Testing on hosts with firewalls

[Zack Weinberg]

On Thu, Dec 29, 2016 at 10:47 AM, Mike Frysinger <vapier@gentoo.org> wrote:
> On 29 Dec 2016 10:23, Zack Weinberg wrote:
>> On Thu, Dec 29, 2016 at 10:08 AM, Mike Frysinger wrote:
>> > does it help if you run all the tests in a unique net namespace ?
>>
>> - can that be done without root privileges?
>
> on vanilla kernels, yes, via user namespaces.
> and if it isn't available, it's trivial to detect & ignore.

OK, good.

>> - beware https://bugzilla.kernel.org/show_bug.cgi?id=97811
>
> there is no need to use `ip` to create net namespaces, nor
> is it even desirable.  it's trivial to do it in pure C.

... that's a *kernel bug*.  "ip" has nothing to do with it.

Also, if you know of *comprehensible* documentation for creating and
manipulating net namespaces without shelling out to "ip", please
share, I have several nasty-ass suid programs that would be better for
it.

zw