On Tue, May 27, 2025 at 11:41:17AM +0200, Phil Sutter wrote:
> The script is supposed to skip wildcard interface testing if unsupported
> by the host's nft tool. The failing check caused script abort due to
> 'set -e' though. Fix this by running the potentially failing nft command
> inside the if-conditional pipe.
Thanks Phil, this is an easy fix for this.
> Fixes: 73db1b5dab6f ("selftests: netfilter: Torture nftables netdev hooks")
> Signed-off-by: Phil Sutter <phil@xxxxxx>
Acked-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
Paolo, you can take this now to calm down CI. Thanks
> ---
> .../selftests/net/netfilter/nft_interface_stress.sh | 7 +++++--
> 1 file changed, 5 insertions(+), 2 deletions(-)
>
> diff --git a/tools/testing/selftests/net/netfilter/nft_interface_stress.sh b/tools/testing/selftests/net/netfilter/nft_interface_stress.sh
> index 11d82d11495e..5ff7be9daeee 100755
> --- a/tools/testing/selftests/net/netfilter/nft_interface_stress.sh
> +++ b/tools/testing/selftests/net/netfilter/nft_interface_stress.sh
> @@ -97,7 +97,8 @@ kill $nft_monitor_pid
> kill $rename_loop_pid
> wait
>
> -ip netns exec $nsr nft -f - <<EOF
> +wildcard_prep() {
> + ip netns exec $nsr nft -f - <<EOF
> table ip t {
> flowtable ft_wild {
> hook ingress priority 0
> @@ -105,7 +106,9 @@ table ip t {
> }
> }
> EOF
> -if [[ $? -ne 0 ]]; then
> +}
> +
> +if ! wildcard_prep; then
> echo "SKIP wildcard tests: not supported by host's nft?"
> else
> for ((i = 0; i < 100; i++)); do
> --
> 2.49.0
>
