From patchwork Wed Jul 29 07:14:00 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Marco Baffo X-Patchwork-Id: 5159 Return-Path: Delivered-To: patchwork@openvpn.net Received: by 2002:a05:7000:fd0b:b0:87d:ab56:3700 with SMTP id cw11csp1585173mac; Wed, 29 Jul 2026 00:14:44 -0700 (PDT) X-Forwarded-Encrypted: i=2; AHgh+RrTHEhjbnWIolhujzNcuHJ/C9UtvKK24EOFdTlMesWnuiSenp0GduyXZeg25cVaeYlcVUrq9CVIJK4=@openvpn.net X-Received: by 2002:a05:6808:1905:b0:495:fecb:bf9c with SMTP id 5614622812f47-4ad5b965d74mr3264396b6e.6.1785309284577; Wed, 29 Jul 2026 00:14:44 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1785309284; cv=none; d=google.com; s=arc-20260327; b=sQYWtOj2HE8uysHD9voT/nmpxSMFt3BeM+Ug415FaqHeQx5siIEm3YKxUyck0zoAxy m9zSrlrgEYDF/xsT5y/FAMa80zfA1CiSVcLIFkrAWR7HUrB1tjxf/hzdlAkgOybGgWra /Lq0ziXV4K72sidcdwpPM1TfRYkqgXIT0H/xGjlg/S0AobN3GSmsyPqfMOYQJ0l79py6 kmUoh2o3MogRbmkTqmXtp0qisrqPCKninBJ5/RCXlp5mO/hCH3TAg5sccy7O+zxHZfot punIH7gNPwqNHisuRW1ioxUo8w/dS4eug0F0psR7HRiqeCEf7hSxHV/bzb6/ZEQPy7as hfVQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=errors-to:content-transfer-encoding:cc:list-subscribe:list-help :list-post:list-archive:list-unsubscribe:list-id:precedence:subject :mime-version:references:in-reply-to:message-id:date:to:from :dkim-signature:dkim-signature:dkim-signature:dkim-signature; bh=Gwejz/dkk6qlG3YW7YKr5gj9hU3QBXgO0msch2J042Q=; fh=BsMg/B0Yb/hS/rzP5Npz4luh0IleZm8REk1XWiWRt2A=; b=rA8UYcgkcN19CxviO3gkZ8psN4MqCKh8IndZxYeB0FU6/3cLbQc7XKjiMwb5PcBJLW FtdQxHJeL9gebwQqEo2Fpsw8hr5bzjyophuvSjPqkdFMVACu6WzpRpWFzK1PapWydaiH VbgleoqP66OOmSJWCDHcyGs+uP4FXWjVEsWwhxRDhr6HeBQKcisO1Lydv6EV5yaqp195 Uz4eUjSs/F7SAYrU9rXqVl4mj2FFdX2mC8CjeZZfhMuCpWYqpcalO6ws/9bopgmIPSAp U5uimdF/oEQicvYVPBXQKWaymLgDMBiwQnh/ttYbq1AC86MTCgHDjBhv5m2bpD3ZRk2+ TUYg==; dara=google.com ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@lists.sourceforge.net header.s=beta header.b=mRubyiHW; dkim=neutral (body hash did not verify) header.i=@sourceforge.net header.s=x header.b=IskQsXIK; dkim=neutral (body hash did not verify) header.i=@sf.net header.s=x header.b=JnMGKMWL; dkim=neutral (body hash did not verify) header.i=@mandelbit.com header.s=MBO0001 header.b=kWoJUdkU; spf=pass (google.com: domain of openvpn-devel-bounces@lists.sourceforge.net designates 216.105.38.7 as permitted sender) smtp.mailfrom=openvpn-devel-bounces@lists.sourceforge.net Received: from lists.sourceforge.net (lists.sourceforge.net. [216.105.38.7]) by mx.google.com with ESMTPS id 5614622812f47-4ad6f044acesi1040848b6e.93.2026.07.29.00.14.44 (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Wed, 29 Jul 2026 00:14:44 -0700 (PDT) Received-SPF: pass (google.com: domain of openvpn-devel-bounces@lists.sourceforge.net designates 216.105.38.7 as permitted sender) client-ip=216.105.38.7; Authentication-Results: mx.google.com; dkim=pass header.i=@lists.sourceforge.net header.s=beta header.b=mRubyiHW; dkim=neutral (body hash did not verify) header.i=@sourceforge.net header.s=x header.b=IskQsXIK; dkim=neutral (body hash did not verify) header.i=@sf.net header.s=x header.b=JnMGKMWL; dkim=neutral (body hash did not verify) header.i=@mandelbit.com header.s=MBO0001 header.b=kWoJUdkU; spf=pass (google.com: domain of openvpn-devel-bounces@lists.sourceforge.net designates 216.105.38.7 as permitted sender) smtp.mailfrom=openvpn-devel-bounces@lists.sourceforge.net DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=lists.sourceforge.net; s=beta; h=Content-Transfer-Encoding:Content-Type:Cc: List-Subscribe:List-Help:List-Post:List-Archive:List-Unsubscribe:List-Id: Subject:MIME-Version:References:In-Reply-To:Message-ID:Date:To:From:Sender: Reply-To:Content-ID:Content-Description:Resent-Date:Resent-From:Resent-Sender :Resent-To:Resent-Cc:Resent-Message-ID:List-Owner; bh=Gwejz/dkk6qlG3YW7YKr5gj9hU3QBXgO0msch2J042Q=; b=mRubyiHWtG3aF8qPwq7hsdJhWw TDv1Jxeai4td2A4a1lpW0cZ9xepnZZB2SqeKGTl4hD7608cWJbTF2yBuOzxkkzk1zrkUdV/NRyxd2 PYelnWx98b5BAYsy7nSPMN6qqENhUD9eseupjV6tZskNGpLLrCY+XVxI/LGhlDc+vEvk=; Received: from [127.0.0.1] (helo=sfs-ml-2.v29.lw.sourceforge.com) by sfs-ml-2.v29.lw.sourceforge.com with esmtp (Exim 4.95) (envelope-from ) id 1woyUy-00037l-0J; Wed, 29 Jul 2026 07:14:40 +0000 Received: from [172.30.29.66] (helo=mx.sourceforge.net) by sfs-ml-2.v29.lw.sourceforge.com with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.95) (envelope-from ) id 1woyUw-00037R-2A for openvpn-devel@lists.sourceforge.net; Wed, 29 Jul 2026 07:14:38 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=sourceforge.net; s=x; h=Content-Transfer-Encoding:MIME-Version:References: In-Reply-To:Message-ID:Date:Subject:Cc:To:From:Sender:Reply-To:Content-Type: Content-ID:Content-Description:Resent-Date:Resent-From:Resent-Sender: Resent-To:Resent-Cc:Resent-Message-ID:List-Id:List-Help:List-Unsubscribe: List-Subscribe:List-Post:List-Owner:List-Archive; bh=oHoXkqdoGfOdSMgyxtuCeOT01uX8rKspl/9/B7590nM=; b=IskQsXIKBbm6uShHTdJkURdIPt BQTQ3wU+C8bWB98CJs+VHjd1Il6VGW8mf7+UxLBM5Ad1wDY3wMTCOcQOOVxBXjhWLQ1voluBwa7jq 7rCS9XPuy1MIiMoJmFjTHAve1HgSCPj5wpEOx3/RDPMcnfSFPvbM8Pyf3jQ7zFCKsUSk=; DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=sf.net; s=x ; h=Content-Transfer-Encoding:MIME-Version:References:In-Reply-To:Message-ID: Date:Subject:Cc:To:From:Sender:Reply-To:Content-Type:Content-ID: Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc :Resent-Message-ID:List-Id:List-Help:List-Unsubscribe:List-Subscribe: List-Post:List-Owner:List-Archive; bh=oHoXkqdoGfOdSMgyxtuCeOT01uX8rKspl/9/B7590nM=; b=JnMGKMWLUs3a0rx82pZXs80psS o7YSmAMGC6GA9sKT10LdRAcrlgWjzPKyX+VKbzzZnOlgQ0VeFX0y8gEGL4+zjqwk3muZZj6dmkYGi CL43lYrWVZ7uAvWQQBP9LEDwLhGK9X6C7/O/2jyGXIlOYUFZqPvLTf8HW7aGc2CuCKAA=; Received: from mout-b-203.mailbox.org ([195.10.208.52]) by sfi-mx-1.v28.lw.sourceforge.com with esmtps (TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256) (Exim 4.95) id 1woyUw-0004QS-Ip for openvpn-devel@lists.sourceforge.net; Wed, 29 Jul 2026 07:14:38 +0000 Received: from smtp102.mailbox.org (unknown [10.196.197.102]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by mout-b-203.mailbox.org (Postfix) with ESMTPS id 4h93VW53YPzLlnd; Wed, 29 Jul 2026 09:14:27 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mandelbit.com; s=MBO0001; t=1785309267; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=oHoXkqdoGfOdSMgyxtuCeOT01uX8rKspl/9/B7590nM=; b=kWoJUdkUUDqLooA1NhRfFc40MNiOl4dvvvbqmQsw3EvDTpLDwooQFxbgSOBIaRLu1aFIQx Xp6zXVuJ22W0JcT4MiByX/t2cICIMgrzcU2+hWHAjquzjyFTLMBXwCBBGAi+BPv53vcr96 IJX23dWQRF+MsjHVjbEuGWRisodhZTI84iWN6atUfLZNFwlYsqWXouhZnXfvRO565nwHdX aGbDXyBSjfHpYwz7L/FVCbskQI2LpNDPuJvajtxL8+MeldWZOjSXokAEUhfID1nffF+xLz 34uAh3lXdQdKr8MyGX6mQjmHnG8IfT7w1iQsmJfTl3WTO2ogMwqWQ2RtzB3KIQ== From: Marco Baffo To: openvpn-devel@lists.sourceforge.net Date: Wed, 29 Jul 2026 09:14:00 +0200 Message-ID: <20260729071400.2403200-4-marco@mandelbit.com> In-Reply-To: <20260729071400.2403200-1-marco@mandelbit.com> References: <20260729071400.2403200-1-marco@mandelbit.com> MIME-Version: 1.0 X-Spam-Score: -0.2 (/) X-Spam-Report: Spam detection software, running on the system "sfi-spamd-1.hosts.colo.sdot.me", has NOT identified this incoming email as spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see the administrator of that system for details. Content preview: Move one peer interface to a foreign namespace while keeping its transport socket in the original namespace. Verify that its deletion notification contains the expected target namespace ID. Signed-off-by: Marco Baffo --- Changes in v2: - This is a new patch. Content analysis details: (-0.2 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- -0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's domain -0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from envelope-from domain 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid -0.1 DKIM_VALID Message has at least one valid DKIM or DK signature X-Headers-End: 1woyUw-0004QS-Ip Subject: [Openvpn-devel] [PATCH ovpn net-next v2 4/4] selftests: ovpn: validate target netns ID in notifications X-BeenThere: openvpn-devel@lists.sourceforge.net X-Mailman-Version: 2.1.21 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Cc: Antonio Quartulli Errors-To: openvpn-devel-bounces@lists.sourceforge.net X-getmail-retrieved-from-mailbox: Inbox X-GMAIL-THRID: 1872032468342160114 X-GMAIL-MSGID: 1872032468342160114 Move one peer interface to a foreign namespace while keeping its transport socket in the original namespace. Verify that its deletion notification contains the expected target namespace ID. Signed-off-by: Marco Baffo --- Changes in v2: - This is a new patch. tools/testing/selftests/net/ovpn/common.sh | 3 ++- tools/testing/selftests/net/ovpn/test.sh | 22 ++++++++++++++++++++++ 2 files changed, 24 insertions(+), 1 deletion(-) diff --git a/tools/testing/selftests/net/ovpn/common.sh b/tools/testing/selftests/net/ovpn/common.sh index 4f2510fb6d7f..2b90b7bf8700 100644 --- a/tools/testing/selftests/net/ovpn/common.sh +++ b/tools/testing/selftests/net/ovpn/common.sh @@ -21,7 +21,8 @@ export OVPN_ID_OFFSET=$(( 9 * (OVPN_SYMMETRIC_ID == 0) )) OVPN_JQ_FILTER='map(if type == "array" then .[] else . end) | map(select(.msg.peer | has("remote-ipv6") | not)) | - map(del(.msg.ifindex)) | sort_by(.msg.peer.id)[]' + map(del(.msg.ifindex, .msg["target-netnsid"])) | + sort_by(.msg.peer.id)[]' OVPN_LAN_IP="11.11.11.11" declare -A OVPN_TMP_JSONS=() diff --git a/tools/testing/selftests/net/ovpn/test.sh b/tools/testing/selftests/net/ovpn/test.sh index 468dd7985c8f..d30cf250d59a 100755 --- a/tools/testing/selftests/net/ovpn/test.sh +++ b/tools/testing/selftests/net/ovpn/test.sh @@ -270,8 +270,13 @@ ovpn_run_timeouts() { ovpn_log "Setting timeout to 3s P2P:" + # The transport socket stays in peer3 when its interface is moved. + ovpn_cmd_ok "move peer3 interface to peer0" \ + ip -n ovpn_peer3 link set tun3 netns ovpn_peer0 + for p in $(seq 3 ${OVPN_NUM_PEERS}); do peer_ns="ovpn_peer${p}" + [ "${p}" -eq 3 ] && peer_ns="ovpn_peer0" ovpn_cmd_ok "set peer${p} P2P timeout" \ "${OVPN_CLI}" -n "${peer_ns}" set_peer \ tun${p} $((p + OVPN_ID_OFFSET)) 3 3 @@ -279,9 +284,26 @@ ovpn_run_timeouts() { sleep 5 } +ovpn_validate_ntf_netnsid() { + local peer="$1" + local target="$2" + local expected_netnsid + local received_netnsid + + expected_netnsid=$(ip -n "ovpn_peer${peer}" -j netns list-id | + jq -er --arg target "${target}" \ + '.[] | select(.name == $target) | .nsid') + received_netnsid=$(jq -er '.msg["target-netnsid"]' \ + "${OVPN_TMP_JSONS[$peer]}") + + [ "${received_netnsid}" -eq "${expected_netnsid}" ] +} + ovpn_run_notifications() { local p + ovpn_cmd_ok "validate peer3 target netns ID" \ + ovpn_validate_ntf_netnsid 3 ovpn_peer0 for p in $(seq 0 ${OVPN_NUM_PEERS}); do ovpn_cmd_ok "validate listener output for peer ${p}" \ ovpn_compare_ntfs "${p}"