lgcosta/pf-linux-port-legacy
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

tests: deterministic runner (per-gate VM reset), hardened unload path

Browse Source
This commit is contained in:
lgcosta committed 2026-11-11 18:03:57 -03:00
1 parent a0941b77fe
commit 2690d6145c
12 files changed
+138 -60
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

tests/vm/03-tables.sh
+11 -6
View File
@@ -1,11 +1,16 @@
#!/usr/bin/env bash
# M2 gate 3: pfr tables via pfctl -t
set -uo pipefail; cd "$(dirname "$0")"; . ./lib.sh
pf0 '/opt/pf/pfctl -e' >/dev/null
pf0 'printf "block in quick proto icmp from <blk>\npass out quick\n" | /opt/pf/pfctl -f -'
pf0 '/opt/pf/pfctl -t blk -T add 10.0.1.10' && ok "table add"
M=$(pf0 '/opt/pf/pfctl -t blk -T show | grep -c 10.0.1.10'); [ "$M" -ge 1 ] && ok "table shows entry" || bad "table empty"
pfensure; pf0 '/opt/pf/pfctl -e' >/dev/null
cat > /tmp/g3.conf <<'C'
table <blk> { 10.0.1.10 }
block in quick proto icmp from <blk> to any
pass in quick
pass out quick
C
pfload /tmp/g3.conf || { bad load; finish; }
pf0 '/opt/pf/pfctl -t blk -T show' | grep -q 10.0.1.10 && ok "table loaded" || bad "table empty"
cli "ping -c1 -W1 $SRV_IP >/dev/null 2>&1" && bad "blocked src passed" || ok "table block works"
pf0 "/opt/pf/pfctl -t blk -T kill 10.0.1.10" >/dev/null
cli "ping -c1 -W2 $SRV_IP >/dev/null 2>&1" && ok "unblocked passes" || bad "kill failed"
pf0 '/opt/pf/pfctl -t blk -T delete 10.0.1.10' >/dev/null
cli "ping -c1 -W2 $SRV_IP >/dev/null 2>&1" && ok "unblocked passes" || bad "delete failed"
pf0 '/opt/pf/pfctl -d' >/dev/null; finish