src/tests/atf_python, branch releng/13.5

pf: test rules evaluation in the face of multiple IPv6 fragment headers

2023-08-04T14:08:05Z

Send an ICMPv6 echo request packet with multiple IPv6 fragment headers. Set rules to pass all packets, except for ICMPv6 echo requests. pf ought to drop the echo request, but doesn't because it reassembles the packet, and then doesn't handle the second fragment header. In other words: it fails to detect the ICMPv6 echo header. Reported by: Enrico Bassetti bassetti@di.uniroma1.it (NetSecurityLab @ Sapienza University of Rome) MFC after: instant Sponsored by: Rubicon Communications, LLC ("Netgate") (cherry picked from commit b23dbabb7f3edb3f323a64f03e37be2c9a8b2a45)

tests: fix python parsing of netlink nested attributes

2023-04-08T19:18:47Z

MFC after: 2 weeks (cherry picked from commit 90bc2120b51bc5ac9fbcb29763cc47562ee49977)

tests: add more netlink tests for neighbors/routes

2023-04-08T19:15:16Z

Differential Revision: https://reviews.freebsd.org/D38912 MFC after: 2 weeks (cherry picked from commit c57dfd92c876fabc04e94945dd9534468520bbbf)

tests: add netlink large dump buffer check

2023-04-08T19:14:49Z

Differential Revision: https://reviews.freebsd.org/D38665 MFC after: 2 weeks (cherry picked from commit 828d3c6c4cc0b782e16abb1ae18023734a0b710f)

netlink: improve attribute decoding in python tests

2023-04-08T19:13:50Z

MFC after: 2 weeks (cherry picked from commit ff8da9b2bab43920a19c16855ac3d30b5ccb1df2)

testing: handling non-root users with VNETs in pytest-based tests.

2023-02-24T10:43:30Z

Currently isolation and resource requirements are handled directly by the kyua runner, based on the requirements specified by the test. It works well for simple tests, but may cause discrepancy with tests doing complex pre-setups. For example, all tests that perform VNET setups require root access to properly function. This change adds additional handling of the "require_user" property within the python testing framework. Specifically, it requests root access if the test class signals its root requirements and drops privileges to the desired user after performing the pre-setup. Differential Revision: https://reviews.freebsd.org/D37923 MFC after: 2 weeks (cherry picked from commit 6332ef8941999b0c074d1ece0e1e108447c70b98)

netlink: return optional metadata with the operation result.

2023-02-20T14:33:28Z

Some operations like interface creation may need to return metadata - in this case, interface name - back to the caller if the operation is successful. This change implements attaching an `NLMSGERR_ATTR_COOKIE` nla to the operation reply message via `nlmsg_report_cookie()`. Additionally, on successful interface creation, interface index and interface name are returned in the `IFLA_NEW_IFINDEX` and `IFLA_IFNAME TLVs, encapsulated in the `NLMSGERR_ATTR_COOKIE`. Reviewed By: pauamma Differential Revision: https://reviews.freebsd.org/D38283 MFC after: 1 week (cherry picked from commit 25c2dd2f2c6c6144d59d463c95f0471301d6efaa)

pytest: delete interfaces from inside the jail.

2023-02-09T15:46:25Z

This change follows the approach used in 80fc25025ffc, to minimise the impact of the delayed interface migration. MFC after: 2 weeks (cherry picked from commit 20ea7f26e41375828a390fba613b86acfe366add)

tests: Add an IPv4 loopback address of 127.0.0.1/8 to the lo0

2023-02-09T15:44:42Z

interface by default when creating VNETSs using pytest. Reviewed By: asomers Differential Revision: https://reviews.freebsd.org/D38021 (cherry picked from commit 4856aeaaed17726a1dfa5dd6c736e5b0851255b6)

netlink: improve RTM_GETADDR handling.

2023-01-23T22:09:04Z

* Allow filtering by ifa_family & ifa_index. * Add common RTM_ADDR parser * Add tests verifying RTM_GETADDR filtering behaviour & output * Factor out common netlink socket test methods into NetlinkTestTemplate * Add NLMSG_DONE message handler Reviewed By: pauamma Differential Revision: https://reviews.freebsd.org/D37970 (cherry picked from commit c1871a3372e382bfcd46452d1d8d4f06561508cc)