Quelle  netns_cookie.c

// SPDX-License-Identifier: GPL-2.0

#include <test_progs.h>
#include "netns_cookie_prog.skel.h"
#include "network_helpers.h"

#ifndef SO_NETNS_COOKIE
#define SO_NETNS_COOKIE 71
#endif

#define loopback 1

static int duration;

void test_netns_cookie(void)
{
 LIBBPF_OPTS(bpf_prog_attach_opts, opta);
 LIBBPF_OPTS(bpf_prog_detach_opts, optd);
 int server_fd = -1, client_fd = -1, cgroup_fd = -1;
 int err, val, ret, map, verdict, tc_fd;
 struct netns_cookie_prog *skel;
 uint64_t cookie_expected_value;
 socklen_t vallen = sizeof(cookie_expected_value);
 static const char send_msg[] = "message";

 skel = netns_cookie_prog__open_and_load();
 if (!ASSERT_OK_PTR(skel, "skel_open"))
  return;

 cgroup_fd = test__join_cgroup("/netns_cookie");
 if (CHECK(cgroup_fd < 0, "join_cgroup", "cgroup creation failed\n"))
  goto done;

 skel->links.get_netns_cookie_sockops = bpf_program__attach_cgroup(
  skel->progs.get_netns_cookie_sockops, cgroup_fd);
 if (!ASSERT_OK_PTR(skel->links.get_netns_cookie_sockops, "prog_attach_sockops"))
  goto done;

 verdict = bpf_program__fd(skel->progs.get_netns_cookie_sk_msg);
 map = bpf_map__fd(skel->maps.sock_map);
 err = bpf_prog_attach(verdict, map, BPF_SK_MSG_VERDICT, 0);
 if (!ASSERT_OK(err, "prog_attach_sk_msg"))
  goto done;

 tc_fd = bpf_program__fd(skel->progs.get_netns_cookie_tcx);
 err = bpf_prog_attach_opts(tc_fd, loopback, BPF_TCX_INGRESS, &opta);
 if (!ASSERT_OK(err, "prog_attach_tcx"))
  goto done;

 skel->links.get_netns_cookie_cgroup_skb = bpf_program__attach_cgroup(
  skel->progs.get_netns_cookie_cgroup_skb, cgroup_fd);
 if (!ASSERT_OK_PTR(skel->links.get_netns_cookie_cgroup_skb, "prog_attach_cgroup_skb"))
  goto cleanup_tc;

 server_fd = start_server(AF_INET6, SOCK_STREAM, "::1", 0, 0);
 if (CHECK(server_fd < 0, "start_server", "errno %d\n", errno))
  goto cleanup_tc;

 client_fd = connect_to_fd(server_fd, 0);
 if (CHECK(client_fd < 0, "connect_to_fd", "errno %d\n", errno))
  goto cleanup_tc;

 ret = send(client_fd, send_msg, sizeof(send_msg), 0);
 if (CHECK(ret != sizeof(send_msg), "send(msg)", "ret:%d\n", ret))
  goto cleanup_tc;

 err = bpf_map_lookup_elem(bpf_map__fd(skel->maps.sockops_netns_cookies),
      &client_fd, &val);
 if (!ASSERT_OK(err, "map_lookup(sockops_netns_cookies)"))
  goto cleanup_tc;

 err = getsockopt(client_fd, SOL_SOCKET, SO_NETNS_COOKIE,
    &cookie_expected_value, &vallen);
 if (!ASSERT_OK(err, "getsockopt"))
  goto cleanup_tc;

 ASSERT_EQ(val, cookie_expected_value, "cookie_value_sockops");

 err = bpf_map_lookup_elem(bpf_map__fd(skel->maps.sk_msg_netns_cookies),
      &client_fd, &val);
 if (!ASSERT_OK(err, "map_lookup(sk_msg_netns_cookies)"))
  goto cleanup_tc;

 ASSERT_EQ(val, cookie_expected_value, "cookie_value_sk_msg");
 ASSERT_EQ(skel->bss->tcx_init_netns_cookie, cookie_expected_value, "cookie_value_init_tcx");
 ASSERT_EQ(skel->bss->tcx_netns_cookie, cookie_expected_value, "cookie_value_tcx");
 ASSERT_EQ(skel->bss->cgroup_skb_init_netns_cookie, cookie_expected_value, "cookie_value_init_cgroup_skb");
 ASSERT_EQ(skel->bss->cgroup_skb_netns_cookie, cookie_expected_value, "cookie_value_cgroup_skb");

cleanup_tc:
 err = bpf_prog_detach_opts(tc_fd, loopback, BPF_TCX_INGRESS, &optd);
 ASSERT_OK(err, "prog_detach");

done:
 if (server_fd != -1)
  close(server_fd);
 if (client_fd != -1)
  close(client_fd);
 if (cgroup_fd != -1)
  close(cgroup_fd);
 netns_cookie_prog__destroy(skel);
}