|
@@ -13,44 +13,37 @@ import (
|
|
|
"github.com/go-check/check"
|
|
|
)
|
|
|
|
|
|
-var (
|
|
|
- MacvlanKernelSupport = testRequirement{
|
|
|
- func() bool {
|
|
|
- const macvlanKernelVer = 3 // minimum macvlan kernel support
|
|
|
- const macvlanMajorVer = 9 // minimum macvlan major kernel support
|
|
|
- kv, err := kernel.GetKernelVersion()
|
|
|
- if err != nil {
|
|
|
- return false
|
|
|
- }
|
|
|
- // ensure Kernel version is >= v3.9 for macvlan support
|
|
|
- if kv.Kernel < macvlanKernelVer || (kv.Kernel == macvlanKernelVer && kv.Major < macvlanMajorVer) {
|
|
|
- return false
|
|
|
- }
|
|
|
- return true
|
|
|
- },
|
|
|
- "kernel version failed to meet the minimum macvlan kernel requirement of 3.9",
|
|
|
+func macvlanKernelSupport() bool {
|
|
|
+ const macvlanKernelVer = 3 // minimum macvlan kernel support
|
|
|
+ const macvlanMajorVer = 9 // minimum macvlan major kernel support
|
|
|
+ kv, err := kernel.GetKernelVersion()
|
|
|
+ if err != nil {
|
|
|
+ return false
|
|
|
}
|
|
|
- IpvlanKernelSupport = testRequirement{
|
|
|
- func() bool {
|
|
|
- const ipvlanKernelVer = 4 // minimum ipvlan kernel support
|
|
|
- const ipvlanMajorVer = 2 // minimum ipvlan major kernel support
|
|
|
- kv, err := kernel.GetKernelVersion()
|
|
|
- if err != nil {
|
|
|
- return false
|
|
|
- }
|
|
|
- // ensure Kernel version is >= v4.2 for ipvlan support
|
|
|
- if kv.Kernel < ipvlanKernelVer || (kv.Kernel == ipvlanKernelVer && kv.Major < ipvlanMajorVer) {
|
|
|
- return false
|
|
|
- }
|
|
|
- return true
|
|
|
- },
|
|
|
- "kernel version failed to meet the minimum ipvlan kernel requirement of 4.0.0",
|
|
|
+ // ensure Kernel version is >= v3.9 for macvlan support
|
|
|
+ if kv.Kernel < macvlanKernelVer || (kv.Kernel == macvlanKernelVer && kv.Major < macvlanMajorVer) {
|
|
|
+ return false
|
|
|
}
|
|
|
-)
|
|
|
+ return true
|
|
|
+}
|
|
|
+
|
|
|
+func ipvlanKernelSupport() bool {
|
|
|
+ const ipvlanKernelVer = 4 // minimum ipvlan kernel support
|
|
|
+ const ipvlanMajorVer = 2 // minimum ipvlan major kernel support
|
|
|
+ kv, err := kernel.GetKernelVersion()
|
|
|
+ if err != nil {
|
|
|
+ return false
|
|
|
+ }
|
|
|
+ // ensure Kernel version is >= v4.2 for ipvlan support
|
|
|
+ if kv.Kernel < ipvlanKernelVer || (kv.Kernel == ipvlanKernelVer && kv.Major < ipvlanMajorVer) {
|
|
|
+ return false
|
|
|
+ }
|
|
|
+ return true
|
|
|
+}
|
|
|
|
|
|
func (s *DockerNetworkSuite) TestDockerNetworkMacvlanPersistance(c *check.C) {
|
|
|
// verify the driver automatically provisions the 802.1q link (dm-dummy0.60)
|
|
|
- testRequires(c, DaemonIsLinux, MacvlanKernelSupport, NotUserNamespace, NotArm, ExperimentalDaemon)
|
|
|
+ testRequires(c, DaemonIsLinux, macvlanKernelSupport, NotUserNamespace, NotArm, ExperimentalDaemon)
|
|
|
|
|
|
// master dummy interface 'dm' abbreviation represents 'docker macvlan'
|
|
|
master := "dm-dummy0"
|
|
@@ -70,7 +63,7 @@ func (s *DockerNetworkSuite) TestDockerNetworkMacvlanPersistance(c *check.C) {
|
|
|
|
|
|
func (s *DockerNetworkSuite) TestDockerNetworkIpvlanPersistance(c *check.C) {
|
|
|
// verify the driver automatically provisions the 802.1q link (di-dummy0.70)
|
|
|
- testRequires(c, DaemonIsLinux, IpvlanKernelSupport, NotUserNamespace, NotArm, ExperimentalDaemon)
|
|
|
+ testRequires(c, DaemonIsLinux, ipvlanKernelSupport, NotUserNamespace, NotArm, ExperimentalDaemon)
|
|
|
// master dummy interface 'di' notation represent 'docker ipvlan'
|
|
|
master := "di-dummy0"
|
|
|
// simulate the master link the vlan tagged subinterface parent link will use
|
|
@@ -89,7 +82,7 @@ func (s *DockerNetworkSuite) TestDockerNetworkIpvlanPersistance(c *check.C) {
|
|
|
|
|
|
func (s *DockerNetworkSuite) TestDockerNetworkMacvlanSubIntCreate(c *check.C) {
|
|
|
// verify the driver automatically provisions the 802.1q link (dm-dummy0.50)
|
|
|
- testRequires(c, DaemonIsLinux, MacvlanKernelSupport, NotUserNamespace, NotArm, ExperimentalDaemon)
|
|
|
+ testRequires(c, DaemonIsLinux, macvlanKernelSupport, NotUserNamespace, NotArm, ExperimentalDaemon)
|
|
|
// master dummy interface 'dm' abbreviation represents 'docker macvlan'
|
|
|
master := "dm-dummy0"
|
|
|
// simulate the master link the vlan tagged subinterface parent link will use
|
|
@@ -104,7 +97,7 @@ func (s *DockerNetworkSuite) TestDockerNetworkMacvlanSubIntCreate(c *check.C) {
|
|
|
|
|
|
func (s *DockerNetworkSuite) TestDockerNetworkIpvlanSubIntCreate(c *check.C) {
|
|
|
// verify the driver automatically provisions the 802.1q link (di-dummy0.50)
|
|
|
- testRequires(c, DaemonIsLinux, IpvlanKernelSupport, NotUserNamespace, NotArm, ExperimentalDaemon)
|
|
|
+ testRequires(c, DaemonIsLinux, ipvlanKernelSupport, NotUserNamespace, NotArm, ExperimentalDaemon)
|
|
|
// master dummy interface 'dm' abbreviation represents 'docker ipvlan'
|
|
|
master := "di-dummy0"
|
|
|
// simulate the master link the vlan tagged subinterface parent link will use
|
|
@@ -119,7 +112,7 @@ func (s *DockerNetworkSuite) TestDockerNetworkIpvlanSubIntCreate(c *check.C) {
|
|
|
|
|
|
func (s *DockerNetworkSuite) TestDockerNetworkMacvlanOverlapParent(c *check.C) {
|
|
|
// verify the same parent interface cannot be used if already in use by an existing network
|
|
|
- testRequires(c, DaemonIsLinux, MacvlanKernelSupport, NotUserNamespace, NotArm, ExperimentalDaemon)
|
|
|
+ testRequires(c, DaemonIsLinux, macvlanKernelSupport, NotUserNamespace, NotArm, ExperimentalDaemon)
|
|
|
// master dummy interface 'dm' abbreviation represents 'docker macvlan'
|
|
|
master := "dm-dummy0"
|
|
|
out, err := createMasterDummy(c, master)
|
|
@@ -139,7 +132,7 @@ func (s *DockerNetworkSuite) TestDockerNetworkMacvlanOverlapParent(c *check.C) {
|
|
|
|
|
|
func (s *DockerNetworkSuite) TestDockerNetworkIpvlanOverlapParent(c *check.C) {
|
|
|
// verify the same parent interface cannot be used if already in use by an existing network
|
|
|
- testRequires(c, DaemonIsLinux, IpvlanKernelSupport, NotUserNamespace, NotArm, ExperimentalDaemon)
|
|
|
+ testRequires(c, DaemonIsLinux, ipvlanKernelSupport, NotUserNamespace, NotArm, ExperimentalDaemon)
|
|
|
// master dummy interface 'dm' abbreviation represents 'docker ipvlan'
|
|
|
master := "di-dummy0"
|
|
|
out, err := createMasterDummy(c, master)
|
|
@@ -159,7 +152,7 @@ func (s *DockerNetworkSuite) TestDockerNetworkIpvlanOverlapParent(c *check.C) {
|
|
|
|
|
|
func (s *DockerNetworkSuite) TestDockerNetworkMacvlanMultiSubnet(c *check.C) {
|
|
|
// create a dual stack multi-subnet Macvlan bridge mode network and validate connectivity between four containers, two on each subnet
|
|
|
- testRequires(c, DaemonIsLinux, IPv6, MacvlanKernelSupport, NotUserNamespace, NotArm, ExperimentalDaemon)
|
|
|
+ testRequires(c, DaemonIsLinux, IPv6, macvlanKernelSupport, NotUserNamespace, NotArm, ExperimentalDaemon)
|
|
|
dockerCmd(c, "network", "create", "--driver=macvlan", "--ipv6", "--subnet=172.28.100.0/24", "--subnet=172.28.102.0/24", "--gateway=172.28.102.254",
|
|
|
"--subnet=2001:db8:abc2::/64", "--subnet=2001:db8:abc4::/64", "--gateway=2001:db8:abc4::254", "dualstackbridge")
|
|
|
// Ensure the network was created
|
|
@@ -214,7 +207,7 @@ func (s *DockerNetworkSuite) TestDockerNetworkMacvlanMultiSubnet(c *check.C) {
|
|
|
|
|
|
func (s *DockerNetworkSuite) TestDockerNetworkIpvlanL2MultiSubnet(c *check.C) {
|
|
|
// create a dual stack multi-subnet Ipvlan L2 network and validate connectivity within the subnets, two on each subnet
|
|
|
- testRequires(c, DaemonIsLinux, IPv6, IpvlanKernelSupport, NotUserNamespace, NotArm, ExperimentalDaemon)
|
|
|
+ testRequires(c, DaemonIsLinux, IPv6, ipvlanKernelSupport, NotUserNamespace, NotArm, ExperimentalDaemon)
|
|
|
dockerCmd(c, "network", "create", "--driver=ipvlan", "--ipv6", "--subnet=172.28.200.0/24", "--subnet=172.28.202.0/24", "--gateway=172.28.202.254",
|
|
|
"--subnet=2001:db8:abc8::/64", "--subnet=2001:db8:abc6::/64", "--gateway=2001:db8:abc6::254", "dualstackl2")
|
|
|
// Ensure the network was created
|
|
@@ -268,7 +261,7 @@ func (s *DockerNetworkSuite) TestDockerNetworkIpvlanL2MultiSubnet(c *check.C) {
|
|
|
|
|
|
func (s *DockerNetworkSuite) TestDockerNetworkIpvlanL3MultiSubnet(c *check.C) {
|
|
|
// create a dual stack multi-subnet Ipvlan L3 network and validate connectivity between all four containers per L3 mode
|
|
|
- testRequires(c, DaemonIsLinux, IPv6, IpvlanKernelSupport, NotUserNamespace, NotArm, IPv6, ExperimentalDaemon)
|
|
|
+ testRequires(c, DaemonIsLinux, IPv6, ipvlanKernelSupport, NotUserNamespace, NotArm, IPv6, ExperimentalDaemon)
|
|
|
dockerCmd(c, "network", "create", "--driver=ipvlan", "--ipv6", "--subnet=172.28.10.0/24", "--subnet=172.28.12.0/24", "--gateway=172.28.12.254",
|
|
|
"--subnet=2001:db8:abc9::/64", "--subnet=2001:db8:abc7::/64", "--gateway=2001:db8:abc7::254", "-o", "ipvlan_mode=l3", "dualstackl3")
|
|
|
// Ensure the network was created
|
|
@@ -327,7 +320,7 @@ func (s *DockerNetworkSuite) TestDockerNetworkIpvlanL3MultiSubnet(c *check.C) {
|
|
|
|
|
|
func (s *DockerNetworkSuite) TestDockerNetworkIpvlanAddressing(c *check.C) {
|
|
|
// Ensure the default gateways, next-hops and default dev devices are properly set
|
|
|
- testRequires(c, DaemonIsLinux, IPv6, IpvlanKernelSupport, NotUserNamespace, NotArm, ExperimentalDaemon)
|
|
|
+ testRequires(c, DaemonIsLinux, IPv6, ipvlanKernelSupport, NotUserNamespace, NotArm, ExperimentalDaemon)
|
|
|
dockerCmd(c, "network", "create", "--driver=macvlan", "--ipv6", "--subnet=172.28.130.0/24",
|
|
|
"--subnet=2001:db8:abca::/64", "--gateway=2001:db8:abca::254", "-o", "macvlan_mode=bridge", "dualstackbridge")
|
|
|
assertNwIsAvailable(c, "dualstackbridge")
|
|
@@ -373,7 +366,7 @@ func (s *DockerNetworkSuite) TestDockerNetworkIpvlanAddressing(c *check.C) {
|
|
|
|
|
|
func (s *DockerSuite) TestDockerNetworkMacVlanBridgeNilParent(c *check.C) {
|
|
|
// macvlan bridge mode - dummy parent interface is provisioned dynamically
|
|
|
- testRequires(c, DaemonIsLinux, MacvlanKernelSupport, NotUserNamespace, NotArm, ExperimentalDaemon)
|
|
|
+ testRequires(c, DaemonIsLinux, macvlanKernelSupport, NotUserNamespace, NotArm, ExperimentalDaemon)
|
|
|
dockerCmd(c, "network", "create", "--driver=macvlan", "dm-nil-parent")
|
|
|
assertNwIsAvailable(c, "dm-nil-parent")
|
|
|
|
|
@@ -390,7 +383,7 @@ func (s *DockerSuite) TestDockerNetworkMacVlanBridgeNilParent(c *check.C) {
|
|
|
|
|
|
func (s *DockerSuite) TestDockerNetworkMacVlanBridgeInternalMode(c *check.C) {
|
|
|
// macvlan bridge mode --internal containers can communicate inside the network but not externally
|
|
|
- testRequires(c, DaemonIsLinux, MacvlanKernelSupport, NotUserNamespace, NotArm, ExperimentalDaemon)
|
|
|
+ testRequires(c, DaemonIsLinux, macvlanKernelSupport, NotUserNamespace, NotArm, ExperimentalDaemon)
|
|
|
dockerCmd(c, "network", "create", "--driver=macvlan", "--internal", "dm-internal")
|
|
|
assertNwIsAvailable(c, "dm-internal")
|
|
|
nr := getNetworkResource(c, "dm-internal")
|
|
@@ -413,7 +406,7 @@ func (s *DockerSuite) TestDockerNetworkMacVlanBridgeInternalMode(c *check.C) {
|
|
|
|
|
|
func (s *DockerSuite) TestDockerNetworkIpvlanL2NilParent(c *check.C) {
|
|
|
// ipvlan l2 mode - dummy parent interface is provisioned dynamically
|
|
|
- testRequires(c, DaemonIsLinux, IpvlanKernelSupport, NotUserNamespace, NotArm, ExperimentalDaemon)
|
|
|
+ testRequires(c, DaemonIsLinux, ipvlanKernelSupport, NotUserNamespace, NotArm, ExperimentalDaemon)
|
|
|
dockerCmd(c, "network", "create", "--driver=ipvlan", "di-nil-parent")
|
|
|
assertNwIsAvailable(c, "di-nil-parent")
|
|
|
|
|
@@ -430,7 +423,7 @@ func (s *DockerSuite) TestDockerNetworkIpvlanL2NilParent(c *check.C) {
|
|
|
|
|
|
func (s *DockerSuite) TestDockerNetworkIpvlanL2InternalMode(c *check.C) {
|
|
|
// ipvlan l2 mode --internal containers can communicate inside the network but not externally
|
|
|
- testRequires(c, DaemonIsLinux, IpvlanKernelSupport, NotUserNamespace, NotArm, ExperimentalDaemon)
|
|
|
+ testRequires(c, DaemonIsLinux, ipvlanKernelSupport, NotUserNamespace, NotArm, ExperimentalDaemon)
|
|
|
dockerCmd(c, "network", "create", "--driver=ipvlan", "--internal", "di-internal")
|
|
|
assertNwIsAvailable(c, "di-internal")
|
|
|
nr := getNetworkResource(c, "di-internal")
|
|
@@ -452,7 +445,7 @@ func (s *DockerSuite) TestDockerNetworkIpvlanL2InternalMode(c *check.C) {
|
|
|
|
|
|
func (s *DockerSuite) TestDockerNetworkIpvlanL3NilParent(c *check.C) {
|
|
|
// ipvlan l3 mode - dummy parent interface is provisioned dynamically
|
|
|
- testRequires(c, DaemonIsLinux, IpvlanKernelSupport, NotUserNamespace, NotArm, ExperimentalDaemon)
|
|
|
+ testRequires(c, DaemonIsLinux, ipvlanKernelSupport, NotUserNamespace, NotArm, ExperimentalDaemon)
|
|
|
dockerCmd(c, "network", "create", "--driver=ipvlan", "--subnet=172.28.230.0/24",
|
|
|
"--subnet=172.28.220.0/24", "-o", "ipvlan_mode=l3", "di-nil-parent-l3")
|
|
|
assertNwIsAvailable(c, "di-nil-parent-l3")
|
|
@@ -470,7 +463,7 @@ func (s *DockerSuite) TestDockerNetworkIpvlanL3NilParent(c *check.C) {
|
|
|
|
|
|
func (s *DockerSuite) TestDockerNetworkIpvlanL3InternalMode(c *check.C) {
|
|
|
// ipvlan l3 mode --internal containers can communicate inside the network but not externally
|
|
|
- testRequires(c, DaemonIsLinux, IpvlanKernelSupport, NotUserNamespace, NotArm, ExperimentalDaemon)
|
|
|
+ testRequires(c, DaemonIsLinux, ipvlanKernelSupport, NotUserNamespace, NotArm, ExperimentalDaemon)
|
|
|
dockerCmd(c, "network", "create", "--driver=ipvlan", "--subnet=172.28.230.0/24",
|
|
|
"--subnet=172.28.220.0/24", "-o", "ipvlan_mode=l3", "--internal", "di-internal-l3")
|
|
|
assertNwIsAvailable(c, "di-internal-l3")
|
|
@@ -493,7 +486,7 @@ func (s *DockerSuite) TestDockerNetworkIpvlanL3InternalMode(c *check.C) {
|
|
|
|
|
|
func (s *DockerSuite) TestDockerNetworkMacVlanExistingParent(c *check.C) {
|
|
|
// macvlan bridge mode - empty parent interface containers can reach each other internally but not externally
|
|
|
- testRequires(c, DaemonIsLinux, MacvlanKernelSupport, NotUserNamespace, NotArm, ExperimentalDaemon)
|
|
|
+ testRequires(c, DaemonIsLinux, macvlanKernelSupport, NotUserNamespace, NotArm, ExperimentalDaemon)
|
|
|
netName := "dm-parent-exists"
|
|
|
out, err := createMasterDummy(c, "dm-dummy0")
|
|
|
//out, err := createVlanInterface(c, "dm-parent", "dm-slave", "macvlan", "bridge")
|
|
@@ -513,7 +506,7 @@ func (s *DockerSuite) TestDockerNetworkMacVlanExistingParent(c *check.C) {
|
|
|
|
|
|
func (s *DockerSuite) TestDockerNetworkMacVlanSubinterface(c *check.C) {
|
|
|
// macvlan bridge mode - empty parent interface containers can reach each other internally but not externally
|
|
|
- testRequires(c, DaemonIsLinux, MacvlanKernelSupport, NotUserNamespace, NotArm, ExperimentalDaemon)
|
|
|
+ testRequires(c, DaemonIsLinux, macvlanKernelSupport, NotUserNamespace, NotArm, ExperimentalDaemon)
|
|
|
netName := "dm-subinterface"
|
|
|
out, err := createMasterDummy(c, "dm-dummy0")
|
|
|
c.Assert(err, check.IsNil, check.Commentf(out))
|