mirror/buildroot
1
0
Fork 0
mirror of https://gitlab.com/buildroot.org/buildroot.git synced 2026-09-30 22:11:59 -09:00
Code Issues Packages Projects Releases Wiki Activity

support/testing: TestIptablesNft: add test for iptables with nftables backend

Browse Source 
The new test inherits from TestIptables, with only minimal changes to
use the nftables backend instead.

Signed-off-by: Fiona Klute <fiona.klute@gmx.de>
Signed-off-by: Romain Naour <romain.naour@smile.fr>
This commit is contained in:
Fiona Klute
2026-06-25 10:44:39 +02:00
committed by Romain Naour
parent ab3c1ec3b6
commit 4245fefb34
1 changed files with 13 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
support/testing/tests/package/test_iptables.py
View File

@@ -24,6 +24,7 @@ class TestIptables(infra.basetest.BRTest):
BR2_TARGET_ROOTFS_CPIO_GZIP=y BR2_TARGET_ROOTFS_CPIO_GZIP=y
# BR2_TARGET_ROOTFS_TAR is not set # BR2_TARGET_ROOTFS_TAR is not set
""" """
iptables_backend = "(legacy)"
def test_run(self): def test_run(self):
img = os.path.join(self.builddir, "images", "rootfs.cpio.gz") img = os.path.join(self.builddir, "images", "rootfs.cpio.gz")
@@ -41,7 +42,7 @@ class TestIptables(infra.basetest.BRTest):
cmd = "iptables --version" cmd = "iptables --version"
output, exit_code = self.emulator.run(cmd) output, exit_code = self.emulator.run(cmd)
self.assertEqual(exit_code, 0) self.assertEqual(exit_code, 0)
self.assertTrue(output[0].endswith("(legacy)")) self.assertTrue(output[0].endswith(self.iptables_backend))
# We delete all rules in all chains. We also set default # We delete all rules in all chains. We also set default
# policies to ACCEPT for INPUT and OUTPUT chains. This should # policies to ACCEPT for INPUT and OUTPUT chains. This should
@@ -95,3 +96,14 @@ class TestIptables(infra.basetest.BRTest):
# Since we deleted the rule, the ping test command which was # Since we deleted the rule, the ping test command which was
# supposed to fail earlier is now supposed to succeed. # supposed to fail earlier is now supposed to succeed.
self.assertRunOk(ping_test_cmd) self.assertRunOk(ping_test_cmd)
class TestIptablesNft(TestIptables):
# Build iptables with nftables backend, and run the same test
# procedure as above
config = TestIptables.config + \
"""
BR2_PACKAGE_IPTABLES_NFTABLES=y
BR2_PACKAGE_IPTABLES_NFTABLES_DEFAULT=y
"""
iptables_backend = "(nf_tables)"