path: root/tests/monitor/run-tests.sh

#!/bin/bash

nft=${NFT:-$(dirname $0)/../../src/nft}
debug=false
test_json=false

mydiff() {
	diff -w -I '^# ' --label "expected" --label "got" "$@"
}

err() {
	echo "$*" >&2
}

if [ "$(id -u)" != "0" ] ; then
	err "this requires root!"
	exit 77
fi

testdir=$(mktemp -d)
if [ ! -d $testdir ]; then
	err "Failed to create test directory"
	exit 99
fi
trap 'rm -rf $testdir; $nft flush ruleset' EXIT

command_file=$(mktemp -p $testdir)
output_file=$(mktemp -p $testdir)

cmd_append() {
	echo "$*" >>$command_file
}
monitor_output_append() {
	[[ "$*" == '-' ]] && {
		cat $command_file >>$output_file
		return
	}
	echo "$*" >>$output_file
}
echo_output_append() {
	# this is a bit tricky: for replace commands, nft prints a delete
	# command - so in case there is a replace command in $command_file,
	# just assume any other commands in the same file are sane
	grep -q '^replace' $command_file >/dev/null 2>&1 && {
		monitor_output_append "$*"
		return
	}
	[[ "$*" == '-' ]] && {
		grep '^\(add\|replace\|insert\)' $command_file >>$output_file
		return
	}
	[[ "$*" =~ ^(\{\")?(add|replace|insert) ]] && echo "$*" >>$output_file
}
json_output_filter() { # (filename)
	# unify handle values
	sed -i -e 's/\("handle":\) [0-9][0-9]*/\1 0/g' "$1"
}
monitor_run_test() {
	monitor_output=$(mktemp -p $testdir)
	monitor_args=""
	$test_json && monitor_args="vm json"
	local rc=0

	$nft -nn monitor $monitor_args >$monitor_output &
	monitor_pid=$!

	sleep 0.5

	$debug && {
		echo "command file:"
		cat $command_file
	}
	$nft -f - <$command_file || {
		err "nft command failed!"
		rc=1
	}
	sleep 0.5
	kill $monitor_pid
	wait >/dev/null 2>&1
	$test_json && json_output_filter $monitor_output
	mydiff -q $monitor_output $output_file >/dev/null 2>&1
	if [[ $rc == 0 && $? != 0 ]]; then
		err "monitor output differs!"
		mydiff -u $output_file $monitor_output >&2
		rc=1
	fi
	rm $command_file
	rm $output_file
	touch $command_file
	touch $output_file
	return $rc
}

echo_run_test() {
	echo_output=$(mktemp -p $testdir)
	echo_args="-nn -e"
	$test_json && echo_args+=" -j"
	local rc=0

	$debug && {
		echo ">>> command file"
		cat $command_file
		echo "<<< command file"
	}
	$nft $echo_args -f - <$command_file >$echo_output || {
		err "nft command failed!"
		rc=1
	}
	if $test_json; then
		# Extract commands from the surrounding JSON object
		sed -i -e 's/^{"nftables": \[//' -e 's/\]}$//' $echo_output
		json_output_filter $echo_output

		# Replace newlines by ", " in output file
		readarray -t output_file_lines <$output_file
		sep=""
		for ((i = 0; i < ${#output_file_lines[*]}; i++)); do
			printf "${sep}${output_file_lines[$i]}"
			sep=", "
		done >$output_file
		[ $i -gt 0 ] && echo "" >>$output_file
	fi
	$debug && {
		echo ">>> output file"
		cat $output_file
		echo "<<< output file"
		echo ">>> echo output"
		cat $echo_output
		echo "<<< echo output"
	}

	mydiff -q $echo_output $output_file >/dev/null 2>&1
	if [[ $rc == 0 && $? != 0 ]]; then
		err "echo output differs!"
		mydiff -u $output_file $echo_output >&2
		rc=1
	fi
	rm $command_file
	rm $output_file
	touch $command_file
	touch $output_file
	return $rc
}

netns=true
for arg in "$@"; do
	[[ "$arg" == "--no-netns" ]] && netns=false
done
if $netns; then
	exec unshare -n $0 --no-netns "$@"
fi

testcases=""
variants=""
syntaxes=""
while [ -n "$1" ]; do
	case "$1" in
	-d|--debug)
		debug=true
		shift
		;;
	-s|--standard)
		syntaxes+=" standard"
		shift
		;;
	-j|--json)
		syntaxes+=" json"
		shift
		;;
	-e|--echo)
		variants+=" echo"
		shift
		;;
	-m|--monitor)
		variants+=" monitor"
		shift
		;;
	--no-netns)
		shift
		;;
	-H|--host)
		nft=nft
		shift
		;;
	*.t)
		testcases+=" $1"
		shift
		;;
	*)
		echo "unknown option '$1'"
		;&
	-h|--help)
		echo "Usage: $(basename $0) [(-e|--echo)|(-m|--monitor)] [(-j|--json)|(-s|--standard)] [-d|--debug] [testcase ...]"
		exit 1
		;;
	esac
done

# run the single test in $1
# expect $variant and $test_json to be set appropriately
run_testcase() {
	testcase="$1"
	filename=$(basename $testcase)
	rc=0
	$test_json && printf "json-"
	echo "$variant: running tests from file $filename"

	# files are like this:
	#
	# I add table ip t
	# O add table ip t
	# I add chain ip t c
	# O add chain ip t c

	$nft flush ruleset

	input_complete=false
	while read dir line; do
		case $dir in
		I)
			$input_complete && {
				${variant}_run_test
				$run_test
				let "rc += $?"
			}
			input_complete=false
			cmd_append "$line"
			;;
		O)
			input_complete=true
			$test_json || ${variant}_output_append "$line"
			;;
		J)
			input_complete=true
			$test_json && ${variant}_output_append "$line"
			;;
		'#'|'')
			# ignore comments and empty lines
			;;
		esac
	done <$testcase
	$input_complete && {
		${variant}_run_test
		let "rc += $?"
	}

	[[ $rc -ne 0 ]] && \
		echo "$variant: $rc tests from file $filename failed"
	return $rc
}

total_rc=0
for syntax in ${syntaxes:-standard json}; do
	[ $syntax == json ] && test_json=true || test_json=false
	for variant in ${variants:-echo monitor}; do
		for testcase in ${testcases:-$(dirname $0)/testcases/*.t}; do
			run_testcase "$testcase"
			let "total_rc += $?"
		done
	done
done

exit $total_rc