1*4882a593Smuzhiyun#!/bin/bash 2*4882a593Smuzhiyun# SPDX-License-Identifier: GPL-2.0 3*4882a593Smuzhiyun 4*4882a593Smuzhiyunfunction config_device { 5*4882a593Smuzhiyun ip netns add at_ns0 6*4882a593Smuzhiyun ip link add veth0 type veth peer name veth0b 7*4882a593Smuzhiyun ip link set veth0b up 8*4882a593Smuzhiyun ip link set veth0 netns at_ns0 9*4882a593Smuzhiyun ip netns exec at_ns0 ip addr add 172.16.1.100/24 dev veth0 10*4882a593Smuzhiyun ip netns exec at_ns0 ip addr add 2401:db00::1/64 dev veth0 nodad 11*4882a593Smuzhiyun ip netns exec at_ns0 ip link set dev veth0 up 12*4882a593Smuzhiyun ip addr add 172.16.1.101/24 dev veth0b 13*4882a593Smuzhiyun ip addr add 2401:db00::2/64 dev veth0b nodad 14*4882a593Smuzhiyun} 15*4882a593Smuzhiyun 16*4882a593Smuzhiyunfunction config_cgroup { 17*4882a593Smuzhiyun rm -rf /tmp/cgroupv2 18*4882a593Smuzhiyun mkdir -p /tmp/cgroupv2 19*4882a593Smuzhiyun mount -t cgroup2 none /tmp/cgroupv2 20*4882a593Smuzhiyun mkdir -p /tmp/cgroupv2/foo 21*4882a593Smuzhiyun echo $$ >> /tmp/cgroupv2/foo/cgroup.procs 22*4882a593Smuzhiyun} 23*4882a593Smuzhiyun 24*4882a593Smuzhiyun 25*4882a593Smuzhiyunfunction attach_bpf { 26*4882a593Smuzhiyun test_cgrp2_sock2 /tmp/cgroupv2/foo sock_flags_kern.o $1 27*4882a593Smuzhiyun [ $? -ne 0 ] && exit 1 28*4882a593Smuzhiyun} 29*4882a593Smuzhiyun 30*4882a593Smuzhiyunfunction cleanup { 31*4882a593Smuzhiyun if [ -d /tmp/cgroupv2/foo ]; then 32*4882a593Smuzhiyun test_cgrp2_sock -d /tmp/cgroupv2/foo 33*4882a593Smuzhiyun fi 34*4882a593Smuzhiyun ip link del veth0b 35*4882a593Smuzhiyun ip netns delete at_ns0 36*4882a593Smuzhiyun umount /tmp/cgroupv2 37*4882a593Smuzhiyun rm -rf /tmp/cgroupv2 38*4882a593Smuzhiyun} 39*4882a593Smuzhiyun 40*4882a593Smuzhiyuncleanup 2>/dev/null 41*4882a593Smuzhiyun 42*4882a593Smuzhiyunset -e 43*4882a593Smuzhiyunconfig_device 44*4882a593Smuzhiyunconfig_cgroup 45*4882a593Smuzhiyunset +e 46*4882a593Smuzhiyun 47*4882a593Smuzhiyun# 48*4882a593Smuzhiyun# Test 1 - fail ping6 49*4882a593Smuzhiyun# 50*4882a593Smuzhiyunattach_bpf 0 51*4882a593Smuzhiyunping -c1 -w1 172.16.1.100 52*4882a593Smuzhiyunif [ $? -ne 0 ]; then 53*4882a593Smuzhiyun echo "ping failed when it should succeed" 54*4882a593Smuzhiyun cleanup 55*4882a593Smuzhiyun exit 1 56*4882a593Smuzhiyunfi 57*4882a593Smuzhiyun 58*4882a593Smuzhiyunping6 -c1 -w1 2401:db00::1 59*4882a593Smuzhiyunif [ $? -eq 0 ]; then 60*4882a593Smuzhiyun echo "ping6 succeeded when it should not" 61*4882a593Smuzhiyun cleanup 62*4882a593Smuzhiyun exit 1 63*4882a593Smuzhiyunfi 64*4882a593Smuzhiyun 65*4882a593Smuzhiyun# 66*4882a593Smuzhiyun# Test 2 - fail ping 67*4882a593Smuzhiyun# 68*4882a593Smuzhiyunattach_bpf 1 69*4882a593Smuzhiyunping6 -c1 -w1 2401:db00::1 70*4882a593Smuzhiyunif [ $? -ne 0 ]; then 71*4882a593Smuzhiyun echo "ping6 failed when it should succeed" 72*4882a593Smuzhiyun cleanup 73*4882a593Smuzhiyun exit 1 74*4882a593Smuzhiyunfi 75*4882a593Smuzhiyun 76*4882a593Smuzhiyunping -c1 -w1 172.16.1.100 77*4882a593Smuzhiyunif [ $? -eq 0 ]; then 78*4882a593Smuzhiyun echo "ping succeeded when it should not" 79*4882a593Smuzhiyun cleanup 80*4882a593Smuzhiyun exit 1 81*4882a593Smuzhiyunfi 82*4882a593Smuzhiyun 83*4882a593Smuzhiyuncleanup 84*4882a593Smuzhiyunecho 85*4882a593Smuzhiyunecho "*** PASS ***" 86