From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail.openvz.org (unknown [69.168.225.77]) by lore.virtuozzo.com (Postfix) with ESMTPS id 8C53F802A5 for ; Thu, 24 Sep 2026 11:07:42 +0000 (UTC) Received: from mail.openvz.org (localhost [127.0.0.1]) by mail.openvz.org (8.14.4/8.14.4) with ESMTP id 68OB6MCj014328; Thu, 24 Sep 2026 14:06:23 +0300 DKIM-Filter: OpenDKIM Filter v2.11.0 mail.openvz.org 68OB6MCj014328 Authentication-Results: mail.openvz.org; dkim=fail reason="signature verification failed" (2048-bit key) header.d=virtuozzo.com header.i=@virtuozzo.com header.b="HvYVe+Ol" Received: from mail-wr1-f71.google.com (mail-wr1-f71.google.com [209.85.221.71]) by mail.openvz.org (8.14.4/8.14.4) with ESMTP id 68OB6L6P014304 (version=TLSv1/SSLv3 cipher=AES128-GCM-SHA256 bits=128 verify=FAIL) for ; Thu, 24 Sep 2026 14:06:21 +0300 DKIM-Filter: OpenDKIM Filter v2.11.0 mail.openvz.org 68OB6L6P014304 Received: by mail-wr1-f71.google.com with SMTP id ffacd0b85a97d-4870af30a85so591504f8f.1 for ; Thu, 24 Sep 2026 04:06:21 -0700 (PDT) X-Forwarded-Encrypted: i=2; AKwUvBzyE9SPmOISgPKbyo4SAsjidOxxdSI+ZDzoIuGV60HyQ3/ttDHVnpEx1yWJhojD/z1h7gv4Sw==@openvz.org X-Gm-Message-State: AFuF++msjBoVXAJQ9zw1HF5ZEnqRTCpUbnz+VHD3pI/r88010fOGBjkD 3BO+S7IZD4a2sUjx3Z1Fei4cFi8MUT8Jy6RPIdecpA439YV/9dWOcbsYailjCff6vm/yKuBm9wS wEp/WjA3Qf40KLCaP3TSg582xPFnvLebpU9ojUhhvwIzMAa/hSV7Sdg== X-Gm-Gg: AYBFou2PMWPaKpvMQJ5GCSjarkdAA07AnnYNARCb+A7XHmr4L2ChGxr6JhL70Hdp4Rz fzvVpJ49+X9wnEmmfbec/DueXGcgouLtXVsZfVzPKMTEwVYmBB5xPiGqSJfG/Fio2pFAWC3awI5 rKQwBdXAxwBk3Dy9nrAfpC71np/5Azfp7phlrvos8cIjDMJP4J+26gl72byDx5etZCJNfj7Rk94 TvTQUkL5g/2Aj6XkG1CgzWpyITShNULu2dMVLK/gPzfnnNMvBJ3uN1Dg9gu1GVPyqYHFAAfjwWz ShmD19v4SDzFDSN+qzEetPqKF2RZJKj5Ktb5ztdxCe3hZ8EaIGuJPAAHENtafKJyxRhScv+QbJa vxtc8/RYQNy1EWaea X-Received: by 2002:a05:6000:260a:b0:487:13f:4968 with SMTP id ffacd0b85a97d-488716af68emr3824947f8f.11.1790247981078; Thu, 24 Sep 2026 04:06:21 -0700 (PDT) X-Received: by 2002:a05:6000:260a:b0:487:13f:4968 with SMTP id ffacd0b85a97d-488716af68emr3824888f8f.11.1790247980564; Thu, 24 Sep 2026 04:06:20 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1790247980; cv=none; d=google.com; s=arc-20260327; b=jn+3he8mwoBqk76bnZvAHaTv69lAhYvLGHEu9RZzeSsAGTSmyoSXcJEI85Ggj+5uNm rs65KNpoJrDe01tB5hn/OHZODUSIul9npLAl+YLa90kLNnECRRyu6DM+S7bkLKdoo/ST +7jH+JzQJIQzESW8T0lZzo9H0AhccCKBA9O/vUUdgL4Wfa4P08piKBLkOOBBg8z5FQlL 7k7+T/U2IWyynlva3MJpwlq0K+229B5u81ydCK4XXqkJ36AWn9a5v0n7nkzhQc+DKMHe 3W8tnUKM9FClvtAGlkExlFXXSiBFY4w+LgvPL+IaCMkvUqNtWNqo5sUVnOCRSoTALSUd d0bA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=cc:to:content-transfer-encoding:mime-version:message-id:date :subject:from:dkim-signature; bh=GpIjsvPhf31r8+ZyCC1mLIZPT6sNQbJW+HHdfBTffYw=; fh=Ac4B+E9J0iKprNz57k5baX4D1nACtq3mk5EYYPOTKpA=; b=JwpIRNAH0NXjBfOU2LGv7NUBWPn7DFL5dzT4jPl6P8/Ck/chzEPUn3rq1Xyc3gI3+6 eV9AxsyHRU7OeRflmsuk+DD9HY61JiV+/ERDF4HSZMuwCBw0SqIrKapZsMyqyJI/iD7z xl8d+i3pb9KEJdnJ0XLhb5q8S/lGHUBvy4YpQVOG+uB46jb9q9dWR8BTzbAS3147iDJX F1137doRgXJhJY8lP5tFpjn91xJnIWoxrAuCX4gwdlMS/Eect6WKzQ0bGnpJ3qGompRz UwTZ8ExF1dnmKzo0P4ZiYBreDzibZCdiDBiI7lqk8Pr97WDzMtpoJNs2uL7rf+SiTTyx rzdg==; dara=google.com ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@virtuozzo.com header.s=relay header.b=HvYVe+Ol; spf=pass (google.com: domain of khorenko@virtuozzo.com designates 130.117.225.111 as permitted sender) smtp.mailfrom=khorenko@virtuozzo.com; dmarc=pass (p=QUARANTINE sp=QUARANTINE dis=NONE) header.from=virtuozzo.com Received: from relay.virtuozzo.com (relay.virtuozzo.com. [130.117.225.111]) by mx.google.com with ESMTPS id ffacd0b85a97d-488688ae1f1si9745442f8f.67.2026.09.24.04.06.20 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Thu, 24 Sep 2026 04:06:20 -0700 (PDT) Received-SPF: pass (google.com: domain of khorenko@virtuozzo.com designates 130.117.225.111 as permitted sender) client-ip=130.117.225.111; Authentication-Results: mx.google.com; dkim=pass header.i=@virtuozzo.com header.s=relay header.b=HvYVe+Ol; spf=pass (google.com: domain of khorenko@virtuozzo.com designates 130.117.225.111 as permitted sender) smtp.mailfrom=khorenko@virtuozzo.com; dmarc=pass (p=QUARANTINE sp=QUARANTINE dis=NONE) header.from=virtuozzo.com DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=virtuozzo.com; s=relay; h=Content-Type:MIME-Version:Message-Id:Date:Subject :From; bh=GpIjsvPhf31r8+ZyCC1mLIZPT6sNQbJW+HHdfBTffYw=; b=HvYVe+OlBW7C3A1Gm4i zifIBI/DvHrESOUBvDd4atBz2TJyDG4RFX0O9WTnb/t+zLFUdA9XHzetoXJaYZoijKnkRsNEKl3yW x3AUTeZfZRQ+anORPXzPzenQUedp3jIQvRhGw03QZtprmkY3d3zTcWfzIXNy317wfGTB6d2rrasyq wU1TYdb2Uipi7l6+sWtRmybDJUgk5aY2mxWtP2BW1MjevuhDnek113fpQHWtIvju1U9elaYm0RcO1 hKi+cu5bUjHcrGLceC3zkNqGd5vjQaa1rMKWK2WGGQmpmT1wDPW6qEt4ZEJea3foJJ024lZ3CO+pt QJKGEa9HBB4JkoQ==; Received: from ch-demo-asa.virtuozzo.com ([130.117.225.8] helo=f0.sw.ru) by relay.virtuozzo.com with esmtp (Exim 4.96) (envelope-from ) id 1x9hET-00CbHw-1x; Thu, 24 Sep 2026 13:06:17 +0200 From: Konstantin Khorenko Date: Thu, 24 Sep 2026 13:06:05 +0200 Message-Id: <20260924-b4-prep-netfilter-v3-0-e6a17b8f193f@virtuozzo.com> MIME-Version: 1.0 X-B4-Tracking: v=1; b=H4sIAB0EtWoC/yWMzQrCMBAGX6Xs2S1N0v9XEQ82/dKuSCxJFKH03 Y16HIaZnSKCINJY7BTwkigPn8GcCrLr1S9gmTOTrnRbDbrmqeYtYGOP5OSeEBiz61WrTGeagXK XtZP373mm1Qr3paLLX8TndINN3yMdxwch3pnofgAAAA== X-Change-ID: 20260924-b4-prep-netfilter-edf816137359 To: Konstantin Khorenko , devel@openvz.org X-Mailer: b4 0.16.0 X-Developer-Signature: v=1; a=openpgp-sha256; l=2286; i=khorenko@virtuozzo.com; h=from:subject:message-id; bh=C53XrDFctH2rCy5A4NpapusGjXoEqGTGc3HO8SKNB3c=; b=owEBbQKS/ZANAwAKAVGWCkf5YVwqAcsmYgBqtQQp0Hyt0c801/PzWT1XkHOR94KB+WpsRYGo0 abE2MTCcwiJAjMEAAEKAB0WIQRWD23IPcXT0GO9CCxRlgpH+WFcKgUCarUEKQAKCRBRlgpH+WFc Kvc1D/wMlwRk5MA81foABXksC2zXykmyWNAYzTxTLMlM7+OfMCMpxGrHtnUuvbZ8zEKZFBZzMBI 2ry6+GgeY6rKNIcSf3TQ+clsgXDUl1dR4azaYMjsYRnSOnc8g76f+gthdJcJrkdHDNSDSm4K+rp DyIihEoHTtBbf8hRf3HIt/NRMfr+C+Rg4x67Lb3eQhP06GDfRxleNgRrdmdeu2+GlX1UuxZzRYW KQE3q/SZLO0ObZZHKy6+rmea8t8h9n3eaxAVVJ4/HkOumif5eld1WrIFTc70OjD0jmGF32GMJoF d0mc8bIeFYh2TqQBxnd9tL/7Q1jbXmEisQhFzX8LJUooI/uKfwbLmu5XFZtCm6oEGoMJLYQrLV6 YHzQwNFc6YacjhervtOnpqhuEY6Q8rdPc+nUZx3BbmBX7Z/zshh7ybjrkq+e3CEqpoh4cxtmW5+ /8Llf+F1t1Ss18tOk3BUGFR46zn2Z8Hsb03XDZ+AYsKHMC/fQmej4jSGsU4nOoevGaPIZoweepT eTuRUPlzGdv1ALUqr4iZUK/GtqXA6w8xtGUQH7OYgWODPUH/+3pLdgqK3tb9VKFBhOO6khTbS8I X+dP8MjCXzACOUZWc441YFLMP1DpLkylJxbOc84HvjP7XFhsjiss7unGy388+A2qbNI+gocOC/I igvLOWQPl1RhobQ== X-Developer-Key: i=khorenko@virtuozzo.com; a=openpgp; fpr=560F6DC83DC5D3D063BD082C51960A47F9615C2A X-OZ-Fwd: true Subject: [Devel] [PATCH hci-8.1 v3 0/5] selftests: netfilter: make the suite pass on a routing host X-BeenThere: devel@openvz.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: OpenVZ development List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: devel-bounces@openvz.org Errors-To: devel-bounces@openvz.org The net/netfilter selftests fail on the hci nodes for reasons outside the code under test: a new network namespace copies ip_forward and send_redirects from init_net, so a routing host with redirects turned off breaks nft_fib.sh and conntrack_icmp_related.sh; a veth name left behind in init_net by another test makes br_netfilter.sh and nf_nat_edemux.sh add their pairs into nothing; rpath.sh fails instead of skipping without nft; and conntrack_resize.sh expects nf_conntrack_expect_max to be read-only outside init_net, which vz virtualizes on purpose. Changes since v2: - patches 1 and 2: the messages said the sysctls are inherited from the creating namespace; they are copied from init_net (devinet_init_net in the default devconf_inherit_init_net mode), which is what matters inside a container. Reworded. - patch 3: the comments in br_netfilter.sh and nf_nat_edemux.sh retold the commit message over four and five lines; one line each now. The "90 lines later" in the message is "much later". - patch 5: the comment is reflowed; the commit reference in the message is wrapped at 74 columns so the commit-msg hook accepts it. - Reviewed-by added to every patch. Signed-off-by: Konstantin Khorenko --- Eva Kurchatova (5): selftests: net: turn ip_forward off in setup_ns selftests: netfilter: let the router send redirects selftests: netfilter: add the veth pair from inside the namespace selftests: netfilter: skip rpath.sh without the nft tool selftests: netfilter: account for a per-namespace nf_conntrack_expect_max tools/testing/selftests/net/lib.sh | 1 + tools/testing/selftests/net/netfilter/br_netfilter.sh | 17 +++++++++-------- .../selftests/net/netfilter/conntrack_icmp_related.sh | 6 ++++++ .../testing/selftests/net/netfilter/conntrack_resize.sh | 6 ++++-- tools/testing/selftests/net/netfilter/nf_nat_edemux.sh | 9 +++++---- tools/testing/selftests/net/netfilter/rpath.sh | 3 +++ 6 files changed, 28 insertions(+), 14 deletions(-) --- base-commit: b3bd8f01bee9ae791ea9c5f89c94a64c49614062 change-id: 20260924-b4-prep-netfilter-edf816137359 Best regards, -- Konstantin Khorenko _______________________________________________ Devel mailing list Devel@openvz.org https://lists.openvz.org/mailman/listinfo/devel