1#!/bin/sh
2#
3# This test is for checking rtnetlink callpaths, and get as much coverage as possible.
4#
5# set -e
6
7devdummy="test-dummy0"
8ret=0
9
10# Kselftest framework requirement - SKIP code is 4.
11ksft_skip=4
12
13# set global exit status, but never reset nonzero one.
14check_err()
15{
16	if [ $ret -eq 0 ]; then
17		ret=$1
18	fi
19}
20
21# same but inverted -- used when command must fail for test to pass
22check_fail()
23{
24	if [ $1 -eq 0 ]; then
25		ret=1
26	fi
27}
28
29kci_add_dummy()
30{
31	ip link add name "$devdummy" type dummy
32	check_err $?
33	ip link set "$devdummy" up
34	check_err $?
35}
36
37kci_del_dummy()
38{
39	ip link del dev "$devdummy"
40	check_err $?
41}
42
43kci_test_netconf()
44{
45	dev="$1"
46	r=$ret
47
48	ip netconf show dev "$dev" > /dev/null
49	check_err $?
50
51	for f in 4 6; do
52		ip -$f netconf show dev "$dev" > /dev/null
53		check_err $?
54	done
55
56	if [ $ret -ne 0 ] ;then
57		echo "FAIL: ip netconf show $dev"
58		test $r -eq 0 && ret=0
59		return 1
60	fi
61}
62
63# add a bridge with vlans on top
64kci_test_bridge()
65{
66	devbr="test-br0"
67	vlandev="testbr-vlan1"
68
69	ret=0
70	ip link add name "$devbr" type bridge
71	check_err $?
72
73	ip link set dev "$devdummy" master "$devbr"
74	check_err $?
75
76	ip link set "$devbr" up
77	check_err $?
78
79	ip link add link "$devbr" name "$vlandev" type vlan id 1
80	check_err $?
81	ip addr add dev "$vlandev" 10.200.7.23/30
82	check_err $?
83	ip -6 addr add dev "$vlandev" dead:42::1234/64
84	check_err $?
85	ip -d link > /dev/null
86	check_err $?
87	ip r s t all > /dev/null
88	check_err $?
89
90	for name in "$devbr" "$vlandev" "$devdummy" ; do
91		kci_test_netconf "$name"
92	done
93
94	ip -6 addr del dev "$vlandev" dead:42::1234/64
95	check_err $?
96
97	ip link del dev "$vlandev"
98	check_err $?
99	ip link del dev "$devbr"
100	check_err $?
101
102	if [ $ret -ne 0 ];then
103		echo "FAIL: bridge setup"
104		return 1
105	fi
106	echo "PASS: bridge setup"
107
108}
109
110kci_test_gre()
111{
112	gredev=neta
113	rem=10.42.42.1
114	loc=10.0.0.1
115
116	ret=0
117	ip tunnel add $gredev mode gre remote $rem local $loc ttl 1
118	check_err $?
119	ip link set $gredev up
120	check_err $?
121	ip addr add 10.23.7.10 dev $gredev
122	check_err $?
123	ip route add 10.23.8.0/30 dev $gredev
124	check_err $?
125	ip addr add dev "$devdummy" 10.23.7.11/24
126	check_err $?
127	ip link > /dev/null
128	check_err $?
129	ip addr > /dev/null
130	check_err $?
131
132	kci_test_netconf "$gredev"
133
134	ip addr del dev "$devdummy" 10.23.7.11/24
135	check_err $?
136
137	ip link del $gredev
138	check_err $?
139
140	if [ $ret -ne 0 ];then
141		echo "FAIL: gre tunnel endpoint"
142		return 1
143	fi
144	echo "PASS: gre tunnel endpoint"
145}
146
147# tc uses rtnetlink too, for full tc testing
148# please see tools/testing/selftests/tc-testing.
149kci_test_tc()
150{
151	dev=lo
152	ret=0
153
154	tc qdisc add dev "$dev" root handle 1: htb
155	check_err $?
156	tc class add dev "$dev" parent 1: classid 1:10 htb rate 1mbit
157	check_err $?
158	tc filter add dev "$dev" parent 1:0 prio 5 handle ffe: protocol ip u32 divisor 256
159	check_err $?
160	tc filter add dev "$dev" parent 1:0 prio 5 handle ffd: protocol ip u32 divisor 256
161	check_err $?
162	tc filter add dev "$dev" parent 1:0 prio 5 handle ffc: protocol ip u32 divisor 256
163	check_err $?
164	tc filter add dev "$dev" protocol ip parent 1: prio 5 handle ffe:2:3 u32 ht ffe:2: match ip src 10.0.0.3 flowid 1:10
165	check_err $?
166	tc filter add dev "$dev" protocol ip parent 1: prio 5 handle ffe:2:2 u32 ht ffe:2: match ip src 10.0.0.2 flowid 1:10
167	check_err $?
168	tc filter show dev "$dev" parent  1:0 > /dev/null
169	check_err $?
170	tc filter del dev "$dev" protocol ip parent 1: prio 5 handle ffe:2:3 u32
171	check_err $?
172	tc filter show dev "$dev" parent  1:0 > /dev/null
173	check_err $?
174	tc qdisc del dev "$dev" root handle 1: htb
175	check_err $?
176
177	if [ $ret -ne 0 ];then
178		echo "FAIL: tc htb hierarchy"
179		return 1
180	fi
181	echo "PASS: tc htb hierarchy"
182
183}
184
185kci_test_polrouting()
186{
187	ret=0
188	ip rule add fwmark 1 lookup 100
189	check_err $?
190	ip route add local 0.0.0.0/0 dev lo table 100
191	check_err $?
192	ip r s t all > /dev/null
193	check_err $?
194	ip rule del fwmark 1 lookup 100
195	check_err $?
196	ip route del local 0.0.0.0/0 dev lo table 100
197	check_err $?
198
199	if [ $ret -ne 0 ];then
200		echo "FAIL: policy route test"
201		return 1
202	fi
203	echo "PASS: policy routing"
204}
205
206kci_test_route_get()
207{
208	ret=0
209
210	ip route get 127.0.0.1 > /dev/null
211	check_err $?
212	ip route get 127.0.0.1 dev "$devdummy" > /dev/null
213	check_err $?
214	ip route get ::1 > /dev/null
215	check_err $?
216	ip route get fe80::1 dev "$devdummy" > /dev/null
217	check_err $?
218	ip route get 127.0.0.1 from 127.0.0.1 oif lo tos 0x1 mark 0x1 > /dev/null
219	check_err $?
220	ip route get ::1 from ::1 iif lo oif lo tos 0x1 mark 0x1 > /dev/null
221	check_err $?
222	ip addr add dev "$devdummy" 10.23.7.11/24
223	check_err $?
224	ip route get 10.23.7.11 from 10.23.7.12 iif "$devdummy" > /dev/null
225	check_err $?
226	ip addr del dev "$devdummy" 10.23.7.11/24
227	check_err $?
228
229	if [ $ret -ne 0 ];then
230		echo "FAIL: route get"
231		return 1
232	fi
233
234	echo "PASS: route get"
235}
236
237kci_test_addrlabel()
238{
239	ret=0
240
241	ip addrlabel add prefix dead::/64 dev lo label 1
242	check_err $?
243
244	ip addrlabel list |grep -q "prefix dead::/64 dev lo label 1"
245	check_err $?
246
247	ip addrlabel del prefix dead::/64 dev lo label 1 2> /dev/null
248	check_err $?
249
250	ip addrlabel add prefix dead::/64 label 1 2> /dev/null
251	check_err $?
252
253	ip addrlabel del prefix dead::/64 label 1 2> /dev/null
254	check_err $?
255
256	# concurrent add/delete
257	for i in $(seq 1 1000); do
258		ip addrlabel add prefix 1c3::/64 label 12345 2>/dev/null
259	done &
260
261	for i in $(seq 1 1000); do
262		ip addrlabel del prefix 1c3::/64 label 12345 2>/dev/null
263	done
264
265	wait
266
267	ip addrlabel del prefix 1c3::/64 label 12345 2>/dev/null
268
269	if [ $ret -ne 0 ];then
270		echo "FAIL: ipv6 addrlabel"
271		return 1
272	fi
273
274	echo "PASS: ipv6 addrlabel"
275}
276
277kci_test_ifalias()
278{
279	ret=0
280	namewant=$(uuidgen)
281	syspathname="/sys/class/net/$devdummy/ifalias"
282
283	ip link set dev "$devdummy" alias "$namewant"
284	check_err $?
285
286	if [ $ret -ne 0 ]; then
287		echo "FAIL: cannot set interface alias of $devdummy to $namewant"
288		return 1
289	fi
290
291	ip link show "$devdummy" | grep -q "alias $namewant"
292	check_err $?
293
294	if [ -r "$syspathname" ] ; then
295		read namehave < "$syspathname"
296		if [ "$namewant" != "$namehave" ]; then
297			echo "FAIL: did set ifalias $namewant but got $namehave"
298			return 1
299		fi
300
301		namewant=$(uuidgen)
302		echo "$namewant" > "$syspathname"
303	        ip link show "$devdummy" | grep -q "alias $namewant"
304		check_err $?
305
306		# sysfs interface allows to delete alias again
307		echo "" > "$syspathname"
308
309	        ip link show "$devdummy" | grep -q "alias $namewant"
310		check_fail $?
311
312		for i in $(seq 1 100); do
313			uuidgen > "$syspathname" &
314		done
315
316		wait
317
318		# re-add the alias -- kernel should free mem when dummy dev is removed
319		ip link set dev "$devdummy" alias "$namewant"
320		check_err $?
321	fi
322
323	if [ $ret -ne 0 ]; then
324		echo "FAIL: set interface alias $devdummy to $namewant"
325		return 1
326	fi
327
328	echo "PASS: set ifalias $namewant for $devdummy"
329}
330
331kci_test_vrf()
332{
333	vrfname="test-vrf"
334	ret=0
335
336	ip link show type vrf 2>/dev/null
337	if [ $? -ne 0 ]; then
338		echo "SKIP: vrf: iproute2 too old"
339		return $ksft_skip
340	fi
341
342	ip link add "$vrfname" type vrf table 10
343	check_err $?
344	if [ $ret -ne 0 ];then
345		echo "FAIL: can't add vrf interface, skipping test"
346		return 0
347	fi
348
349	ip -br link show type vrf | grep -q "$vrfname"
350	check_err $?
351	if [ $ret -ne 0 ];then
352		echo "FAIL: created vrf device not found"
353		return 1
354	fi
355
356	ip link set dev "$vrfname" up
357	check_err $?
358
359	ip link set dev "$devdummy" master "$vrfname"
360	check_err $?
361	ip link del dev "$vrfname"
362	check_err $?
363
364	if [ $ret -ne 0 ];then
365		echo "FAIL: vrf"
366		return 1
367	fi
368
369	echo "PASS: vrf"
370}
371
372kci_test_encap_vxlan()
373{
374	ret=0
375	vxlan="test-vxlan0"
376	vlan="test-vlan0"
377	testns="$1"
378
379	ip netns exec "$testns" ip link add "$vxlan" type vxlan id 42 group 239.1.1.1 \
380		dev "$devdummy" dstport 4789 2>/dev/null
381	if [ $? -ne 0 ]; then
382		echo "FAIL: can't add vxlan interface, skipping test"
383		return 0
384	fi
385	check_err $?
386
387	ip netns exec "$testns" ip addr add 10.2.11.49/24 dev "$vxlan"
388	check_err $?
389
390	ip netns exec "$testns" ip link set up dev "$vxlan"
391	check_err $?
392
393	ip netns exec "$testns" ip link add link "$vxlan" name "$vlan" type vlan id 1
394	check_err $?
395
396	ip netns exec "$testns" ip link del "$vxlan"
397	check_err $?
398
399	if [ $ret -ne 0 ]; then
400		echo "FAIL: vxlan"
401		return 1
402	fi
403	echo "PASS: vxlan"
404}
405
406kci_test_encap_fou()
407{
408	ret=0
409	name="test-fou"
410	testns="$1"
411
412	ip fou help 2>&1 |grep -q 'Usage: ip fou'
413	if [ $? -ne 0 ];then
414		echo "SKIP: fou: iproute2 too old"
415		return $ksft_skip
416	fi
417
418	ip netns exec "$testns" ip fou add port 7777 ipproto 47 2>/dev/null
419	if [ $? -ne 0 ];then
420		echo "FAIL: can't add fou port 7777, skipping test"
421		return 1
422	fi
423
424	ip netns exec "$testns" ip fou add port 8888 ipproto 4
425	check_err $?
426
427	ip netns exec "$testns" ip fou del port 9999 2>/dev/null
428	check_fail $?
429
430	ip netns exec "$testns" ip fou del port 7777
431	check_err $?
432
433	if [ $ret -ne 0 ]; then
434		echo "FAIL: fou"
435		return 1
436	fi
437
438	echo "PASS: fou"
439}
440
441# test various encap methods, use netns to avoid unwanted interference
442kci_test_encap()
443{
444	testns="testns"
445	ret=0
446
447	ip netns add "$testns"
448	if [ $? -ne 0 ]; then
449		echo "SKIP encap tests: cannot add net namespace $testns"
450		return $ksft_skip
451	fi
452
453	ip netns exec "$testns" ip link set lo up
454	check_err $?
455
456	ip netns exec "$testns" ip link add name "$devdummy" type dummy
457	check_err $?
458	ip netns exec "$testns" ip link set "$devdummy" up
459	check_err $?
460
461	kci_test_encap_vxlan "$testns"
462	kci_test_encap_fou "$testns"
463
464	ip netns del "$testns"
465}
466
467kci_test_macsec()
468{
469	msname="test_macsec0"
470	ret=0
471
472	ip macsec help 2>&1 | grep -q "^Usage: ip macsec"
473	if [ $? -ne 0 ]; then
474		echo "SKIP: macsec: iproute2 too old"
475		return $ksft_skip
476	fi
477
478	ip link add link "$devdummy" "$msname" type macsec port 42 encrypt on
479	check_err $?
480	if [ $ret -ne 0 ];then
481		echo "FAIL: can't add macsec interface, skipping test"
482		return 1
483	fi
484
485	ip macsec add "$msname" tx sa 0 pn 1024 on key 01 12345678901234567890123456789012
486	check_err $?
487
488	ip macsec add "$msname" rx port 1234 address "1c:ed:de:ad:be:ef"
489	check_err $?
490
491	ip macsec add "$msname" rx port 1234 address "1c:ed:de:ad:be:ef" sa 0 pn 1 on key 00 0123456789abcdef0123456789abcdef
492	check_err $?
493
494	ip macsec show > /dev/null
495	check_err $?
496
497	ip link del dev "$msname"
498	check_err $?
499
500	if [ $ret -ne 0 ];then
501		echo "FAIL: macsec"
502		return 1
503	fi
504
505	echo "PASS: macsec"
506}
507
508#-------------------------------------------------------------------
509# Example commands
510#   ip x s add proto esp src 14.0.0.52 dst 14.0.0.70 \
511#            spi 0x07 mode transport reqid 0x07 replay-window 32 \
512#            aead 'rfc4106(gcm(aes))' 1234567890123456dcba 128 \
513#            sel src 14.0.0.52/24 dst 14.0.0.70/24
514#   ip x p add dir out src 14.0.0.52/24 dst 14.0.0.70/24 \
515#            tmpl proto esp src 14.0.0.52 dst 14.0.0.70 \
516#            spi 0x07 mode transport reqid 0x07
517#
518# Subcommands not tested
519#    ip x s update
520#    ip x s allocspi
521#    ip x s deleteall
522#    ip x p update
523#    ip x p deleteall
524#    ip x p set
525#-------------------------------------------------------------------
526kci_test_ipsec()
527{
528	srcip="14.0.0.52"
529	dstip="14.0.0.70"
530	algo="aead rfc4106(gcm(aes)) 0x3132333435363738393031323334353664636261 128"
531
532	# flush to be sure there's nothing configured
533	ip x s flush ; ip x p flush
534	check_err $?
535
536	# start the monitor in the background
537	tmpfile=`mktemp ipsectestXXX`
538	ip x m > $tmpfile &
539	mpid=$!
540	sleep 0.2
541
542	ipsecid="proto esp src $srcip dst $dstip spi 0x07"
543	ip x s add $ipsecid \
544            mode transport reqid 0x07 replay-window 32 \
545            $algo sel src $srcip/24 dst $dstip/24
546	check_err $?
547
548	lines=`ip x s list | grep $srcip | grep $dstip | wc -l`
549	test $lines -eq 2
550	check_err $?
551
552	ip x s count | grep -q "SAD count 1"
553	check_err $?
554
555	lines=`ip x s get $ipsecid | grep $srcip | grep $dstip | wc -l`
556	test $lines -eq 2
557	check_err $?
558
559	ip x s delete $ipsecid
560	check_err $?
561
562	lines=`ip x s list | wc -l`
563	test $lines -eq 0
564	check_err $?
565
566	ipsecsel="dir out src $srcip/24 dst $dstip/24"
567	ip x p add $ipsecsel \
568		    tmpl proto esp src $srcip dst $dstip \
569		    spi 0x07 mode transport reqid 0x07
570	check_err $?
571
572	lines=`ip x p list | grep $srcip | grep $dstip | wc -l`
573	test $lines -eq 2
574	check_err $?
575
576	ip x p count | grep -q "SPD IN  0 OUT 1 FWD 0"
577	check_err $?
578
579	lines=`ip x p get $ipsecsel | grep $srcip | grep $dstip | wc -l`
580	test $lines -eq 2
581	check_err $?
582
583	ip x p delete $ipsecsel
584	check_err $?
585
586	lines=`ip x p list | wc -l`
587	test $lines -eq 0
588	check_err $?
589
590	# check the monitor results
591	kill $mpid
592	lines=`wc -l $tmpfile | cut "-d " -f1`
593	test $lines -eq 20
594	check_err $?
595	rm -rf $tmpfile
596
597	# clean up any leftovers
598	ip x s flush
599	check_err $?
600	ip x p flush
601	check_err $?
602
603	if [ $ret -ne 0 ]; then
604		echo "FAIL: ipsec"
605		return 1
606	fi
607	echo "PASS: ipsec"
608}
609
610kci_test_gretap()
611{
612	testns="testns"
613	DEV_NS=gretap00
614	ret=0
615
616	ip netns add "$testns"
617	if [ $? -ne 0 ]; then
618		echo "SKIP gretap tests: cannot add net namespace $testns"
619		return $ksft_skip
620	fi
621
622	ip link help gretap 2>&1 | grep -q "^Usage:"
623	if [ $? -ne 0 ];then
624		echo "SKIP: gretap: iproute2 too old"
625		ip netns del "$testns"
626		return $ksft_skip
627	fi
628
629	# test native tunnel
630	ip netns exec "$testns" ip link add dev "$DEV_NS" type gretap seq \
631		key 102 local 172.16.1.100 remote 172.16.1.200
632	check_err $?
633
634	ip netns exec "$testns" ip addr add dev "$DEV_NS" 10.1.1.100/24
635	check_err $?
636
637	ip netns exec "$testns" ip link set dev $DEV_NS up
638	check_err $?
639
640	ip netns exec "$testns" ip link del "$DEV_NS"
641	check_err $?
642
643	# test external mode
644	ip netns exec "$testns" ip link add dev "$DEV_NS" type gretap external
645	check_err $?
646
647	ip netns exec "$testns" ip link del "$DEV_NS"
648	check_err $?
649
650	if [ $ret -ne 0 ]; then
651		echo "FAIL: gretap"
652		ip netns del "$testns"
653		return 1
654	fi
655	echo "PASS: gretap"
656
657	ip netns del "$testns"
658}
659
660kci_test_ip6gretap()
661{
662	testns="testns"
663	DEV_NS=ip6gretap00
664	ret=0
665
666	ip netns add "$testns"
667	if [ $? -ne 0 ]; then
668		echo "SKIP ip6gretap tests: cannot add net namespace $testns"
669		return $ksft_skip
670	fi
671
672	ip link help ip6gretap 2>&1 | grep -q "^Usage:"
673	if [ $? -ne 0 ];then
674		echo "SKIP: ip6gretap: iproute2 too old"
675		ip netns del "$testns"
676		return $ksft_skip
677	fi
678
679	# test native tunnel
680	ip netns exec "$testns" ip link add dev "$DEV_NS" type ip6gretap seq \
681		key 102 local fc00:100::1 remote fc00:100::2
682	check_err $?
683
684	ip netns exec "$testns" ip addr add dev "$DEV_NS" fc00:200::1/96
685	check_err $?
686
687	ip netns exec "$testns" ip link set dev $DEV_NS up
688	check_err $?
689
690	ip netns exec "$testns" ip link del "$DEV_NS"
691	check_err $?
692
693	# test external mode
694	ip netns exec "$testns" ip link add dev "$DEV_NS" type ip6gretap external
695	check_err $?
696
697	ip netns exec "$testns" ip link del "$DEV_NS"
698	check_err $?
699
700	if [ $ret -ne 0 ]; then
701		echo "FAIL: ip6gretap"
702		ip netns del "$testns"
703		return 1
704	fi
705	echo "PASS: ip6gretap"
706
707	ip netns del "$testns"
708}
709
710kci_test_erspan()
711{
712	testns="testns"
713	DEV_NS=erspan00
714	ret=0
715
716	ip link help erspan 2>&1 | grep -q "^Usage:"
717	if [ $? -ne 0 ];then
718		echo "SKIP: erspan: iproute2 too old"
719		return $ksft_skip
720	fi
721
722	ip netns add "$testns"
723	if [ $? -ne 0 ]; then
724		echo "SKIP erspan tests: cannot add net namespace $testns"
725		return $ksft_skip
726	fi
727
728	# test native tunnel erspan v1
729	ip netns exec "$testns" ip link add dev "$DEV_NS" type erspan seq \
730		key 102 local 172.16.1.100 remote 172.16.1.200 \
731		erspan_ver 1 erspan 488
732	check_err $?
733
734	ip netns exec "$testns" ip addr add dev "$DEV_NS" 10.1.1.100/24
735	check_err $?
736
737	ip netns exec "$testns" ip link set dev $DEV_NS up
738	check_err $?
739
740	ip netns exec "$testns" ip link del "$DEV_NS"
741	check_err $?
742
743	# test native tunnel erspan v2
744	ip netns exec "$testns" ip link add dev "$DEV_NS" type erspan seq \
745		key 102 local 172.16.1.100 remote 172.16.1.200 \
746		erspan_ver 2 erspan_dir ingress erspan_hwid 7
747	check_err $?
748
749	ip netns exec "$testns" ip addr add dev "$DEV_NS" 10.1.1.100/24
750	check_err $?
751
752	ip netns exec "$testns" ip link set dev $DEV_NS up
753	check_err $?
754
755	ip netns exec "$testns" ip link del "$DEV_NS"
756	check_err $?
757
758	# test external mode
759	ip netns exec "$testns" ip link add dev "$DEV_NS" type erspan external
760	check_err $?
761
762	ip netns exec "$testns" ip link del "$DEV_NS"
763	check_err $?
764
765	if [ $ret -ne 0 ]; then
766		echo "FAIL: erspan"
767		ip netns del "$testns"
768		return 1
769	fi
770	echo "PASS: erspan"
771
772	ip netns del "$testns"
773}
774
775kci_test_ip6erspan()
776{
777	testns="testns"
778	DEV_NS=ip6erspan00
779	ret=0
780
781	ip link help ip6erspan 2>&1 | grep -q "^Usage:"
782	if [ $? -ne 0 ];then
783		echo "SKIP: ip6erspan: iproute2 too old"
784		return $ksft_skip
785	fi
786
787	ip netns add "$testns"
788	if [ $? -ne 0 ]; then
789		echo "SKIP ip6erspan tests: cannot add net namespace $testns"
790		return $ksft_skip
791	fi
792
793	# test native tunnel ip6erspan v1
794	ip netns exec "$testns" ip link add dev "$DEV_NS" type ip6erspan seq \
795		key 102 local fc00:100::1 remote fc00:100::2 \
796		erspan_ver 1 erspan 488
797	check_err $?
798
799	ip netns exec "$testns" ip addr add dev "$DEV_NS" 10.1.1.100/24
800	check_err $?
801
802	ip netns exec "$testns" ip link set dev $DEV_NS up
803	check_err $?
804
805	ip netns exec "$testns" ip link del "$DEV_NS"
806	check_err $?
807
808	# test native tunnel ip6erspan v2
809	ip netns exec "$testns" ip link add dev "$DEV_NS" type ip6erspan seq \
810		key 102 local fc00:100::1 remote fc00:100::2 \
811		erspan_ver 2 erspan_dir ingress erspan_hwid 7
812	check_err $?
813
814	ip netns exec "$testns" ip addr add dev "$DEV_NS" 10.1.1.100/24
815	check_err $?
816
817	ip netns exec "$testns" ip link set dev $DEV_NS up
818	check_err $?
819
820	ip netns exec "$testns" ip link del "$DEV_NS"
821	check_err $?
822
823	# test external mode
824	ip netns exec "$testns" ip link add dev "$DEV_NS" \
825		type ip6erspan external
826	check_err $?
827
828	ip netns exec "$testns" ip link del "$DEV_NS"
829	check_err $?
830
831	if [ $ret -ne 0 ]; then
832		echo "FAIL: ip6erspan"
833		ip netns del "$testns"
834		return 1
835	fi
836	echo "PASS: ip6erspan"
837
838	ip netns del "$testns"
839}
840
841kci_test_rtnl()
842{
843	kci_add_dummy
844	if [ $ret -ne 0 ];then
845		echo "FAIL: cannot add dummy interface"
846		return 1
847	fi
848
849	kci_test_polrouting
850	kci_test_route_get
851	kci_test_tc
852	kci_test_gre
853	kci_test_gretap
854	kci_test_ip6gretap
855	kci_test_erspan
856	kci_test_ip6erspan
857	kci_test_bridge
858	kci_test_addrlabel
859	kci_test_ifalias
860	kci_test_vrf
861	kci_test_encap
862	kci_test_macsec
863	kci_test_ipsec
864
865	kci_del_dummy
866}
867
868#check for needed privileges
869if [ "$(id -u)" -ne 0 ];then
870	echo "SKIP: Need root privileges"
871	exit $ksft_skip
872fi
873
874for x in ip tc;do
875	$x -Version 2>/dev/null >/dev/null
876	if [ $? -ne 0 ];then
877		echo "SKIP: Could not run test without the $x tool"
878		exit $ksft_skip
879	fi
880done
881
882kci_test_rtnl
883
884exit $ret
885