[Devel] [PATCH hci-8.1 v3 0/5] selftests: netfilter: make the suite pass on a routing host

[Konstantin Khorenko]

The net/netfilter selftests fail on the hci nodes for reasons outside
the code under test: a new network namespace copies ip_forward and
send_redirects from init_net, so a routing host with redirects turned
off breaks nft_fib.sh and conntrack_icmp_related.sh; a veth name left
behind in init_net by another test makes br_netfilter.sh and
nf_nat_edemux.sh add their pairs into nothing; rpath.sh fails instead
of skipping without nft; and conntrack_resize.sh expects
nf_conntrack_expect_max to be read-only outside init_net, which vz
virtualizes on purpose.

Changes since v2:
- patches 1 and 2: the messages said the sysctls are inherited from the
  creating namespace; they are copied from init_net (devinet_init_net
  in the default devconf_inherit_init_net mode), which is what matters
  inside a container. Reworded.
- patch 3: the comments in br_netfilter.sh and nf_nat_edemux.sh retold
  the commit message over four and five lines; one line each now. The
  "90 lines later" in the message is "much later".
- patch 5: the comment is reflowed; the commit reference in the message
  is wrapped at 74 columns so the commit-msg hook accepts it.
- Reviewed-by added to every patch.

Signed-off-by: Konstantin Khorenko <khorenko at virtuozzo.com>
---
Eva Kurchatova (5):
      selftests: net: turn ip_forward off in setup_ns
      selftests: netfilter: let the router send redirects
      selftests: netfilter: add the veth pair from inside the namespace
      selftests: netfilter: skip rpath.sh without the nft tool
      selftests: netfilter: account for a per-namespace nf_conntrack_expect_max

 tools/testing/selftests/net/lib.sh                      |  1 +
 tools/testing/selftests/net/netfilter/br_netfilter.sh   | 17 +++++++++--------
 .../selftests/net/netfilter/conntrack_icmp_related.sh   |  6 ++++++
 .../testing/selftests/net/netfilter/conntrack_resize.sh |  6 ++++--
 tools/testing/selftests/net/netfilter/nf_nat_edemux.sh  |  9 +++++----
 tools/testing/selftests/net/netfilter/rpath.sh          |  3 +++
 6 files changed, 28 insertions(+), 14 deletions(-)
---
base-commit: b3bd8f01bee9ae791ea9c5f89c94a64c49614062
change-id: 20260924-b4-prep-netfilter-edf816137359

Best regards,
--  
Konstantin Khorenko <khorenko at virtuozzo.com>