summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorPablo Neira Ayuso <pablo@netfilter.org>2024-08-15 12:25:36 +0200
committerPablo Neira Ayuso <pablo@netfilter.org>2024-08-19 17:24:31 +0200
commit494ed50e866eff86a8a33e2b97a978872eca3271 (patch)
tree0c9920242f067c37b943b2aae28b7aff5553549f
parent6bcaef6a1ea6dc60250ed6124f3b49a8cd29434c (diff)
tests: shell: add a few tests for nft -i
Eric Garver recently provided a few tests for nft -i that helped identify issues that resulted in reverting: e791dbe109b6 ("cache: recycle existing cache with incremental updates") add these tests to tests/shell. Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
-rw-r--r--tests/shell/testcases/nft-i/dumps/index_0.nft8
-rw-r--r--tests/shell/testcases/nft-i/dumps/set_0.nft7
-rwxr-xr-xtests/shell/testcases/nft-i/index_011
-rwxr-xr-xtests/shell/testcases/nft-i/set_09
4 files changed, 35 insertions, 0 deletions
diff --git a/tests/shell/testcases/nft-i/dumps/index_0.nft b/tests/shell/testcases/nft-i/dumps/index_0.nft
new file mode 100644
index 00000000..abcd1b7c
--- /dev/null
+++ b/tests/shell/testcases/nft-i/dumps/index_0.nft
@@ -0,0 +1,8 @@
+table inet foo {
+ chain bar {
+ type filter hook input priority filter; policy accept;
+ accept
+ accept
+ accept
+ }
+}
diff --git a/tests/shell/testcases/nft-i/dumps/set_0.nft b/tests/shell/testcases/nft-i/dumps/set_0.nft
new file mode 100644
index 00000000..d3377d63
--- /dev/null
+++ b/tests/shell/testcases/nft-i/dumps/set_0.nft
@@ -0,0 +1,7 @@
+table inet foo {
+ set bar {
+ type ipv4_addr
+ flags interval
+ elements = { 10.1.1.1, 10.1.1.2 }
+ }
+}
diff --git a/tests/shell/testcases/nft-i/index_0 b/tests/shell/testcases/nft-i/index_0
new file mode 100755
index 00000000..f885fdeb
--- /dev/null
+++ b/tests/shell/testcases/nft-i/index_0
@@ -0,0 +1,11 @@
+#!/bin/bash
+
+set -e
+
+RULESET="add table inet foo
+add chain inet foo bar { type filter hook input priority filter; }
+add rule inet foo bar accept
+insert rule inet foo bar index 0 accept
+add rule inet foo bar index 0 accept"
+
+$NFT -i <<< "$RULESET"
diff --git a/tests/shell/testcases/nft-i/set_0 b/tests/shell/testcases/nft-i/set_0
new file mode 100755
index 00000000..e87eef1d
--- /dev/null
+++ b/tests/shell/testcases/nft-i/set_0
@@ -0,0 +1,9 @@
+#!/bin/bash
+
+set -e
+
+RULESET="add table inet foo
+add set inet foo bar { type ipv4_addr; flags interval; }; add element inet foo bar { 10.1.1.1/32 }
+add element inet foo bar { 10.1.1.2/32 }"
+
+$NFT -i <<< "$RULESET"