diff options
Diffstat (limited to 'test/iptables/README.md')
| -rw-r--r-- | test/iptables/README.md | 14 |
1 files changed, 12 insertions, 2 deletions
diff --git a/test/iptables/README.md b/test/iptables/README.md index 9f8e34420..cc8a2fcac 100644 --- a/test/iptables/README.md +++ b/test/iptables/README.md @@ -2,6 +2,9 @@ iptables tests are run via `scripts/iptables_test.sh`. +iptables requires raw socket support, so you must add the `--net-raw=true` flag +to `/etc/docker/daemon.json` in order to use it. + ## Test Structure Each test implements `TestCase`, providing (1) a function to run inside the @@ -25,10 +28,17 @@ Your test is now runnable with bazel! ## Run individual tests -Build the testing Docker container: +Build and install `runsc`. Re-run this when you modify gVisor: + +```bash +$ bazel build //runsc && sudo cp bazel-bin/runsc/linux_amd64_pure_stripped/runsc $(which runsc) +``` + +Build the testing Docker container. Re-run this when you modify the test code in +this directory: ```bash -$ bazel run //test/iptables/runner -- --norun +$ bazel run //test/iptables/runner:runner-image -- --norun ``` Run an individual test via: |