slaac.network', '25-ipv6-prefix.network',
+ '25-ip6tnl-tunnel-local-slaac.netdev', '25-ip6tnl-tunnel-local-slaac.network',
+ '25-ip6tnl-tunnel-external.netdev', '26-netdev-link-local-addressing-yes.network')
+ start_networkd()
+ self.wait_online(['ip6tnl99:routable', 'ip6tnl98:routable', 'ip6tnl97:routable',
+ 'ip6tnl-slaac:degraded', 'ip6tnl-external:degraded',
+ 'dummy98:degraded', 'veth99:routable', 'veth-peer:degraded'])
+
+ output = check_output('ip -d link show ip6tnl99')
+ print(output)
+ self.assertIn('ip6tnl ip6ip6 remote 2001:473:fece:cafe::5179 local 2a00:ffde:4567:edde::4987 dev dummy98', output)
+ output = check_output('ip -d link show ip6tnl98')
+ print(output)
+ self.assertRegex(output, 'ip6tnl ip6ip6 remote 2001:473:fece:cafe::5179 local (any|::) dev dummy98')
+ output = check_output('ip -d link show ip6tnl97')
+ print(output)
+ self.assertRegex(output, 'ip6tnl ip6ip6 remote (any|::) local 2a00:ffde:4567:edde::4987 dev dummy98')
+ output = check_output('ip -d link show ip6tnl-external')
+ print(output)
+ self.assertIn('ip6tnl-external@NONE:', output)
+ self.assertIn('ip6tnl external ', output)
+ output = check_output('ip -d link show ip6tnl-slaac')
+ print(output)
+ self.assertIn('ip6tnl ip6ip6 remote 2001:473:fece:cafe::5179 local 2002:da8:1:0:1034:56ff:fe78:9abc dev veth99', output)
+
+ output = check_output('ip -6 address show veth99')
+ print(output)
+ self.assertIn('inet6 2002:da8:1:0:1034:56ff:fe78:9abc/64 scope global dynamic', output)
+
+ output = check_output('ip -4 route show default')
+ print(output)
+ self.assertIn('default dev ip6tnl-slaac proto static', output)
+
+ def test_sit_tunnel(self):
+ copy_network_unit('12-dummy.netdev', '25-sit.network',
+ '25-sit-tunnel.netdev', '25-tunnel.network',
+ '25-sit-tunnel-local-any.netdev', '25-tunnel-local-any.network',
+ '25-sit-tunnel-remote-any.netdev', '25-tunnel-remote-any.network',
+ '25-sit-tunnel-any-any.netdev', '25-tunnel-any-any.network')
+ start_networkd()
+ self.wait_online(['sittun99:routable', 'sittun98:routable', 'sittun97:routable', 'sittun96:routable', 'dummy98:degraded'])
+
+ output = check_output('ip -d link show sittun99')
+ print(output)
+ self.assertRegex(output, "sit (ip6ip )?remote 10.65.223.239 local 10.65.223.238 dev dummy98")
+ output = check_output('ip -d link show sittun98')
+ print(output)
+ self.assertRegex(output, "sit (ip6ip )?remote 10.65.223.239 local any dev dummy98")
+ output = check_output('ip -d link show sittun97')
+ print(output)
+ self.assertRegex(output, "sit (ip6ip )?remote any local 10.65.223.238 dev dummy98")
+ output = check_output('ip -d link show sittun96')
+ print(output)
+ self.assertRegex(output, "sit (ip6ip )?remote any local any dev dummy98")
+
+ def test_isatap_tunnel(self):
+ copy_network_unit('12-dummy.netdev', '25-isatap.network',
+ '25-isatap-tunnel.netdev', '25-tunnel.network')
+ start_networkd()
+ self.wait_online(['isataptun99:routable', 'dummy98:degraded'])
+
+ output = check_output('ip -d link show isataptun99')
+ print(output)
+ self.assertRegex(output, "isatap ")
+
+ def test_6rd_tunnel(self):
+ copy_network_unit('12-dummy.netdev', '25-6rd.network',
+ '25-6rd-tunnel.netdev', '25-tunnel.network')
+ start_networkd()
+ self.wait_online(['sittun99:routable', 'dummy98:degraded'])
+
+ output = check_output('ip -d link show sittun99')
+ print(output)
+ self.assertRegex(output, '6rd-prefix 2602::/24')
+
+ @expectedFailureIfERSPANv0IsNotSupported()
+ def test_erspan_tunnel_v0(self):
+ copy_network_unit('12-dummy.netdev', '25-erspan.network',
+ '25-erspan0-tunnel.netdev', '25-tunnel.network',
+ '25-erspan0-tunnel-local-any.netdev', '25-tunnel-local-any.network')
+ start_networkd()
+ self.wait_online(['erspan99:routable', 'erspan98:routable', 'dummy98:degraded'])
+
+ output = check_output('ip -d link show erspan99')
+ print(output)
+ self.assertIn('erspan remote 172.16.1.100 local 172.16.1.200', output)
+ self.assertIn('erspan_ver 0', output)
+ self.assertNotIn('erspan_index 123', output)
+ self.assertNotIn('erspan_dir ingress', output)
+ self.assertNotIn('erspan_hwid 1f', output)
+ self.assertIn('ikey 0.0.0.101', output)
+ self.assertIn('iseq', output)
+ output = check_output('ip -d link show erspan98')
+ print(output)
+ self.assertIn('erspan remote 172.16.1.100 local any', output)
+ self.assertIn('erspan_ver 0', output)
+ self.assertNotIn('erspan_index 124', output)
+ self.assertNotIn('erspan_dir egress', output)
+ self.assertNotIn('erspan_hwid 2f', output)
+ self.assertIn('ikey 0.0.0.102', output)
+ self.assertIn('iseq', output)
+
+ def test_erspan_tunnel_v1(self):
+ copy_network_unit('12-dummy.netdev', '25-erspan.network',
+ '25-erspan1-tunnel.netdev', '25-tunnel.network',
+ '25-erspan1-tunnel-local-any.netdev', '25-tunnel-local-any.network')
+ start_networkd()
+ self.wait_online(['erspan99:routable', 'erspan98:routable', 'dummy98:degraded'])
+
+ output = check_output('ip -d link show erspan99')
+ print(output)
+ self.assertIn('erspan remote 172.16.1.100 local 172.16.1.200', output)
+ self.assertIn('erspan_ver 1', output)
+ self.assertIn('erspan_index 123', output)
+ self.assertNotIn('erspan_dir ingress', output)
+ self.assertNotIn('erspan_hwid 1f', output)
+ self.assertIn('ikey 0.0.0.101', output)
+ self.assertIn('okey 0.0.0.101', output)
+ self.assertIn('iseq', output)
+ self.assertIn('oseq', output)
+ output = check_output('ip -d link show erspan98')
+ print(output)
+ self.assertIn('erspan remote 172.16.1.100 local any', output)
+ self.assertIn('erspan_ver 1', output)
+ self.assertIn('erspan_index 124', output)
+ self.assertNotIn('erspan_dir egress', output)
+ self.assertNotIn('erspan_hwid 2f', output)
+ self.assertIn('ikey 0.0.0.102', output)
+ self.assertIn('okey 0.0.0.102', output)
+ self.assertIn('iseq', output)
+ self.assertIn('oseq', output)
+
+ @expectedFailureIfERSPANv2IsNotSupported()
+ def test_erspan_tunnel_v2(self):
+ copy_network_unit('12-dummy.netdev', '25-erspan.network',
+ '25-erspan2-tunnel.netdev', '25-tunnel.network',
+ '25-erspan2-tunnel-local-any.netdev', '25-tunnel-local-any.network')
+ start_networkd()
+ self.wait_online(['erspan99:routable', 'erspan98:routable', 'dummy98:degraded'])
+
+ output = check_output('ip -d link show erspan99')
+ print(output)
+ self.assertIn('erspan remote 172.16.1.100 local 172.16.1.200', output)
+ self.assertIn('erspan_ver 2', output)
+ self.assertNotIn('erspan_index 123', output)
+ self.assertIn('erspan_dir ingress', output)
+ self.assertIn('erspan_hwid 0x1f', output)
+ self.assertIn('ikey 0.0.0.101', output)
+ self.assertIn('okey 0.0.0.101', output)
+ self.assertIn('iseq', output)
+ self.assertIn('oseq', output)
+ output = check_output('ip -d link show erspan98')
+ print(output)
+ self.assertIn('erspan remote 172.16.1.100 local any', output)
+ self.assertIn('erspan_ver 2', output)
+ self.assertNotIn('erspan_index 124', output)
+ self.assertIn('erspan_dir egress', output)
+ self.assertIn('erspan_hwid 0x2f', output)
+ self.assertIn('ikey 0.0.0.102', output)
+ self.assertIn('okey 0.0.0.102', output)
+ self.assertIn('iseq', output)
+ self.assertIn('oseq', output)
+
+ def test_tunnel_independent(self):
+ copy_network_unit('25-ipip-tunnel-independent.netdev', '26-netdev-link-local-addressing-yes.network')
+ start_networkd()
+
+ self.wait_online(['ipiptun99:carrier'])
+
+ def test_tunnel_independent_loopback(self):
+ copy_network_unit('25-ipip-tunnel-independent-loopback.netdev', '26-netdev-link-local-addressing-yes.network')
+ start_networkd()
+
+ self.wait_online(['ipiptun99:carrier'])
+
+ @expectedFailureIfModuleIsNotAvailable('xfrm_interface')
+ def test_xfrm(self):
+ copy_network_unit('12-dummy.netdev', '25-xfrm.network',
+ '25-xfrm.netdev', '25-xfrm-independent.netdev',
+ '26-netdev-link-local-addressing-yes.network')
+ start_networkd()
+
+ self.wait_online(['dummy98:degraded', 'xfrm98:degraded', 'xfrm99:degraded'])
+
+ output = check_output('ip -d link show dev xfrm98')
+ print(output)
+ self.assertIn('xfrm98@dummy98:', output)
+ self.assertIn('xfrm if_id 0x98 ', output)
+
+ output = check_output('ip -d link show dev xfrm99')
+ print(output)
+ self.assertIn('xfrm99@lo:', output)
+ self.assertIn('xfrm if_id 0x99 ', output)
+
+ @expectedFailureIfModuleIsNotAvailable('fou')
+ def test_fou(self):
+ # The following redundant check is necessary for CentOS CI.
+ # Maybe, error handling in lookup_id() in sd-netlink/generic-netlink.c needs to be updated.
+ self.assertTrue(is_module_available('fou'))
+
+ copy_network_unit('25-fou-ipproto-ipip.netdev', '25-fou-ipproto-gre.netdev',
+ '25-fou-ipip.netdev', '25-fou-sit.netdev',
+ '25-fou-gre.netdev', '25-fou-gretap.netdev')
+ start_networkd()
+
+ self.wait_online(['ipiptun96:off', 'sittun96:off', 'gretun96:off', 'gretap96:off'], setup_state='unmanaged')
+
+ output = check_output('ip fou show')
+ print(output)
+ self.assertRegex(output, 'port 55555 ipproto 4')
+ self.assertRegex(output, 'port 55556 ipproto 47')
+
+ output = check_output('ip -d link show ipiptun96')
+ print(output)
+ self.assertRegex(output, 'encap fou encap-sport auto encap-dport 55555')
+ output = check_output('ip -d link show sittun96')
+ print(output)
+ self.assertRegex(output, 'encap fou encap-sport auto encap-dport 55555')
+ output = check_output('ip -d link show gretun96')
+ print(output)
+ self.assertRegex(output, 'encap fou encap-sport 1001 encap-dport 55556')
+ output = check_output('ip -d link show gretap96')
+ print(output)
+ self.assertRegex(output, 'encap fou encap-sport auto encap-dport 55556')
+
+ def test_vxlan(self):
+ copy_network_unit('11-dummy.netdev', '25-vxlan-test1.network',
+ '25-vxlan.netdev', '25-vxlan.network',
+ '25-vxlan-ipv6.netdev', '25-vxlan-ipv6.network',
+ '25-vxlan-independent.netdev', '26-netdev-link-local-addressing-yes.network',
+ '25-veth.netdev', '25-vxlan-veth99.network', '25-ipv6-prefix.network',
+ '25-vxlan-local-slaac.netdev', '25-vxlan-local-slaac.network')
+ start_networkd()
+
+ self.wait_online(['test1:degraded', 'veth99:routable', 'veth-peer:degraded',
+ 'vxlan99:degraded', 'vxlan98:degraded', 'vxlan97:degraded', 'vxlan-slaac:degraded'])
+
+ output = check_output('ip -d -d link show vxlan99')
+ print(output)
+ self.assertIn('999', output)
+ self.assertIn('5555', output)
+ self.assertIn('l2miss', output)
+ self.assertIn('l3miss', output)
+ self.assertIn('gbp', output)
+ # Since [0] some of the options use slightly different names and some
+ # options with default values are shown only if the -d(etails) setting
+ # is repeated
+ # [0] https://git.kernel.org/pub/scm/network/iproute2/iproute2.git/commit/?id=1215e9d3862387353d8672296cb4c6c16e8cbb72
+ self.assertRegex(output, '(udpcsum|udp_csum)')
+ self.assertRegex(output, '(udp6zerocsumtx|udp_zero_csum6_tx)')
+ self.assertRegex(output, '(udp6zerocsumrx|udp_zero_csum6_rx)')
+ self.assertRegex(output, '(remcsumtx|remcsum_tx)')
+ self.assertRegex(output, '(remcsumrx|remcsum_rx)')
+
+ output = check_output('bridge fdb show dev vxlan99')
+ print(output)
+ self.assertIn('00:11:22:33:44:55 dst 10.0.0.5 self permanent', output)
+ self.assertIn('00:11:22:33:44:66 dst 10.0.0.6 self permanent', output)
+ self.assertIn('00:11:22:33:44:77 dst 10.0.0.7 via test1 self permanent', output)
+
+ output = check_output(*networkctl_cmd, '-n', '0', 'status', 'vxlan99', env=env)
+ print(output)
+ self.assertIn('VNI: 999', output)
+ self.assertIn('Destination Port: 5555', output)
+ self.assertIn('Underlying Device: test1', output)
+
+ output = check_output('bridge fdb show dev vxlan97')
+ print(output)
+ self.assertIn('00:00:00:00:00:00 dst fe80::23b:d2ff:fe95:967f via test1 self permanent', output)
+ self.assertIn('00:00:00:00:00:00 dst fe80::27c:16ff:fec0:6c74 via test1 self permanent', output)
+ self.assertIn('00:00:00:00:00:00 dst fe80::2a2:e4ff:fef9:2269 via test1 self permanent', output)
+
+ output = check_output('ip -d link show vxlan-slaac')
+ print(output)
+ self.assertIn('vxlan id 4831584 local 2002:da8:1:0:1034:56ff:fe78:9abc dev veth99', output)
+
+ output = check_output('ip -6 address show veth99')
+ print(output)
+ self.assertIn('inet6 2002:da8:1:0:1034:56ff:fe78:9abc/64 scope global dynamic', output)
+
+ @unittest.skipUnless(compare_kernel_version("6"), reason="Causes kernel panic on unpatched kernels: https://bugzilla.kernel.org/show_bug.cgi?id=208315")
+ def test_macsec(self):
+ copy_network_unit('25-macsec.netdev', '25-macsec.network', '25-macsec.key',
+ '26-macsec.network', '12-dummy.netdev')
+ start_networkd()
+
+ self.wait_online(['dummy98:degraded', 'macsec99:routable'])
+
+ output = check_output('ip -d link show macsec99')
+ print(output)
+ self.assertRegex(output, 'macsec99@dummy98')
+ self.assertRegex(output, 'macsec sci [0-9a-f]*000b')
+ self.assertRegex(output, 'encrypt on')
+
+ output = check_output('ip macsec show macsec99')
+ print(output)
+ self.assertRegex(output, 'encrypt on')
+ self.assertRegex(output, 'TXSC: [0-9a-f]*000b on SA 1')
+ self.assertRegex(output, '0: PN [0-9]*, state on, key 01000000000000000000000000000000')
+ self.assertRegex(output, '1: PN [0-9]*, state on, key 02030000000000000000000000000000')
+ self.assertRegex(output, 'RXSC: c619528fe6a00100, state on')
+ self.assertRegex(output, '0: PN [0-9]*, state on, key 02030405000000000000000000000000')
+ self.assertRegex(output, '1: PN [0-9]*, state on, key 02030405060000000000000000000000')
+ self.assertRegex(output, '2: PN [0-9]*, state off, key 02030405060700000000000000000000')
+ self.assertRegex(output, '3: PN [0-9]*, state off, key 02030405060708000000000000000000')
+ self.assertNotRegex(output, 'key 02030405067080900000000000000000')
+ self.assertRegex(output, 'RXSC: 8c16456c83a90002, state on')
+ self.assertRegex(output, '0: PN [0-9]*, state off, key 02030400000000000000000000000000')
+
+ def test_nlmon(self):
+ copy_network_unit('25-nlmon.netdev', '26-netdev-link-local-addressing-yes.network')
+ start_networkd()
+
+ self.wait_online(['nlmon99:carrier'])
+
+ @expectedFailureIfModuleIsNotAvailable('ifb')
+ def test_ifb(self):
+ copy_network_unit('25-ifb.netdev', '26-netdev-link-local-addressing-yes.network')
+ start_networkd()
+
+ self.wait_online(['ifb99:degraded'])
+
+class NetworkdL2TPTests(unittest.TestCase, Utilities):
+
+ def setUp(self):
+ setup_common()
+
+ def tearDown(self):
+ tear_down_common()
+
+ @expectedFailureIfModuleIsNotAvailable('l2tp_eth', 'l2tp_netlink')
+ def test_l2tp_udp(self):
+ copy_network_unit('11-dummy.netdev', '25-l2tp-dummy.network',
+ '25-l2tp-udp.netdev', '25-l2tp.network')
+ start_networkd()
+
+ self.wait_online(['test1:routable', 'l2tp-ses1:degraded', 'l2tp-ses2:degraded'])
+
+ output = check_output('ip l2tp show tunnel tunnel_id 10')
+ print(output)
+ self.assertRegex(output, "Tunnel 10, encap UDP")
+ self.assertRegex(output, "From 192.168.30.100 to 192.168.30.101")
+ self.assertRegex(output, "Peer tunnel 11")
+ self.assertRegex(output, "UDP source / dest ports: 3000/4000")
+ self.assertRegex(output, "UDP checksum: enabled")
+
+ output = check_output('ip l2tp show session tid 10 session_id 15')
+ print(output)
+ self.assertRegex(output, "Session 15 in tunnel 10")
+ self.assertRegex(output, "Peer session 16, tunnel 11")
+ self.assertRegex(output, "interface name: l2tp-ses1")
+
+ output = check_output('ip l2tp show session tid 10 session_id 17')
+ print(output)
+ self.assertRegex(output, "Session 17 in tunnel 10")
+ self.assertRegex(output, "Peer session 18, tunnel 11")
+ self.assertRegex(output, "interface name: l2tp-ses2")
+
+ @expectedFailureIfModuleIsNotAvailable('l2tp_eth', 'l2tp_ip', 'l2tp_netlink')
+ def test_l2tp_ip(self):
+ copy_network_unit('11-dummy.netdev', '25-l2tp-dummy.network',
+ '25-l2tp-ip.netdev', '25-l2tp.network')
+ start_networkd()
+
+ self.wait_online(['test1:routable', 'l2tp-ses3:degraded', 'l2tp-ses4:degraded'])
+
+ output = check_output('ip l2tp show tunnel tunnel_id 10')
+ print(output)
+ self.assertRegex(output, "Tunnel 10, encap IP")
+ self.assertRegex(output, "From 192.168.30.100 to 192.168.30.101")
+ self.assertRegex(output, "Peer tunnel 12")
+
+ output = check_output('ip l2tp show session tid 10 session_id 25')
+ print(output)
+ self.assertRegex(output, "Session 25 in tunnel 10")
+ self.assertRegex(output, "Peer session 26, tunnel 12")
+ self.assertRegex(output, "interface name: l2tp-ses3")
+
+ output = check_output('ip l2tp show session tid 10 session_id 27')
+ print(output)
+ self.assertRegex(output, "Session 27 in tunnel 10")
+ self.assertRegex(output, "Peer session 28, tunnel 12")
+ self.assertRegex(output, "interface name: l2tp-ses4")
+
+class NetworkdNetworkTests(unittest.TestCase, Utilities):
+
+ def setUp(self):
+ setup_common()
+
+ def tearDown(self):
+ tear_down_common()
+
+ def test_address_static(self):
+ # test for #22515. The address will be removed and replaced with /64 prefix.
+ check_output('ip link add dummy98 type dummy')
+ check_output('ip link set dev dummy98 up')
+ check_output('ip -6 address add 2001:db8:0:f101::15/128 dev dummy98')
+ self.wait_address('dummy98', '2001:db8:0:f101::15/128', ipv='-6')
+ check_output('ip -4 address add 10.3.2.3/16 brd 10.3.255.250 scope global label dummy98:hoge dev dummy98')
+ self.wait_address('dummy98', '10.3.2.3/16 brd 10.3.255.250', ipv='-4')
+
+ copy_network_unit('25-address-static.network', '12-dummy.netdev')
+ start_networkd()
+
+ self.wait_online(['dummy98:routable'])
+
+ output = check_output('ip -4 address show dev dummy98')
+ print(output)
+ self.assertIn('inet 10.1.2.3/16 brd 10.1.255.255 scope global dummy98', output)
+ self.assertIn('inet 10.1.2.4/16 brd 10.1.255.255 scope global secondary dummy98', output)
+ self.assertIn('inet 10.2.2.4/16 brd 10.2.255.255 scope global dummy98', output)
+ self.assertIn('inet 10.7.8.9/16 brd 10.7.255.255 scope link deprecated dummy98', output)
+ self.assertIn('inet 10.8.8.1/16 scope global dummy98', output)
+ self.assertIn('inet 10.8.8.2/16 brd 10.8.8.128 scope global secondary dummy98', output)
+ self.assertRegex(output, 'inet 10.9.0.1/16 (metric 128 |)brd 10.9.255.255 scope global dummy98')
+
+ # test for ENOBUFS issue #17012
+ for i in range(1, 254):
+ self.assertIn(f'inet 10.3.3.{i}/16 brd 10.3.255.255', output)
+
+ # invalid sections
+ self.assertNotIn('10.10.0.1/16', output)
+ self.assertNotIn('10.10.0.2/16', output)
+
+ output = check_output('ip -4 address show dev dummy98 label 32')
+ self.assertIn('inet 10.3.2.3/16 brd 10.3.255.255 scope global 32', output)
+
+ output = check_output('ip -4 address show dev dummy98 label 33')
+ self.assertIn('inet 10.4.2.3 peer 10.4.2.4/16 scope global 33', output)
+
+ output = check_output('ip -4 address show dev dummy98 label 34')
+ self.assertRegex(output, r'inet 192.168.[0-9]*.1/24 brd 192.168.[0-9]*.255 scope global 34')
+
+ output = check_output('ip -4 address show dev dummy98 label 35')
+ self.assertRegex(output, r'inet 172.[0-9]*.0.1/16 brd 172.[0-9]*.255.255 scope global 35')
+
+ output = check_output('ip -4 route show dev dummy98')
+ print(output)
+ self.assertIn('10.9.0.0/16 proto kernel scope link src 10.9.0.1 metric 128', output)
+
+ output = check_output('ip -6 address show dev dummy98')
+ print(output)
+ self.assertIn('inet6 2001:db8:0:f101::15/64 scope global', output)
+ self.assertIn('inet6 2001:db8:0:f101::16/64 scope global', output)
+ self.assertIn('inet6 2001:db8:0:f102::15/64 scope global', output)
+ self.assertIn('inet6 2001:db8:0:f102::16/64 scope global', output)
+ self.assertIn('inet6 2001:db8:0:f103::20 peer 2001:db8:0:f103::10/128 scope global', output)
+ self.assertIn('inet6 2001:db8:1:f101::1/64 scope global deprecated', output)
+ self.assertRegex(output, r'inet6 fd[0-9a-f:]*1/64 scope global')
+
+ self.check_netlabel('dummy98', r'10\.4\.3\.0/24')
+
+ # Tests for #20891.
+ # 1. set preferred lifetime forever to drop the deprecated flag for testing #20891.
+ check_output('ip address change 10.7.8.9/16 dev dummy98 preferred_lft forever')
+ check_output('ip address change 2001:db8:1:f101::1/64 dev dummy98 preferred_lft forever')
+ output = check_output('ip -4 address show dev dummy98')
+ print(output)
+ self.assertNotIn('deprecated', output)
+ output = check_output('ip -6 address show dev dummy98')
+ print(output)
+ self.assertNotIn('deprecated', output)
+
+ # 2. reconfigure the interface.
+ networkctl_reconfigure('dummy98')
+ self.wait_online(['dummy98:routable'])
+
+ # 3. check the deprecated flag is set for the address configured with PreferredLifetime=0
+ output = check_output('ip -4 address show dev dummy98')
+ print(output)
+ self.assertIn('inet 10.7.8.9/16 brd 10.7.255.255 scope link deprecated dummy98', output)
+ output = check_output('ip -6 address show dev dummy98')
+ print(output)
+ self.assertIn('inet6 2001:db8:1:f101::1/64 scope global deprecated', output)
+
+ # test for ENOBUFS issue #17012
+ output = check_output('ip -4 address show dev dummy98')
+ for i in range(1, 254):
+ self.assertIn(f'inet 10.3.3.{i}/16 brd 10.3.255.255', output)
+
+ # TODO: check json string
+ check_output(*networkctl_cmd, '--json=short', 'status', env=env)
+
+ def test_address_ipv4acd(self):
+ check_output('ip netns add ns99')
+ check_output('ip link add veth99 type veth peer veth-peer')
+ check_output('ip link set veth-peer netns ns99')
+ check_output('ip link set veth99 up')
+ check_output('ip netns exec ns99 ip link set veth-peer up')
+ check_output('ip netns exec ns99 ip address add 192.168.100.10/24 dev veth-peer')
+
+ copy_network_unit('25-address-ipv4acd-veth99.network', copy_dropins=False)
+ start_networkd()
+ self.wait_online(['veth99:routable'])
+
+ output = check_output('ip -4 address show dev veth99')
+ print(output)
+ self.assertNotIn('192.168.100.10/24', output)
+ self.assertIn('192.168.100.11/24', output)
+
+ copy_network_unit('25-address-ipv4acd-veth99.network.d/conflict-address.conf')
+ networkctl_reload()
+ self.wait_operstate('veth99', operstate='routable', setup_state='configuring', setup_timeout=10)
+
+ output = check_output('ip -4 address show dev veth99')
+ print(output)
+ self.assertNotIn('192.168.100.10/24', output)
+ self.assertIn('192.168.100.11/24', output)
+
+ def test_address_peer_ipv4(self):
+ # test for issue #17304
+ copy_network_unit('25-address-peer-ipv4.network', '12-dummy.netdev')
+
+ for trial in range(2):
+ if trial == 0:
+ start_networkd()
+ else:
+ restart_networkd()
+
+ self.wait_online(['dummy98:routable'])
+
+ output = check_output('ip -4 address show dev dummy98')
+ self.assertIn('inet 100.64.0.1 peer 100.64.0.2/32 scope global', output)
+
+ @expectedFailureIfModuleIsNotAvailable('vrf')
+ def test_prefix_route(self):
+ copy_network_unit('25-prefix-route-with-vrf.network', '12-dummy.netdev',
+ '25-prefix-route-without-vrf.network', '11-dummy.netdev',
+ '25-vrf.netdev', '25-vrf.network')
+ for trial in range(2):
+ if trial == 0:
+ start_networkd()
+ else:
+ restart_networkd()
+
+ self.wait_online(['dummy98:routable', 'test1:routable', 'vrf99:carrier'])
+
+ output = check_output('ip route show table 42 dev dummy98')
+ print('### ip route show table 42 dev dummy98')
+ print(output)
+ self.assertRegex(output, 'local 10.20.22.1 proto kernel scope host src 10.20.22.1')
+ self.assertRegex(output, '10.20.33.0/24 proto kernel scope link src 10.20.33.1')
+ self.assertRegex(output, 'local 10.20.33.1 proto kernel scope host src 10.20.33.1')
+ self.assertRegex(output, 'broadcast 10.20.33.255 proto kernel scope link src 10.20.33.1')
+ self.assertRegex(output, 'local 10.20.44.1 proto kernel scope host src 10.20.44.1')
+ self.assertRegex(output, 'local 10.20.55.1 proto kernel scope host src 10.20.55.1')
+ self.assertRegex(output, 'broadcast 10.20.55.255 proto kernel scope link src 10.20.55.1')
+ output = check_output('ip -6 route show table 42 dev dummy98')
+ print('### ip -6 route show table 42 dev dummy98')
+ print(output)
+ if trial == 0:
+ # Kernel's bug?
+ self.assertRegex(output, 'local fdde:11:22::1 proto kernel metric 0 pref medium')
+ #self.assertRegex(output, 'fdde:11:22::1 proto kernel metric 256 pref medium')
+ self.assertRegex(output, 'local fdde:11:33::1 proto kernel metric 0 pref medium')
+ self.assertRegex(output, 'fdde:11:33::/64 proto kernel metric 256 pref medium')
+ self.assertRegex(output, 'local fdde:11:44::1 proto kernel metric 0 pref medium')
+ self.assertRegex(output, 'local fdde:11:55::1 proto kernel metric 0 pref medium')
+ self.assertRegex(output, 'fe80::/64 proto kernel metric 256 pref medium')
+ self.assertRegex(output, 'ff00::/8 (proto kernel )?metric 256 (linkdown )?pref medium')
+
+ print()
+
+ output = check_output('ip route show dev test1')
+ print('### ip route show dev test1')
+ print(output)
+ self.assertRegex(output, '10.21.33.0/24 proto kernel scope link src 10.21.33.1')
+ output = check_output('ip route show table local dev test1')
+ print('### ip route show table local dev test1')
+ print(output)
+ self.assertRegex(output, 'local 10.21.22.1 proto kernel scope host src 10.21.22.1')
+ self.assertRegex(output, 'local 10.21.33.1 proto kernel scope host src 10.21.33.1')
+ self.assertRegex(output, 'broadcast 10.21.33.255 proto kernel scope link src 10.21.33.1')
+ self.assertRegex(output, 'local 10.21.44.1 proto kernel scope host src 10.21.44.1')
+ self.assertRegex(output, 'local 10.21.55.1 proto kernel scope host src 10.21.55.1')
+ self.assertRegex(output, 'broadcast 10.21.55.255 proto kernel scope link src 10.21.55.1')
+ output = check_output('ip -6 route show dev test1')
+ print('### ip -6 route show dev test1')
+ print(output)
+ self.assertRegex(output, 'fdde:12:22::1 proto kernel metric 256 pref medium')
+ self.assertRegex(output, 'fdde:12:33::/64 proto kernel metric 256 pref medium')
+ self.assertRegex(output, 'fe80::/64 proto kernel metric 256 pref medium')
+ output = check_output('ip -6 route show table local dev test1')
+ print('### ip -6 route show table local dev test1')
+ print(output)
+ self.assertRegex(output, 'local fdde:12:22::1 proto kernel metric 0 pref medium')
+ self.assertRegex(output, 'local fdde:12:33::1 proto kernel metric 0 pref medium')
+ self.assertRegex(output, 'local fdde:12:44::1 proto kernel metric 0 pref medium')
+ self.assertRegex(output, 'local fdde:12:55::1 proto kernel metric 0 pref medium')
+ self.assertRegex(output, 'ff00::/8 (proto kernel )?metric 256 (linkdown )?pref medium')
+
+ def test_configure_without_carrier(self):
+ copy_network_unit('11-dummy.netdev')
+ start_networkd()
+ self.wait_operstate('test1', 'off', '')
+ check_output('ip link set dev test1 up carrier off')
+
+ copy_network_unit('25-test1.network.d/configure-without-carrier.conf', copy_dropins=False)
+ restart_networkd()
+ self.wait_online(['test1:no-carrier'])
+
+ carrier_map = {'on': '1', 'off': '0'}
+ routable_map = {'on': 'routable', 'off': 'no-carrier'}
+ for carrier in ['off', 'on', 'off']:
+ with self.subTest(carrier=carrier):
+ if carrier_map[carrier] != read_link_attr('test1', 'carrier'):
+ check_output(f'ip link set dev test1 carrier {carrier}')
+ self.wait_online([f'test1:{routable_map[carrier]}:{routable_map[carrier]}'])
+
+ output = check_output(*networkctl_cmd, '-n', '0', 'status', 'test1', env=env)
+ print(output)
+ self.assertRegex(output, '192.168.0.15')
+ self.assertRegex(output, '192.168.0.1')
+ self.assertRegex(output, routable_map[carrier])
+
+ def test_configure_without_carrier_yes_ignore_carrier_loss_no(self):
+ copy_network_unit('11-dummy.netdev')
+ start_networkd()
+ self.wait_operstate('test1', 'off', '')
+ check_output('ip link set dev test1 up carrier off')
+
+ copy_network_unit('25-test1.network')
+ restart_networkd()
+ self.wait_online(['test1:no-carrier'])
+
+ carrier_map = {'on': '1', 'off': '0'}
+ routable_map = {'on': 'routable', 'off': 'no-carrier'}
+ for (carrier, have_config) in [('off', True), ('on', True), ('off', False)]:
+ with self.subTest(carrier=carrier, have_config=have_config):
+ if carrier_map[carrier] != read_link_attr('test1', 'carrier'):
+ check_output(f'ip link set dev test1 carrier {carrier}')
+ self.wait_online([f'test1:{routable_map[carrier]}:{routable_map[carrier]}'])
+
+ output = check_output(*networkctl_cmd, '-n', '0', 'status', 'test1', env=env)
+ print(output)
+ if have_config:
+ self.assertRegex(output, '192.168.0.15')
+ self.assertRegex(output, '192.168.0.1')
+ else:
+ self.assertNotRegex(output, '192.168.0.15')
+ self.assertNotRegex(output, '192.168.0.1')
+ self.assertRegex(output, routable_map[carrier])
+
+ def test_routing_policy_rule(self):
+ copy_network_unit('25-routing-policy-rule-test1.network', '11-dummy.netdev')
+ start_networkd()
+ self.wait_online(['test1:degraded'])
+
+ output = check_output('ip rule list iif test1 priority 111')
+ print(output)
+ self.assertRegex(output, '111:')
+ self.assertRegex(output, 'from 192.168.100.18')
+ self.assertRegex(output, r'tos (0x08|throughput)\s')
+ self.assertRegex(output, 'iif test1')
+ self.assertRegex(output, 'oif test1')
+ self.assertRegex(output, 'lookup 7')
+
+ output = check_output('ip rule list iif test1 priority 101')
+ print(output)
+ self.assertRegex(output, '101:')
+ self.assertRegex(output, 'from all')
+ self.assertRegex(output, 'iif test1')
+ self.assertRegex(output, 'lookup 9')
+
+ output = check_output('ip -6 rule list iif test1 priority 100')
+ print(output)
+ self.assertRegex(output, '100:')
+ self.assertRegex(output, 'from all')
+ self.assertRegex(output, 'iif test1')
+ self.assertRegex(output, 'lookup 8')
+
+ output = check_output('ip rule list iif test1 priority 102')
+ print(output)
+ self.assertRegex(output, '102:')
+ self.assertRegex(output, 'from 0.0.0.0/8')
+ self.assertRegex(output, 'iif test1')
+ self.assertRegex(output, 'lookup 10')
+
+ # TODO: check json string
+ check_output(*networkctl_cmd, '--json=short', 'status', env=env)
+
+ def test_routing_policy_rule_issue_11280(self):
+ copy_network_unit('25-routing-policy-rule-test1.network', '11-dummy.netdev',
+ '25-routing-policy-rule-dummy98.network', '12-dummy.netdev')
+
+ for trial in range(3):
+ restart_networkd(show_logs=(trial > 0))
+ self.wait_online(['test1:degraded', 'dummy98:degraded'])
+
+ output = check_output('ip rule list table 7')
+ print(output)
+ self.assertRegex(output, '111: from 192.168.100.18 tos (0x08|throughput) iif test1 oif test1 lookup 7')
+
+ output = check_output('ip rule list table 8')
+ print(output)
+ self.assertRegex(output, '112: from 192.168.101.18 tos (0x08|throughput) iif dummy98 oif dummy98 lookup 8')
+
+ def test_routing_policy_rule_reconfigure(self):
+ copy_network_unit('25-routing-policy-rule-reconfigure2.network', '11-dummy.netdev')
+ start_networkd()
+ self.wait_online(['test1:degraded'])
+
+ output = check_output('ip rule list table 1011')
+ print(output)
+ self.assertIn('10111: from all fwmark 0x3f3 lookup 1011', output)
+ self.assertIn('10112: from all oif test1 lookup 1011', output)
+ self.assertIn('10113: from all iif test1 lookup 1011', output)
+ self.assertIn('10114: from 192.168.8.254 lookup 1011', output)
+
+ output = check_output('ip -6 rule list table 1011')
+ print(output)
+ self.assertIn('10112: from all oif test1 lookup 1011', output)
+
+ copy_network_unit('25-routing-policy-rule-reconfigure1.network', '11-dummy.netdev')
+ networkctl_reload()
+ self.wait_online(['test1:degraded'])
+
+ output = check_output('ip rule list table 1011')
+ print(output)
+ self.assertIn('10111: from all fwmark 0x3f3 lookup 1011', output)
+ self.assertIn('10112: from all oif test1 lookup 1011', output)
+ self.assertIn('10113: from all iif test1 lookup 1011', output)
+ self.assertIn('10114: from 192.168.8.254 lookup 1011', output)
+
+ output = check_output('ip -6 rule list table 1011')
+ print(output)
+ self.assertNotIn('10112: from all oif test1 lookup 1011', output)
+ self.assertIn('10113: from all iif test1 lookup 1011', output)
+
+ call('ip rule delete priority 10111')
+ call('ip rule delete priority 10112')
+ call('ip rule delete priority 10113')
+ call('ip rule delete priority 10114')
+ call('ip -6 rule delete priority 10113')
+
+ output = check_output('ip rule list table 1011')
+ print(output)
+ self.assertEqual(output, '')
+
+ output = check_output('ip -6 rule list table 1011')
+ print(output)
+ self.assertEqual(output, '')
+
+ networkctl_reconfigure('test1')
+ self.wait_online(['test1:degraded'])
+
+ output = check_output('ip rule list table 1011')
+ print(output)
+ self.assertIn('10111: from all fwmark 0x3f3 lookup 1011', output)
+ self.assertIn('10112: from all oif test1 lookup 1011', output)
+ self.assertIn('10113: from all iif test1 lookup 1011', output)
+ self.assertIn('10114: from 192.168.8.254 lookup 1011', output)
+
+ output = check_output('ip -6 rule list table 1011')
+ print(output)
+ self.assertIn('10113: from all iif test1 lookup 1011', output)
+
+ @expectedFailureIfRoutingPolicyPortRangeIsNotAvailable()
+ def test_routing_policy_rule_port_range(self):
+ copy_network_unit('25-fibrule-port-range.network', '11-dummy.netdev')
+ start_networkd()
+ self.wait_online(['test1:degraded'])
+
+ output = check_output('ip rule')
+ print(output)
+ self.assertRegex(output, '111')
+ self.assertRegex(output, 'from 192.168.100.18')
+ self.assertRegex(output, '1123-1150')
+ self.assertRegex(output, '3224-3290')
+ self.assertRegex(output, 'tcp')
+ self.assertRegex(output, 'lookup 7')
+
+ @expectedFailureIfRoutingPolicyIPProtoIsNotAvailable()
+ def test_routing_policy_rule_invert(self):
+ copy_network_unit('25-fibrule-invert.network', '11-dummy.netdev')
+ start_networkd()
+ self.wait_online(['test1:degraded'])
+
+ output = check_output('ip rule')
+ print(output)
+ self.assertRegex(output, '111')
+ self.assertRegex(output, 'not.*?from.*?192.168.100.18')
+ self.assertRegex(output, 'tcp')
+ self.assertRegex(output, 'lookup 7')
+
+ @expectedFailureIfRoutingPolicyUIDRangeIsNotAvailable()
+ def test_routing_policy_rule_uidrange(self):
+ copy_network_unit('25-fibrule-uidrange.network', '11-dummy.netdev')
+ start_networkd()
+ self.wait_online(['test1:degraded'])
+
+ output = check_output('ip rule')
+ print(output)
+ self.assertRegex(output, '111')
+ self.assertRegex(output, 'from 192.168.100.18')
+ self.assertRegex(output, 'lookup 7')
+ self.assertRegex(output, 'uidrange 100-200')
+
+ def _test_route_static(self, manage_foreign_routes):
+ if not manage_foreign_routes:
+ copy_networkd_conf_dropin('networkd-manage-foreign-routes-no.conf')
+
+ copy_network_unit('25-route-static.network', '12-dummy.netdev')
+ start_networkd()
+ self.wait_online(['dummy98:routable'])
+
+ output = check_output(*networkctl_cmd, '-n', '0', 'status', 'dummy98', env=env)
+ print(output)
+
+ print('### ip -6 route show dev dummy98')
+ output = check_output('ip -6 route show dev dummy98')
+ print(output)
+ self.assertIn('2001:1234:5:8fff:ff:ff:ff:ff proto static', output)
+ self.assertIn('2001:1234:5:8f63::1 proto kernel', output)
+ self.assertIn('2001:1234:5:afff:ff:ff:ff:ff via fe80:0:222:4dff:ff:ff:ff:ff proto static', output)
+
+ print('### ip -6 route show default')
+ output = check_output('ip -6 route show default')
+ print(output)
+ self.assertIn('default', output)
+ self.assertIn('via 2001:1234:5:8fff:ff:ff:ff:ff', output)
+
+ print('### ip -4 route show dev dummy98')
+ output = check_output('ip -4 route show dev dummy98')
+ print(output)
+ self.assertIn('149.10.124.48/28 proto kernel scope link src 149.10.124.58', output)
+ self.assertIn('149.10.124.64 proto static scope link', output)
+ self.assertIn('169.254.0.0/16 proto static scope link metric 2048', output)
+ self.assertIn('192.168.1.1 proto static scope link initcwnd 20', output)
+ self.assertIn('192.168.1.2 proto static scope link initrwnd 30', output)
+ self.assertIn('192.168.1.3 proto static scope link advmss 30', output)
+ self.assertIn('multicast 149.10.123.4 proto static', output)
+
+ print('### ip -4 route show dev dummy98 default')
+ output = check_output('ip -4 route show dev dummy98 default')
+ print(output)
+ self.assertIn('default via 149.10.125.65 proto static onlink', output)
+ self.assertIn('default via 149.10.124.64 proto static', output)
+ self.assertIn('default proto static', output)
+ self.assertIn('default via 1.1.8.104 proto static', output)
+
+ print('### ip -4 route show table local dev dummy98')
+ output = check_output('ip -4 route show table local dev dummy98')
+ print(output)
+ self.assertIn('local 149.10.123.1 proto static scope host', output)
+ self.assertIn('anycast 149.10.123.2 proto static scope link', output)
+ self.assertIn('broadcast 149.10.123.3 proto static scope link', output)
+
+ print('### ip -4 route show type blackhole')
+ output = check_output('ip -4 route show type blackhole')
+ print(output)
+ self.assertIn('blackhole 202.54.1.2 proto static', output)
+
+ print('### ip -4 route show type unreachable')
+ output = check_output('ip -4 route show type unreachable')
+ print(output)
+ self.assertIn('unreachable 202.54.1.3 proto static', output)
+
+ print('### ip -4 route show type prohibit')
+ output = check_output('ip -4 route show type prohibit')
+ print(output)
+ self.assertIn('prohibit 202.54.1.4 proto static', output)
+
+ print('### ip -6 route show type blackhole')
+ output = check_output('ip -6 route show type blackhole')
+ print(output)
+ self.assertIn('blackhole 2001:1234:5678::2 dev lo proto static', output)
+
+ print('### ip -6 route show type unreachable')
+ output = check_output('ip -6 route show type unreachable')
+ print(output)
+ self.assertIn('unreachable 2001:1234:5678::3 dev lo proto static', output)
+
+ print('### ip -6 route show type prohibit')
+ output = check_output('ip -6 route show type prohibit')
+ print(output)
+ self.assertIn('prohibit 2001:1234:5678::4 dev lo proto static', output)
+
+ print('### ip route show 192.168.10.1')
+ output = check_output('ip route show 192.168.10.1')
+ print(output)
+ self.assertIn('192.168.10.1 proto static', output)
+ self.assertIn('nexthop via 149.10.124.59 dev dummy98 weight 10', output)
+ self.assertIn('nexthop via 149.10.124.60 dev dummy98 weight 5', output)
+
+ print('### ip route show 192.168.10.2')
+ output = check_output('ip route show 192.168.10.2')
+ print(output)
+ # old ip command does not show IPv6 gateways...
+ self.assertIn('192.168.10.2 proto static', output)
+ self.assertIn('nexthop', output)
+ self.assertIn('dev dummy98 weight 10', output)
+ self.assertIn('dev dummy98 weight 5', output)
+
+ print('### ip -6 route show 2001:1234:5:7fff:ff:ff:ff:ff')
+ output = check_output('ip -6 route show 2001:1234:5:7fff:ff:ff:ff:ff')
+ print(output)
+ # old ip command does not show 'nexthop' keyword and weight...
+ self.assertIn('2001:1234:5:7fff:ff:ff:ff:ff', output)
+ self.assertIn('via 2001:1234:5:8fff:ff:ff:ff:ff dev dummy98', output)
+ self.assertIn('via 2001:1234:5:9fff:ff:ff:ff:ff dev dummy98', output)
+
+ # TODO: check json string
+ check_output(*networkctl_cmd, '--json=short', 'status', env=env)
+
+ copy_network_unit('25-address-static.network')
+ networkctl_reload()
+ self.wait_online(['dummy98:routable'])
+
+ # check all routes managed by Manager are removed
+ print('### ip -4 route show type blackhole')
+ output = check_output('ip -4 route show type blackhole')
+ print(output)
+ self.assertEqual(output, '')
+
+ print('### ip -4 route show type unreachable')
+ output = check_output('ip -4 route show type unreachable')
+ print(output)
+ self.assertEqual(output, '')
+
+ print('### ip -4 route show type prohibit')
+ output = check_output('ip -4 route show type prohibit')
+ print(output)
+ self.assertEqual(output, '')
+
+ print('### ip -6 route show type blackhole')
+ output = check_output('ip -6 route show type blackhole')
+ print(output)
+ self.assertEqual(output, '')
+
+ print('### ip -6 route show type unreachable')
+ output = check_output('ip -6 route show type unreachable')
+ print(output)
+ self.assertEqual(output, '')
+
+ print('### ip -6 route show type prohibit')
+ output = check_output('ip -6 route show type prohibit')
+ print(output)
+ self.assertEqual(output, '')
+
+ remove_network_unit('25-address-static.network')
+ networkctl_reload()
+ self.wait_online(['dummy98:routable'])
+
+ # check all routes managed by Manager are reconfigured
+ print('### ip -4 route show type blackhole')
+ output = check_output('ip -4 route show type blackhole')
+ print(output)
+ self.assertIn('blackhole 202.54.1.2 proto static', output)
+
+ print('### ip -4 route show type unreachable')
+ output = check_output('ip -4 route show type unreachable')
+ print(output)
+ self.assertIn('unreachable 202.54.1.3 proto static', output)
+
+ print('### ip -4 route show type prohibit')
+ output = check_output('ip -4 route show type prohibit')
+ print(output)
+ self.assertIn('prohibit 202.54.1.4 proto static', output)
+
+ print('### ip -6 route show type blackhole')
+ output = check_output('ip -6 route show type blackhole')
+ print(output)
+ self.assertIn('blackhole 2001:1234:5678::2 dev lo proto static', output)
+
+ print('### ip -6 route show type unreachable')
+ output = check_output('ip -6 route show type unreachable')
+ print(output)
+ self.assertIn('unreachable 2001:1234:5678::3 dev lo proto static', output)
+
+ print('### ip -6 route show type prohibit')
+ output = check_output('ip -6 route show type prohibit')
+ print(output)
+ self.assertIn('prohibit 2001:1234:5678::4 dev lo proto static', output)
+
+ remove_link('dummy98')
+ time.sleep(2)
+
+ # check all routes managed by Manager are removed
+ print('### ip -4 route show type blackhole')
+ output = check_output('ip -4 route show type blackhole')
+ print(output)
+ self.assertEqual(output, '')
+
+ print('### ip -4 route show type unreachable')
+ output = check_output('ip -4 route show type unreachable')
+ print(output)
+ self.assertEqual(output, '')
+
+ print('### ip -4 route show type prohibit')
+ output = check_output('ip -4 route show type prohibit')
+ print(output)
+ self.assertEqual(output, '')
+
+ print('### ip -6 route show type blackhole')
+ output = check_output('ip -6 route show type blackhole')
+ print(output)
+ self.assertEqual(output, '')
+
+ print('### ip -6 route show type unreachable')
+ output = check_output('ip -6 route show type unreachable')
+ print(output)
+ self.assertEqual(output, '')
+
+ print('### ip -6 route show type prohibit')
+ output = check_output('ip -6 route show type prohibit')
+ print(output)
+ self.assertEqual(output, '')
+
+ self.tearDown()
+
+ def test_route_static(self):
+ first = True
+ for manage_foreign_routes in [True, False]:
+ if first:
+ first = False
+ else:
+ self.tearDown()
+
+ print(f'### test_route_static(manage_foreign_routes={manage_foreign_routes})')
+ with self.subTest(manage_foreign_routes=manage_foreign_routes):
+ self._test_route_static(manage_foreign_routes)
+
+ @expectedFailureIfRTA_VIAIsNotSupported()
+ def test_route_via_ipv6(self):
+ copy_network_unit('25-route-via-ipv6.network', '12-dummy.netdev')
+ start_networkd()
+ self.wait_online(['dummy98:routable'])
+
+ output = check_output(*networkctl_cmd, '-n', '0', 'status', 'dummy98', env=env)
+ print(output)
+
+ print('### ip -6 route show dev dummy98')
+ output = check_output('ip -6 route show dev dummy98')
+ print(output)
+ self.assertRegex(output, '2001:1234:5:8fff:ff:ff:ff:ff proto static')
+ self.assertRegex(output, '2001:1234:5:8f63::1 proto kernel')
+
+ print('### ip -4 route show dev dummy98')
+ output = check_output('ip -4 route show dev dummy98')
+ print(output)
+ self.assertRegex(output, '149.10.124.48/28 proto kernel scope link src 149.10.124.58')
+ self.assertRegex(output, '149.10.124.66 via inet6 2001:1234:5:8fff:ff:ff:ff:ff proto static')
+
+ @expectedFailureIfModuleIsNotAvailable('tcp_dctcp')
+ def test_route_congctl(self):
+ copy_network_unit('25-route-congctl.network', '12-dummy.netdev')
+ start_networkd()
+ self.wait_online(['dummy98:routable'])
+
+ print('### ip -6 route show dev dummy98 2001:1234:5:8fff:ff:ff:ff:ff')
+ output = check_output('ip -6 route show dev dummy98 2001:1234:5:8fff:ff:ff:ff:ff')
+ print(output)
+ self.assertIn('2001:1234:5:8fff:ff:ff:ff:ff proto static', output)
+ self.assertIn('congctl dctcp', output)
+
+ print('### ip -4 route show dev dummy98 149.10.124.66')
+ output = check_output('ip -4 route show dev dummy98 149.10.124.66')
+ print(output)
+ self.assertIn('149.10.124.66 proto static', output)
+ self.assertIn('congctl dctcp', output)
+
+ @expectedFailureIfModuleIsNotAvailable('vrf')
+ def test_route_vrf(self):
+ copy_network_unit('25-route-vrf.network', '12-dummy.netdev',
+ '25-vrf.netdev', '25-vrf.network')
+ start_networkd()
+ self.wait_online(['dummy98:routable', 'vrf99:carrier'])
+
+ output = check_output('ip route show vrf vrf99')
+ print(output)
+ self.assertRegex(output, 'default via 192.168.100.1')
+
+ output = check_output('ip route show')
+ print(output)
+ self.assertNotRegex(output, 'default via 192.168.100.1')
+
+ def test_gateway_reconfigure(self):
+ copy_network_unit('25-gateway-static.network', '12-dummy.netdev')
+ start_networkd()
+ self.wait_online(['dummy98:routable'])
+ print('### ip -4 route show dev dummy98 default')
+ output = check_output('ip -4 route show dev dummy98 default')
+ print(output)
+ self.assertIn('default via 149.10.124.59 proto static', output)
+ self.assertNotIn('149.10.124.60', output)
+
+ remove_network_unit('25-gateway-static.network')
+ copy_network_unit('25-gateway-next-static.network')
+ networkctl_reload()
+ self.wait_online(['dummy98:routable'])
+ print('### ip -4 route show dev dummy98 default')
+ output = check_output('ip -4 route show dev dummy98 default')
+ print(output)
+ self.assertNotIn('149.10.124.59', output)
+ self.assertIn('default via 149.10.124.60 proto static', output)
+
+ def test_ip_route_ipv6_src_route(self):
+ # a dummy device does not make the addresses go through tentative state, so we
+ # reuse a bond from an earlier test, which does make the addresses go through
+ # tentative state, and do our test on that
+ copy_network_unit('23-active-slave.network', '25-route-ipv6-src.network', '25-bond-active-backup-slave.netdev', '12-dummy.netdev')
+ start_networkd()
+ self.wait_online(['dummy98:enslaved', 'bond199:routable'])
+
+ output = check_output('ip -6 route list dev bond199')
+ print(output)
+ self.assertIn('abcd::/16 via 2001:1234:56:8f63::1:1 proto static src 2001:1234:56:8f63::2', output)
+
+ def test_route_preferred_source_with_existing_address(self):
+ # See issue #28009.
+ copy_network_unit('25-route-preferred-source.network', '12-dummy.netdev')
+ start_networkd()
+
+ for i in range(3):
+ if i != 0:
+ networkctl_reconfigure('dummy98')
+
+ self.wait_online(['dummy98:routable'])
+
+ output = check_output('ip -6 route list dev dummy98')
+ print(output)
+ self.assertIn('abcd::/16 via 2001:1234:56:8f63::1:1 proto static src 2001:1234:56:8f63::1', output)
+
+ def test_ip_link_mac_address(self):
+ copy_network_unit('25-address-link-section.network', '12-dummy.netdev')
+ start_networkd()
+ self.wait_online(['dummy98:degraded'])
+
+ output = check_output('ip link show dummy98')
+ print(output)
+ self.assertRegex(output, '00:01:02:aa:bb:cc')
+
+ def test_ip_link_unmanaged(self):
+ copy_network_unit('25-link-section-unmanaged.network', '12-dummy.netdev')
+ start_networkd()
+
+ self.wait_operstate('dummy98', 'off', setup_state='unmanaged')
+
+ def test_ipv6_address_label(self):
+ copy_network_unit('25-ipv6-address-label-section.network', '12-dummy.netdev')
+ start_networkd()
+ self.wait_online(['dummy98:degraded'])
+
+ output = check_output('ip addrlabel list')
+ print(output)
+ self.assertRegex(output, '2004:da8:1::/64')
+
+ def test_ipv6_proxy_ndp(self):
+ copy_network_unit('25-ipv6-proxy-ndp.network', '12-dummy.netdev')
+ start_networkd()
+
+ self.wait_online(['dummy98:routable'])
+
+ output = check_output('ip neighbor show proxy dev dummy98')
+ print(output)
+ for i in range(1, 5):
+ self.assertRegex(output, f'2607:5300:203:5215:{i}::1 *proxy')
+
+ def test_neighbor_section(self):
+ copy_network_unit('25-neighbor-section.network', '12-dummy.netdev')
+ start_networkd()
+ self.wait_online(['dummy98:degraded'], timeout='40s')
+
+ print('### ip neigh list dev dummy98')
+ output = check_output('ip neigh list dev dummy98')
+ print(output)
+ self.assertRegex(output, '192.168.10.1.*00:00:5e:00:02:65.*PERMANENT')
+ self.assertRegex(output, '2004:da8:1::1.*00:00:5e:00:02:66.*PERMANENT')
+
+ # TODO: check json string
+ check_output(*networkctl_cmd, '--json=short', 'status', env=env)
+
+ def test_neighbor_reconfigure(self):
+ copy_network_unit('25-neighbor-section.network', '12-dummy.netdev')
+ start_networkd()
+ self.wait_online(['dummy98:degraded'], timeout='40s')
+
+ print('### ip neigh list dev dummy98')
+ output = check_output('ip neigh list dev dummy98')
+ print(output)
+ self.assertRegex(output, '192.168.10.1.*00:00:5e:00:02:65.*PERMANENT')
+ self.assertRegex(output, '2004:da8:1::1.*00:00:5e:00:02:66.*PERMANENT')
+
+ remove_network_unit('25-neighbor-section.network')
+ copy_network_unit('25-neighbor-next.network')
+ networkctl_reload()
+ self.wait_online(['dummy98:degraded'], timeout='40s')
+ print('### ip neigh list dev dummy98')
+ output = check_output('ip neigh list dev dummy98')
+ print(output)
+ self.assertNotRegex(output, '192.168.10.1.*00:00:5e:00:02:65.*PERMANENT')
+ self.assertRegex(output, '192.168.10.1.*00:00:5e:00:02:66.*PERMANENT')
+ self.assertNotRegex(output, '2004:da8:1::1.*PERMANENT')
+
+ def test_neighbor_gre(self):
+ copy_network_unit('25-neighbor-ip.network', '25-neighbor-ipv6.network', '25-neighbor-ip-dummy.network',
+ '12-dummy.netdev', '25-gre-tunnel-remote-any.netdev', '25-ip6gre-tunnel-remote-any.netdev')
+ start_networkd()
+ self.wait_online(['dummy98:degraded', 'gretun97:routable', 'ip6gretun97:routable'], timeout='40s')
+
+ output = check_output('ip neigh list dev gretun97')
+ print(output)
+ self.assertRegex(output, '10.0.0.22 lladdr 10.65.223.239 PERMANENT')
+
+ output = check_output('ip neigh list dev ip6gretun97')
+ print(output)
+ self.assertRegex(output, '2001:db8:0:f102::17 lladdr 2a:?00:ff:?de:45:?67:ed:?de:[0:]*:49:?88 PERMANENT')
+
+ # TODO: check json string
+ check_output(*networkctl_cmd, '--json=short', 'status', env=env)
+
+ def test_link_local_addressing(self):
+ copy_network_unit('25-link-local-addressing-yes.network', '11-dummy.netdev',
+ '25-link-local-addressing-no.network', '12-dummy.netdev')
+ start_networkd()
+ self.wait_online(['test1:degraded', 'dummy98:carrier'])
+
+ output = check_output('ip address show dev test1')
+ print(output)
+ self.assertRegex(output, 'inet .* scope link')
+ self.assertRegex(output, 'inet6 .* scope link')
+
+ output = check_output('ip address show dev dummy98')
+ print(output)
+ self.assertNotRegex(output, 'inet6* .* scope link')
+
+ # Documentation/networking/ip-sysctl.txt
+ #
+ # addr_gen_mode - INTEGER
+ # Defines how link-local and autoconf addresses are generated.
+ #
+ # 0: generate address based on EUI64 (default)
+ # 1: do no generate a link-local address, use EUI64 for addresses generated
+ # from autoconf
+ # 2: generate stable privacy addresses, using the secret from
+ # stable_secret (RFC7217)
+ # 3: generate stable privacy addresses, using a random secret if unset
+
+ self.check_ipv6_sysctl_attr('test1', 'stable_secret', '0123:4567:89ab:cdef:0123:4567:89ab:cdef')
+ self.check_ipv6_sysctl_attr('test1', 'addr_gen_mode', '2')
+ self.check_ipv6_sysctl_attr('dummy98', 'addr_gen_mode', '1')
+
+ def test_link_local_addressing_ipv6ll(self):
+ copy_network_unit('26-link-local-addressing-ipv6.network', '12-dummy.netdev')
+ start_networkd()
+ self.wait_online(['dummy98:degraded'])
+
+ # An IPv6LL address exists by default.
+ output = check_output('ip address show dev dummy98')
+ print(output)
+ self.assertRegex(output, 'inet6 .* scope link')
+
+ copy_network_unit('25-link-local-addressing-no.network')
+ networkctl_reload()
+ self.wait_online(['dummy98:carrier'])
+
+ # Check if the IPv6LL address is removed.
+ output = check_output('ip address show dev dummy98')
+ print(output)
+ self.assertNotRegex(output, 'inet6 .* scope link')
+
+ remove_network_unit('25-link-local-addressing-no.network')
+ networkctl_reload()
+ self.wait_online(['dummy98:degraded'])
+
+ # Check if a new IPv6LL address is assigned.
+ output = check_output('ip address show dev dummy98')
+ print(output)
+ self.assertRegex(output, 'inet6 .* scope link')
+
+ def test_sysctl(self):
+ copy_network_unit('25-sysctl.network', '12-dummy.netdev')
+ start_networkd()
+ self.wait_online(['dummy98:degraded'])
+
+ self.check_ipv6_sysctl_attr('dummy98', 'forwarding', '1')
+ self.check_ipv6_sysctl_attr('dummy98', 'use_tempaddr', '2')
+ self.check_ipv6_sysctl_attr('dummy98', 'dad_transmits', '3')
+ self.check_ipv6_sysctl_attr('dummy98', 'hop_limit', '5')
+ self.check_ipv6_sysctl_attr('dummy98', 'proxy_ndp', '1')
+ self.check_ipv4_sysctl_attr('dummy98', 'forwarding', '1')
+ self.check_ipv4_sysctl_attr('dummy98', 'proxy_arp', '1')
+ self.check_ipv4_sysctl_attr('dummy98', 'accept_local', '1')
+
+ def test_sysctl_disable_ipv6(self):
+ copy_network_unit('25-sysctl-disable-ipv6.network', '12-dummy.netdev')
+
+ print('## Disable ipv6')
+ check_output('sysctl net.ipv6.conf.all.disable_ipv6=1')
+ check_output('sysctl net.ipv6.conf.default.disable_ipv6=1')
+
+ start_networkd()
+ self.wait_online(['dummy98:routable'])
+
+ output = check_output('ip -4 address show dummy98')
+ print(output)
+ self.assertRegex(output, 'inet 10.2.3.4/16 brd 10.2.255.255 scope global dummy98')
+ output = check_output('ip -6 address show dummy98')
+ print(output)
+ self.assertRegex(output, 'inet6 2607:5300:203:3906::/64 scope global')
+ self.assertRegex(output, 'inet6 .* scope link')
+ output = check_output('ip -4 route show dev dummy98')
+ print(output)
+ self.assertRegex(output, '10.2.0.0/16 proto kernel scope link src 10.2.3.4')
+ output = check_output('ip -6 route show default')
+ print(output)
+ self.assertRegex(output, 'default')
+ self.assertRegex(output, 'via 2607:5300:203:39ff:ff:ff:ff:ff')
+
+ remove_link('dummy98')
+
+ print('## Enable ipv6')
+ check_output('sysctl net.ipv6.conf.all.disable_ipv6=0')
+ check_output('sysctl net.ipv6.conf.default.disable_ipv6=0')
+
+ restart_networkd()
+ self.wait_online(['dummy98:routable'])
+
+ output = check_output('ip -4 address show dummy98')
+ print(output)
+ self.assertRegex(output, 'inet 10.2.3.4/16 brd 10.2.255.255 scope global dummy98')
+ output = check_output('ip -6 address show dummy98')
+ print(output)
+ self.assertRegex(output, 'inet6 2607:5300:203:3906::/64 scope global')
+ self.assertRegex(output, 'inet6 .* scope link')
+ output = check_output('ip -4 route show dev dummy98')
+ print(output)
+ self.assertRegex(output, '10.2.0.0/16 proto kernel scope link src 10.2.3.4')
+ output = check_output('ip -6 route show default')
+ print(output)
+ self.assertRegex(output, 'via 2607:5300:203:39ff:ff:ff:ff:ff')
+
+ def test_bind_carrier(self):
+ check_output('ip link add dummy98 type dummy')
+ check_output('ip link set dummy98 up')
+ time.sleep(2)
+
+ copy_network_unit('25-bind-carrier.network', '11-dummy.netdev')
+ start_networkd()
+ self.wait_online(['test1:routable'])
+
+ output = check_output('ip address show test1')
+ print(output)
+ self.assertRegex(output, 'UP,LOWER_UP')
+ self.assertRegex(output, 'inet 192.168.10.30/24 brd 192.168.10.255 scope global test1')
+ self.wait_operstate('test1', 'routable')
+
+ check_output('ip link add dummy99 type dummy')
+ check_output('ip link set dummy99 up')
+ time.sleep(2)
+ output = check_output('ip address show test1')
+ print(output)
+ self.assertRegex(output, 'UP,LOWER_UP')
+ self.assertRegex(output, 'inet 192.168.10.30/24 brd 192.168.10.255 scope global test1')
+ self.wait_operstate('test1', 'routable')
+
+ remove_link('dummy98')
+ time.sleep(2)
+ output = check_output('ip address show test1')
+ print(output)
+ self.assertRegex(output, 'UP,LOWER_UP')
+ self.assertRegex(output, 'inet 192.168.10.30/24 brd 192.168.10.255 scope global test1')
+ self.wait_operstate('test1', 'routable')
+
+ check_output('ip link set dummy99 down')
+ time.sleep(2)
+ output = check_output('ip address show test1')
+ print(output)
+ self.assertNotRegex(output, 'UP,LOWER_UP')
+ self.assertRegex(output, 'DOWN')
+ self.assertNotRegex(output, '192.168.10')
+ self.wait_operstate('test1', 'off')
+
+ check_output('ip link set dummy99 up')
+ time.sleep(2)
+ output = check_output('ip address show test1')
+ print(output)
+ self.assertRegex(output, 'UP,LOWER_UP')
+ self.assertRegex(output, 'inet 192.168.10.30/24 brd 192.168.10.255 scope global test1')
+ self.wait_operstate('test1', 'routable')
+
+ def _test_activation_policy(self, interface, test):
+ conffile = '25-activation-policy.network'
+ if test:
+ conffile = f'{conffile}.d/{test}.conf'
+ if interface == 'vlan99':
+ copy_network_unit('21-vlan.netdev', '21-vlan-test1.network')
+ copy_network_unit('11-dummy.netdev', conffile, copy_dropins=False)
+ start_networkd()
+
+ always = test.startswith('always')
+ initial_up = test != 'manual' and not test.endswith('down') # note: default is up
+ expect_up = initial_up
+ next_up = not expect_up
+
+ if test.endswith('down'):
+ self.wait_activated(interface)
+
+ for iteration in range(4):
+ with self.subTest(iteration=iteration, expect_up=expect_up):
+ operstate = 'routable' if expect_up else 'off'
+ setup_state = 'configured' if expect_up else ('configuring' if iteration == 0 else None)
+ self.wait_operstate(interface, operstate, setup_state=setup_state, setup_timeout=20)
+
+ if expect_up:
+ self.assertIn('UP', check_output(f'ip link show {interface}'))
+ self.assertIn('192.168.10.30/24', check_output(f'ip address show {interface}'))
+ self.assertIn('default via 192.168.10.1', check_output(f'ip route show dev {interface}'))
+ else:
+ self.assertIn('DOWN', check_output(f'ip link show {interface}'))
+
+ if next_up:
+ check_output(f'ip link set dev {interface} up')
+ else:
+ check_output(f'ip link set dev {interface} down')
+ expect_up = initial_up if always else next_up
+ next_up = not next_up
+ if always:
+ time.sleep(1)
+
+ def test_activation_policy(self):
+ first = True
+ for interface in ['test1', 'vlan99']:
+ for test in ['up', 'always-up', 'manual', 'always-down', 'down', '']:
+ if first:
+ first = False
+ else:
+ self.tearDown()
+
+ print(f'### test_activation_policy(interface={interface}, test={test})')
+ with self.subTest(interface=interface, test=test):
+ self._test_activation_policy(interface, test)
+
+ def _test_activation_policy_required_for_online(self, policy, required):
+ conffile = '25-activation-policy.network'
+ units = ['11-dummy.netdev', '12-dummy.netdev', '12-dummy.network', conffile]
+ if policy:
+ units += [f'{conffile}.d/{policy}.conf']
+ if required:
+ units += [f'{conffile}.d/required-{required}.conf']
+ copy_network_unit(*units, copy_dropins=False)
+ start_networkd()
+
+ if policy.endswith('down'):
+ self.wait_activated('test1')
+
+ if policy.endswith('down') or policy == 'manual':
+ self.wait_operstate('test1', 'off', setup_state='configuring')
+ else:
+ self.wait_online(['test1'])
+
+ if policy == 'always-down':
+ # if always-down, required for online is forced to no
+ expected = False
+ elif required:
+ # otherwise if required for online is specified, it should match that
+ expected = required == 'yes'
+ elif policy:
+ # otherwise if only policy specified, required for online defaults to
+ # true if policy is up, always-up, or bound
+ expected = policy.endswith('up') or policy == 'bound'
+ else:
+ # default is true, if neither are specified
+ expected = True
+
+ output = check_output(*networkctl_cmd, '-n', '0', 'status', 'test1', env=env)
+ print(output)
+
+ yesno = 'yes' if expected else 'no'
+ self.assertRegex(output, f'Required For Online: {yesno}')
+
+ def test_activation_policy_required_for_online(self):
+ first = True
+ for policy in ['up', 'always-up', 'manual', 'always-down', 'down', 'bound', '']:
+ for required in ['yes', 'no', '']:
+ if first:
+ first = False
+ else:
+ self.tearDown()
+
+ print(f'### test_activation_policy_required_for_online(policy={policy}, required={required})')
+ with self.subTest(policy=policy, required=required):
+ self._test_activation_policy_required_for_online(policy, required)
+
+ def test_domain(self):
+ copy_network_unit('12-dummy.netdev', '24-search-domain.network')
+ start_networkd()
+ self.wait_online(['dummy98:routable'])
+
+ output = check_output(*networkctl_cmd, '-n', '0', 'status', 'dummy98', env=env)
+ print(output)
+ self.assertRegex(output, 'Address: 192.168.42.100')
+ self.assertRegex(output, 'DNS: 192.168.42.1')
+ self.assertRegex(output, 'Search Domains: one')
+
+ def test_keep_configuration_static(self):
+ check_output('ip link add name dummy98 type dummy')
+ check_output('ip address add 10.1.2.3/16 dev dummy98')
+ check_output('ip address add 10.2.3.4/16 dev dummy98 valid_lft 600 preferred_lft 500')
+ output = check_output('ip address show dummy98')
+ print(output)
+ self.assertRegex(output, 'inet 10.1.2.3/16 scope global dummy98')
+ self.assertRegex(output, 'inet 10.2.3.4/16 scope global dynamic dummy98')
+ output = check_output('ip route show dev dummy98')
+ print(output)
+
+ copy_network_unit('24-keep-configuration-static.network')
+ start_networkd()
+ self.wait_online(['dummy98:routable'])
+
+ output = check_output('ip address show dummy98')
+ print(output)
+ self.assertRegex(output, 'inet 10.1.2.3/16 scope global dummy98')
+ self.assertNotRegex(output, 'inet 10.2.3.4/16 scope global dynamic dummy98')
+
+ @expectedFailureIfNexthopIsNotAvailable()
+ def test_nexthop(self):
+ def check_nexthop(self):
+ self.wait_online(['veth99:routable', 'veth-peer:routable', 'dummy98:routable'])
+
+ output = check_output('ip nexthop list dev veth99')
+ print(output)
+ self.assertIn('id 1 via 192.168.5.1 dev veth99', output)
+ self.assertIn('id 2 via 2001:1234:5:8f63::2 dev veth99', output)
+ self.assertIn('id 3 dev veth99', output)
+ self.assertIn('id 4 dev veth99', output)
+ self.assertRegex(output, 'id 5 via 192.168.10.1 dev veth99 .*onlink')
+ self.assertIn('id 8 via fe80:0:222:4dff:ff:ff:ff:ff dev veth99', output)
+ self.assertRegex(output, r'id [0-9]* via 192.168.5.2 dev veth99')
+
+ output = check_output('ip nexthop list dev dummy98')
+ print(output)
+ self.assertIn('id 20 via 192.168.20.1 dev dummy98', output)
+
+ # kernel manages blackhole nexthops on lo
+ output = check_output('ip nexthop list dev lo')
+ print(output)
+ self.assertIn('id 6 blackhole', output)
+ self.assertIn('id 7 blackhole', output)
+
+ # group nexthops are shown with -0 option
+ output = check_output('ip -0 nexthop list id 21')
+ print(output)
+ self.assertRegex(output, r'id 21 group (1,3/20|20/1,3)')
+
+ output = check_output('ip route show dev veth99 10.10.10.10')
+ print(output)
+ self.assertEqual('10.10.10.10 nhid 1 via 192.168.5.1 proto static', output)
+
+ output = check_output('ip route show dev veth99 10.10.10.11')
+ print(output)
+ self.assertEqual('10.10.10.11 nhid 2 via inet6 2001:1234:5:8f63::2 proto static', output)
+
+ output = check_output('ip route show dev veth99 10.10.10.12')
+ print(output)
+ self.assertEqual('10.10.10.12 nhid 5 via 192.168.10.1 proto static onlink', output)
+
+ output = check_output('ip -6 route show dev veth99 2001:1234:5:8f62::1')
+ print(output)
+ self.assertEqual('2001:1234:5:8f62::1 nhid 2 via 2001:1234:5:8f63::2 proto static metric 1024 pref medium', output)
+
+ output = check_output('ip route show 10.10.10.13')
+ print(output)
+ self.assertEqual('blackhole 10.10.10.13 nhid 6 dev lo proto static', output)
+
+ output = check_output('ip -6 route show 2001:1234:5:8f62::2')
+ print(output)
+ self.assertEqual('blackhole 2001:1234:5:8f62::2 nhid 7 dev lo proto static metric 1024 pref medium', output)
+
+ output = check_output('ip route show 10.10.10.14')
+ print(output)
+ self.assertIn('10.10.10.14 nhid 21 proto static', output)
+ self.assertIn('nexthop via 192.168.20.1 dev dummy98 weight 1', output)
+ self.assertIn('nexthop via 192.168.5.1 dev veth99 weight 3', output)
+
+ # TODO: check json string
+ check_output(*networkctl_cmd, '--json=short', 'status', env=env)
+
+ copy_network_unit('25-nexthop.network', '25-veth.netdev', '25-veth-peer.network',
+ '12-dummy.netdev', '25-nexthop-dummy.network')
+ start_networkd()
+
+ check_nexthop(self)
+
+ remove_network_unit('25-nexthop.network')
+ copy_network_unit('25-nexthop-nothing.network')
+ networkctl_reload()
+ self.wait_online(['veth99:routable', 'veth-peer:routable'])
+
+ output = check_output('ip nexthop list dev veth99')
+ print(output)
+ self.assertEqual(output, '')
+ output = check_output('ip nexthop list dev lo')
+ print(output)
+ self.assertEqual(output, '')
+
+ remove_network_unit('25-nexthop-nothing.network')
+ copy_network_unit('25-nexthop.network')
+ networkctl_reconfigure('dummy98')
+ networkctl_reload()
+
+ check_nexthop(self)
+
+ remove_link('veth99')
+ time.sleep(2)
+
+ output = check_output('ip nexthop list dev lo')
+ print(output)
+ self.assertEqual(output, '')
+
+class NetworkdTCTests(unittest.TestCase, Utilities):
+
+ def setUp(self):
+ setup_common()
+
+ def tearDown(self):
+ tear_down_common()
+
+ @expectedFailureIfModuleIsNotAvailable('sch_cake')
+ def test_qdisc_cake(self):
+ copy_network_unit('25-qdisc-cake.network', '12-dummy.netdev')
+ start_networkd()
+ self.wait_online(['dummy98:routable'])
+
+ output = check_output('tc qdisc show dev dummy98')
+ print(output)
+ self.assertIn('qdisc cake 3a: root', output)
+ self.assertIn('bandwidth 500Mbit', output)
+ self.assertIn('autorate-ingress', output)
+ self.assertIn('diffserv8', output)
+ self.assertIn('dual-dsthost', output)
+ self.assertIn(' nat', output)
+ self.assertIn(' wash', output)
+ self.assertIn(' split-gso', output)
+ self.assertIn(' raw', output)
+ self.assertIn(' atm', output)
+ self.assertIn('overhead 128', output)
+ self.assertIn('mpu 20', output)
+ self.assertIn('fwmark 0xff00', output)
+
+ @expectedFailureIfModuleIsNotAvailable('sch_codel')
+ def test_qdisc_codel(self):
+ copy_network_unit('25-qdisc-codel.network', '12-dummy.netdev')
+ start_networkd()
+ self.wait_online(['dummy98:routable'])
+
+ output = check_output('tc qdisc show dev dummy98')
+ print(output)
+ self.assertRegex(output, 'qdisc codel 33: root')
+ self.assertRegex(output, 'limit 2000p target 10(.0)?ms ce_threshold 100(.0)?ms interval 50(.0)?ms ecn')
+
+ @expectedFailureIfModuleIsNotAvailable('sch_drr')
+ def test_qdisc_drr(self):
+ copy_network_unit('25-qdisc-drr.network', '12-dummy.netdev')
+ start_networkd()
+ self.wait_online(['dummy98:routable'])
+
+ output = check_output('tc qdisc show dev dummy98')
+ print(output)
+ self.assertRegex(output, 'qdisc drr 2: root')
+ output = check_output('tc class show dev dummy98')
+ print(output)
+ self.assertRegex(output, 'class drr 2:30 root quantum 2000b')
+
+ @expectedFailureIfModuleIsNotAvailable('sch_ets')
+ def test_qdisc_ets(self):
+ copy_network_unit('25-qdisc-ets.network', '12-dummy.netdev')
+ start_networkd()
+ self.wait_online(['dummy98:routable'])
+
+ output = check_output('tc qdisc show dev dummy98')
+ print(output)
+
+ self.assertRegex(output, 'qdisc ets 3a: root')
+ self.assertRegex(output, 'bands 10 strict 3')
+ self.assertRegex(output, 'quanta 1 2 3 4 5')
+ self.assertRegex(output, 'priomap 3 4 5 6 7')
+
+ @expectedFailureIfModuleIsNotAvailable('sch_fq')
+ def test_qdisc_fq(self):
+ copy_network_unit('25-qdisc-fq.network', '12-dummy.netdev')
+ start_networkd()
+ self.wait_online(['dummy98:routable'])
+
+ output = check_output('tc qdisc show dev dummy98')
+ print(output)
+ self.assertRegex(output, 'qdisc fq 32: root')
+ self.assertRegex(output, 'limit 1000p flow_limit 200p buckets 512 orphan_mask 511')
+ self.assertRegex(output, 'quantum 1500')
+ self.assertRegex(output, 'initial_quantum 13000')
+ self.assertRegex(output, 'maxrate 1Mbit')
+
+ @expectedFailureIfModuleIsNotAvailable('sch_fq_codel')
+ def test_qdisc_fq_codel(self):
+ copy_network_unit('25-qdisc-fq_codel.network', '12-dummy.netdev')
+ start_networkd()
+ self.wait_online(['dummy98:routable'])
+
+ output = check_output('tc qdisc show dev dummy98')
+ print(output)
+ self.assertRegex(output, 'qdisc fq_codel 34: root')
+ self.assertRegex(output, 'limit 20480p flows 2048 quantum 1400 target 10(.0)?ms ce_threshold 100(.0)?ms interval 200(.0)?ms memory_limit 64Mb ecn')
+
+ @expectedFailureIfModuleIsNotAvailable('sch_fq_pie')
+ def test_qdisc_fq_pie(self):
+ copy_network_unit('25-qdisc-fq_pie.network', '12-dummy.netdev')
+ start_networkd()
+ self.wait_online(['dummy98:routable'])
+
+ output = check_output('tc qdisc show dev dummy98')
+ print(output)
+
+ self.assertRegex(output, 'qdisc fq_pie 3a: root')
+ self.assertRegex(output, 'limit 200000p')
+
+ @expectedFailureIfModuleIsNotAvailable('sch_gred')
+ def test_qdisc_gred(self):
+ copy_network_unit('25-qdisc-gred.network', '12-dummy.netdev')
+ start_networkd()
+ self.wait_online(['dummy98:routable'])
+
+ output = check_output('tc qdisc show dev dummy98')
+ print(output)
+ self.assertRegex(output, 'qdisc gred 38: root')
+ self.assertRegex(output, 'vqs 12 default 10 grio')
+
+ @expectedFailureIfModuleIsNotAvailable('sch_hhf')
+ def test_qdisc_hhf(self):
+ copy_network_unit('25-qdisc-hhf.network', '12-dummy.netdev')
+ start_networkd()
+ self.wait_online(['dummy98:routable'])
+
+ output = check_output('tc qdisc show dev dummy98')
+ print(output)
+ self.assertRegex(output, 'qdisc hhf 3a: root')
+ self.assertRegex(output, 'limit 1022p')
+
+ @expectedFailureIfModuleIsNotAvailable('sch_htb')
+ def test_qdisc_htb_fifo(self):
+ copy_network_unit('25-qdisc-htb-fifo.network', '12-dummy.netdev')
+ start_networkd()
+ self.wait_online(['dummy98:routable'])
+
+ output = check_output('tc qdisc show dev dummy98')
+ print(output)
+ self.assertRegex(output, 'qdisc htb 2: root')
+ self.assertRegex(output, r'default (0x30|30)')
+
+ self.assertRegex(output, 'qdisc pfifo 37: parent 2:37')
+ self.assertRegex(output, 'limit 100000p')
+
+ self.assertRegex(output, 'qdisc bfifo 3a: parent 2:3a')
+ self.assertRegex(output, 'limit 1000000')
+
+ self.assertRegex(output, 'qdisc pfifo_head_drop 3b: parent 2:3b')
+ self.assertRegex(output, 'limit 1023p')
+
+ self.assertRegex(output, 'qdisc pfifo_fast 3c: parent 2:3c')
+
+ output = check_output('tc -d class show dev dummy98')
+ print(output)
+ # Here (:|prio) is a workaround for a bug in iproute2 v6.2.0 caused by
+ # https://github.com/shemminger/iproute2/commit/010a8388aea11e767ba3a2506728b9ad9760df0e
+ # which is fixed in v6.3.0 by
+ # https://github.com/shemminger/iproute2/commit/4e0e56e0ef05387f7f5d8ab41fe6ec6a1897b26d
+ self.assertRegex(output, 'class htb 2:37 root leaf 37(:|prio) ')
+ self.assertRegex(output, 'class htb 2:3a root leaf 3a(:|prio) ')
+ self.assertRegex(output, 'class htb 2:3b root leaf 3b(:|prio) ')
+ self.assertRegex(output, 'class htb 2:3c root leaf 3c(:|prio) ')
+ self.assertRegex(output, 'prio 1 quantum 4000 rate 1Mbit overhead 100 ceil 500Kbit')
+ self.assertRegex(output, 'burst 123456')
+ self.assertRegex(output, 'cburst 123457')
+
+ @expectedFailureIfModuleIsNotAvailable('sch_ingress')
+ def test_qdisc_ingress(self):
+ copy_network_unit('25-qdisc-clsact.network', '12-dummy.netdev',
+ '25-qdisc-ingress.network', '11-dummy.netdev')
+ start_networkd()
+ self.wait_online(['dummy98:routable', 'test1:routable'])
+
+ output = check_output('tc qdisc show dev dummy98')
+ print(output)
+ self.assertRegex(output, 'qdisc clsact')
+
+ output = check_output('tc qdisc show dev test1')
+ print(output)
+ self.assertRegex(output, 'qdisc ingress')
+
+ @expectedFailureIfModuleIsNotAvailable('sch_netem')
+ def test_qdisc_netem(self):
+ copy_network_unit('25-qdisc-netem.network', '12-dummy.netdev',
+ '25-qdisc-netem-compat.network', '11-dummy.netdev')
+ start_networkd()
+ self.wait_online(['dummy98:routable', 'test1:routable'])
+
+ output = check_output('tc qdisc show dev dummy98')
+ print(output)
+ self.assertRegex(output, 'qdisc netem 30: root')
+ self.assertRegex(output, 'limit 100 delay 50(.0)?ms 10(.0)?ms loss 20%')
+
+ output = check_output('tc qdisc show dev test1')
+ print(output)
+ self.assertRegex(output, 'qdisc netem [0-9a-f]*: root')
+ self.assertRegex(output, 'limit 100 delay 50(.0)?ms 10(.0)?ms loss 20%')
+
+ @expectedFailureIfModuleIsNotAvailable('sch_pie')
+ def test_qdisc_pie(self):
+ copy_network_unit('25-qdisc-pie.network', '12-dummy.netdev')
+ start_networkd()
+ self.wait_online(['dummy98:routable'])
+
+ output = check_output('tc qdisc show dev dummy98')
+ print(output)
+ self.assertRegex(output, 'qdisc pie 3a: root')
+ self.assertRegex(output, 'limit 200000')
+
+ @expectedFailureIfModuleIsNotAvailable('sch_qfq')
+ def test_qdisc_qfq(self):
+ copy_network_unit('25-qdisc-qfq.network', '12-dummy.netdev')
+ start_networkd()
+ self.wait_online(['dummy98:routable'])
+
+ output = check_output('tc qdisc show dev dummy98')
+ print(output)
+ self.assertRegex(output, 'qdisc qfq 2: root')
+ output = check_output('tc class show dev dummy98')
+ print(output)
+ self.assertRegex(output, 'class qfq 2:30 root weight 2 maxpkt 16000')
+ self.assertRegex(output, 'class qfq 2:31 root weight 10 maxpkt 8000')
+
+ @expectedFailureIfModuleIsNotAvailable('sch_sfb')
+ def test_qdisc_sfb(self):
+ copy_network_unit('25-qdisc-sfb.network', '12-dummy.netdev')
+ start_networkd()
+ self.wait_online(['dummy98:routable'])
+
+ output = check_output('tc qdisc show dev dummy98')
+ print(output)
+ self.assertRegex(output, 'qdisc sfb 39: root')
+ self.assertRegex(output, 'limit 200000')
+
+ @expectedFailureIfModuleIsNotAvailable('sch_sfq')
+ def test_qdisc_sfq(self):
+ copy_network_unit('25-qdisc-sfq.network', '12-dummy.netdev')
+ start_networkd()
+ self.wait_online(['dummy98:routable'])
+
+ output = check_output('tc qdisc show dev dummy98')
+ print(output)
+ self.assertRegex(output, 'qdisc sfq 36: root')
+ self.assertRegex(output, 'perturb 5sec')
+
+ @expectedFailureIfModuleIsNotAvailable('sch_tbf')
+ def test_qdisc_tbf(self):
+ copy_network_unit('25-qdisc-tbf.network', '12-dummy.netdev')
+ start_networkd()
+ self.wait_online(['dummy98:routable'])
+
+ output = check_output('tc qdisc show dev dummy98')
+ print(output)
+ self.assertRegex(output, 'qdisc tbf 35: root')
+ self.assertRegex(output, 'rate 1Gbit burst 5000b peakrate 100Gbit minburst 987500b lat 70(.0)?ms')
+
+ @expectedFailureIfModuleIsNotAvailable('sch_teql')
+ def test_qdisc_teql(self):
+ call_quiet('rmmod sch_teql')
+
+ copy_network_unit('25-qdisc-teql.network', '12-dummy.netdev')
+ start_networkd()
+ self.wait_links('dummy98')
+ check_output('modprobe sch_teql max_equalizers=2')
+ self.wait_online(['dummy98:routable'])
+
+ output = check_output('tc qdisc show dev dummy98')
+ print(output)
+ self.assertRegex(output, 'qdisc teql1 31: root')
+
+class NetworkdStateFileTests(unittest.TestCase, Utilities):
+
+ def setUp(self):
+ setup_common()
+
+ def tearDown(self):
+ tear_down_common()
+
+ def test_state_file(self):
+ copy_network_unit('12-dummy.netdev', '25-state-file-tests.network')
+ start_networkd()
+ self.wait_online(['dummy98:routable'])
+
+ # make link state file updated
+ check_output(*resolvectl_cmd, 'revert', 'dummy98', env=env)
+
+ # TODO: check json string
+ check_output(*networkctl_cmd, '--json=short', 'status', env=env)
+
+ output = read_link_state_file('dummy98')
+ print(output)
+ self.assertIn('IPV4_ADDRESS_STATE=routable', output)
+ self.assertIn('IPV6_ADDRESS_STATE=routable', output)
+ self.assertIn('ADMIN_STATE=configured', output)
+ self.assertIn('OPER_STATE=routable', output)
+ self.assertIn('REQUIRED_FOR_ONLINE=yes', output)
+ self.assertIn('REQUIRED_OPER_STATE_FOR_ONLINE=routable', output)
+ self.assertIn('REQUIRED_FAMILY_FOR_ONLINE=both', output)
+ self.assertIn('ACTIVATION_POLICY=up', output)
+ self.assertIn('NETWORK_FILE=/run/systemd/network/25-state-file-tests.network', output)
+ self.assertIn('DNS=10.10.10.10#aaa.com 10.10.10.11:1111#bbb.com [1111:2222::3333]:1234#ccc.com', output)
+ self.assertIn('NTP=0.fedora.pool.ntp.org 1.fedora.pool.ntp.org', output)
+ self.assertIn('DOMAINS=hogehoge', output)
+ self.assertIn('ROUTE_DOMAINS=foofoo', output)
+ self.assertIn('LLMNR=no', output)
+ self.assertIn('MDNS=yes', output)
+ self.assertIn('DNSSEC=no', output)
+
+ check_output(*resolvectl_cmd, 'dns', 'dummy98', '10.10.10.12#ccc.com', '10.10.10.13', '1111:2222::3333', env=env)
+ check_output(*resolvectl_cmd, 'domain', 'dummy98', 'hogehogehoge', '~foofoofoo', env=env)
+ check_output(*resolvectl_cmd, 'llmnr', 'dummy98', 'yes', env=env)
+ check_output(*resolvectl_cmd, 'mdns', 'dummy98', 'no', env=env)
+ check_output(*resolvectl_cmd, 'dnssec', 'dummy98', 'yes', env=env)
+ check_output(*timedatectl_cmd, 'ntp-servers', 'dummy98', '2.fedora.pool.ntp.org', '3.fedora.pool.ntp.org', env=env)
+
+ # TODO: check json string
+ check_output(*networkctl_cmd, '--json=short', 'status', env=env)
+
+ output = read_link_state_file('dummy98')
+ print(output)
+ self.assertIn('DNS=10.10.10.12#ccc.com 10.10.10.13 1111:2222::3333', output)
+ self.assertIn('NTP=2.fedora.pool.ntp.org 3.fedora.pool.ntp.org', output)
+ self.assertIn('DOMAINS=hogehogehoge', output)
+ self.assertIn('ROUTE_DOMAINS=foofoofoo', output)
+ self.assertIn('LLMNR=yes', output)
+ self.assertIn('MDNS=no', output)
+ self.assertIn('DNSSEC=yes', output)
+
+ check_output(*timedatectl_cmd, 'revert', 'dummy98', env=env)
+
+ # TODO: check json string
+ check_output(*networkctl_cmd, '--json=short', 'status', env=env)
+
+ output = read_link_state_file('dummy98')
+ print(output)
+ self.assertIn('DNS=10.10.10.12#ccc.com 10.10.10.13 1111:2222::3333', output)
+ self.assertIn('NTP=0.fedora.pool.ntp.org 1.fedora.pool.ntp.org', output)
+ self.assertIn('DOMAINS=hogehogehoge', output)
+ self.assertIn('ROUTE_DOMAINS=foofoofoo', output)
+ self.assertIn('LLMNR=yes', output)
+ self.assertIn('MDNS=no', output)
+ self.assertIn('DNSSEC=yes', output)
+
+ check_output(*resolvectl_cmd, 'revert', 'dummy98', env=env)
+
+ # TODO: check json string
+ check_output(*networkctl_cmd, '--json=short', 'status', env=env)
+
+ output = read_link_state_file('dummy98')
+ print(output)
+ self.assertIn('DNS=10.10.10.10#aaa.com 10.10.10.11:1111#bbb.com [1111:2222::3333]:1234#ccc.com', output)
+ self.assertIn('NTP=0.fedora.pool.ntp.org 1.fedora.pool.ntp.org', output)
+ self.assertIn('DOMAINS=hogehoge', output)
+ self.assertIn('ROUTE_DOMAINS=foofoo', output)
+ self.assertIn('LLMNR=no', output)
+ self.assertIn('MDNS=yes', output)
+ self.assertIn('DNSSEC=no', output)
+
+ def test_address_state(self):
+ copy_network_unit('12-dummy.netdev', '12-dummy-no-address.network')
+ start_networkd()
+
+ self.wait_online(['dummy98:degraded'])
+
+ output = read_link_state_file('dummy98')
+ self.assertIn('IPV4_ADDRESS_STATE=off', output)
+ self.assertIn('IPV6_ADDRESS_STATE=degraded', output)
+
+ # with a routable IPv4 address
+ check_output('ip address add 10.1.2.3/16 dev dummy98')
+ self.wait_online(['dummy98:routable'], ipv4=True)
+ self.wait_online(['dummy98:routable'])
+
+ output = read_link_state_file('dummy98')
+ self.assertIn('IPV4_ADDRESS_STATE=routable', output)
+ self.assertIn('IPV6_ADDRESS_STATE=degraded', output)
+
+ check_output('ip address del 10.1.2.3/16 dev dummy98')
+
+ # with a routable IPv6 address
+ check_output('ip address add 2002:da8:1:0:1034:56ff:fe78:9abc/64 dev dummy98')
+ self.wait_online(['dummy98:routable'], ipv6=True)
+ self.wait_online(['dummy98:routable'])
+
+ output = read_link_state_file('dummy98')
+ self.assertIn('IPV4_ADDRESS_STATE=off', output)
+ self.assertIn('IPV6_ADDRESS_STATE=routable', output)
+
+class NetworkdBondTests(unittest.TestCase, Utilities):
+
+ def setUp(self):
+ setup_common()
+
+ def tearDown(self):
+ tear_down_common()
+
+ def test_bond_keep_master(self):
+ check_output('ip link add bond199 type bond mode active-backup')
+ check_output('ip link add dummy98 type dummy')
+ check_output('ip link set dummy98 master bond199')
+
+ copy_network_unit('23-keep-master.network')
+ start_networkd()
+ self.wait_online(['dummy98:enslaved'])
+
+ output = check_output('ip -d link show bond199')
+ print(output)
+ self.assertRegex(output, 'active_slave dummy98')
+
+ output = check_output('ip -d link show dummy98')
+ print(output)
+ self.assertRegex(output, 'master bond199')
+
+ def test_bond_active_slave(self):
+ copy_network_unit('23-active-slave.network', '23-bond199.network', '25-bond-active-backup-slave.netdev', '12-dummy.netdev')
+ start_networkd()
+ self.wait_online(['dummy98:enslaved', 'bond199:degraded'])
+
+ output = check_output('ip -d link show bond199')
+ print(output)
+ self.assertIn('active_slave dummy98', output)
+
+ def test_bond_primary_slave(self):
+ copy_network_unit('23-primary-slave.network', '23-bond199.network', '25-bond-active-backup-slave.netdev', '12-dummy.netdev')
+ start_networkd()
+ self.wait_online(['dummy98:enslaved', 'bond199:degraded'])
+
+ output = check_output('ip -d link show bond199')
+ print(output)
+ self.assertIn('primary dummy98', output)
+
+ # for issue #25627
+ mkdir_p(os.path.join(network_unit_dir, '23-bond199.network.d'))
+ for mac in ['00:11:22:33:44:55', '00:11:22:33:44:56']:
+ with open(os.path.join(network_unit_dir, '23-bond199.network.d/mac.conf'), mode='w', encoding='utf-8') as f:
+ f.write(f'[Link]\nMACAddress={mac}\n')
+
+ networkctl_reload()
+ self.wait_online(['dummy98:enslaved', 'bond199:degraded'])
+
+ output = check_output('ip -d link show bond199')
+ print(output)
+ self.assertIn(f'link/ether {mac}', output)
+
+ def test_bond_operstate(self):
+ copy_network_unit('25-bond.netdev', '11-dummy.netdev', '12-dummy.netdev',
+ '25-bond99.network', '25-bond-slave.network')
+ start_networkd()
+ self.wait_online(['dummy98:enslaved', 'test1:enslaved', 'bond99:routable'])
+
+ output = check_output('ip -d link show dummy98')
+ print(output)
+ self.assertRegex(output, 'SLAVE,UP,LOWER_UP')
+
+ output = check_output('ip -d link show test1')
+ print(output)
+ self.assertRegex(output, 'SLAVE,UP,LOWER_UP')
+
+ output = check_output('ip -d link show bond99')
+ print(output)
+ self.assertRegex(output, 'MASTER,UP,LOWER_UP')
+
+ self.wait_operstate('dummy98', 'enslaved')
+ self.wait_operstate('test1', 'enslaved')
+ self.wait_operstate('bond99', 'routable')
+
+ check_output('ip link set dummy98 down')
+
+ self.wait_operstate('dummy98', 'off')
+ self.wait_operstate('test1', 'enslaved')
+ self.wait_operstate('bond99', 'routable')
+
+ check_output('ip link set dummy98 up')
+
+ self.wait_operstate('dummy98', 'enslaved')
+ self.wait_operstate('test1', 'enslaved')
+ self.wait_operstate('bond99', 'routable')
+
+ check_output('ip link set dummy98 down')
+ check_output('ip link set test1 down')
+
+ self.wait_operstate('dummy98', 'off')
+ self.wait_operstate('test1', 'off')
+
+ if not self.wait_operstate('bond99', 'no-carrier', setup_timeout=30, fail_assert=False):
+ # Huh? Kernel does not recognize that all slave interfaces are down?
+ # Let's confirm that networkd's operstate is consistent with ip's result.
+ self.assertNotRegex(output, 'NO-CARRIER')
+
+class NetworkdBridgeTests(unittest.TestCase, Utilities):
+
+ def setUp(self):
+ setup_common()
+
+ def tearDown(self):
+ tear_down_common()
+
+ def test_bridge_vlan(self):
+ copy_network_unit('11-dummy.netdev', '26-bridge-vlan-slave.network',
+ '26-bridge.netdev', '26-bridge-vlan-master.network')
+ start_networkd()
+ self.wait_online(['test1:enslaved', 'bridge99:degraded'])
+
+ output = check_output('bridge vlan show dev test1')
+ print(output)
+ self.assertNotRegex(output, '4063')
+ for i in range(4064, 4095):
+ self.assertRegex(output, f'{i}')
+ self.assertNotRegex(output, '4095')
+
+ output = check_output('bridge vlan show dev bridge99')
+ print(output)
+ self.assertNotRegex(output, '4059')
+ for i in range(4060, 4095):
+ self.assertRegex(output, f'{i}')
+ self.assertNotRegex(output, '4095')
+
+ def test_bridge_vlan_issue_20373(self):
+ copy_network_unit('11-dummy.netdev', '26-bridge-vlan-slave-issue-20373.network',
+ '26-bridge-issue-20373.netdev', '26-bridge-vlan-master-issue-20373.network',
+ '21-vlan.netdev', '21-vlan.network')
+ start_networkd()
+ self.wait_online(['test1:enslaved', 'bridge99:degraded', 'vlan99:routable'])
+
+ output = check_output('bridge vlan show dev test1')
+ print(output)
+ self.assertIn('100 PVID Egress Untagged', output)
+ self.assertIn('560', output)
+ self.assertIn('600', output)
+
+ output = check_output('bridge vlan show dev bridge99')
+ print(output)
+ self.assertIn('1 PVID Egress Untagged', output)
+ self.assertIn('100', output)
+ self.assertIn('600', output)
+
+ def test_bridge_mdb(self):
+ copy_network_unit('11-dummy.netdev', '26-bridge-mdb-slave.network',
+ '26-bridge.netdev', '26-bridge-mdb-master.network')
+ start_networkd()
+ self.wait_online(['test1:enslaved', 'bridge99:degraded'])
+
+ output = check_output('bridge mdb show dev bridge99')
+ print(output)
+ self.assertRegex(output, 'dev bridge99 port test1 grp ff02:aaaa:fee5::1:3 permanent *vid 4064')
+ self.assertRegex(output, 'dev bridge99 port test1 grp 224.0.1.1 permanent *vid 4065')
+
+ # Old kernel may not support bridge MDB entries on bridge master
+ if call_quiet('bridge mdb add dev bridge99 port bridge99 grp 224.0.1.3 temp vid 4068') == 0:
+ self.assertRegex(output, 'dev bridge99 port bridge99 grp ff02:aaaa:fee5::1:4 temp *vid 4066')
+ self.assertRegex(output, 'dev bridge99 port bridge99 grp 224.0.1.2 temp *vid 4067')
+
+ def test_bridge_keep_master(self):
+ check_output('ip link add bridge99 type bridge')
+ check_output('ip link set bridge99 up')
+ check_output('ip link add dummy98 type dummy')
+ check_output('ip link set dummy98 master bridge99')
+
+ copy_network_unit('23-keep-master.network')
+ start_networkd()
+ self.wait_online(['dummy98:enslaved'])
+
+ output = check_output('ip -d link show dummy98')
+ print(output)
+ self.assertRegex(output, 'master bridge99')
+ self.assertRegex(output, 'bridge')
+
+ output = check_output('bridge -d link show dummy98')
+ print(output)
+ self.check_bridge_port_attr('bridge99', 'dummy98', 'path_cost', '400')
+ self.check_bridge_port_attr('bridge99', 'dummy98', 'hairpin_mode', '1')
+ self.check_bridge_port_attr('bridge99', 'dummy98', 'multicast_fast_leave', '1')
+ self.check_bridge_port_attr('bridge99', 'dummy98', 'unicast_flood', '1')
+ self.check_bridge_port_attr('bridge99', 'dummy98', 'multicast_flood', '0')
+ # CONFIG_BRIDGE_IGMP_SNOOPING=y
+ self.check_bridge_port_attr('bridge99', 'dummy98', 'multicast_to_unicast', '1', allow_enoent=True)
+ self.check_bridge_port_attr('bridge99', 'dummy98', 'neigh_suppress', '1', allow_enoent=True)
+ self.check_bridge_port_attr('bridge99', 'dummy98', 'learning', '0')
+ self.check_bridge_port_attr('bridge99', 'dummy98', 'priority', '23')
+ self.check_bridge_port_attr('bridge99', 'dummy98', 'bpdu_guard', '0')
+ self.check_bridge_port_attr('bridge99', 'dummy98', 'root_block', '0')
+
+ def test_bridge_property(self):
+ copy_network_unit('11-dummy.netdev', '12-dummy.netdev', '26-bridge.netdev',
+ '26-bridge-slave-interface-1.network', '26-bridge-slave-interface-2.network',
+ '25-bridge99.network')
+ start_networkd()
+ self.wait_online(['dummy98:enslaved', 'test1:enslaved', 'bridge99:routable'])
+
+ output = check_output('ip -d link show bridge99')
+ print(output)
+ self.assertIn('mtu 9000 ', output)
+
+ output = check_output('ip -d link show test1')
+ print(output)
+ self.assertIn('master bridge99 ', output)
+ self.assertIn('bridge_slave', output)
+ self.assertIn('mtu 9000 ', output)
+
+ output = check_output('ip -d link show dummy98')
+ print(output)
+ self.assertIn('master bridge99 ', output)
+ self.assertIn('bridge_slave', output)
+ self.assertIn('mtu 9000 ', output)
+
+ output = check_output('ip addr show bridge99')
+ print(output)
+ self.assertIn('192.168.0.15/24', output)
+
+ output = check_output('bridge -d link show dummy98')
+ print(output)
+ self.check_bridge_port_attr('bridge99', 'dummy98', 'path_cost', '400')
+ self.check_bridge_port_attr('bridge99', 'dummy98', 'hairpin_mode', '1')
+ self.check_bridge_port_attr('bridge99', 'dummy98', 'isolated', '1')
+ self.check_bridge_port_attr('bridge99', 'dummy98', 'multicast_fast_leave', '1')
+ self.check_bridge_port_attr('bridge99', 'dummy98', 'unicast_flood', '1')
+ self.check_bridge_port_attr('bridge99', 'dummy98', 'multicast_flood', '0')
+ # CONFIG_BRIDGE_IGMP_SNOOPING=y
+ self.check_bridge_port_attr('bridge99', 'dummy98', 'multicast_to_unicast', '1', allow_enoent=True)
+ self.check_bridge_port_attr('bridge99', 'dummy98', 'neigh_suppress', '1', allow_enoent=True)
+ self.check_bridge_port_attr('bridge99', 'dummy98', 'learning', '0')
+ self.check_bridge_port_attr('bridge99', 'dummy98', 'priority', '23')
+ self.check_bridge_port_attr('bridge99', 'dummy98', 'bpdu_guard', '0')
+ self.check_bridge_port_attr('bridge99', 'dummy98', 'root_block', '0')
+
+ output = check_output('bridge -d link show test1')
+ print(output)
+ self.check_bridge_port_attr('bridge99', 'test1', 'priority', '0')
+
+ check_output('ip address add 192.168.0.16/24 dev bridge99')
+ output = check_output('ip addr show bridge99')
+ print(output)
+ self.assertIn('192.168.0.16/24', output)
+
+ # for issue #6088
+ print('### ip -6 route list table all dev bridge99')
+ output = check_output('ip -6 route list table all dev bridge99')
+ print(output)
+ self.assertRegex(output, 'ff00::/8 table local (proto kernel )?metric 256 (linkdown )?pref medium')
+
+ remove_link('test1')
+ self.wait_operstate('bridge99', 'routable')
+
+ output = check_output('ip -d link show bridge99')
+ print(output)
+ self.assertIn('mtu 9000 ', output)
+
+ output = check_output('ip -d link show dummy98')
+ print(output)
+ self.assertIn('master bridge99 ', output)
+ self.assertIn('bridge_slave', output)
+ self.assertIn('mtu 9000 ', output)
+
+ remove_link('dummy98')
+ self.wait_operstate('bridge99', 'no-carrier')
+
+ output = check_output('ip -d link show bridge99')
+ print(output)
+ # When no carrier, the kernel may reset the MTU
+ self.assertIn('NO-CARRIER', output)
+
+ output = check_output('ip address show bridge99')
+ print(output)
+ self.assertNotIn('192.168.0.15/24', output)
+ self.assertIn('192.168.0.16/24', output) # foreign address is kept
+
+ print('### ip -6 route list table all dev bridge99')
+ output = check_output('ip -6 route list table all dev bridge99')
+ print(output)
+ self.assertRegex(output, 'ff00::/8 table local (proto kernel )?metric 256 (linkdown )?pref medium')
+
+ check_output('ip link add dummy98 type dummy')
+ self.wait_online(['dummy98:enslaved', 'bridge99:routable'])
+
+ output = check_output('ip -d link show bridge99')
+ print(output)
+ self.assertIn('mtu 9000 ', output)
+
+ output = check_output('ip -d link show dummy98')
+ print(output)
+ self.assertIn('master bridge99 ', output)
+ self.assertIn('bridge_slave', output)
+ self.assertIn('mtu 9000 ', output)
+
+ def test_bridge_configure_without_carrier(self):
+ copy_network_unit('26-bridge.netdev', '26-bridge-configure-without-carrier.network',
+ '11-dummy.netdev')
+ start_networkd()
+
+ # With ConfigureWithoutCarrier=yes, the bridge should remain configured for all these situations
+ for test in ['no-slave', 'add-slave', 'slave-up', 'slave-no-carrier', 'slave-carrier', 'slave-down']:
+ with self.subTest(test=test):
+ if test == 'no-slave':
+ # bridge has no slaves; it's up but *might* not have carrier
+ self.wait_operstate('bridge99', operstate=r'(no-carrier|routable)', setup_state=None, setup_timeout=30)
+ # due to a bug in the kernel, newly-created bridges are brought up
+ # *with* carrier, unless they have had any setting changed; e.g.
+ # their mac set, priority set, etc. Then, they will lose carrier
+ # as soon as a (down) slave interface is added, and regain carrier
+ # again once the slave interface is brought up.
+ #self.check_link_attr('bridge99', 'carrier', '0')
+ elif test == 'add-slave':
+ # add slave to bridge, but leave it down; bridge is definitely no-carrier
+ self.check_link_attr('test1', 'operstate', 'down')
+ check_output('ip link set dev test1 master bridge99')
+ self.wait_operstate('bridge99', operstate='no-carrier', setup_state=None)
+ self.check_link_attr('bridge99', 'carrier', '0')
+ elif test == 'slave-up':
+ # bring up slave, which will have carrier; bridge gains carrier
+ check_output('ip link set dev test1 up')
+ self.wait_online(['bridge99:routable'])
+ self.check_link_attr('bridge99', 'carrier', '1')
+ elif test == 'slave-no-carrier':
+ # drop slave carrier; bridge loses carrier
+ check_output('ip link set dev test1 carrier off')
+ self.wait_online(['bridge99:no-carrier:no-carrier'])
+ self.check_link_attr('bridge99', 'carrier', '0')
+ elif test == 'slave-carrier':
+ # restore slave carrier; bridge gains carrier
+ check_output('ip link set dev test1 carrier on')
+ self.wait_online(['bridge99:routable'])
+ self.check_link_attr('bridge99', 'carrier', '1')
+ elif test == 'slave-down':
+ # bring down slave; bridge loses carrier
+ check_output('ip link set dev test1 down')
+ self.wait_online(['bridge99:no-carrier:no-carrier'])
+ self.check_link_attr('bridge99', 'carrier', '0')
+
+ output = check_output(*networkctl_cmd, '-n', '0', 'status', 'bridge99', env=env)
+ self.assertRegex(output, '10.1.2.3')
+ self.assertRegex(output, '10.1.2.1')
+
+ def test_bridge_ignore_carrier_loss(self):
+ copy_network_unit('11-dummy.netdev', '12-dummy.netdev', '26-bridge.netdev',
+ '26-bridge-slave-interface-1.network', '26-bridge-slave-interface-2.network',
+ '25-bridge99-ignore-carrier-loss.network')
+ start_networkd()
+ self.wait_online(['dummy98:enslaved', 'test1:enslaved', 'bridge99:routable'])
+
+ check_output('ip address add 192.168.0.16/24 dev bridge99')
+ remove_link('test1', 'dummy98')
+ time.sleep(3)
+
+ output = check_output('ip address show bridge99')
+ print(output)
+ self.assertRegex(output, 'NO-CARRIER')
+ self.assertRegex(output, 'inet 192.168.0.15/24 brd 192.168.0.255 scope global bridge99')
+ self.assertRegex(output, 'inet 192.168.0.16/24 scope global secondary bridge99')
+
+ def test_bridge_ignore_carrier_loss_frequent_loss_and_gain(self):
+ copy_network_unit('26-bridge.netdev', '26-bridge-slave-interface-1.network',
+ '25-bridge99-ignore-carrier-loss.network')
+ start_networkd()
+ self.wait_online(['bridge99:no-carrier'])
+
+ for trial in range(4):
+ check_output('ip link add dummy98 type dummy')
+ check_output('ip link set dummy98 up')
+ if trial < 3:
+ remove_link('dummy98')
+
+ self.wait_online(['bridge99:routable', 'dummy98:enslaved'])
+
+ output = check_output('ip address show bridge99')
+ print(output)
+ self.assertRegex(output, 'inet 192.168.0.15/24 brd 192.168.0.255 scope global bridge99')
+
+ output = check_output('ip rule list table 100')
+ print(output)
+ self.assertIn('from all to 8.8.8.8 lookup 100', output)
+
+class NetworkdSRIOVTests(unittest.TestCase, Utilities):
+
+ def setUp(self):
+ setup_common()
+
+ def tearDown(self):
+ tear_down_common()
+
+ @expectedFailureIfNetdevsimWithSRIOVIsNotAvailable()
+ def test_sriov(self):
+ call('modprobe netdevsim')
+
+ with open('/sys/bus/netdevsim/new_device', mode='w', encoding='utf-8') as f:
+ f.write('99 1')
+
+ with open('/sys/bus/netdevsim/devices/netdevsim99/sriov_numvfs', mode='w', encoding='utf-8') as f:
+ f.write('3')
+
+ copy_network_unit('25-sriov.network')
+ start_networkd()
+ self.wait_online(['eni99np1:routable'])
+
+ output = check_output('ip link show dev eni99np1')
+ print(output)
+ self.assertRegex(output,
+ 'vf 0 .*00:11:22:33:44:55.*vlan 5, qos 1, vlan protocol 802.1ad, spoof checking on, link-state enable, trust on, query_rss on\n *'
+ 'vf 1 .*00:11:22:33:44:56.*vlan 6, qos 2, spoof checking off, link-state disable, trust off, query_rss off\n *'
+ 'vf 2 .*00:11:22:33:44:57.*vlan 7, qos 3, spoof checking off, link-state auto, trust off, query_rss off'
+ )
+
+ @expectedFailureIfNetdevsimWithSRIOVIsNotAvailable()
+ def test_sriov_udev(self):
+ copy_network_unit('25-sriov.link', '25-sriov-udev.network')
+
+ call('modprobe netdevsim')
+
+ with open('/sys/bus/netdevsim/new_device', mode='w', encoding='utf-8') as f:
+ f.write('99 1')
+
+ start_networkd()
+ self.wait_online(['eni99np1:routable'])
+
+ output = check_output('ip link show dev eni99np1')
+ print(output)
+ self.assertRegex(output,
+ 'vf 0 .*00:11:22:33:44:55.*vlan 5, qos 1, vlan protocol 802.1ad, spoof checking on, link-state enable, trust on, query_rss on\n *'
+ 'vf 1 .*00:11:22:33:44:56.*vlan 6, qos 2, spoof checking off, link-state disable, trust off, query_rss off\n *'
+ 'vf 2 .*00:11:22:33:44:57.*vlan 7, qos 3, spoof checking off, link-state auto, trust off, query_rss off'
+ )
+ self.assertNotIn('vf 3', output)
+ self.assertNotIn('vf 4', output)
+
+ with open(os.path.join(network_unit_dir, '25-sriov.link'), mode='a', encoding='utf-8') as f:
+ f.write('[Link]\nSR-IOVVirtualFunctions=4\n')
+
+ udev_reload()
+ call(*udevadm_cmd, 'trigger', '--action=add', '--settle', '/sys/devices/netdevsim99/net/eni99np1')
+
+ output = check_output('ip link show dev eni99np1')
+ print(output)
+ self.assertRegex(output,
+ 'vf 0 .*00:11:22:33:44:55.*vlan 5, qos 1, vlan protocol 802.1ad, spoof checking on, link-state enable, trust on, query_rss on\n *'
+ 'vf 1 .*00:11:22:33:44:56.*vlan 6, qos 2, spoof checking off, link-state disable, trust off, query_rss off\n *'
+ 'vf 2 .*00:11:22:33:44:57.*vlan 7, qos 3, spoof checking off, link-state auto, trust off, query_rss off\n *'
+ 'vf 3'
+ )
+ self.assertNotIn('vf 4', output)
+
+ with open(os.path.join(network_unit_dir, '25-sriov.link'), mode='a', encoding='utf-8') as f:
+ f.write('[Link]\nSR-IOVVirtualFunctions=\n')
+
+ udev_reload()
+ call(*udevadm_cmd, 'trigger', '--action=add', '--settle', '/sys/devices/netdevsim99/net/eni99np1')
+
+ output = check_output('ip link show dev eni99np1')
+ print(output)
+ self.assertRegex(output,
+ 'vf 0 .*00:11:22:33:44:55.*vlan 5, qos 1, vlan protocol 802.1ad, spoof checking on, link-state enable, trust on, query_rss on\n *'
+ 'vf 1 .*00:11:22:33:44:56.*vlan 6, qos 2, spoof checking off, link-state disable, trust off, query_rss off\n *'
+ 'vf 2 .*00:11:22:33:44:57.*vlan 7, qos 3, spoof checking off, link-state auto, trust off, query_rss off\n *'
+ 'vf 3'
+ )
+ self.assertNotIn('vf 4', output)
+
+ with open(os.path.join(network_unit_dir, '25-sriov.link'), mode='a', encoding='utf-8') as f:
+ f.write('[Link]\nSR-IOVVirtualFunctions=2\n')
+
+ udev_reload()
+ call(*udevadm_cmd, 'trigger', '--action=add', '--settle', '/sys/devices/netdevsim99/net/eni99np1')
+
+ output = check_output('ip link show dev eni99np1')
+ print(output)
+ self.assertRegex(output,
+ 'vf 0 .*00:11:22:33:44:55.*vlan 5, qos 1, vlan protocol 802.1ad, spoof checking on, link-state enable, trust on, query_rss on\n *'
+ 'vf 1 .*00:11:22:33:44:56.*vlan 6, qos 2, spoof checking off, link-state disable, trust off, query_rss off'
+ )
+ self.assertNotIn('vf 2', output)
+ self.assertNotIn('vf 3', output)
+ self.assertNotIn('vf 4', output)
+
+ with open(os.path.join(network_unit_dir, '25-sriov.link'), mode='a', encoding='utf-8') as f:
+ f.write('[Link]\nSR-IOVVirtualFunctions=\n')
+
+ udev_reload()
+ call(*udevadm_cmd, 'trigger', '--action=add', '--settle', '/sys/devices/netdevsim99/net/eni99np1')
+
+ output = check_output('ip link show dev eni99np1')
+ print(output)
+ self.assertRegex(output,
+ 'vf 0 .*00:11:22:33:44:55.*vlan 5, qos 1, vlan protocol 802.1ad, spoof checking on, link-state enable, trust on, query_rss on\n *'
+ 'vf 1 .*00:11:22:33:44:56.*vlan 6, qos 2, spoof checking off, link-state disable, trust off, query_rss off\n *'
+ 'vf 2 .*00:11:22:33:44:57.*vlan 7, qos 3, spoof checking off, link-state auto, trust off, query_rss off'
+ )
+ self.assertNotIn('vf 3', output)
+ self.assertNotIn('vf 4', output)
+
+class NetworkdLLDPTests(unittest.TestCase, Utilities):
+
+ def setUp(self):
+ setup_common()
+
+ def tearDown(self):
+ tear_down_common()
+
+ def test_lldp(self):
+ copy_network_unit('23-emit-lldp.network', '24-lldp.network', '25-veth.netdev')
+ start_networkd()
+ self.wait_online(['veth99:degraded', 'veth-peer:degraded'])
+
+ for trial in range(10):
+ if trial > 0:
+ time.sleep(1)
+
+ output = check_output(*networkctl_cmd, 'lldp', env=env)
+ print(output)
+ if re.search(r'veth99 .* veth-peer', output):
+ break
+ else:
+ self.fail()
+
+class NetworkdRATests(unittest.TestCase, Utilities):
+
+ def setUp(self):
+ setup_common()
+
+ def tearDown(self):
+ tear_down_common()
+
+ def test_ipv6_prefix_delegation(self):
+ copy_network_unit('25-veth.netdev', '25-ipv6-prefix.network', '25-ipv6-prefix-veth.network')
+ start_networkd()
+ self.wait_online(['veth99:routable', 'veth-peer:degraded'])
+
+ output = check_output(*resolvectl_cmd, 'dns', 'veth99', env=env)
+ print(output)
+ self.assertRegex(output, 'fe80::')
+ self.assertRegex(output, '2002:da8:1::1')
+
+ output = check_output(*resolvectl_cmd, 'domain', 'veth99', env=env)
+ print(output)
+ self.assertIn('hogehoge.test', output)
+
+ output = check_output(*networkctl_cmd, '-n', '0', 'status', 'veth99', env=env)
+ print(output)
+ self.assertRegex(output, '2002:da8:1:0')
+
+ self.check_netlabel('veth99', '2002:da8:1::/64')
+ self.check_netlabel('veth99', '2002:da8:2::/64')
+
+ def test_ipv6_token_static(self):
+ copy_network_unit('25-veth.netdev', '25-ipv6-prefix.network', '25-ipv6-prefix-veth-token-static.network')
+ start_networkd()
+ self.wait_online(['veth99:routable', 'veth-peer:degraded'])
+
+ output = check_output(*networkctl_cmd, '-n', '0', 'status', 'veth99', env=env)
+ print(output)
+ self.assertRegex(output, '2002:da8:1:0:1a:2b:3c:4d')
+ self.assertRegex(output, '2002:da8:1:0:fa:de:ca:fe')
+ self.assertRegex(output, '2002:da8:2:0:1a:2b:3c:4d')
+ self.assertRegex(output, '2002:da8:2:0:fa:de:ca:fe')
+
+ def test_ipv6_token_prefixstable(self):
+ copy_network_unit('25-veth.netdev', '25-ipv6-prefix.network', '25-ipv6-prefix-veth-token-prefixstable.network')
+ start_networkd()
+ self.wait_online(['veth99:routable', 'veth-peer:degraded'])
+
+ output = check_output(*networkctl_cmd, '-n', '0', 'status', 'veth99', env=env)
+ print(output)
+ self.assertIn('2002:da8:1:0:b47e:7975:fc7a:7d6e', output)
+ self.assertIn('2002:da8:2:0:1034:56ff:fe78:9abc', output) # EUI64
+
+ def test_ipv6_token_prefixstable_without_address(self):
+ copy_network_unit('25-veth.netdev', '25-ipv6-prefix.network', '25-ipv6-prefix-veth-token-prefixstable-without-address.network')
+ start_networkd()
+ self.wait_online(['veth99:routable', 'veth-peer:degraded'])
+
+ output = check_output(*networkctl_cmd, '-n', '0', 'status', 'veth99', env=env)
+ print(output)
+ self.assertIn('2002:da8:1:0:b47e:7975:fc7a:7d6e', output)
+ self.assertIn('2002:da8:2:0:f689:561a:8eda:7443', output)
+
+class NetworkdDHCPServerTests(unittest.TestCase, Utilities):
+
+ def setUp(self):
+ setup_common()
+
+ def tearDown(self):
+ tear_down_common()
+
+ def test_dhcp_server(self):
+ copy_network_unit('25-veth.netdev', '25-dhcp-client.network', '25-dhcp-server.network')
+ start_networkd()
+ self.wait_online(['veth99:routable', 'veth-peer:routable'])
+
+ output = check_output(*networkctl_cmd, '-n', '0', 'status', 'veth99', env=env)
+ print(output)
+ self.assertRegex(output, r'Address: 192.168.5.[0-9]* \(DHCP4 via 192.168.5.1\)')
+ self.assertIn('Gateway: 192.168.5.3', output)
+ self.assertRegex(output, 'DNS: 192.168.5.1\n *192.168.5.10')
+ self.assertRegex(output, 'NTP: 192.168.5.1\n *192.168.5.11')
+
+ def test_dhcp_server_with_uplink(self):
+ copy_network_unit('25-veth.netdev', '25-dhcp-client.network', '25-dhcp-server-downstream.network',
+ '12-dummy.netdev', '25-dhcp-server-uplink.network')
+ start_networkd()
+ self.wait_online(['veth99:routable', 'veth-peer:routable'])
+
+ output = check_output(*networkctl_cmd, '-n', '0', 'status', 'veth99', env=env)
+ print(output)
+ self.assertRegex(output, r'Address: 192.168.5.[0-9]* \(DHCP4 via 192.168.5.1\)')
+ self.assertIn('Gateway: 192.168.5.3', output)
+ self.assertIn('DNS: 192.168.5.1', output)
+ self.assertIn('NTP: 192.168.5.1', output)
+
+ def test_emit_router_timezone(self):
+ copy_network_unit('25-veth.netdev', '25-dhcp-client-timezone-router.network', '25-dhcp-server-timezone-router.network')
+ start_networkd()
+ self.wait_online(['veth99:routable', 'veth-peer:routable'])
+
+ output = check_output(*networkctl_cmd, '-n', '0', 'status', 'veth99', env=env)
+ print(output)
+ self.assertRegex(output, r'Address: 192.168.5.[0-9]* \(DHCP4 via 192.168.5.1\)')
+ self.assertIn('Gateway: 192.168.5.1', output)
+ self.assertIn('Time Zone: Europe/Berlin', output)
+
+ def test_dhcp_server_static_lease(self):
+ copy_network_unit('25-veth.netdev', '25-dhcp-client-static-lease.network', '25-dhcp-server-static-lease.network')
+ start_networkd()
+ self.wait_online(['veth99:routable', 'veth-peer:routable'])
+
+ output = check_output(*networkctl_cmd, '-n', '0', 'status', 'veth99', env=env)
+ print(output)
+ self.assertIn('Address: 10.1.1.200 (DHCP4 via 10.1.1.1)', output)
+
+class NetworkdDHCPServerRelayAgentTests(unittest.TestCase, Utilities):
+
+ def setUp(self):
+ setup_common()
+
+ def tearDown(self):
+ tear_down_common()
+
+ def test_relay_agent(self):
+ copy_network_unit('25-agent-veth-client.netdev',
+ '25-agent-veth-server.netdev',
+ '25-agent-client.network',
+ '25-agent-server.network',
+ '25-agent-client-peer.network',
+ '25-agent-server-peer.network')
+ start_networkd()
+
+ self.wait_online(['client:routable'])
+
+ output = check_output(*networkctl_cmd, '-n', '0', 'status', 'client', env=env)
+ print(output)
+ self.assertRegex(output, r'Address: 192.168.5.150 \(DHCP4 via 192.168.5.1\)')
+
+class NetworkdDHCPClientTests(unittest.TestCase, Utilities):
+
+ def setUp(self):
+ setup_common()
+
+ def tearDown(self):
+ tear_down_common()
+
+ def test_dhcp_client_ipv6_only(self):
+ copy_network_unit('25-veth.netdev', '25-dhcp-server-veth-peer.network', '25-dhcp-client-ipv6-only.network')
+
+ start_networkd()
+ self.wait_online(['veth-peer:carrier'])
+ start_dnsmasq()
+ self.wait_online(['veth99:routable', 'veth-peer:routable'])
+
+ # checking address
+ output = check_output('ip address show dev veth99 scope global')
+ print(output)
+ self.assertRegex(output, r'inet6 2600::[0-9a-f:]*/128 scope global dynamic noprefixroute')
+ self.assertNotIn('192.168.5', output)
+
+ # checking semi-static route
+ output = check_output('ip -6 route list dev veth99 2001:1234:5:9fff:ff:ff:ff:ff')
+ print(output)
+ self.assertRegex(output, 'via fe80::1034:56ff:fe78:9abd')
+
+ # Confirm that ipv6 token is not set in the kernel
+ output = check_output('ip token show dev veth99')
+ print(output)
+ self.assertRegex(output, 'token :: dev veth99')
+
+ print('## dnsmasq log')
+ output = read_dnsmasq_log_file()
+ print(output)
+ self.assertIn('DHCPSOLICIT(veth-peer)', output)
+ self.assertNotIn('DHCPADVERTISE(veth-peer)', output)
+ self.assertNotIn('DHCPREQUEST(veth-peer)', output)
+ self.assertIn('DHCPREPLY(veth-peer)', output)
+ self.assertIn('sent size: 0 option: 14 rapid-commit', output)
+
+ with open(os.path.join(network_unit_dir, '25-dhcp-client-ipv6-only.network'), mode='a', encoding='utf-8') as f:
+ f.write('\n[DHCPv6]\nRapidCommit=no\n')
+
+ stop_dnsmasq()
+ start_dnsmasq()
+
+ networkctl_reload()
+ self.wait_online(['veth99:routable', 'veth-peer:routable'])
+
+ # checking address
+ output = check_output('ip address show dev veth99 scope global')
+ print(output)
+ self.assertRegex(output, r'inet6 2600::[0-9a-f:]*/128 scope global dynamic noprefixroute')
+ self.assertNotIn('192.168.5', output)
+
+ # checking semi-static route
+ output = check_output('ip -6 route list dev veth99 2001:1234:5:9fff:ff:ff:ff:ff')
+ print(output)
+ self.assertRegex(output, 'via fe80::1034:56ff:fe78:9abd')
+
+ print('## dnsmasq log')
+ output = read_dnsmasq_log_file()
+ print(output)
+ self.assertIn('DHCPSOLICIT(veth-peer)', output)
+ self.assertIn('DHCPADVERTISE(veth-peer)', output)
+ self.assertIn('DHCPREQUEST(veth-peer)', output)
+ self.assertIn('DHCPREPLY(veth-peer)', output)
+ self.assertNotIn('rapid-commit', output)
+
+ def test_dhcp_client_ipv4_only(self):
+ copy_network_unit('25-veth.netdev', '25-dhcp-server-veth-peer.network', '25-dhcp-client-ipv4-only.network')
+
+ start_networkd()
+ self.wait_online(['veth-peer:carrier'])
+ start_dnsmasq('--dhcp-option=option:dns-server,192.168.5.6,192.168.5.7',
+ '--dhcp-option=option:domain-search,example.com',
+ '--dhcp-alternate-port=67,5555',
+ ipv4_range='192.168.5.110,192.168.5.119')
+ self.wait_online(['veth99:routable', 'veth-peer:routable'])
+
+ print('## ip address show dev veth99 scope global')
+ output = check_output('ip address show dev veth99 scope global')
+ print(output)
+ self.assertIn('mtu 1492', output)
+ self.assertIn('inet 192.168.5.250/24 brd 192.168.5.255 scope global veth99', output)
+ self.assertRegex(output, r'inet 192.168.5.11[0-9]/24 metric 24 brd 192.168.5.255 scope global secondary dynamic noprefixroute test-label')
+ self.assertNotIn('2600::', output)
+
+ print('## ip route show table main dev veth99')
+ output = check_output('ip route show table main dev veth99')
+ print(output)
+ # no DHCP routes assigned to the main table
+ self.assertNotIn('proto dhcp', output)
+ # static routes
+ self.assertIn('192.168.5.0/24 proto kernel scope link src 192.168.5.250', output)
+ self.assertIn('192.168.5.0/24 proto static scope link', output)
+ self.assertIn('192.168.6.0/24 proto static scope link', output)
+ self.assertIn('192.168.7.0/24 proto static scope link', output)
+
+ print('## ip route show table 211 dev veth99')
+ output = check_output('ip route show table 211 dev veth99')
+ print(output)
+ self.assertRegex(output, 'default via 192.168.5.1 proto dhcp src 192.168.5.11[0-9] metric 24')
+ self.assertRegex(output, '192.168.5.0/24 proto dhcp scope link src 192.168.5.11[0-9] metric 24')
+ self.assertRegex(output, '192.168.5.1 proto dhcp scope link src 192.168.5.11[0-9] metric 24')
+ self.assertRegex(output, '192.168.5.6 proto dhcp scope link src 192.168.5.11[0-9] metric 24')
+ self.assertRegex(output, '192.168.5.7 proto dhcp scope link src 192.168.5.11[0-9] metric 24')
+ self.assertIn('10.0.0.0/8 via 192.168.5.1 proto dhcp', output)
+
+ print('## link state file')
+ output = read_link_state_file('veth99')
+ print(output)
+ # checking DNS server and Domains
+ self.assertIn('DNS=192.168.5.6 192.168.5.7', output)
+ self.assertIn('DOMAINS=example.com', output)
+
+ print('## dnsmasq log')
+ output = read_dnsmasq_log_file()
+ print(output)
+ self.assertIn('vendor class: FooBarVendorTest', output)
+ self.assertIn('DHCPDISCOVER(veth-peer) 12:34:56:78:9a:bc', output)
+ self.assertIn('client provides name: test-hostname', output)
+ self.assertIn('26:mtu', output)
+
+ # change address range, DNS servers, and Domains
+ stop_dnsmasq()
+ start_dnsmasq('--dhcp-option=option:dns-server,192.168.5.1,192.168.5.7,192.168.5.8',
+ '--dhcp-option=option:domain-search,foo.example.com',
+ '--dhcp-alternate-port=67,5555',
+ ipv4_range='192.168.5.120,192.168.5.129',)
+
+ # Sleep for 120 sec as the dnsmasq minimum lease time can only be set to 120
+ print('Wait for the DHCP lease to be expired')
+ self.wait_address_dropped('veth99', r'inet 192.168.5.11[0-9]*/24', ipv='-4', timeout_sec=120)
+ self.wait_address('veth99', r'inet 192.168.5.12[0-9]*/24', ipv='-4')
+
+ self.wait_online(['veth99:routable', 'veth-peer:routable'])
+
+ print('## ip address show dev veth99 scope global')
+ output = check_output('ip address show dev veth99 scope global')
+ print(output)
+ self.assertIn('mtu 1492', output)
+ self.assertIn('inet 192.168.5.250/24 brd 192.168.5.255 scope global veth99', output)
+ self.assertNotIn('192.168.5.11', output)
+ self.assertRegex(output, r'inet 192.168.5.12[0-9]/24 metric 24 brd 192.168.5.255 scope global secondary dynamic noprefixroute test-label')
+ self.assertNotIn('2600::', output)
+
+ print('## ip route show table main dev veth99')
+ output = check_output('ip route show table main dev veth99')
+ print(output)
+ # no DHCP routes assigned to the main table
+ self.assertNotIn('proto dhcp', output)
+ # static routes
+ self.assertIn('192.168.5.0/24 proto kernel scope link src 192.168.5.250', output)
+ self.assertIn('192.168.5.0/24 proto static scope link', output)
+ self.assertIn('192.168.6.0/24 proto static scope link', output)
+ self.assertIn('192.168.7.0/24 proto static scope link', output)
+
+ print('## ip route show table 211 dev veth99')
+ output = check_output('ip route show table 211 dev veth99')
+ print(output)
+ self.assertRegex(output, 'default via 192.168.5.1 proto dhcp src 192.168.5.12[0-9] metric 24')
+ self.assertRegex(output, '192.168.5.0/24 proto dhcp scope link src 192.168.5.12[0-9] metric 24')
+ self.assertRegex(output, '192.168.5.1 proto dhcp scope link src 192.168.5.12[0-9] metric 24')
+ self.assertNotIn('192.168.5.6', output)
+ self.assertRegex(output, '192.168.5.7 proto dhcp scope link src 192.168.5.12[0-9] metric 24')
+ self.assertRegex(output, '192.168.5.8 proto dhcp scope link src 192.168.5.12[0-9] metric 24')
+ self.assertIn('10.0.0.0/8 via 192.168.5.1 proto dhcp', output)
+
+ print('## link state file')
+ output = read_link_state_file('veth99')
+ print(output)
+ # checking DNS server and Domains
+ self.assertIn('DNS=192.168.5.1 192.168.5.7 192.168.5.8', output)
+ self.assertIn('DOMAINS=foo.example.com', output)
+
+ print('## dnsmasq log')
+ output = read_dnsmasq_log_file()
+ print(output)
+ self.assertIn('vendor class: FooBarVendorTest', output)
+ self.assertIn('DHCPDISCOVER(veth-peer) 192.168.5.11', output)
+ self.assertIn('client provides name: test-hostname', output)
+ self.assertIn('26:mtu', output)
+
+ self.check_netlabel('veth99', r'192\.168\.5\.0/24')
+
+ def test_dhcp_client_ipv4_use_routes_gateway(self):
+ first = True
+ for (routes, gateway, dns_and_ntp_routes, classless) in itertools.product([True, False], repeat=4):
+ if first:
+ first = False
+ else:
+ self.tearDown()
+
+ print(f'### test_dhcp_client_ipv4_use_routes_gateway(routes={routes}, gateway={gateway}, dns_and_ntp_routes={dns_and_ntp_routes}, classless={classless})')
+ with self.subTest(routes=routes, gateway=gateway, dns_and_ntp_routes=dns_and_ntp_routes, classless=classless):
+ self._test_dhcp_client_ipv4_use_routes_gateway(routes, gateway, dns_and_ntp_routes, classless)
+
+ def _test_dhcp_client_ipv4_use_routes_gateway(self, use_routes, use_gateway, dns_and_ntp_routes, classless):
+ testunit = '25-dhcp-client-ipv4-use-routes-use-gateway.network'
+ testunits = ['25-veth.netdev', '25-dhcp-server-veth-peer.network', testunit]
+ testunits.append(f'{testunit}.d/use-routes-{use_routes}.conf')
+ testunits.append(f'{testunit}.d/use-gateway-{use_gateway}.conf')
+ testunits.append(f'{testunit}.d/use-dns-and-ntp-routes-{dns_and_ntp_routes}.conf')
+ copy_network_unit(*testunits, copy_dropins=False)
+
+ start_networkd()
+ self.wait_online(['veth-peer:carrier'])
+ additional_options = [
+ '--dhcp-option=option:dns-server,192.168.5.10,8.8.8.8',
+ '--dhcp-option=option:ntp-server,192.168.5.11,9.9.9.9',
+ '--dhcp-option=option:static-route,192.168.5.100,192.168.5.2,8.8.8.8,192.168.5.3'
+ ]
+ if classless:
+ additional_options += [
+ '--dhcp-option=option:classless-static-route,0.0.0.0/0,192.168.5.4,8.0.0.0/8,192.168.5.5,192.168.5.64/26,192.168.5.5'
+ ]
+ start_dnsmasq(*additional_options)
+ self.wait_online(['veth99:routable', 'veth-peer:routable'])
+
+ output = check_output('ip -4 route show dev veth99')
+ print(output)
+
+ # Check UseRoutes=
+ if use_routes:
+ if classless:
+ self.assertRegex(output, r'default via 192.168.5.4 proto dhcp src 192.168.5.[0-9]* metric 1024')
+ self.assertRegex(output, r'8.0.0.0/8 via 192.168.5.5 proto dhcp src 192.168.5.[0-9]* metric 1024')
+ self.assertRegex(output, r'192.168.5.64/26 via 192.168.5.5 proto dhcp src 192.168.5.[0-9]* metric 1024')
+ self.assertRegex(output, r'192.168.5.4 proto dhcp scope link src 192.168.5.[0-9]* metric 1024')
+ self.assertRegex(output, r'192.168.5.5 proto dhcp scope link src 192.168.5.[0-9]* metric 1024')
+ else:
+ self.assertRegex(output, r'192.168.5.0/24 proto dhcp scope link src 192.168.5.[0-9]* metric 1024')
+ self.assertRegex(output, r'8.0.0.0/8 via 192.168.5.3 proto dhcp src 192.168.5.[0-9]* metric 1024')
+ self.assertRegex(output, r'192.168.5.3 proto dhcp scope link src 192.168.5.[0-9]* metric 1024')
+ else:
+ self.assertNotRegex(output, r'default via 192.168.5.4 proto dhcp src 192.168.5.[0-9]* metric 1024')
+ self.assertNotRegex(output, r'8.0.0.0/8 via 192.168.5.5 proto dhcp src 192.168.5.[0-9]* metric 1024')
+ self.assertNotRegex(output, r'192.168.5.4 proto dhcp scope link src 192.168.5.[0-9]* metric 1024')
+ self.assertNotRegex(output, r'192.168.5.5 proto dhcp scope link src 192.168.5.[0-9]* metric 1024')
+ self.assertNotRegex(output, r'192.168.5.0/24 proto dhcp scope link src 192.168.5.[0-9]* metric 1024')
+ self.assertNotRegex(output, r'8.0.0.0/8 via 192.168.5.3 proto dhcp src 192.168.5.[0-9]* metric 1024')
+ self.assertNotRegex(output, r'192.168.5.3 proto dhcp scope link src 192.168.5.[0-9]* metric 1024')
+
+ # Check UseGateway=
+ if use_gateway and (not classless or not use_routes):
+ self.assertRegex(output, r'default via 192.168.5.1 proto dhcp src 192.168.5.[0-9]* metric 1024')
+ else:
+ self.assertNotRegex(output, r'default via 192.168.5.1 proto dhcp src 192.168.5.[0-9]* metric 1024')
+
+ # Check route to gateway
+ if (use_gateway or dns_and_ntp_routes) and (not classless or not use_routes):
+ self.assertRegex(output, r'192.168.5.1 proto dhcp scope link src 192.168.5.[0-9]* metric 1024')
+ else:
+ self.assertNotRegex(output, r'192.168.5.1 proto dhcp scope link src 192.168.5.[0-9]* metric 1024')
+
+ # Check RoutesToDNS= and RoutesToNTP=
+ if dns_and_ntp_routes:
+ self.assertRegex(output, r'192.168.5.10 proto dhcp scope link src 192.168.5.[0-9]* metric 1024')
+ self.assertRegex(output, r'192.168.5.11 proto dhcp scope link src 192.168.5.[0-9]* metric 1024')
+ if classless and use_routes:
+ self.assertRegex(output, r'8.8.8.8 via 192.168.5.4 proto dhcp src 192.168.5.[0-9]* metric 1024')
+ self.assertRegex(output, r'9.9.9.9 via 192.168.5.4 proto dhcp src 192.168.5.[0-9]* metric 1024')
+ else:
+ self.assertRegex(output, r'8.8.8.8 via 192.168.5.1 proto dhcp src 192.168.5.[0-9]* metric 1024')
+ self.assertRegex(output, r'9.9.9.9 via 192.168.5.1 proto dhcp src 192.168.5.[0-9]* metric 1024')
+ else:
+ self.assertNotRegex(output, r'192.168.5.10 proto dhcp scope link src 192.168.5.[0-9]* metric 1024')
+ self.assertNotRegex(output, r'192.168.5.11 proto dhcp scope link src 192.168.5.[0-9]* metric 1024')
+ self.assertNotRegex(output, r'8.8.8.8 via 192.168.5.[0-9]* proto dhcp src 192.168.5.[0-9]* metric 1024')
+ self.assertNotRegex(output, r'9.9.9.9 via 192.168.5.[0-9]* proto dhcp src 192.168.5.[0-9]* metric 1024')
+
+ # TODO: check json string
+ check_output(*networkctl_cmd, '--json=short', 'status', env=env)
+
+ def test_dhcp_client_settings_anonymize(self):
+ copy_network_unit('25-veth.netdev', '25-dhcp-server-veth-peer.network', '25-dhcp-client-anonymize.network')
+ start_networkd()
+ self.wait_online(['veth-peer:carrier'])
+ start_dnsmasq()
+ self.wait_online(['veth99:routable', 'veth-peer:routable'])
+
+ print('## dnsmasq log')
+ output = read_dnsmasq_log_file()
+ print(output)
+ self.assertNotIn('VendorClassIdentifier=SusantVendorTest', output)
+ self.assertNotIn('test-hostname', output)
+ self.assertNotIn('26:mtu', output)
+
+ def test_dhcp_keep_configuration_dhcp(self):
+ copy_network_unit('25-veth.netdev',
+ '25-dhcp-server-veth-peer.network',
+ '25-dhcp-client-keep-configuration-dhcp.network')
+ start_networkd()
+ self.wait_online(['veth-peer:carrier'])
+ start_dnsmasq()
+ self.wait_online(['veth99:routable', 'veth-peer:routable'])
+
+ output = check_output('ip address show dev veth99 scope global')
+ print(output)
+ self.assertRegex(output, r'inet 192.168.5.[0-9]*/24 metric 1024 brd 192.168.5.255 scope global veth99\n *'
+ 'valid_lft forever preferred_lft forever')
+
+ # Stopping dnsmasq as networkd won't be allowed to renew the DHCP lease.
+ stop_dnsmasq()
+
+ # Sleep for 120 sec as the dnsmasq minimum lease time can only be set to 120
+ print('Wait for the DHCP lease to be expired')
+ time.sleep(120)
+
+ # The lease address should be kept after the lease expired
+ output = check_output('ip address show dev veth99 scope global')
+ print(output)
+ self.assertRegex(output, r'inet 192.168.5.[0-9]*/24 metric 1024 brd 192.168.5.255 scope global veth99\n *'
+ 'valid_lft forever preferred_lft forever')
+
+ stop_networkd()
+
+ # The lease address should be kept after networkd stopped
+ output = check_output('ip address show dev veth99 scope global')
+ print(output)
+ self.assertRegex(output, r'inet 192.168.5.[0-9]*/24 metric 1024 brd 192.168.5.255 scope global veth99\n *'
+ 'valid_lft forever preferred_lft forever')
+
+ with open(os.path.join(network_unit_dir, '25-dhcp-client-keep-configuration-dhcp.network'), mode='a', encoding='utf-8') as f:
+ f.write('[Network]\nDHCP=no\n')
+
+ start_networkd()
+ self.wait_online(['veth99:routable', 'veth-peer:routable'])
+
+ # Still the lease address should be kept after networkd restarted
+ output = check_output('ip address show dev veth99 scope global')
+ print(output)
+ self.assertRegex(output, r'inet 192.168.5.[0-9]*/24 metric 1024 brd 192.168.5.255 scope global veth99\n *'
+ 'valid_lft forever preferred_lft forever')
+
+ def test_dhcp_keep_configuration_dhcp_on_stop(self):
+ copy_network_unit('25-veth.netdev',
+ '25-dhcp-server-veth-peer.network',
+ '25-dhcp-client-keep-configuration-dhcp-on-stop.network')
+ start_networkd()
+ self.wait_online(['veth-peer:carrier'])
+ start_dnsmasq()
+ self.wait_online(['veth99:routable', 'veth-peer:routable'])
+
+ output = check_output('ip address show dev veth99 scope global')
+ print(output)
+ self.assertRegex(output, r'inet 192.168.5.[0-9]*/24 metric 1024 brd 192.168.5.255 scope global dynamic veth99')
+
+ stop_dnsmasq()
+ stop_networkd()
+
+ output = check_output('ip address show dev veth99 scope global')
+ print(output)
+ self.assertRegex(output, r'inet 192.168.5.[0-9]*/24 metric 1024 brd 192.168.5.255 scope global dynamic veth99')
+
+ start_networkd()
+ self.wait_online(['veth-peer:routable'])
+
+ output = check_output('ip address show dev veth99 scope global')
+ print(output)
+ self.assertNotIn('192.168.5.', output)
+
+ def test_dhcp_client_reuse_address_as_static(self):
+ copy_network_unit('25-veth.netdev', '25-dhcp-server-veth-peer.network', '25-dhcp-client.network')
+ start_networkd()
+ self.wait_online(['veth-peer:carrier'])
+ start_dnsmasq()
+ self.wait_online(['veth99:routable', 'veth-peer:routable'])
+
+ # link become 'routable' when at least one protocol provide an valid address.
+ self.wait_address('veth99', r'inet 192.168.5.[0-9]*/24 metric 1024 brd 192.168.5.255 scope global dynamic', ipv='-4')
+ self.wait_address('veth99', r'inet6 2600::[0-9a-f]*/128 scope global (dynamic noprefixroute|noprefixroute dynamic)', ipv='-6')
+
+ output = check_output('ip address show dev veth99 scope global')
+ ipv4_address = re.search(r'192.168.5.[0-9]*/24', output).group()
+ ipv6_address = re.search(r'2600::[0-9a-f:]*/128', output).group()
+ static_network = '\n'.join(['[Match]', 'Name=veth99', '[Network]', 'IPv6AcceptRA=no', 'Address=' + ipv4_address, 'Address=' + ipv6_address])
+ print(static_network)
+
+ remove_network_unit('25-dhcp-client.network')
+
+ with open(os.path.join(network_unit_dir, '25-static.network'), mode='w', encoding='utf-8') as f:
+ f.write(static_network)
+
+ restart_networkd()
+ self.wait_online(['veth99:routable'])
+
+ output = check_output('ip -4 address show dev veth99 scope global')
+ print(output)
+ self.assertRegex(output, f'inet {ipv4_address} brd 192.168.5.255 scope global veth99\n *'
+ 'valid_lft forever preferred_lft forever')
+
+ output = check_output('ip -6 address show dev veth99 scope global')
+ print(output)
+ self.assertRegex(output, f'inet6 {ipv6_address} scope global *\n *'
+ 'valid_lft forever preferred_lft forever')
+
+ @expectedFailureIfModuleIsNotAvailable('vrf')
+ def test_dhcp_client_vrf(self):
+ copy_network_unit('25-veth.netdev', '25-dhcp-server-veth-peer.network', '25-dhcp-client-vrf.network',
+ '25-vrf.netdev', '25-vrf.network')
+ start_networkd()
+ self.wait_online(['veth-peer:carrier'])
+ start_dnsmasq()
+ self.wait_online(['veth99:routable', 'veth-peer:routable', 'vrf99:carrier'])
+
+ # link become 'routable' when at least one protocol provide an valid address.
+ self.wait_address('veth99', r'inet 192.168.5.[0-9]*/24 metric 1024 brd 192.168.5.255 scope global dynamic', ipv='-4')
+ self.wait_address('veth99', r'inet6 2600::[0-9a-f]*/128 scope global (dynamic noprefixroute|noprefixroute dynamic)', ipv='-6')
+
+ print('## ip -d link show dev vrf99')
+ output = check_output('ip -d link show dev vrf99')
+ print(output)
+ self.assertRegex(output, 'vrf table 42')
+
+ print('## ip address show vrf vrf99')
+ output = check_output('ip address show vrf vrf99')
+ print(output)
+ self.assertRegex(output, 'inet 192.168.5.[0-9]*/24 metric 1024 brd 192.168.5.255 scope global dynamic veth99')
+ self.assertRegex(output, 'inet6 2600::[0-9a-f]*/128 scope global (dynamic noprefixroute|noprefixroute dynamic)')
+ self.assertRegex(output, 'inet6 .* scope link')
+
+ print('## ip address show dev veth99')
+ output = check_output('ip address show dev veth99')
+ print(output)
+ self.assertRegex(output, 'inet 192.168.5.[0-9]*/24 metric 1024 brd 192.168.5.255 scope global dynamic veth99')
+ self.assertRegex(output, 'inet6 2600::[0-9a-f]*/128 scope global (dynamic noprefixroute|noprefixroute dynamic)')
+ self.assertRegex(output, 'inet6 .* scope link')
+
+ print('## ip route show vrf vrf99')
+ output = check_output('ip route show vrf vrf99')
+ print(output)
+ self.assertRegex(output, 'default via 192.168.5.1 dev veth99 proto dhcp src 192.168.5.')
+ self.assertRegex(output, '192.168.5.0/24 dev veth99 proto kernel scope link src 192.168.5')
+ self.assertRegex(output, '192.168.5.1 dev veth99 proto dhcp scope link src 192.168.5')
+
+ print('## ip route show table main dev veth99')
+ output = check_output('ip route show table main dev veth99')
+ print(output)
+ self.assertEqual(output, '')
+
+ def test_dhcp_client_gateway_onlink_implicit(self):
+ copy_network_unit('25-veth.netdev', '25-dhcp-server-veth-peer.network',
+ '25-dhcp-client-gateway-onlink-implicit.network')
+ start_networkd()
+ self.wait_online(['veth-peer:carrier'])
+ start_dnsmasq()
+ self.wait_online(['veth99:routable', 'veth-peer:routable'])
+
+ output = check_output(*networkctl_cmd, '-n', '0', 'status', 'veth99', env=env)
+ print(output)
+ self.assertRegex(output, '192.168.5')
+
+ output = check_output('ip route list dev veth99 10.0.0.0/8')
+ print(output)
+ self.assertRegex(output, 'onlink')
+ output = check_output('ip route list dev veth99 192.168.100.0/24')
+ print(output)
+ self.assertRegex(output, 'onlink')
+
+ def test_dhcp_client_with_ipv4ll(self):
+ copy_network_unit('25-veth.netdev', '25-dhcp-server-veth-peer.network',
+ '25-dhcp-client-with-ipv4ll.network')
+ start_networkd()
+ # we need to increase timeout above default, as this will need to wait for
+ # systemd-networkd to get the dhcpv4 transient failure event
+ self.wait_online(['veth99:degraded', 'veth-peer:routable'], timeout='60s')
+
+ output = check_output('ip -4 address show dev veth99')
+ print(output)
+ self.assertNotIn('192.168.5.', output)
+ self.assertIn('inet 169.254.133.11/16 metric 2048 brd 169.254.255.255 scope link', output)
+
+ start_dnsmasq()
+ print('Wait for a DHCP lease to be acquired and the IPv4LL address to be dropped')
+ self.wait_address('veth99', r'inet 192\.168\.5\.\d+/24 metric 1024 brd 192\.168\.5\.255 scope global dynamic', ipv='-4')
+ self.wait_address_dropped('veth99', r'inet 169\.254\.\d+\.\d+/16 metric 2048 brd 169\.254\.255\.255 scope link', scope='link', ipv='-4')
+ self.wait_online(['veth99:routable'])
+
+ output = check_output('ip -4 address show dev veth99')
+ print(output)
+ self.assertRegex(output, r'inet 192\.168\.5\.\d+/24 metric 1024 brd 192\.168\.5\.255 scope global dynamic veth99')
+ self.assertNotIn('169.254.', output)
+ self.assertNotIn('scope link', output)
+
+ stop_dnsmasq()
+ print('Wait for the DHCP lease to be expired and an IPv4LL address to be acquired')
+ self.wait_address_dropped('veth99', r'inet 192\.168\.5\.\d+/24 metric 1024 brd 192\.168\.5\.255 scope global dynamic', ipv='-4', timeout_sec=130)
+ self.wait_address('veth99', r'inet 169\.254\.133\.11/16 metric 2048 brd 169\.254\.255\.255 scope link', scope='link', ipv='-4')
+
+ output = check_output('ip -4 address show dev veth99')
+ print(output)
+ self.assertNotIn('192.168.5.', output)
+ self.assertIn('inet 169.254.133.11/16 metric 2048 brd 169.254.255.255 scope link', output)
+
+ def test_dhcp_client_use_dns(self):
+ def check(self, ipv4, ipv6):
+ os.makedirs(os.path.join(network_unit_dir, '25-dhcp-client.network.d'), exist_ok=True)
+ with open(os.path.join(network_unit_dir, '25-dhcp-client.network.d/override.conf'), mode='w', encoding='utf-8') as f:
+ f.write('[DHCPv4]\nUseDNS=')
+ f.write('yes' if ipv4 else 'no')
+ f.write('\n[DHCPv6]\nUseDNS=')
+ f.write('yes' if ipv6 else 'no')
+ f.write('\n[IPv6AcceptRA]\nUseDNS=no')
+
+ networkctl_reload()
+ self.wait_online(['veth99:routable'])
+
+ # link becomes 'routable' when at least one protocol provide an valid address. Hence, we need to explicitly wait for both addresses.
+ self.wait_address('veth99', r'inet 192.168.5.[0-9]*/24 metric 1024 brd 192.168.5.255 scope global dynamic', ipv='-4')
+ self.wait_address('veth99', r'inet6 2600::[0-9a-f]*/128 scope global (dynamic noprefixroute|noprefixroute dynamic)', ipv='-6')
+
+ # make resolved re-read the link state file
+ check_output(*resolvectl_cmd, 'revert', 'veth99', env=env)
+
+ output = check_output(*resolvectl_cmd, 'dns', 'veth99', env=env)
+ print(output)
+ if ipv4:
+ self.assertIn('192.168.5.1', output)
+ else:
+ self.assertNotIn('192.168.5.1', output)
+ if ipv6:
+ self.assertIn('2600::1', output)
+ else:
+ self.assertNotIn('2600::1', output)
+
+ # TODO: check json string
+ check_output(*networkctl_cmd, '--json=short', 'status', env=env)
+
+ copy_network_unit('25-veth.netdev', '25-dhcp-server-veth-peer.network', '25-dhcp-client.network', copy_dropins=False)
+
+ start_networkd()
+ self.wait_online(['veth-peer:carrier'])
+ start_dnsmasq('--dhcp-option=option:dns-server,192.168.5.1',
+ '--dhcp-option=option6:dns-server,[2600::1]')
+
+ check(self, True, True)
+ check(self, True, False)
+ check(self, False, True)
+ check(self, False, False)
+
+class NetworkdDHCPPDTests(unittest.TestCase, Utilities):
+
+ def setUp(self):
+ setup_common()
+
+ def tearDown(self):
+ tear_down_common()
+
+ def test_dhcp6pd(self):
+ copy_network_unit('25-veth.netdev', '25-dhcp6pd-server.network', '25-dhcp6pd-upstream.network',
+ '25-veth-downstream-veth97.netdev', '25-dhcp-pd-downstream-veth97.network', '25-dhcp-pd-downstream-veth97-peer.network',
+ '25-veth-downstream-veth98.netdev', '25-dhcp-pd-downstream-veth98.network', '25-dhcp-pd-downstream-veth98-peer.network',
+ '11-dummy.netdev', '25-dhcp-pd-downstream-test1.network',
+ '25-dhcp-pd-downstream-dummy97.network',
+ '12-dummy.netdev', '25-dhcp-pd-downstream-dummy98.network',
+ '13-dummy.netdev', '25-dhcp-pd-downstream-dummy99.network')
+
+ start_networkd()
+ self.wait_online(['veth-peer:routable'])
+ start_isc_dhcpd(conf_file='isc-dhcpd-dhcp6pd.conf', ipv='-6')
+ self.wait_online(['veth99:routable', 'test1:routable', 'dummy98:routable', 'dummy99:degraded',
+ 'veth97:routable', 'veth97-peer:routable', 'veth98:routable', 'veth98-peer:routable'])
+
+ print('### ip -6 address show dev veth-peer scope global')
+ output = check_output('ip -6 address show dev veth-peer scope global')
+ print(output)
+ self.assertIn('inet6 3ffe:501:ffff:100::1/64 scope global', output)
+
+ # Link Subnet IDs
+ # test1: 0x00
+ # dummy97: 0x01 (The link will appear later)
+ # dummy98: 0x00
+ # dummy99: auto -> 0x02 (No address assignment)
+ # veth97: 0x08
+ # veth98: 0x09
+ # veth99: 0x10
+
+ print('### ip -6 address show dev veth99 scope global')
+ output = check_output('ip -6 address show dev veth99 scope global')
+ print(output)
+ # IA_NA
+ self.assertRegex(output, 'inet6 3ffe:501:ffff:100::[0-9]*/128 scope global (dynamic noprefixroute|noprefixroute dynamic)')
+ # address in IA_PD (Token=static)
+ self.assertRegex(output, 'inet6 3ffe:501:ffff:[2-9a-f]10:1a:2b:3c:4d/64 (metric 256 |)scope global dynamic')
+ # address in IA_PD (Token=eui64)
+ self.assertRegex(output, 'inet6 3ffe:501:ffff:[2-9a-f]10:1034:56ff:fe78:9abc/64 (metric 256 |)scope global dynamic')
+ # address in IA_PD (temporary)
+ # Note that the temporary addresses may appear after the link enters configured state
+ self.wait_address('veth99', 'inet6 3ffe:501:ffff:[2-9a-f]10:[0-9a-f]*:[0-9a-f]*:[0-9a-f]*:[0-9a-f]*/64 (metric 256 |)scope global temporary dynamic', ipv='-6')
+
+ print('### ip -6 address show dev test1 scope global')
+ output = check_output('ip -6 address show dev test1 scope global')
+ print(output)
+ # address in IA_PD (Token=static)
+ self.assertRegex(output, 'inet6 3ffe:501:ffff:[2-9a-f]00:1a:2b:3c:4d/64 (metric 256 |)scope global dynamic mngtmpaddr')
+ # address in IA_PD (temporary)
+ self.wait_address('test1', 'inet6 3ffe:501:ffff:[2-9a-f]00:[0-9a-f]*:[0-9a-f]*:[0-9a-f]*:[0-9a-f]*/64 (metric 256 |)scope global temporary dynamic', ipv='-6')
+
+ print('### ip -6 address show dev dummy98 scope global')
+ output = check_output('ip -6 address show dev dummy98 scope global')
+ print(output)
+ # address in IA_PD (Token=static)
+ self.assertRegex(output, 'inet6 3ffe:501:ffff:[2-9a-f]00:1a:2b:3c:4d/64 (metric 256 |)scope global dynamic mngtmpaddr')
+ # address in IA_PD (temporary)
+ self.wait_address('dummy98', 'inet6 3ffe:501:ffff:[2-9a-f]00:[0-9a-f]*:[0-9a-f]*:[0-9a-f]*:[0-9a-f]*/64 (metric 256 |)scope global temporary dynamic', ipv='-6')
+
+ print('### ip -6 address show dev dummy99 scope global')
+ output = check_output('ip -6 address show dev dummy99 scope global')
+ print(output)
+ # Assign=no
+ self.assertNotRegex(output, 'inet6 3ffe:501:ffff:[2-9a-f]02')
+
+ print('### ip -6 address show dev veth97 scope global')
+ output = check_output('ip -6 address show dev veth97 scope global')
+ print(output)
+ # address in IA_PD (Token=static)
+ self.assertRegex(output, 'inet6 3ffe:501:ffff:[2-9a-f]08:1a:2b:3c:4d/64 (metric 256 |)scope global dynamic mngtmpaddr')
+ # address in IA_PD (Token=eui64)
+ self.assertRegex(output, 'inet6 3ffe:501:ffff:[2-9a-f]08:1034:56ff:fe78:9ace/64 (metric 256 |)scope global dynamic mngtmpaddr')
+ # address in IA_PD (temporary)
+ self.wait_address('veth97', 'inet6 3ffe:501:ffff:[2-9a-f]08:[0-9a-f]*:[0-9a-f]*:[0-9a-f]*:[0-9a-f]*/64 (metric 256 |)scope global temporary dynamic', ipv='-6')
+
+ print('### ip -6 address show dev veth97-peer scope global')
+ output = check_output('ip -6 address show dev veth97-peer scope global')
+ print(output)
+ # NDisc address (Token=static)
+ self.assertRegex(output, 'inet6 3ffe:501:ffff:[2-9a-f]08:1a:2b:3c:4e/64 (metric 256 |)scope global dynamic mngtmpaddr')
+ # NDisc address (Token=eui64)
+ self.assertRegex(output, 'inet6 3ffe:501:ffff:[2-9a-f]08:1034:56ff:fe78:9acf/64 (metric 256 |)scope global dynamic mngtmpaddr')
+ # NDisc address (temporary)
+ self.wait_address('veth97-peer', 'inet6 3ffe:501:ffff:[2-9a-f]08:[0-9a-f]*:[0-9a-f]*:[0-9a-f]*:[0-9a-f]*/64 (metric 256 |)scope global temporary dynamic', ipv='-6')
+
+ print('### ip -6 address show dev veth98 scope global')
+ output = check_output('ip -6 address show dev veth98 scope global')
+ print(output)
+ # address in IA_PD (Token=static)
+ self.assertRegex(output, 'inet6 3ffe:501:ffff:[2-9a-f]09:1a:2b:3c:4d/64 (metric 256 |)scope global dynamic mngtmpaddr')
+ # address in IA_PD (Token=eui64)
+ self.assertRegex(output, 'inet6 3ffe:501:ffff:[2-9a-f]09:1034:56ff:fe78:9abe/64 (metric 256 |)scope global dynamic mngtmpaddr')
+ # address in IA_PD (temporary)
+ self.wait_address('veth98', 'inet6 3ffe:501:ffff:[2-9a-f]09:[0-9a-f]*:[0-9a-f]*:[0-9a-f]*:[0-9a-f]*/64 (metric 256 |)scope global temporary dynamic', ipv='-6')
+
+ print('### ip -6 address show dev veth98-peer scope global')
+ output = check_output('ip -6 address show dev veth98-peer scope global')
+ print(output)
+ # NDisc address (Token=static)
+ self.assertRegex(output, 'inet6 3ffe:501:ffff:[2-9a-f]09:1a:2b:3c:4e/64 (metric 256 |)scope global dynamic mngtmpaddr')
+ # NDisc address (Token=eui64)
+ self.assertRegex(output, 'inet6 3ffe:501:ffff:[2-9a-f]09:1034:56ff:fe78:9abf/64 (metric 256 |)scope global dynamic mngtmpaddr')
+ # NDisc address (temporary)
+ self.wait_address('veth98-peer', 'inet6 3ffe:501:ffff:[2-9a-f]09:[0-9a-f]*:[0-9a-f]*:[0-9a-f]*:[0-9a-f]*/64 (metric 256 |)scope global temporary dynamic', ipv='-6')
+
+ print('### ip -6 route show type unreachable')
+ output = check_output('ip -6 route show type unreachable')
+ print(output)
+ self.assertRegex(output, 'unreachable 3ffe:501:ffff:[2-9a-f]00::/56 dev lo proto dhcp')
+
+ print('### ip -6 route show dev veth99')
+ output = check_output('ip -6 route show dev veth99')
+ print(output)
+ self.assertRegex(output, '3ffe:501:ffff:[2-9a-f]10::/64 proto kernel metric [0-9]* expires')
+
+ print('### ip -6 route show dev test1')
+ output = check_output('ip -6 route show dev test1')
+ print(output)
+ self.assertRegex(output, '3ffe:501:ffff:[2-9a-f]00::/64 proto kernel metric [0-9]* expires')
+
+ print('### ip -6 route show dev dummy98')
+ output = check_output('ip -6 route show dev dummy98')
+ print(output)
+ self.assertRegex(output, '3ffe:501:ffff:[2-9a-f]00::/64 proto kernel metric [0-9]* expires')
+
+ print('### ip -6 route show dev dummy99')
+ output = check_output('ip -6 route show dev dummy99')
+ print(output)
+ self.assertRegex(output, '3ffe:501:ffff:[2-9a-f]02::/64 proto dhcp metric [0-9]* expires')
+
+ print('### ip -6 route show dev veth97')
+ output = check_output('ip -6 route show dev veth97')
+ print(output)
+ self.assertRegex(output, '3ffe:501:ffff:[2-9a-f]08::/64 proto kernel metric [0-9]* expires')
+
+ print('### ip -6 route show dev veth97-peer')
+ output = check_output('ip -6 route show dev veth97-peer')
+ print(output)
+ self.assertRegex(output, '3ffe:501:ffff:[2-9a-f]08::/64 proto ra metric [0-9]* expires')
+
+ print('### ip -6 route show dev veth98')
+ output = check_output('ip -6 route show dev veth98')
+ print(output)
+ self.assertRegex(output, '3ffe:501:ffff:[2-9a-f]09::/64 proto kernel metric [0-9]* expires')
+
+ print('### ip -6 route show dev veth98-peer')
+ output = check_output('ip -6 route show dev veth98-peer')
+ print(output)
+ self.assertRegex(output, '3ffe:501:ffff:[2-9a-f]09::/64 proto ra metric [0-9]* expires')
+
+ # Test case for a downstream which appears later
+ check_output('ip link add dummy97 type dummy')
+ self.wait_online(['dummy97:routable'])
+
+ print('### ip -6 address show dev dummy97 scope global')
+ output = check_output('ip -6 address show dev dummy97 scope global')
+ print(output)
+ # address in IA_PD (Token=static)
+ self.assertRegex(output, 'inet6 3ffe:501:ffff:[2-9a-f]01:1a:2b:3c:4d/64 (metric 256 |)scope global dynamic mngtmpaddr')
+ # address in IA_PD (temporary)
+ self.wait_address('dummy97', 'inet6 3ffe:501:ffff:[2-9a-f]01:[0-9a-f]*:[0-9a-f]*:[0-9a-f]*:[0-9a-f]*/64 (metric 256 |)scope global temporary dynamic', ipv='-6')
+
+ print('### ip -6 route show dev dummy97')
+ output = check_output('ip -6 route show dev dummy97')
+ print(output)
+ self.assertRegex(output, '3ffe:501:ffff:[2-9a-f]01::/64 proto kernel metric [0-9]* expires')
+
+ # Test case for reconfigure
+ networkctl_reconfigure('dummy98', 'dummy99')
+ self.wait_online(['dummy98:routable', 'dummy99:degraded'])
+
+ print('### ip -6 address show dev dummy98 scope global')
+ output = check_output('ip -6 address show dev dummy98 scope global')
+ print(output)
+ # address in IA_PD (Token=static)
+ self.assertRegex(output, 'inet6 3ffe:501:ffff:[2-9a-f]00:1a:2b:3c:4d/64 (metric 256 |)scope global dynamic mngtmpaddr')
+ # address in IA_PD (temporary)
+ self.wait_address('dummy98', 'inet6 3ffe:501:ffff:[2-9a-f]00:[0-9a-f]*:[0-9a-f]*:[0-9a-f]*:[0-9a-f]*/64 (metric 256 |)scope global temporary dynamic', ipv='-6')
+
+ print('### ip -6 address show dev dummy99 scope global')
+ output = check_output('ip -6 address show dev dummy99 scope global')
+ print(output)
+ # Assign=no
+ self.assertNotRegex(output, 'inet6 3ffe:501:ffff:[2-9a-f]02')
+
+ print('### ip -6 route show dev dummy98')
+ output = check_output('ip -6 route show dev dummy98')
+ print(output)
+ self.assertRegex(output, '3ffe:501:ffff:[2-9a-f]00::/64 proto kernel metric [0-9]* expires')
+
+ print('### ip -6 route show dev dummy99')
+ output = check_output('ip -6 route show dev dummy99')
+ print(output)
+ self.assertRegex(output, '3ffe:501:ffff:[2-9a-f]02::/64 proto dhcp metric [0-9]* expires')
+
+ self.check_netlabel('dummy98', '3ffe:501:ffff:[2-9a-f]00::/64')
+
+ def verify_dhcp4_6rd(self, tunnel_name):
+ print('### ip -4 address show dev veth-peer scope global')
+ output = check_output('ip -4 address show dev veth-peer scope global')
+ print(output)
+ self.assertIn('inet 10.0.0.1/8 brd 10.255.255.255 scope global veth-peer', output)
+
+ # Link Subnet IDs
+ # test1: 0x00
+ # dummy97: 0x01 (The link will appear later)
+ # dummy98: 0x00
+ # dummy99: auto -> 0x0[23] (No address assignment)
+ # 6rd-XXX: auto -> 0x0[23]
+ # veth97: 0x08
+ # veth98: 0x09
+ # veth99: 0x10
+
+ print('### ip -4 address show dev veth99 scope global')
+ output = check_output('ip -4 address show dev veth99 scope global')
+ print(output)
+ self.assertRegex(output, 'inet 10.100.100.[0-9]*/8 (metric 1024 |)brd 10.255.255.255 scope global dynamic veth99')
+
+ print('### ip -6 address show dev veth99 scope global')
+ output = check_output('ip -6 address show dev veth99 scope global')
+ print(output)
+ # address in IA_PD (Token=static)
+ self.assertRegex(output, 'inet6 2001:db8:6464:[0-9a-f]+10:1a:2b:3c:4d/64 (metric 256 |)scope global dynamic mngtmpaddr')
+ # address in IA_PD (Token=eui64)
+ self.assertRegex(output, 'inet6 2001:db8:6464:[0-9a-f]+10:1034:56ff:fe78:9abc/64 (metric 256 |)scope global dynamic mngtmpaddr')
+ # address in IA_PD (temporary)
+ # Note that the temporary addresses may appear after the link enters configured state
+ self.wait_address('veth99', 'inet6 2001:db8:6464:[0-9a-f]+10:[0-9a-f]*:[0-9a-f]*:[0-9a-f]*:[0-9a-f]*/64 (metric 256 |)scope global temporary dynamic', ipv='-6')
+
+ print('### ip -6 address show dev test1 scope global')
+ output = check_output('ip -6 address show dev test1 scope global')
+ print(output)
+ # address in IA_PD (Token=static)
+ self.assertRegex(output, 'inet6 2001:db8:6464:[0-9a-f]+00:1a:2b:3c:4d/64 (metric 256 |)scope global dynamic mngtmpaddr')
+ # address in IA_PD (temporary)
+ self.wait_address('test1', 'inet6 2001:db8:6464:[0-9a-f]+00:[0-9a-f]*:[0-9a-f]*:[0-9a-f]*:[0-9a-f]*/64 (metric 256 |)scope global temporary dynamic', ipv='-6')
+
+ print('### ip -6 address show dev dummy98 scope global')
+ output = check_output('ip -6 address show dev dummy98 scope global')
+ print(output)
+ # address in IA_PD (Token=static)
+ self.assertRegex(output, 'inet6 2001:db8:6464:[0-9a-f]+00:1a:2b:3c:4d/64 (metric 256 |)scope global dynamic mngtmpaddr')
+ # address in IA_PD (temporary)
+ self.wait_address('dummy98', 'inet6 2001:db8:6464:[0-9a-f]+00:[0-9a-f]*:[0-9a-f]*:[0-9a-f]*:[0-9a-f]*/64 (metric 256 |)scope global temporary dynamic', ipv='-6')
+
+ print('### ip -6 address show dev dummy99 scope global')
+ output = check_output('ip -6 address show dev dummy99 scope global')
+ print(output)
+ # Assign=no
+ self.assertNotRegex(output, 'inet6 2001:db8:6464:[0-9a-f]+0[23]')
+
+ print('### ip -6 address show dev veth97 scope global')
+ output = check_output('ip -6 address show dev veth97 scope global')
+ print(output)
+ # address in IA_PD (Token=static)
+ self.assertRegex(output, 'inet6 2001:db8:6464:[0-9a-f]+08:1a:2b:3c:4d/64 (metric 256 |)scope global dynamic mngtmpaddr')
+ # address in IA_PD (Token=eui64)
+ self.assertRegex(output, 'inet6 2001:db8:6464:[0-9a-f]+08:1034:56ff:fe78:9ace/64 (metric 256 |)scope global dynamic mngtmpaddr')
+ # address in IA_PD (temporary)
+ self.wait_address('veth97', 'inet6 2001:db8:6464:[0-9a-f]+08:[0-9a-f]*:[0-9a-f]*:[0-9a-f]*:[0-9a-f]*/64 (metric 256 |)scope global temporary dynamic', ipv='-6')
+
+ print('### ip -6 address show dev veth97-peer scope global')
+ output = check_output('ip -6 address show dev veth97-peer scope global')
+ print(output)
+ # NDisc address (Token=static)
+ self.assertRegex(output, 'inet6 2001:db8:6464:[0-9a-f]+08:1a:2b:3c:4e/64 (metric 256 |)scope global dynamic mngtmpaddr')
+ # NDisc address (Token=eui64)
+ self.assertRegex(output, 'inet6 2001:db8:6464:[0-9a-f]+08:1034:56ff:fe78:9acf/64 (metric 256 |)scope global dynamic mngtmpaddr')
+ # NDisc address (temporary)
+ self.wait_address('veth97-peer', 'inet6 2001:db8:6464:[0-9a-f]+08:[0-9a-f]*:[0-9a-f]*:[0-9a-f]*:[0-9a-f]*/64 (metric 256 |)scope global temporary dynamic', ipv='-6')
+
+ print('### ip -6 address show dev veth98 scope global')
+ output = check_output('ip -6 address show dev veth98 scope global')
+ print(output)
+ # address in IA_PD (Token=static)
+ self.assertRegex(output, 'inet6 2001:db8:6464:[0-9a-f]+09:1a:2b:3c:4d/64 (metric 256 |)scope global dynamic mngtmpaddr')
+ # address in IA_PD (Token=eui64)
+ self.assertRegex(output, 'inet6 2001:db8:6464:[0-9a-f]+09:1034:56ff:fe78:9abe/64 (metric 256 |)scope global dynamic mngtmpaddr')
+ # address in IA_PD (temporary)
+ self.wait_address('veth98', 'inet6 2001:db8:6464:[0-9a-f]+09:[0-9a-f]*:[0-9a-f]*:[0-9a-f]*:[0-9a-f]*/64 (metric 256 |)scope global temporary dynamic', ipv='-6')
+
+ print('### ip -6 address show dev veth98-peer scope global')
+ output = check_output('ip -6 address show dev veth98-peer scope global')
+ print(output)
+ # NDisc address (Token=static)
+ self.assertRegex(output, 'inet6 2001:db8:6464:[0-9a-f]+09:1a:2b:3c:4e/64 (metric 256 |)scope global dynamic mngtmpaddr')
+ # NDisc address (Token=eui64)
+ self.assertRegex(output, 'inet6 2001:db8:6464:[0-9a-f]+09:1034:56ff:fe78:9abf/64 (metric 256 |)scope global dynamic mngtmpaddr')
+ # NDisc address (temporary)
+ self.wait_address('veth98-peer', 'inet6 2001:db8:6464:[0-9a-f]+09:[0-9a-f]*:[0-9a-f]*:[0-9a-f]*:[0-9a-f]*/64 (metric 256 |)scope global temporary dynamic', ipv='-6')
+
+ print('### ip -6 route show type unreachable')
+ output = check_output('ip -6 route show type unreachable')
+ print(output)
+ self.assertRegex(output, 'unreachable 2001:db8:6464:[0-9a-f]+00::/56 dev lo proto dhcp')
+
+ print('### ip -6 route show dev veth99')
+ output = check_output('ip -6 route show dev veth99')
+ print(output)
+ self.assertRegex(output, '2001:db8:6464:[0-9a-f]+10::/64 proto kernel metric [0-9]* expires')
+
+ print('### ip -6 route show dev test1')
+ output = check_output('ip -6 route show dev test1')
+ print(output)
+ self.assertRegex(output, '2001:db8:6464:[0-9a-f]+00::/64 proto kernel metric [0-9]* expires')
+
+ print('### ip -6 route show dev dummy98')
+ output = check_output('ip -6 route show dev dummy98')
+ print(output)
+ self.assertRegex(output, '2001:db8:6464:[0-9a-f]+00::/64 proto kernel metric [0-9]* expires')
+
+ print('### ip -6 route show dev dummy99')
+ output = check_output('ip -6 route show dev dummy99')
+ print(output)
+ self.assertRegex(output, '2001:db8:6464:[0-9a-f]+0[23]::/64 proto dhcp metric [0-9]* expires')
+
+ print('### ip -6 route show dev veth97')
+ output = check_output('ip -6 route show dev veth97')
+ print(output)
+ self.assertRegex(output, '2001:db8:6464:[0-9a-f]+08::/64 proto kernel metric [0-9]* expires')
+
+ print('### ip -6 route show dev veth97-peer')
+ output = check_output('ip -6 route show dev veth97-peer')
+ print(output)
+ self.assertRegex(output, '2001:db8:6464:[0-9a-f]+08::/64 proto ra metric [0-9]* expires')
+
+ print('### ip -6 route show dev veth98')
+ output = check_output('ip -6 route show dev veth98')
+ print(output)
+ self.assertRegex(output, '2001:db8:6464:[0-9a-f]+09::/64 proto kernel metric [0-9]* expires')
+
+ print('### ip -6 route show dev veth98-peer')
+ output = check_output('ip -6 route show dev veth98-peer')
+ print(output)
+ self.assertRegex(output, '2001:db8:6464:[0-9a-f]+09::/64 proto ra metric [0-9]* expires')
+
+ print('### ip -6 address show dev dummy97 scope global')
+ output = check_output('ip -6 address show dev dummy97 scope global')
+ print(output)
+ # address in IA_PD (Token=static)
+ self.assertRegex(output, 'inet6 2001:db8:6464:[0-9a-f]+01:1a:2b:3c:4d/64 (metric 256 |)scope global dynamic mngtmpaddr')
+ # address in IA_PD (temporary)
+ self.wait_address('dummy97', 'inet6 2001:db8:6464:[0-9a-f]+01:[0-9a-f]*:[0-9a-f]*:[0-9a-f]*:[0-9a-f]*/64 (metric 256 |)scope global temporary dynamic', ipv='-6')
+
+ print('### ip -6 route show dev dummy97')
+ output = check_output('ip -6 route show dev dummy97')
+ print(output)
+ self.assertRegex(output, '2001:db8:6464:[0-9a-f]+01::/64 proto kernel metric [0-9]* expires')
+
+ print(f'### ip -d link show dev {tunnel_name}')
+ output = check_output(f'ip -d link show dev {tunnel_name}')
+ print(output)
+ self.assertIn('link/sit 10.100.100.', output)
+ self.assertIn('local 10.100.100.', output)
+ self.assertIn('ttl 64', output)
+ self.assertIn('6rd-prefix 2001:db8::/32', output)
+ self.assertIn('6rd-relay_prefix 10.0.0.0/8', output)
+
+ print(f'### ip -6 address show dev {tunnel_name}')
+ output = check_output(f'ip -6 address show dev {tunnel_name}')
+ print(output)
+ self.assertRegex(output, 'inet6 2001:db8:6464:[0-9a-f]+0[23]:[0-9a-f]*:[0-9a-f]*:[0-9a-f]*:[0-9a-f]*/64 (metric 256 |)scope global dynamic')
+ self.assertRegex(output, 'inet6 ::10.100.100.[0-9]+/96 scope global')
+
+ print(f'### ip -6 route show dev {tunnel_name}')
+ output = check_output(f'ip -6 route show dev {tunnel_name}')
+ print(output)
+ self.assertRegex(output, '2001:db8:6464:[0-9a-f]+0[23]::/64 proto kernel metric [0-9]* expires')
+ self.assertRegex(output, '::/96 proto kernel metric [0-9]*')
+
+ print('### ip -6 route show default')
+ output = check_output('ip -6 route show default')
+ print(output)
+ self.assertIn('default', output)
+ self.assertIn(f'via ::10.0.0.1 dev {tunnel_name}', output)
+
+ def test_dhcp4_6rd(self):
+ copy_network_unit('25-veth.netdev', '25-dhcp4-6rd-server.network', '25-dhcp4-6rd-upstream.network',
+ '25-veth-downstream-veth97.netdev', '25-dhcp-pd-downstream-veth97.network', '25-dhcp-pd-downstream-veth97-peer.network',
+ '25-veth-downstream-veth98.netdev', '25-dhcp-pd-downstream-veth98.network', '25-dhcp-pd-downstream-veth98-peer.network',
+ '11-dummy.netdev', '25-dhcp-pd-downstream-test1.network',
+ '25-dhcp-pd-downstream-dummy97.network',
+ '12-dummy.netdev', '25-dhcp-pd-downstream-dummy98.network',
+ '13-dummy.netdev', '25-dhcp-pd-downstream-dummy99.network',
+ '80-6rd-tunnel.network')
+
+ start_networkd()
+ self.wait_online(['veth-peer:routable'])
+
+ # ipv4masklen: 8
+ # 6rd-prefix: 2001:db8::/32
+ # br-addresss: 10.0.0.1
+
+ start_dnsmasq('--dhcp-option=212,08:20:20:01:0d:b8:00:00:00:00:00:00:00:00:00:00:00:00:0a:00:00:01',
+ ipv4_range='10.100.100.100,10.100.100.200',
+ ipv4_router='10.0.0.1')
+ self.wait_online(['veth99:routable', 'test1:routable', 'dummy98:routable', 'dummy99:degraded',
+ 'veth97:routable', 'veth97-peer:routable', 'veth98:routable', 'veth98-peer:routable'])
+
+ # Test case for a downstream which appears later
+ check_output('ip link add dummy97 type dummy')
+ self.wait_online(['dummy97:routable'])
+
+ # Find tunnel name
+ tunnel_name = None
+ for name in os.listdir('/sys/class/net/'):
+ if name.startswith('6rd-'):
+ tunnel_name = name
+ break
+
+ self.wait_online([f'{tunnel_name}:routable'])
+
+ self.verify_dhcp4_6rd(tunnel_name)
+
+ # Test case for reconfigure
+ networkctl_reconfigure('dummy98', 'dummy99')
+ self.wait_online(['dummy98:routable', 'dummy99:degraded'])
+
+ self.verify_dhcp4_6rd(tunnel_name)
+
+ print('Wait for the DHCP lease to be renewed/rebind')
+ time.sleep(120)
+
+ self.wait_online(['veth99:routable', 'test1:routable', 'dummy97:routable', 'dummy98:routable', 'dummy99:degraded',
+ 'veth97:routable', 'veth97-peer:routable', 'veth98:routable', 'veth98-peer:routable'])
+
+ self.verify_dhcp4_6rd(tunnel_name)
+
+class NetworkdIPv6PrefixTests(unittest.TestCase, Utilities):
+
+ def setUp(self):
+ setup_common()
+
+ def tearDown(self):
+ tear_down_common()
+
+ def test_ipv6_route_prefix(self):
+ copy_network_unit('25-veth.netdev', '25-ipv6ra-prefix-client.network', '25-ipv6ra-prefix.network',
+ '12-dummy.netdev', '25-ipv6ra-uplink.network')
+
+ start_networkd()
+ self.wait_online(['veth99:routable', 'veth-peer:routable', 'dummy98:routable'])
+
+ output = check_output('ip address show dev veth-peer')
+ print(output)
+ self.assertIn('inet6 2001:db8:0:1:', output)
+ self.assertNotIn('inet6 2001:db8:0:2:', output)
+ self.assertNotIn('inet6 2001:db8:0:3:', output)
+
+ output = check_output('ip -6 route show dev veth-peer')
+ print(output)
+ self.assertIn('2001:db8:0:1::/64 proto ra', output)
+ self.assertNotIn('2001:db8:0:2::/64 proto ra', output)
+ self.assertNotIn('2001:db8:0:3::/64 proto ra', output)
+ self.assertIn('2001:db0:fff::/64 via ', output)
+ self.assertNotIn('2001:db1:fff::/64 via ', output)
+ self.assertNotIn('2001:db2:fff::/64 via ', output)
+
+ output = check_output('ip address show dev veth99')
+ print(output)
+ self.assertNotIn('inet6 2001:db8:0:1:', output)
+ self.assertIn('inet6 2001:db8:0:2:1a:2b:3c:4d', output)
+ self.assertIn('inet6 2001:db8:0:2:fa:de:ca:fe', output)
+ self.assertNotIn('inet6 2001:db8:0:3:', output)
+
+ output = check_output(*resolvectl_cmd, 'dns', 'veth-peer', env=env)
+ print(output)
+ self.assertRegex(output, '2001:db8:1:1::2')
+
+ output = check_output(*resolvectl_cmd, 'domain', 'veth-peer', env=env)
+ print(output)
+ self.assertIn('example.com', output)
+
+ # TODO: check json string
+ check_output(*networkctl_cmd, '--json=short', 'status', env=env)
+
+ def test_ipv6_route_prefix_deny_list(self):
+ copy_network_unit('25-veth.netdev', '25-ipv6ra-prefix-client-deny-list.network', '25-ipv6ra-prefix.network',
+ '12-dummy.netdev', '25-ipv6ra-uplink.network')
+
+ start_networkd()
+ self.wait_online(['veth99:routable', 'veth-peer:routable', 'dummy98:routable'])
+
+ output = check_output('ip address show dev veth-peer')
+ print(output)
+ self.assertIn('inet6 2001:db8:0:1:', output)
+ self.assertNotIn('inet6 2001:db8:0:2:', output)
+
+ output = check_output('ip -6 route show dev veth-peer')
+ print(output)
+ self.assertIn('2001:db8:0:1::/64 proto ra', output)
+ self.assertNotIn('2001:db8:0:2::/64 proto ra', output)
+ self.assertIn('2001:db0:fff::/64 via ', output)
+ self.assertNotIn('2001:db1:fff::/64 via ', output)
+
+ output = check_output('ip address show dev veth99')
+ print(output)
+ self.assertNotIn('inet6 2001:db8:0:1:', output)
+ self.assertIn('inet6 2001:db8:0:2:', output)
+
+ output = check_output(*resolvectl_cmd, 'dns', 'veth-peer', env=env)
+ print(output)
+ self.assertRegex(output, '2001:db8:1:1::2')
+
+ output = check_output(*resolvectl_cmd, 'domain', 'veth-peer', env=env)
+ print(output)
+ self.assertIn('example.com', output)
+
+class NetworkdMTUTests(unittest.TestCase, Utilities):
+
+ def setUp(self):
+ setup_common()
+
+ def tearDown(self):
+ tear_down_common()
+
+ def check_mtu(self, mtu, ipv6_mtu=None, reset=True):
+ if not ipv6_mtu:
+ ipv6_mtu = mtu
+
+ # test normal start
+ start_networkd()
+ self.wait_online(['dummy98:routable'])
+ self.check_link_attr('dummy98', 'mtu', mtu)
+ self.check_ipv6_sysctl_attr('dummy98', 'mtu', ipv6_mtu)
+
+ # test normal restart
+ restart_networkd()
+ self.wait_online(['dummy98:routable'])
+ self.check_link_attr('dummy98', 'mtu', mtu)
+ self.check_ipv6_sysctl_attr('dummy98', 'mtu', ipv6_mtu)
+
+ if reset:
+ self.reset_check_mtu(mtu, ipv6_mtu)
+
+ def reset_check_mtu(self, mtu, ipv6_mtu=None):
+ ''' test setting mtu/ipv6_mtu with interface already up '''
+ stop_networkd()
+
+ # note - changing the device mtu resets the ipv6 mtu
+ check_output('ip link set up mtu 1501 dev dummy98')
+ check_output('ip link set up mtu 1500 dev dummy98')
+ self.check_link_attr('dummy98', 'mtu', '1500')
+ self.check_ipv6_sysctl_attr('dummy98', 'mtu', '1500')
+
+ self.check_mtu(mtu, ipv6_mtu, reset=False)
+
+ def test_mtu_network(self):
+ copy_network_unit('12-dummy.netdev', '12-dummy.network.d/mtu.conf')
+ self.check_mtu('1600')
+
+ def test_mtu_netdev(self):
+ copy_network_unit('12-dummy-mtu.netdev', '12-dummy.network', copy_dropins=False)
+ # note - MTU set by .netdev happens ONLY at device creation!
+ self.check_mtu('1600', reset=False)
+
+ def test_mtu_link(self):
+ copy_network_unit('12-dummy.netdev', '12-dummy-mtu.link', '12-dummy.network', copy_dropins=False)
+ # note - MTU set by .link happens ONLY at udev processing of device 'add' uevent!
+ self.check_mtu('1600', reset=False)
+
+ def test_ipv6_mtu(self):
+ ''' set ipv6 mtu without setting device mtu '''
+ copy_network_unit('12-dummy.netdev', '12-dummy.network.d/ipv6-mtu-1400.conf')
+ self.check_mtu('1500', '1400')
+
+ def test_ipv6_mtu_toolarge(self):
+ ''' try set ipv6 mtu over device mtu (it shouldn't work) '''
+ copy_network_unit('12-dummy.netdev', '12-dummy.network.d/ipv6-mtu-1550.conf')
+ self.check_mtu('1500', '1500')
+
+ def test_mtu_network_ipv6_mtu(self):
+ ''' set ipv6 mtu and set device mtu via network file '''
+ copy_network_unit('12-dummy.netdev', '12-dummy.network.d/mtu.conf', '12-dummy.network.d/ipv6-mtu-1550.conf')
+ self.check_mtu('1600', '1550')
+
+ def test_mtu_netdev_ipv6_mtu(self):
+ ''' set ipv6 mtu and set device mtu via netdev file '''
+ copy_network_unit('12-dummy-mtu.netdev', '12-dummy.network.d/ipv6-mtu-1550.conf')
+ self.check_mtu('1600', '1550', reset=False)
+
+ def test_mtu_link_ipv6_mtu(self):
+ ''' set ipv6 mtu and set device mtu via link file '''
+ copy_network_unit('12-dummy.netdev', '12-dummy-mtu.link', '12-dummy.network.d/ipv6-mtu-1550.conf')
+ self.check_mtu('1600', '1550', reset=False)
+
+
+if __name__ == '__main__':
+ parser = argparse.ArgumentParser()
+ parser.add_argument('--build-dir', help='Path to build dir', dest='build_dir')
+ parser.add_argument('--source-dir', help='Path to source dir/git tree', dest='source_dir')
+ parser.add_argument('--networkd', help='Path to systemd-networkd', dest='networkd_bin')
+ parser.add_argument('--resolved', help='Path to systemd-resolved', dest='resolved_bin')
+ parser.add_argument('--timesyncd', help='Path to systemd-timesyncd', dest='timesyncd_bin')
+ parser.add_argument('--udevd', help='Path to systemd-udevd', dest='udevd_bin')
+ parser.add_argument('--wait-online', help='Path to systemd-networkd-wait-online', dest='wait_online_bin')
+ parser.add_argument('--networkctl', help='Path to networkctl', dest='networkctl_bin')
+ parser.add_argument('--resolvectl', help='Path to resolvectl', dest='resolvectl_bin')
+ parser.add_argument('--timedatectl', help='Path to timedatectl', dest='timedatectl_bin')
+ parser.add_argument('--udevadm', help='Path to udevadm', dest='udevadm_bin')
+ parser.add_argument('--valgrind', help='Enable valgrind', dest='use_valgrind', type=bool, nargs='?', const=True, default=use_valgrind)
+ parser.add_argument('--debug', help='Generate debugging logs', dest='enable_debug', type=bool, nargs='?', const=True, default=enable_debug)
+ parser.add_argument('--asan-options', help='ASAN options', dest='asan_options')
+ parser.add_argument('--lsan-options', help='LSAN options', dest='lsan_options')
+ parser.add_argument('--ubsan-options', help='UBSAN options', dest='ubsan_options')
+ parser.add_argument('--with-coverage', help='Loosen certain sandbox restrictions to make gcov happy', dest='with_coverage', type=bool, nargs='?', const=True, default=with_coverage)
+ ns, unknown_args = parser.parse_known_args(namespace=unittest)
+
+ if ns.build_dir:
+ if ns.networkd_bin or ns.resolved_bin or ns.timesyncd_bin or ns.udevd_bin or \
+ ns.wait_online_bin or ns.networkctl_bin or ns.resolvectl_bin or ns.timedatectl_bin or ns.udevadm_bin:
+ print('WARNING: --networkd, --resolved, --timesyncd, --udevd, --wait-online, --networkctl, --resolvectl, --timedatectl, or --udevadm options are ignored when --build-dir is specified.')
+ networkd_bin = os.path.join(ns.build_dir, 'systemd-networkd')
+ resolved_bin = os.path.join(ns.build_dir, 'systemd-resolved')
+ timesyncd_bin = os.path.join(ns.build_dir, 'systemd-timesyncd')
+ udevd_bin = os.path.join(ns.build_dir, 'systemd-udevd')
+ wait_online_bin = os.path.join(ns.build_dir, 'systemd-networkd-wait-online')
+ networkctl_bin = os.path.join(ns.build_dir, 'networkctl')
+ resolvectl_bin = os.path.join(ns.build_dir, 'resolvectl')
+ timedatectl_bin = os.path.join(ns.build_dir, 'timedatectl')
+ udevadm_bin = os.path.join(ns.build_dir, 'udevadm')
+ systemd_udev_rules_build_dir = os.path.join(ns.build_dir, 'rules.d')
+ else:
+ if ns.networkd_bin:
+ networkd_bin = ns.networkd_bin
+ if ns.resolved_bin:
+ resolved_bin = ns.resolved_bin
+ if ns.timesyncd_bin:
+ timesyncd_bin = ns.timesyncd_bin
+ if ns.udevd_bin:
+ udevd_bin = ns.udevd_bin
+ if ns.wait_online_bin:
+ wait_online_bin = ns.wait_online_bin
+ if ns.networkctl_bin:
+ networkctl_bin = ns.networkctl_bin
+ if ns.resolvectl_bin:
+ resolvectl_bin = ns.resolvectl_bin
+ if ns.timedatectl_bin:
+ timedatectl_bin = ns.timedatectl_bin
+ if ns.udevadm_bin:
+ udevadm_bin = ns.udevadm_bin
+
+ if ns.source_dir:
+ systemd_source_dir = ns.source_dir
+ else:
+ systemd_source_dir = os.path.normpath(os.path.join(os.path.dirname(os.path.abspath(__file__)), "../../"))
+ if not os.path.exists(os.path.join(systemd_source_dir, "meson_options.txt")):
+ raise RuntimeError(f"{systemd_source_dir} doesn't appear to be a systemd source tree")
+
+ use_valgrind = ns.use_valgrind
+ enable_debug = ns.enable_debug
+ asan_options = ns.asan_options
+ lsan_options = ns.lsan_options
+ ubsan_options = ns.ubsan_options
+ with_coverage = ns.with_coverage
+
+ if use_valgrind:
+ # Do not forget the trailing space.
+ valgrind_cmd = 'valgrind --track-origins=yes --leak-check=full --show-leak-kinds=all '
+
+ networkctl_cmd = valgrind_cmd.split() + [networkctl_bin]
+ resolvectl_cmd = valgrind_cmd.split() + [resolvectl_bin]
+ timedatectl_cmd = valgrind_cmd.split() + [timedatectl_bin]
+ udevadm_cmd = valgrind_cmd.split() + [udevadm_bin]
+ wait_online_cmd = valgrind_cmd.split() + [wait_online_bin]
+
+ if asan_options:
+ env.update({'ASAN_OPTIONS': asan_options})
+ if lsan_options:
+ env.update({'LSAN_OPTIONS': lsan_options})
+ if ubsan_options:
+ env.update({'UBSAN_OPTIONS': ubsan_options})
+ if use_valgrind:
+ env.update({'SYSTEMD_MEMPOOL': '0'})
+
+ wait_online_env = env.copy()
+ if enable_debug:
+ wait_online_env.update({'SYSTEMD_LOG_LEVEL': 'debug'})
+
+ sys.argv[1:] = unknown_args
+ unittest.main(verbosity=3)