2
0
mirror of https://github.com/checkpoint-restore/criu synced 2025-08-24 19:08:11 +00:00

zdtm: socket-tcp-nft-nfconntrack: add a hook to the chain in nft case

Let's use hooked nft chain which actually affects packets.

Fixes: e5f4d8c6f ("test/nfconntrack: use nft or iptables-legacy")
Signed-off-by: Pavel Tikhomirov <ptikhomirov@virtuozzo.com>
This commit is contained in:
Pavel Tikhomirov 2024-01-22 17:50:39 +08:00 committed by Andrei Vagin
parent afc0efcf78
commit d2511707fa

View File

@ -92,7 +92,7 @@ int main(int argc, char **argv)
if (system("nft add table ip filter")) if (system("nft add table ip filter"))
return 1; return 1;
if (system("nft add chain ip filter INPUT")) if (system("nft 'add chain ip filter INPUT { type filter hook input priority 0 ; }'"))
return 1; return 1;
if (system("nft add rule ip filter INPUT iifname \"lo\" ip protocol tcp ct state new,established counter accept")) if (system("nft add rule ip filter INPUT iifname \"lo\" ip protocol tcp ct state new,established counter accept"))
return 1; return 1;