mirror of
https://github.com/moby/moby.git
synced 2022-11-09 12:21:53 -05:00
bcd996f4c3
Make sure to always explicitly set namespace for all kernel bound network operations irrespective of whether the operation is performed in init namespace or a user defined namespace. This already happens for user defined netns. But doesn't happen for initial netns that libnetwork runs in. Signed-off-by: Jana Radhakrishnan <mrjana@docker.com>
110 lines
3.2 KiB
Go
110 lines
3.2 KiB
Go
package bridge
|
|
|
|
import (
|
|
"net"
|
|
"testing"
|
|
|
|
"github.com/docker/libnetwork/osl"
|
|
"github.com/vishvananda/netlink"
|
|
)
|
|
|
|
func setupVerifyTest(t *testing.T) *bridgeInterface {
|
|
inf := &bridgeInterface{}
|
|
|
|
br := netlink.Bridge{}
|
|
br.LinkAttrs.Name = "default0"
|
|
if err := netlink.LinkAdd(&br); err == nil {
|
|
inf.Link = &br
|
|
} else {
|
|
t.Fatalf("Failed to create bridge interface: %v", err)
|
|
}
|
|
|
|
return inf
|
|
}
|
|
|
|
func TestSetupVerify(t *testing.T) {
|
|
defer osl.SetupTestOSContext(t)()
|
|
|
|
addrv4 := net.IPv4(192, 168, 1, 1)
|
|
inf := setupVerifyTest(t)
|
|
config := &networkConfiguration{}
|
|
config.AddressIPv4 = &net.IPNet{IP: addrv4, Mask: addrv4.DefaultMask()}
|
|
|
|
if err := netlink.AddrAdd(inf.Link, &netlink.Addr{IPNet: config.AddressIPv4}); err != nil {
|
|
t.Fatalf("Failed to assign IPv4 %s to interface: %v", config.AddressIPv4, err)
|
|
}
|
|
|
|
if err := setupVerifyAndReconcile(config, inf); err != nil {
|
|
t.Fatalf("Address verification failed: %v", err)
|
|
}
|
|
}
|
|
|
|
func TestSetupVerifyBad(t *testing.T) {
|
|
defer osl.SetupTestOSContext(t)()
|
|
|
|
addrv4 := net.IPv4(192, 168, 1, 1)
|
|
inf := setupVerifyTest(t)
|
|
config := &networkConfiguration{}
|
|
config.AddressIPv4 = &net.IPNet{IP: addrv4, Mask: addrv4.DefaultMask()}
|
|
|
|
ipnet := &net.IPNet{IP: net.IPv4(192, 168, 1, 2), Mask: addrv4.DefaultMask()}
|
|
if err := netlink.AddrAdd(inf.Link, &netlink.Addr{IPNet: ipnet}); err != nil {
|
|
t.Fatalf("Failed to assign IPv4 %s to interface: %v", ipnet, err)
|
|
}
|
|
|
|
if err := setupVerifyAndReconcile(config, inf); err == nil {
|
|
t.Fatal("Address verification was expected to fail")
|
|
}
|
|
}
|
|
|
|
func TestSetupVerifyMissing(t *testing.T) {
|
|
defer osl.SetupTestOSContext(t)()
|
|
|
|
addrv4 := net.IPv4(192, 168, 1, 1)
|
|
inf := setupVerifyTest(t)
|
|
config := &networkConfiguration{}
|
|
config.AddressIPv4 = &net.IPNet{IP: addrv4, Mask: addrv4.DefaultMask()}
|
|
|
|
if err := setupVerifyAndReconcile(config, inf); err == nil {
|
|
t.Fatal("Address verification was expected to fail")
|
|
}
|
|
}
|
|
|
|
func TestSetupVerifyIPv6(t *testing.T) {
|
|
defer osl.SetupTestOSContext(t)()
|
|
|
|
addrv4 := net.IPv4(192, 168, 1, 1)
|
|
inf := setupVerifyTest(t)
|
|
config := &networkConfiguration{}
|
|
config.AddressIPv4 = &net.IPNet{IP: addrv4, Mask: addrv4.DefaultMask()}
|
|
config.EnableIPv6 = true
|
|
|
|
if err := netlink.AddrAdd(inf.Link, &netlink.Addr{IPNet: bridgeIPv6}); err != nil {
|
|
t.Fatalf("Failed to assign IPv6 %s to interface: %v", bridgeIPv6, err)
|
|
}
|
|
if err := netlink.AddrAdd(inf.Link, &netlink.Addr{IPNet: config.AddressIPv4}); err != nil {
|
|
t.Fatalf("Failed to assign IPv4 %s to interface: %v", config.AddressIPv4, err)
|
|
}
|
|
|
|
if err := setupVerifyAndReconcile(config, inf); err != nil {
|
|
t.Fatalf("Address verification failed: %v", err)
|
|
}
|
|
}
|
|
|
|
func TestSetupVerifyIPv6Missing(t *testing.T) {
|
|
defer osl.SetupTestOSContext(t)()
|
|
|
|
addrv4 := net.IPv4(192, 168, 1, 1)
|
|
inf := setupVerifyTest(t)
|
|
config := &networkConfiguration{}
|
|
config.AddressIPv4 = &net.IPNet{IP: addrv4, Mask: addrv4.DefaultMask()}
|
|
config.EnableIPv6 = true
|
|
|
|
if err := netlink.AddrAdd(inf.Link, &netlink.Addr{IPNet: config.AddressIPv4}); err != nil {
|
|
t.Fatalf("Failed to assign IPv4 %s to interface: %v", config.AddressIPv4, err)
|
|
}
|
|
|
|
if err := setupVerifyAndReconcile(config, inf); err == nil {
|
|
t.Fatal("Address verification was expected to fail")
|
|
}
|
|
}
|