Re: Testing on hosts with firewalls

[Mike Frysinger <vapier at gentoo dot org>]

On 29 Dec 2016 10:23, Zack Weinberg wrote:
> On Thu, Dec 29, 2016 at 10:08 AM, Mike Frysinger wrote:
> > does it help if you run all the tests in a unique net namespace ?
> > i think our skel test framework should set up unique namespaces
> > all the time anyways to prevent inadvertent leakage, and to handle
> > issues like port collisions.
> 
> I agree in principle, but:
> 
> - can that be done without root privileges?

on vanilla kernels, yes, via user namespaces.
and if it isn't available, it's trivial to detect & ignore.

> - beware https://bugzilla.kernel.org/show_bug.cgi?id=97811

there is no need to use `ip` to create net namespaces, nor
is it even desirable.  it's trivial to do it in pure C.
-mike

Attachment: signature.asc
Description: Digital signature