#!/bin/bash set -e drop_seconds() { sed 's/m[0-9]*s[0-9]*ms/m/g' } RULESET="add table ip x add set ip x y { type ipv4_addr; flags dynamic,timeout; } add element ip x y { 1.1.1.1 timeout 30m expires 15m }" test_output=$($NFT -e -f - <<< "$RULESET" 2>&1 | grep -v '# new generation' | drop_seconds) if [ "$test_output" != "$RULESET" ] ; then $DIFF -u <(echo "$test_output") <(echo "$RULESET") exit 1 fi $NFT "add chain ip x c; add rule ip x c ip saddr @y"