netbird/gvisor
0
0
Fork 0
mirror of https://github.com/netbirdio/gvisor.git synced 2026-05-22 17:12:49 -07:00
Code Issues Packages Projects Releases Wiki Activity

iptables: account for old kernel being old

Browse Source 
Our oldkernel test machines use an iptables binary so old that when we scrape
the rules, the newer iptables binary running inside gVisor doesn't support the
revision anymore. Account for that in the test so that nftables_test doesn't
fail every time it's run on oldkernel.

Example failure: https://buildkite.com/gvisor/pipeline/builds/25928#018bd63c-4ffe-43ee-bfb0-916766db35f2

PiperOrigin-RevId: 582897811
This commit is contained in:
Kevin Krakauer
2023-11-15 21:00:44 -08:00
committed by gVisor bot
parent 6eed17ce4b
commit 5c41509ff4
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
test/iptables/nftables_test.sh
+2 -2
View File
@@ -27,8 +27,8 @@ expected_regex='-P PREROUTING ACCEPT
-N DOCKER_POSTROUTING
-A OUTPUT -d 127.0.0.11/32 -j DOCKER_OUTPUT
-A POSTROUTING -d 127.0.0.11/32 -j DOCKER_POSTROUTING
-A DOCKER_OUTPUT -d 127.0.0.11/32 -p tcp -m tcp --dport 53 -j DNAT --to-destination 127.0.0.11:[0-9]+
-A DOCKER_OUTPUT -d 127.0.0.11/32 -p udp -m udp --dport 53 -j DNAT --to-destination 127.0.0.11:[0-9]+
-A DOCKER_OUTPUT -d 127.0.0.11/32 -p tcp -m tcp --dport 53 -j DNAT (--to-destination 127.0.0.11:[0-9]+|\[unsupported revision\])
-A DOCKER_OUTPUT -d 127.0.0.11/32 -p udp -m udp --dport 53 -j DNAT (--to-destination 127.0.0.11:[0-9]+|\[unsupported revision\])
-A DOCKER_POSTROUTING -s 127.0.0.11/32 -p tcp -m tcp --sport [0-9]+ -j SNAT --to-source :53
-A DOCKER_POSTROUTING -s 127.0.0.11/32 -p udp -m udp --sport [0-9]+ -j SNAT --to-source :53'