mirror of
https://github.com/netbirdio/netbird.git
synced 2026-07-20 07:21:27 +02:00
ddc4904912
Tests that need root or mutate host state (nftables/iptables/DNS, TUN/WireGuard interfaces, routes, eBPF, SSH/service install) are now gated behind a //go:build privileged tag. The default `go test ./client/...` runs as a non-root user with no sudo and leaves host networking untouched; mixed files were split so pure-logic tests stay in the default suite. A self-hosting ory/dockertest/v4 harness (client/testutil/privileged) runs the privileged suite inside a --privileged --cap-add=NET_ADMIN container via `make test-privileged`; a DOCKER_CI=true guard skips the spawn when already inside the container. Added `make test-unit` for the host-safe run.
40 lines
933 B
Go
40 lines
933 B
Go
//go:build !linux || !privileged
|
|
|
|
package wgproxy
|
|
|
|
import (
|
|
"net"
|
|
|
|
"github.com/netbirdio/netbird/client/iface/bind"
|
|
"github.com/netbirdio/netbird/client/iface/wgaddr"
|
|
bindproxy "github.com/netbirdio/netbird/client/iface/wgproxy/bind"
|
|
)
|
|
|
|
func seedProxies() ([]proxyInstance, error) {
|
|
// todo extend with Bind proxy
|
|
pl := make([]proxyInstance, 0)
|
|
return pl, nil
|
|
}
|
|
|
|
func seedProxyForProxyCloseByRemoteConn() ([]proxyInstance, error) {
|
|
pl := make([]proxyInstance, 0)
|
|
wgAddress, err := wgaddr.ParseWGAddress("10.0.0.1/32")
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
iceBind := bind.NewICEBind(nil, nil, wgAddress, 1280)
|
|
endpointAddress := &net.UDPAddr{
|
|
IP: net.IPv4(10, 0, 0, 1),
|
|
Port: 1234,
|
|
}
|
|
|
|
pBind := proxyInstance{
|
|
name: "bind proxy",
|
|
proxy: bindproxy.NewProxyBind(iceBind, 0),
|
|
endpointAddr: endpointAddress,
|
|
closeFn: func() error { return nil },
|
|
}
|
|
pl = append(pl, pBind)
|
|
return pl, nil
|
|
}
|