From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail.openvz.org (unknown [69.168.225.77]) by lore.virtuozzo.com (Postfix) with ESMTPS id 8A37980067 for ; Thu, 24 Sep 2026 11:07:42 +0000 (UTC) Received: from mail.openvz.org (localhost [127.0.0.1]) by mail.openvz.org (8.14.4/8.14.4) with ESMTP id 68OB6Rxa014336; Thu, 24 Sep 2026 14:06:28 +0300 DKIM-Filter: OpenDKIM Filter v2.11.0 mail.openvz.org 68OB6Rxa014336 Authentication-Results: mail.openvz.org; dkim=fail reason="signature verification failed" (2048-bit key) header.d=virtuozzo.com header.i=@virtuozzo.com header.b="iSG1atF8" Received: from mail-wm1-f72.google.com (mail-wm1-f72.google.com [209.85.128.72]) by mail.openvz.org (8.14.4/8.14.4) with ESMTP id 68OB6Luv014307 (version=TLSv1/SSLv3 cipher=AES128-GCM-SHA256 bits=128 verify=FAIL) for ; Thu, 24 Sep 2026 14:06:21 +0300 DKIM-Filter: OpenDKIM Filter v2.11.0 mail.openvz.org 68OB6Luv014307 Received: by mail-wm1-f72.google.com with SMTP id 5b1f17b1804b1-49e6b5c5f44so28059045e9.2 for ; Thu, 24 Sep 2026 04:06:21 -0700 (PDT) X-Forwarded-Encrypted: i=2; AKwUvBwyG5kJ4nRsTSKUzo45F4OnM+ZT2g4wtw8EzLiTmeaj7rECc4zid9PmQbj2Y3UKHnqvOHR1bw==@openvz.org X-Gm-Message-State: AFuF++kmsHXl7Byls9CX70qKRWCfP3OdO4KWTemvvWR9lm59WqBg3kvg SuftiflV7wl62v6akSIXE1agokkIQjvM0nWnb8asiQwus2bN4a2IpQXRuV6dTJo91U+YHAVhGTn oagU4I/VqY3lHw5BtywjORPDP7cCMIwH0ux/7wtBeOQ7tXf6VbSY8oQ== X-Gm-Gg: AYBFou2oHXPWfY3CfMcZOt5fzmNNnLfSpRJ2TgN1UPoj9G99yCtLTHY27qtXT6RshYn C1Fd3HOxAt2z+WL2razYMC9ngTUN8FlBKk/onYOtZGk75U1nVa50cVm6dYWMVN0lywRK+1c278W QiaRk1wXUTI9YkbKrhmwzdM40YbkWYMJihpqVYE1egnD1VMsK4u5yQo2Cix/FCbhj+e2c0ZrfRE iwPkA8B03sMRqQhckYjt9rcuI+9omxEnst4glFf50SalYjIzcLPIcmowp1pW7W4D8WCr5vLqLHM rRiM6V7FK7PoNhCsENKa0kL3YfaE3tyowDKYqSe6X33IU9zK8fyzK8JctevyWh8UXXlADsONqZM WAwKkzlwI4wvTaf0Y0g== X-Received: by 2002:a05:600c:6990:b0:493:c47f:3c55 with SMTP id 5b1f17b1804b1-49fe7b52fd1mr28028215e9.5.1790247981175; Thu, 24 Sep 2026 04:06:21 -0700 (PDT) X-Received: by 2002:a05:600c:6990:b0:493:c47f:3c55 with SMTP id 5b1f17b1804b1-49fe7b52fd1mr28027565e9.5.1790247980581; Thu, 24 Sep 2026 04:06:20 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1790247980; cv=none; d=google.com; s=arc-20260327; b=pBVaLjm3lT4Zmk8NlRd/FWJU5o3LSu49KgvQ088g/L/qcZBfdzUWqXduD/1znNe/QI Sldg4PEe90z0olNyisu0R8WRs/t1/pgjzcjqqo9fFel5Razxg5U3OWI8e6Dkm5Bi1Dwp BaDwsjjbSia73i36kiGJJ5OXxUEXVuj8+9cbCCoJuq8lhflQZMtExMcjdP06M6axcXLs HXCLLuaKiy1MRnzpyPnAi8MoYyfixx9XBF4KKyHzd+msLGH1X/8xOMfZ6ygp0+ke8fU8 KFwNSPRlyQbkh78Atds0NVhXssACg2knSaTFRMhOnCVEBg/oXBiOltF6oNSzNhgOb6RB rERQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=cc:to:in-reply-to:references:message-id:content-transfer-encoding :mime-version:subject:date:from:dkim-signature; bh=ej5rzB6pSsrJYimK4qQRWIPEQkxyoN4kl7qU+i9ssu4=; fh=Ac4B+E9J0iKprNz57k5baX4D1nACtq3mk5EYYPOTKpA=; b=KR/7w8PRQe4Lhw8H7AZYImh0mHSdd8XBN3NIBeZXGKepD2IrEKCWwCm4YMVmNlSKhW KeBO/wh+YvhwO9pEVKff4WTf7J74KZ5wqAE0KjVkiASR5jql+vkK/CUDnCrGM6s8ezPj cagOEg5OeJ3o58IdMIot7+jnVC3CPWBaFQLl6pGmw/bdRgL++iZW7v+OBQE0WtaSuVAM fIfFATYCJpnB47291PVVuApwVPGSMAbj35KiJtOaZVOY7bpzpfEknljRz9j7gA2Mv/rC p9OL4JvimUORzUcAvpakTcDR2T2dzaKh/Sfm+wvXEg8gksXFE8+S3Xps5I+2s3uznTuN EF7g==; dara=google.com ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@virtuozzo.com header.s=relay header.b=iSG1atF8; spf=pass (google.com: domain of khorenko@virtuozzo.com designates 130.117.225.111 as permitted sender) smtp.mailfrom=khorenko@virtuozzo.com; dmarc=pass (p=QUARANTINE sp=QUARANTINE dis=NONE) header.from=virtuozzo.com Received: from relay.virtuozzo.com (relay.virtuozzo.com. [130.117.225.111]) by mx.google.com with ESMTPS id 5b1f17b1804b1-49fe647c033si40712295e9.18.2026.09.24.04.06.20 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Thu, 24 Sep 2026 04:06:20 -0700 (PDT) Received-SPF: pass (google.com: domain of khorenko@virtuozzo.com designates 130.117.225.111 as permitted sender) client-ip=130.117.225.111; Authentication-Results: mx.google.com; dkim=pass header.i=@virtuozzo.com header.s=relay header.b=iSG1atF8; spf=pass (google.com: domain of khorenko@virtuozzo.com designates 130.117.225.111 as permitted sender) smtp.mailfrom=khorenko@virtuozzo.com; dmarc=pass (p=QUARANTINE sp=QUARANTINE dis=NONE) header.from=virtuozzo.com DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=virtuozzo.com; s=relay; h=Message-Id:Content-Type:MIME-Version:Subject:Date :From; bh=ej5rzB6pSsrJYimK4qQRWIPEQkxyoN4kl7qU+i9ssu4=; b=iSG1atF8zBmVMftSaNo RuGf/wKGCxtXS9nWFokwET6IeuXAwAkFdwwdMsSNmwdad6OL589idw5U2mIC2VsDqnk87F4uU+w4E cBQ+ReE1vX15viHkRVWtK+vg3JIqG+aP5wMGy/8lEKmkqTJCP9ThfRUhrEx/ENSFhjhJZVY7rwS2w Hv63ZErpoKzmm5L2aR1f8vnWlBqGGxql9ZTs6S3d8cl9vafh24O1o8IcwTjI6bUAiG3mG0mhxeaSk baRnG8EDVmOXTxY6sK35PPDE1mCF4Y2Z7ELNnVQuK125gixtTbI9uyqyJ/Ne0idKLH+sjjR2ezCSM 5xCKzK60tjc0UVg==; Received: from ch-demo-asa.virtuozzo.com ([130.117.225.8] helo=f0.sw.ru) by relay.virtuozzo.com with esmtp (Exim 4.96) (envelope-from ) id 1x9hET-00CbHw-2W; Thu, 24 Sep 2026 13:06:18 +0200 From: Konstantin Khorenko Date: Thu, 24 Sep 2026 13:06:06 +0200 MIME-Version: 1.0 Message-Id: <20260924-b4-prep-netfilter-v3-1-e6a17b8f193f@virtuozzo.com> References: <20260924-b4-prep-netfilter-v3-0-e6a17b8f193f@virtuozzo.com> In-Reply-To: <20260924-b4-prep-netfilter-v3-0-e6a17b8f193f@virtuozzo.com> To: Konstantin Khorenko , devel@openvz.org X-Mailer: b4 0.16.0 X-Developer-Signature: v=1; a=openpgp-sha256; l=1774; i=khorenko@virtuozzo.com; h=from:subject:message-id; bh=aOTqnXhLUjvL/rb4Hpfb3hX/twDFy1OikQXms0YYTFU=; b=owEBbQKS/ZANAwAKAVGWCkf5YVwqAcsmYgBqtQQqY/oKFwrVngfJ3fyiT9Ej6LTTvedvHT+2W 8FMaUII+4+JAjMEAAEKAB0WIQRWD23IPcXT0GO9CCxRlgpH+WFcKgUCarUEKgAKCRBRlgpH+WFc KggTEACEgppNCcn9j0svbis5Vdf0q2dEDAEj/psyZRsyZK9nQiTqEXaX3AEmCr0vHTwFnaaWcZ6 O+45FKgsfeOf4xak1+QmCeMm4YlmhTc9HYTBdK/V3n+HmtJOW2e3ntw+9Mk09PjT/n+j3fFTrGW n7jfTCrJlCOCVsTNLVpQEHvpWltVW3EwmsNi/o5KCw60paMyJSXk/EAWNi80qhq0gs/dlwOtG/R /3BPGRGx5/vpS2v865roRAUpeC4brVFfXqvF+yDBSZkRQs0olS5mUPPf75byu8Hyyw8loIcSmMq 300shbcotJ2+5Hdg+C0QMy+R182Is+E6d6zRtjIschpdXndgDL6uGw4GritUODgwU5gT/O3AgJv mBRpkvniCmsNBLlEe1K4IeDiwdrk1wX8CLQf4coL2flJsRYv/prjJpwC2N6LLlg0aOrMdgnEpL9 BEAyaih4KJY+3Yv06VySSdxBG7ctbmHPYAT2i2SVHB7REZ4qIxAfmYMJtQDc7+4AWffgfxIjVa9 MqhUaHgbmUBTgxgCJ+9LqTuQExXoMC9Tnre+2FhHmTOoo7j7BuGu7zGG/KrPAWkGJYn8/mkll7+ VB9F/I+OwqakQeotH173s0KNFWdqk5jv+6+lXPK4BwWwtFR7OscAIPXsSJCITa/lKgKb4WCHCQ1 81FhI4SAD/lB4Bw== X-Developer-Key: i=khorenko@virtuozzo.com; a=openpgp; fpr=560F6DC83DC5D3D063BD082C51960A47F9615C2A X-OZ-Fwd: true Subject: [Devel] [PATCH hci-8.1 v3 1/5] selftests: net: turn ip_forward off in setup_ns X-BeenThere: devel@openvz.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: OpenVZ development List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: devel-bounces@openvz.org Errors-To: devel-bounces@openvz.org From: Eva Kurchatova A new network namespace takes net.ipv4.ip_forward from init_net, no matter which namespace it is created from: # sysctl -wq net.ipv4.ip_forward=1 # ip netns add probe # ip netns exec probe cat /proc/sys/net/ipv4/ip_forward 1 so on a machine that routes, every test namespace forwards. nft_fib.sh is one that cannot work that way: the two hosts either side of its router forward the test packets back at it until the TTL runs out, and the fib expressions the test checks see the wrong thing. setup_ns already takes rp_filter out of the way for the same reason, so take ip_forward too, and let the tests that want a router turn it on themselves, which the ones that need it already do. net.ipv6.conf.all.forwarding is not inherited, verified the same way, so it needs no such treatment. https://virtuozzo.atlassian.net/browse/VSTOR-139651 Feature: fix selftests Signed-off-by: Eva Kurchatova Reviewed-by: Konstantin Khorenko --- v3: say the value is copied from init_net rather than from the creating namespace. --- tools/testing/selftests/net/lib.sh | 1 + 1 file changed, 1 insertion(+) diff --git a/tools/testing/selftests/net/lib.sh b/tools/testing/selftests/net/lib.sh index c712a5897075d..0a38c1ed4b498 100644 --- a/tools/testing/selftests/net/lib.sh +++ b/tools/testing/selftests/net/lib.sh @@ -219,6 +219,7 @@ setup_ns() ip -n "${!ns_name}" link set lo up ip netns exec "${!ns_name}" sysctl -wq net.ipv4.conf.all.rp_filter=0 ip netns exec "${!ns_name}" sysctl -wq net.ipv4.conf.default.rp_filter=0 + ip netns exec "${!ns_name}" sysctl -wq net.ipv4.ip_forward=0 ns_list+=("${!ns_name}") done NS_LIST+=("${ns_list[@]}") -- 2.43.0 _______________________________________________ Devel mailing list Devel@openvz.org https://lists.openvz.org/mailman/listinfo/devel