From mboxrd@z Thu Jan 1 00:00:00 1970 From: Eva Kurchatova Date: Fri, 21 Aug 2026 18:18:47 +0300 Subject: [Devel] [PATCH vz10 4/4] selftests: netfilter: nf_conntrack_expect_max is pernet here In-Reply-To: <20260821151850.796438-1-eva.kurchatova@virtuozzo.com> References: <20260821151850.796438-1-eva.kurchatova@virtuozzo.com> Message-ID: <20260821151850.796438-4-eva.kurchatova@virtuozzo.com> List-Id: The test requires it to be settable from init_net only, while vz virtualizes it deliberately: 6d854968102f ("ve/netfilter: Implement pernet expect_max / virtualize "net.netfilter.nf_conntrack_expect_max" sysctl") https://virtuozzo.atlassian.net/browse/VSTOR-139651 Feature: fix vz selftests Signed-off-by: Eva Kurchatova --- tools/testing/selftests/net/netfilter/conntrack_resize.sh | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/tools/testing/selftests/net/netfilter/conntrack_resize.sh b/tools/testing/selftests/net/netfilter/conntrack_resize.sh index aa1ba07eaf50..324259632daa 100755 --- a/tools/testing/selftests/net/netfilter/conntrack_resize.sh +++ b/tools/testing/selftests/net/netfilter/conntrack_resize.sh @@ -457,8 +457,10 @@ check_max_alias 262000 setup_ns nsclient1 nsclient2 -# check this only works from init_net -for n in netfilter.nf_conntrack_buckets netfilter.nf_conntrack_expect_max net.nf_conntrack_max;do +# check this only works from init_net. nf_conntrack_expect_max is left +# out: vz virtualizes it on purpose, see "ve/netfilter: Implement pernet +# expect_max". +for n in netfilter.nf_conntrack_buckets net.nf_conntrack_max;do check_sysctl_immutable "$nsclient1" "net.$n" 1 done -- 2.55.0