mirror of
https://github.com/netbirdio/netbird.git
synced 2026-09-23 07:09:08 +02:00
Zoltán Papp
ddc4904912
Tests that need root or mutate host state (nftables/iptables/DNS, TUN/WireGuard interfaces, routes, eBPF, SSH/service install) are now gated behind a //go:build privileged tag. The default `go test ./client/...` runs as a non-root user with no sudo and leaves host networking untouched; mixed files were split so pure-logic tests stay in the default suite. A self-hosting ory/dockertest/v4 harness (client/testutil/privileged) runs the privileged suite inside a --privileged --cap-add=NET_ADMIN container via `make test-privileged`; a DOCKER_CI=true guard skips the spawn when already inside the container. Added `make test-unit` for the host-safe run.
42 lines
1.1 KiB
Go
42 lines
1.1 KiB
Go
//go:build linux && !android && privileged
|
|
|
|
package systemops
|
|
|
|
import (
|
|
"errors"
|
|
"net"
|
|
"syscall"
|
|
"testing"
|
|
|
|
"github.com/stretchr/testify/require"
|
|
"github.com/vishvananda/netlink"
|
|
)
|
|
|
|
// ensureIPv6DefaultRoute installs a low-preference IPv6 default route via the
|
|
// loopback interface so route lookups for global IPv6 prefixes resolve in
|
|
// environments without v6 connectivity. Any pre-existing default route wins
|
|
// because of its lower metric.
|
|
func ensureIPv6DefaultRoute(t *testing.T) {
|
|
t.Helper()
|
|
|
|
lo, err := netlink.LinkByName("lo")
|
|
require.NoError(t, err, "find loopback interface")
|
|
|
|
route := &netlink.Route{
|
|
Dst: &net.IPNet{IP: net.IPv6zero, Mask: net.CIDRMask(0, 128)},
|
|
LinkIndex: lo.Attrs().Index,
|
|
Priority: 1 << 20,
|
|
}
|
|
if err := netlink.RouteAdd(route); err != nil {
|
|
if errors.Is(err, syscall.EEXIST) {
|
|
return
|
|
}
|
|
t.Skipf("install IPv6 fallback default route: %v", err)
|
|
}
|
|
t.Cleanup(func() {
|
|
if err := netlink.RouteDel(route); err != nil && !errors.Is(err, syscall.ESRCH) {
|
|
t.Logf("delete IPv6 fallback default route: %v", err)
|
|
}
|
|
})
|
|
}
|