Skip to content

network: add iptables and nftables test#615

Merged
tormath1 merged 1 commit intomainfrom
tormath1/iptables
May 22, 2025
Merged

network: add iptables and nftables test#615
tormath1 merged 1 commit intomainfrom
tormath1/iptables

Conversation

@tormath1
Copy link
Copy Markdown
Contributor

@tormath1 tormath1 commented May 21, 2025 •
edited
Loading

this test loading of firewall rules through Ignition by creating a simple firewall rule that drop packets to destination 80.

To be merged with: flatcar/scripts#2946

Tested with the image from the PR ⬆️ :

=== RUN   cl.network.nftables
=== RUN   cl.network.iptables
--- PASS: cl.network.nftables (27.97s)
        cluster.go:152: + sudo nft --json list ruleset | jq '.nftables | .[] | select(.chain) | .chain.policy'
--- PASS: cl.network.iptables (28.28s)
        cluster.go:152: + sudo nft --json list ruleset | jq '.nftables | .[] | select(.chain) | .chain.policy'
PASS, output in _kola_temp/qemu-2025-05-21-1856-159723

Note: cl.network.iptables can be enabled for all channels, we just need to backport the commint enabling json to all channels.

@tormath1 tormath1 self-assigned this May 21, 2025
@tormath1 tormath1 mentioned this pull request May 21, 2025
Merged
3 tasks
@tormath1 tormath1 force-pushed the tormath1/iptables branch from 79a1fd6 to 4934590 Compare May 21, 2025 17:00
@tormath1 tormath1 marked this pull request as ready for review May 21, 2025 17:01
@tormath1 tormath1 force-pushed the tormath1/iptables branch 2 times, most recently from 3b9d1ea to 72324c0 Compare May 21, 2025 17:04
@tormath1 tormath1 requested a review from a team May 21, 2025 17:04
@github-actions github-actions bot mentioned this pull request May 22, 2025
Closed
@tormath1 tormath1 force-pushed the tormath1/iptables branch from 72324c0 to e6467a2 Compare May 22, 2025 08:20
chewi
chewi reviewed May 22, 2025
View reviewed changes
@tormath1
network: add iptables and nftables test
66df4b2 
this test loading of rules through Ignition.

Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
@tormath1 tormath1 force-pushed the tormath1/iptables branch from e6467a2 to 66df4b2 Compare May 22, 2025 09:17
@tormath1 tormath1 merged commit e0b0f44 into main May 22, 2025
5 checks passed
@tormath1 tormath1 deleted the tormath1/iptables branch May 22, 2025 12:35
@github-actions github-actions bot mentioned this pull request Jun 22, 2025
Closed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@chewi chewi chewi approved these changes

Assignees

@tormath1 tormath1

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@tormath1 @chewi