From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail.openvz.org (unknown [69.168.225.77]) by lore.virtuozzo.com (Postfix) with ESMTPS id AB835802E4 for ; Mon, 31 Aug 2026 23:47:27 +0000 (UTC) Received: from mail.openvz.org (localhost [127.0.0.1]) by mail.openvz.org (8.14.4/8.14.4) with ESMTP id 67VNkDbX032212; Tue, 1 Sep 2026 02:46:14 +0300 DKIM-Filter: OpenDKIM Filter v2.11.0 mail.openvz.org 67VNkDbX032212 Authentication-Results: mail.openvz.org; dkim=fail reason="signature verification failed" (2048-bit key) header.d=virtuozzo.com header.i=@virtuozzo.com header.b="Ss4jFDnC" Received: from mail-wm1-f69.google.com (mail-wm1-f69.google.com [209.85.128.69]) by mail.openvz.org (8.14.4/8.14.4) with ESMTP id 67VNkCLp032196 (version=TLSv1/SSLv3 cipher=AES128-GCM-SHA256 bits=128 verify=FAIL) for ; Tue, 1 Sep 2026 02:46:12 +0300 DKIM-Filter: OpenDKIM Filter v2.11.0 mail.openvz.org 67VNkCLp032196 Received: by mail-wm1-f69.google.com with SMTP id 5b1f17b1804b1-490a767c7dcso28452945e9.2 for ; Mon, 31 Aug 2026 16:46:12 -0700 (PDT) X-Gm-Message-State: AFuF++kENDba4g6a9Yoxs5yfAM4GKdtKkVVOQxXtaMPy/ib5lhhBi9ep kIwugqUIR3dfLMMdwYApzOPPD1JPwWh91wCJzzA+7+/u33jSc8RhaH5PuqgnFQjLhGCosaLKFZO eRA5tvElxlSq+cNbITzxzSom+K+Ma3J8XH1Nlt6nuFBGRRcxMr2DiwA== X-Gm-Gg: AR+sD13i2aXctdhiEwzSUYAeJmDXZiOBAjZF8D03LF59tqjI/k8LulOGlcOfcig5lCH ffzPTEVt8RsFagKqKFSHrQGWLImfW76VIgDGeU4x68taM0hOz9leHo51M3Zrpl7SPTWDQvrGtbT M4q4Ulbcy1ANQtqcMUAiohnEH1qwI+XrEWtgjydw+B/hBVI3JJImjf5FfopZlIt/9RgRJ1ytsq3 TooWcR/wRlgSUMRAEW8icRBp/iLQvtUGxYZEzzRn3lgLVwhejgchnhC6DYQKOynzXIOQJOmPYNo 5FfZRuwm8z9fJj5GRXkCIA0OTwVT1QjOPEKyGduNxZ7MiMDaQ8euyWEozE/wh3ncYbNUjgxKqB6 k3UoGBaLNCtygwYkro/v/wdLh X-Received: by 2002:a05:600c:c3cf:10b0:49b:8f18:714a with SMTP id 5b1f17b1804b1-49b91c47b76mr355433875e9.12.1788219972217; Mon, 31 Aug 2026 16:46:12 -0700 (PDT) X-Received: by 2002:a05:600c:c3cf:10b0:49b:8f18:714a with SMTP id 5b1f17b1804b1-49b91c47b76mr355433385e9.12.1788219971817; Mon, 31 Aug 2026 16:46:11 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1788219971; cv=none; d=google.com; s=arc-20260327; b=FF57nC6AVxx98tRkrlp2c9gX/9CzcaLQO0As6KtdzMNH5wKdzdf6zJ4BtZDLKAwfTJ GIUrrtIx0VCdut3AfQ8nztSIYQ+YXDY/BGsEXnAG0g+M5Y++1MDQlecSHVMCuM0gYn5t Jvw8y9HCXBZCxU2FGiJ9YwZQmW3rnMPiz/ApMs1d2jfqa22UvJH2cnWK8r+pga013pgf ut0x0R/AoUtaNXGaOYfkVP2RL/YMKg/u8nh6SUXLrD6f+ELTjnkC9LoZW/FAjwnIKvlh l1VCvK3fDbx+Hkow07tXRKpEh5A+EAyVcQzzJ73HJ3PnbVSKmXrq/iNCY7WkagToKtIE qNzg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=content-transfer-encoding:mime-version:message-id:date:subject:cc :to:from:dkim-signature; bh=Nsd4vOp4A+rBvWykoUXlIwcMU4eCgsS+g/rVj4S7EVw=; fh=WpT6aB7RBAGHZeWZzqAr71yzRFbPTYkPWKsRagLn48Q=; b=GQr1LQYZWUzENbjUM7wbRUUfDU66G8lnExjhEA++UETi1npDKNYIgC96mHPCGNRoO3 26z6U3dGVm6MIRswT1i+yGCU4UDj9FDU8TRgCYwoCV0Ex90ie7sabsjGen6qHRlRki1q l1OqOBsczpKmW+u5Nv+dDpSxnMwxc2VbKuCCSsvXEP9714Rhqul7Ou851+WmSBOzrqls PDgvIDhlhI3ibaLrVAstcoDksnkBgMhS6gAKNYd47d5R7MIm2l2pNemjFj/Hja9Sbx3d oP17fN8l/04IM/2eE8q04a2p658YzLVDz2IKAdrYokeE/ls5EVzmVI03NMhnghFo5hqm BaEQ==; dara=google.com ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@virtuozzo.com header.s=relay header.b=Ss4jFDnC; spf=pass (google.com: domain of eva.kurchatova@virtuozzo.com designates 130.117.225.111 as permitted sender) smtp.mailfrom=eva.kurchatova@virtuozzo.com; dmarc=pass (p=QUARANTINE sp=QUARANTINE dis=NONE) header.from=virtuozzo.com Received: from relay.virtuozzo.com (relay.virtuozzo.com. [130.117.225.111]) by mx.google.com with ESMTPS id ffacd0b85a97d-48442d71922si897982f8f.205.2026.08.31.16.46.11 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 31 Aug 2026 16:46:11 -0700 (PDT) Received-SPF: pass (google.com: domain of eva.kurchatova@virtuozzo.com designates 130.117.225.111 as permitted sender) client-ip=130.117.225.111; Authentication-Results: mx.google.com; dkim=pass header.i=@virtuozzo.com header.s=relay header.b=Ss4jFDnC; spf=pass (google.com: domain of eva.kurchatova@virtuozzo.com designates 130.117.225.111 as permitted sender) smtp.mailfrom=eva.kurchatova@virtuozzo.com; dmarc=pass (p=QUARANTINE sp=QUARANTINE dis=NONE) header.from=virtuozzo.com DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=virtuozzo.com; s=relay; h=MIME-Version:Message-ID:Date:Subject:From: Content-Type; bh=Nsd4vOp4A+rBvWykoUXlIwcMU4eCgsS+g/rVj4S7EVw=; b=Ss4jFDnCmgGl mNrPWqHbVAvv+KU4jdNr3oxRAkjmFex4sYp0rR0vas10QayIxcA1Qq6yrUIEBa6vJXuVN5YSMgveV i5wavSG6Aeg7TzB5eidU8w2qFt1LjIurL/02h9c7ou2wJ75wZHzlfPmicMamUic62vhRaDDCegvza 4C5CgsbFSE34mQwLjt8Nq/X0vl1XIzZYOvpZ9nfSMiwfCSq7/kmjR7s53dGOF7uG01mY31msEDApo 49paSmjb2cCy3+rGO97plEmfzbniial200eY6NvXm0jnTDCKbWsjA+L9s33kR42zZhIab6TZ2/1fu XMaxw+JmP4SP4GVEaNFurg==; Received: from ch-vpn.virtuozzo.com ([130.117.225.6] helo=LekKit-T14) by relay.virtuozzo.com with esmtp (Exim 4.96) (envelope-from ) id 1x1BfE-00AqVc-2F; Tue, 01 Sep 2026 01:46:02 +0200 From: Eva Kurchatova To: khorenko@virtuozzo.com Date: Tue, 1 Sep 2026 02:45:29 +0300 Message-ID: <20260831234610.1650091-1-eva.kurchatova@virtuozzo.com> X-Mailer: git-send-email 2.55.0 MIME-Version: 1.0 X-OZ-Fwd: true Cc: devel@openvz.org Subject: [Devel] [PATCH vz10 v2 1/5] selftests: net: turn ip_forward off in setup_ns X-BeenThere: devel@openvz.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: OpenVZ development List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: devel-bounces@openvz.org Errors-To: devel-bounces@openvz.org A new network namespace takes net.ipv4.ip_forward from the namespace it is created in: # sysctl -wq net.ipv4.ip_forward=1 # ip netns add probe # ip netns exec probe cat /proc/sys/net/ipv4/ip_forward 1 so on a machine that routes, every test namespace forwards. nft_fib.sh is one that cannot work that way: the two hosts either side of its router forward the test packets back at it until the TTL runs out, and the fib expressions the test checks see the wrong thing. setup_ns already takes rp_filter out of the way for the same reason, so take ip_forward too, and let the tests that want a router turn it on themselves, which the ones that need it already do. net.ipv6.conf.all.forwarding is not inherited, verified the same way, so it needs no such treatment. https://virtuozzo.atlassian.net/browse/VSTOR-139651 Feature: fix selftests Signed-off-by: Eva Kurchatova --- tools/testing/selftests/net/lib.sh | 1 + 1 file changed, 1 insertion(+) diff --git a/tools/testing/selftests/net/lib.sh b/tools/testing/selftests/net/lib.sh index c712a5897075..0a38c1ed4b49 100644 --- a/tools/testing/selftests/net/lib.sh +++ b/tools/testing/selftests/net/lib.sh @@ -219,6 +219,7 @@ setup_ns() ip -n "${!ns_name}" link set lo up ip netns exec "${!ns_name}" sysctl -wq net.ipv4.conf.all.rp_filter=0 ip netns exec "${!ns_name}" sysctl -wq net.ipv4.conf.default.rp_filter=0 + ip netns exec "${!ns_name}" sysctl -wq net.ipv4.ip_forward=0 ns_list+=("${!ns_name}") done NS_LIST+=("${ns_list[@]}") -- 2.55.0 _______________________________________________ Devel mailing list Devel@openvz.org https://lists.openvz.org/mailman/listinfo/devel