commit 13c3986b7a7da4f29005349674b334b6b914a371 · pyrox.dev/nixpkgs

+14 -1
nixos/tests/networking.nix
···

       11
       11
        
           let

     

       12
       12
        
             vlanIfs = range 1 (length config.virtualisation.vlans);

     

       13
       13
        
           in {

     

       14
       14
       +
             environment.systemPackages = [ pkgs.iptables ]; # to debug firewall rules

     

       14
       15
        
             virtualisation.vlans = [ 1 2 3 ];

     

       15
       16
        
             boot.kernel.sysctl."net.ipv6.conf.all.forwarding" = true;

     

       16
       17
        
             networking = {

     
···

       320
       321
        
             name = "MACVLAN";

     

       321
       322
        
             nodes.router = router;

     

       322
       323
        
             nodes.client = { pkgs, ... }: with pkgs.lib; {

     

       324
       324
       +
               environment.systemPackages = [ pkgs.iptables ]; # to debug firewall rules

     

       323
       325
        
               virtualisation.vlans = [ 1 ];

     

       324
       326
        
               networking = {

     

       325
       327
        
                 useNetworkd = networkd;

     

       328
       328
       +
                 firewall.logReversePathDrops = true; # to debug firewall rules

     

       329
       329
       +
                 # reverse path filtering rules for the macvlan interface seem

     

       330
       330
       +
                 # to be incorrect, causing the test to fail. Disable temporarily.

     

       331
       331
       +
                 firewall.checkReversePath = false;

     

       326
       332
        
                 firewall.allowPing = true;

     

       327
       333
        
                 useDHCP = true;

     

       328
       334
        
                 macvlans.macvlan.interface = "eth1";

     
···

       341
       347
        
                 $client->waitUntilSucceeds("ip addr show dev eth1 | grep -q '192.168.1'");

     

       342
       348
        
                 $client->waitUntilSucceeds("ip addr show dev macvlan | grep -q '192.168.1'");

     

       343
       349
        
       

     

       344
       344
       -
                 # Print diagnosting information

     

       350
       350
       +
                 # Print lots of diagnostic information

     

       351
       351
       +
                 $router->log('**********************************************');

     

       345
       352
        
                 $router->succeed("ip addr >&2");

     

       353
       353
       +
                 $router->succeed("ip route >&2");

     

       354
       354
       +
                 $router->execute("iptables-save >&2");

     

       355
       355
       +
                 $client->log('==============================================');

     

       346
       356
        
                 $client->succeed("ip addr >&2");

     

       357
       357
       +
                 $client->succeed("ip route >&2");

     

       358
       358
       +
                 $client->execute("iptables-save >&2");

     

       359
       359
       +
                 $client->log('##############################################');

     

       347
       360
        
       

     

       348
       361
        
                 # Test macvlan creates routable ips

     

       349
       362
        
                 $client->waitUntilSucceeds("ping -c 1 192.168.1.1");