1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
|
// Copyright 2019 The gVisor Authors.
//
// Licensed under the Apache License, Version 2.0 (the "License");
// you may not use this file except in compliance with the License.
// You may obtain a copy of the License at
//
// http://www.apache.org/licenses/LICENSE-2.0
//
// Unless required by applicable law or agreed to in writing, software
// distributed under the License is distributed on an "AS IS" BASIS,
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
// See the License for the specific language governing permissions and
// limitations under the License.
// Package main runs iptables tests from within a docker container.
package main
import (
"context"
"flag"
"fmt"
"log"
"net"
"gvisor.dev/gvisor/test/iptables"
)
var (
name = flag.String("name", "", "name of the test to run")
ipv6 = flag.Bool("ipv6", false, "whether the test utilizes ip6tables")
)
func main() {
flag.Parse()
// Find out which test we're running.
test, ok := iptables.Tests[*name]
if !ok {
log.Fatalf("No test found named %q", *name)
}
log.Printf("Running test %q", *name)
// Get the IP of the local process.
ip, err := getIP()
if err != nil {
log.Fatal(err)
}
// Run the test.
ctx, cancel := context.WithCancel(context.Background())
defer cancel()
if err := test.ContainerAction(ctx, ip, *ipv6); err != nil {
log.Fatalf("Failed running test %q: %v", *name, err)
}
// Emit the final line.
log.Printf("%s", iptables.TerminalStatement)
}
// getIP listens for a connection from the local process and returns the source
// IP of that connection.
func getIP() (net.IP, error) {
localAddr := net.TCPAddr{
Port: iptables.IPExchangePort,
}
listener, err := net.ListenTCP("tcp", &localAddr)
if err != nil {
return net.IP{}, fmt.Errorf("failed listening for IP: %v", err)
}
defer listener.Close()
conn, err := listener.AcceptTCP()
if err != nil {
return net.IP{}, fmt.Errorf("failed accepting IP: %v", err)
}
defer conn.Close()
log.Printf("Connected to %v", conn.RemoteAddr())
return conn.RemoteAddr().(*net.TCPAddr).IP, nil
}
|
