5ecd8c2273
Add selftests for bpf_skb_ancestor_cgroup_id helper. test_skb_cgroup_id.sh prepares testing interface and adds tc qdisc and filter for it using BPF object compiled from test_skb_cgroup_id_kern.c program. BPF program in test_skb_cgroup_id_kern.c gets ancestor cgroup id using the new helper at different levels of cgroup hierarchy that skb belongs to, including root level and non-existing level, and saves it to the map where the key is the level of corresponding cgroup and the value is its id. To trigger BPF program, user space program test_skb_cgroup_id_user is run. It adds itself into testing cgroup and sends UDP datagram to link-local multicast address of testing interface. Then it reads cgroup ids saved in kernel for different levels from the BPF map and compares them with those in user space. They must be equal for every level of ancestry. Example of run: # ./test_skb_cgroup_id.sh Wait for testing link-local IP to become available ... OK Note: 8 bytes struct bpf_elf_map fixup performed due to size mismatch! [PASS] Signed-off-by: Andrey Ignatov <rdna@fb.com> Signed-off-by: Daniel Borkmann <daniel@iogearbox.net>
63 lines
1.3 KiB
Bash
Executable file
63 lines
1.3 KiB
Bash
Executable file
#!/bin/sh
|
|
# SPDX-License-Identifier: GPL-2.0
|
|
# Copyright (c) 2018 Facebook
|
|
|
|
set -eu
|
|
|
|
wait_for_ip()
|
|
{
|
|
local _i
|
|
echo -n "Wait for testing link-local IP to become available "
|
|
for _i in $(seq ${MAX_PING_TRIES}); do
|
|
echo -n "."
|
|
if ping -6 -q -c 1 -W 1 ff02::1%${TEST_IF} >/dev/null 2>&1; then
|
|
echo " OK"
|
|
return
|
|
fi
|
|
sleep 1
|
|
done
|
|
echo 1>&2 "ERROR: Timeout waiting for test IP to become available."
|
|
exit 1
|
|
}
|
|
|
|
setup()
|
|
{
|
|
# Create testing interfaces not to interfere with current environment.
|
|
ip link add dev ${TEST_IF} type veth peer name ${TEST_IF_PEER}
|
|
ip link set ${TEST_IF} up
|
|
ip link set ${TEST_IF_PEER} up
|
|
|
|
wait_for_ip
|
|
|
|
tc qdisc add dev ${TEST_IF} clsact
|
|
tc filter add dev ${TEST_IF} egress bpf obj ${BPF_PROG_OBJ} \
|
|
sec ${BPF_PROG_SECTION} da
|
|
|
|
BPF_PROG_ID=$(tc filter show dev ${TEST_IF} egress | \
|
|
awk '/ id / {sub(/.* id /, "", $0); print($1)}')
|
|
}
|
|
|
|
cleanup()
|
|
{
|
|
ip link del ${TEST_IF} 2>/dev/null || :
|
|
ip link del ${TEST_IF_PEER} 2>/dev/null || :
|
|
}
|
|
|
|
main()
|
|
{
|
|
trap cleanup EXIT 2 3 6 15
|
|
setup
|
|
${PROG} ${TEST_IF} ${BPF_PROG_ID}
|
|
}
|
|
|
|
DIR=$(dirname $0)
|
|
TEST_IF="test_cgid_1"
|
|
TEST_IF_PEER="test_cgid_2"
|
|
MAX_PING_TRIES=5
|
|
BPF_PROG_OBJ="${DIR}/test_skb_cgroup_id_kern.o"
|
|
BPF_PROG_SECTION="cgroup_id_logger"
|
|
BPF_PROG_ID=0
|
|
PROG="${DIR}/test_skb_cgroup_id_user"
|
|
|
|
main
|