From: Konstantin Khorenko <khorenko@virtuozzo.com>
To: devel@openvz.org, Konstantin Khorenko <khorenko@virtuozzo.com>
Subject: Re: [Devel] [PATCH hci-8.1 v3 0/5] selftests: netfilter: make the suite pass on a routing host
Date: Thu, 24 Sep 2026 13:09:04 +0200 [thread overview]
Message-ID: <179024814422.3185901.4681034243249656307.b4-ty@b4> (raw)
In-Reply-To: <20260924-b4-prep-netfilter-v3-0-e6a17b8f193f@virtuozzo.com>
On Thu, 24 Sep 2026 13:06:05 +0200, Konstantin Khorenko wrote:
> selftests: netfilter: make the suite pass on a routing host
>
> The net/netfilter selftests fail on the hci nodes for reasons outside
> the code under test: a new network namespace copies ip_forward and
> send_redirects from init_net, so a routing host with redirects turned
> off breaks nft_fib.sh and conntrack_icmp_related.sh; a veth name left
> behind in init_net by another test makes br_netfilter.sh and
> nf_nat_edemux.sh add their pairs into nothing; rpath.sh fails instead
> of skipping without nft; and conntrack_resize.sh expects
> nf_conntrack_expect_max to be read-only outside init_net, which vz
> virtualizes on purpose.
>
> [...]
Applied to branch-rh10-6.12.0-211.52.1.22.x.vz10-ovz, will be released in rh10-6.12.0-211.52.1.22.3.vz10, thanks!
[1/5] selftests: net: turn ip_forward off in setup_ns
https://bitbucket.org/virtuozzocore/vzkernel.vzs/commits/1e7d1447efd6
[2/5] selftests: netfilter: let the router send redirects
https://bitbucket.org/virtuozzocore/vzkernel.vzs/commits/ec4a461f489f
[3/5] selftests: netfilter: add the veth pair from inside the namespace
https://bitbucket.org/virtuozzocore/vzkernel.vzs/commits/21d20beb231d
[4/5] selftests: netfilter: skip rpath.sh without the nft tool
https://bitbucket.org/virtuozzocore/vzkernel.vzs/commits/29f7cd8389f2
[5/5] selftests: netfilter: account for a per-namespace nf_conntrack_expect_max
https://bitbucket.org/virtuozzocore/vzkernel.vzs/commits/ad76ffbef974
--
Konstantin Khorenko <khorenko@virtuozzo.com>
_______________________________________________
Devel mailing list
Devel@openvz.org
https://lists.openvz.org/mailman/listinfo/devel
prev parent reply other threads:[~2026-09-24 11:10 UTC|newest]
Thread overview: 7+ messages / expand[flat|nested] mbox.gz Atom feed top
2026-09-24 11:06 Konstantin Khorenko
2026-09-24 11:06 ` [Devel] [PATCH hci-8.1 v3 1/5] selftests: net: turn ip_forward off in setup_ns Konstantin Khorenko
2026-09-24 11:06 ` [Devel] [PATCH hci-8.1 v3 2/5] selftests: netfilter: let the router send redirects Konstantin Khorenko
2026-09-24 11:06 ` [Devel] [PATCH hci-8.1 v3 3/5] selftests: netfilter: add the veth pair from inside the namespace Konstantin Khorenko
2026-09-24 11:06 ` [Devel] [PATCH hci-8.1 v3 4/5] selftests: netfilter: skip rpath.sh without the nft tool Konstantin Khorenko
2026-09-24 11:06 ` [Devel] [PATCH hci-8.1 v3 5/5] selftests: netfilter: account for a per-namespace nf_conntrack_expect_max Konstantin Khorenko
2026-09-24 11:09 ` Konstantin Khorenko [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=179024814422.3185901.4681034243249656307.b4-ty@b4 \
--to=khorenko@virtuozzo.com \
--cc=devel@openvz.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.