1#!/bin/sh
  2# SPDX-License-Identifier: GPL-2.0
  3
  4# Test various socket options that can be set by attaching programs to cgroups.
  5
  6CGRP_MNT="/tmp/cgroupv2-test_cgrp2_sock"
  7
  8################################################################################
  9#
 10print_result()
 11{
 12	local rc=$1
 13	local status=" OK "
 14
 15	[ $rc -ne 0 ] && status="FAIL"
 16
 17	printf "%-50s    [%4s]\n" "$2" "$status"
 18}
 19
 20check_sock()
 21{
 22	out=$(test_cgrp2_sock)
 23	echo $out | grep -q "$1"
 24	if [ $? -ne 0 ]; then
 25		print_result 1 "IPv4: $2"
 26		echo "    expected: $1"
 27		echo "        have: $out"
 28		rc=1
 29	else
 30		print_result 0 "IPv4: $2"
 31	fi
 32}
 33
 34check_sock6()
 35{
 36	out=$(test_cgrp2_sock -6)
 37	echo $out | grep -q "$1"
 38	if [ $? -ne 0 ]; then
 39		print_result 1 "IPv6: $2"
 40		echo "    expected: $1"
 41		echo "        have: $out"
 42		rc=1
 43	else
 44		print_result 0 "IPv6: $2"
 45	fi
 46}
 47
 48################################################################################
 49#
 50
 51cleanup()
 52{
 53	echo $$ >> ${CGRP_MNT}/cgroup.procs
 54	rmdir ${CGRP_MNT}/sockopts
 55}
 56
 57cleanup_and_exit()
 58{
 59	local rc=$1
 60	local msg="$2"
 61
 62	[ -n "$msg" ] && echo "ERROR: $msg"
 63
 64	test_cgrp2_sock -d ${CGRP_MNT}/sockopts
 65	ip li del cgrp2_sock
 66	umount ${CGRP_MNT}
 67
 68	exit $rc
 69}
 70
 71
 72################################################################################
 73# main
 74
 75rc=0
 76
 77ip li add cgrp2_sock type dummy 2>/dev/null
 78
 79set -e
 80mkdir -p ${CGRP_MNT}
 81mount -t cgroup2 none ${CGRP_MNT}
 82set +e
 83
 84
 85# make sure we have a known start point
 86cleanup 2>/dev/null
 87
 88mkdir -p ${CGRP_MNT}/sockopts
 89[ $? -ne 0 ] && cleanup_and_exit 1 "Failed to create cgroup hierarchy"
 90
 91
 92# set pid into cgroup
 93echo $$ > ${CGRP_MNT}/sockopts/cgroup.procs
 94
 95# no bpf program attached, so socket should show no settings
 96check_sock "dev , mark 0, priority 0" "No programs attached"
 97check_sock6 "dev , mark 0, priority 0" "No programs attached"
 98
 99# verify device is set
100#
101test_cgrp2_sock -b cgrp2_sock ${CGRP_MNT}/sockopts
102if [ $? -ne 0 ]; then
103	cleanup_and_exit 1 "Failed to install program to set device"
104fi
105check_sock "dev cgrp2_sock, mark 0, priority 0" "Device set"
106check_sock6 "dev cgrp2_sock, mark 0, priority 0" "Device set"
107
108# verify mark is set
109#
110test_cgrp2_sock -m 666 ${CGRP_MNT}/sockopts
111if [ $? -ne 0 ]; then
112	cleanup_and_exit 1 "Failed to install program to set mark"
113fi
114check_sock "dev , mark 666, priority 0" "Mark set"
115check_sock6 "dev , mark 666, priority 0" "Mark set"
116
117# verify priority is set
118#
119test_cgrp2_sock -p 123 ${CGRP_MNT}/sockopts
120if [ $? -ne 0 ]; then
121	cleanup_and_exit 1 "Failed to install program to set priority"
122fi
123check_sock "dev , mark 0, priority 123" "Priority set"
124check_sock6 "dev , mark 0, priority 123" "Priority set"
125
126# all 3 at once
127#
128test_cgrp2_sock -b cgrp2_sock -m 666 -p 123 ${CGRP_MNT}/sockopts
129if [ $? -ne 0 ]; then
130	cleanup_and_exit 1 "Failed to install program to set device, mark and priority"
131fi
132check_sock "dev cgrp2_sock, mark 666, priority 123" "Priority set"
133check_sock6 "dev cgrp2_sock, mark 666, priority 123" "Priority set"
134
135cleanup_and_exit $rc

 1#!/bin/bash
 
 2
 3function config_device {
 4	ip netns add at_ns0
 5	ip link add veth0 type veth peer name veth0b
 6	ip link set veth0b up
 7	ip link set veth0 netns at_ns0
 8	ip netns exec at_ns0 ip addr add 172.16.1.100/24 dev veth0
 9	ip netns exec at_ns0 ip addr add 2401:db00::1/64 dev veth0 nodad
10	ip netns exec at_ns0 ip link set dev veth0 up
11	ip link add foo type vrf table 1234
12	ip link set foo up
13	ip addr add 172.16.1.101/24 dev veth0b
14	ip addr add 2401:db00::2/64 dev veth0b nodad
15	ip link set veth0b master foo
 
16}
17
18function attach_bpf {
19	rm -rf /tmp/cgroupv2
20	mkdir -p /tmp/cgroupv2
21	mount -t cgroup2 none /tmp/cgroupv2
22	mkdir -p /tmp/cgroupv2/foo
23	test_cgrp2_sock /tmp/cgroupv2/foo foo
24	echo $$ >> /tmp/cgroupv2/foo/cgroup.procs
 
 
 
 
 
25}
26
27function cleanup {
28	set +ex
29	ip netns delete at_ns0
30	ip link del veth0
31	ip link del foo
32	umount /tmp/cgroupv2
33	rm -rf /tmp/cgroupv2
34	set -ex
 
 
 
 
35}
36
37function do_test {
38	ping -c1 -w1 172.16.1.100
39	ping6 -c1 -w1 2401:db00::1
 
 
 
 
40}
41
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
42cleanup 2>/dev/null
43config_device
44attach_bpf
45do_test
46cleanup
47echo "*** PASS ***"