Testing on hosts with firewalls

[Mike Frysinger]

On 29 Dec 2016 10:23, Zack Weinberg wrote:
> On Thu, Dec 29, 2016 at 10:08 AM, Mike Frysinger wrote:
> > does it help if you run all the tests in a unique net namespace ?
> > i think our skel test framework should set up unique namespaces
> > all the time anyways to prevent inadvertent leakage, and to handle
> > issues like port collisions.
> 
> I agree in principle, but:
> 
> - can that be done without root privileges?

on vanilla kernels, yes, via user namespaces.
and if it isn't available, it's trivial to detect & ignore.

> - beware https://bugzilla.kernel.org/show_bug.cgi?id=97811

there is no need to use `ip` to create net namespaces, nor
is it even desirable.  it's trivial to do it in pure C.
-mike
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: Digital signature
URL: <http://sourceware.org/pipermail/libc-alpha/attachments/20161229/c5e5a02b/attachment.sig>