criu/test/empty-netns-prep.sh

#!/bin/bash

set -ex

if [ "$CRTOOLS_SCRIPT_ACTION" == "setup-namespaces" ]; then
	echo "Will up lo at $CRTOOLS_INIT_PID netns"
	mkdir -p /var/run/netns
	mount -t tmpfs xxx /var/run/netns
	touch /var/run/netns/emptyns
	mount --bind /proc/$CRTOOLS_INIT_PID/ns/net /var/run/netns/emptyns
	ip netns exec emptyns ip link set up dev lo || exit 1
	ip netns exec emptyns ip a
	umount -l /var/run/netns
fi

exit 0
test: don't use nsenter in tests Ubuntu 14.04 (Travis) doesn't have it. Reviewed-by: Kirill Tkhai <ktkhai@virtuozzo.com> Looks-good-to: Pavel Emelyanov <xemul@virtuozzo.com> Signed-off-by: Andrei Vagin <avagin@virtuozzo.com> 2017-05-06 08:40:16 +03:00			`#!/bin/bash`

			`set -ex`
empty-ns: Don't C/R iptables too (v2) When C/R-ing a net namespace with --empty-ns net option we should also skip netfilter rules too (as per https://github.com/docker/docker/issues/27597). However, there's one thing to be handled -- local TCP blocking rules are expected to be there on restore by restore_iptables() which is no longer the case, so put them back manually. Test included, checked on zdtm/static/socket-tcpbuf-local :) v2: Full scripts for empty netns setup. https://github.com/xemul/criu/issues/246 Signed-off-by: Pavel Emelyanov <xemul@virtuozzo.com> 2016-11-15 17:08:00 +03:00
			`if [ "$CRTOOLS_SCRIPT_ACTION" == "setup-namespaces" ]; then`
			`echo "Will up lo at $CRTOOLS_INIT_PID netns"`
test: don't use nsenter in tests Ubuntu 14.04 (Travis) doesn't have it. Reviewed-by: Kirill Tkhai <ktkhai@virtuozzo.com> Looks-good-to: Pavel Emelyanov <xemul@virtuozzo.com> Signed-off-by: Andrei Vagin <avagin@virtuozzo.com> 2017-05-06 08:40:16 +03:00			`mkdir -p /var/run/netns`
			`mount -t tmpfs xxx /var/run/netns`
			`touch /var/run/netns/emptyns`
			`mount --bind /proc/$CRTOOLS_INIT_PID/ns/net /var/run/netns/emptyns`
			`ip netns exec emptyns ip link set up dev lo \|\| exit 1`
			`ip netns exec emptyns ip a`
			`umount -l /var/run/netns`
empty-ns: Don't C/R iptables too (v2) When C/R-ing a net namespace with --empty-ns net option we should also skip netfilter rules too (as per https://github.com/docker/docker/issues/27597). However, there's one thing to be handled -- local TCP blocking rules are expected to be there on restore by restore_iptables() which is no longer the case, so put them back manually. Test included, checked on zdtm/static/socket-tcpbuf-local :) v2: Full scripts for empty netns setup. https://github.com/xemul/criu/issues/246 Signed-off-by: Pavel Emelyanov <xemul@virtuozzo.com> 2016-11-15 17:08:00 +03:00			`fi`

			`exit 0`