samples/bpf: Update cgrp2 socket tests

Update cgrp2 bpf sock tests to check that device, mark and priority
can all be set on a socket via bpf programs attached to a cgroup.

Signed-off-by: David Ahern <dsahern@gmail.com>
Acked-by: Alexei Starovoitov <ast@kernel.org>
Signed-off-by: David S. Miller <davem@davemloft.net>

diff --git a/samples/bpf/test_cgrp2_sock.sh b/samples/bpf/test_cgrp2_sock.sh
index 1153c33e8964db7ab5c13d3d2f21fd5ff8ae3803..a81f38eef417443858ddcaea3bb63711589e9fd4 100755 (executable)
--- a/samples/bpf/test_cgrp2_sock.sh
+++ b/samples/bpf/test_cgrp2_sock.sh
@@ -1,47 +1,133 @@
-#!/bin/bash
-
-function config_device {
-       ip netns add at_ns0
-       ip link add veth0 type veth peer name veth0b
-       ip link set veth0b up
-       ip link set veth0 netns at_ns0
-       ip netns exec at_ns0 ip addr add 172.16.1.100/24 dev veth0
-       ip netns exec at_ns0 ip addr add 2401:db00::1/64 dev veth0 nodad
-       ip netns exec at_ns0 ip link set dev veth0 up
-       ip link add foo type vrf table 1234
-       ip link set foo up
-       ip addr add 172.16.1.101/24 dev veth0b
-       ip addr add 2401:db00::2/64 dev veth0b nodad
-       ip link set veth0b master foo
+#!/bin/sh
+
+# Test various socket options that can be set by attaching programs to cgroups.
+
+CGRP_MNT="/tmp/cgroupv2-test_cgrp2_sock"
+
+################################################################################
+#
+print_result()
+{
+       local rc=$1
+       local status=" OK "
+
+       [ $rc -ne 0 ] && status="FAIL"
+
+       printf "%-50s    [%4s]\n" "$2" "$status"
 }
 
-function attach_bpf {
-       rm -rf /tmp/cgroupv2
-       mkdir -p /tmp/cgroupv2
-       mount -t cgroup2 none /tmp/cgroupv2
-       mkdir -p /tmp/cgroupv2/foo
-       test_cgrp2_sock -b foo /tmp/cgroupv2/foo
-       echo $$ >> /tmp/cgroupv2/foo/cgroup.procs
+check_sock()
+{
+       out=$(test_cgrp2_sock)
+       echo $out | grep -q "$1"
+       if [ $? -ne 0 ]; then
+               print_result 1 "IPv4: $2"
+               echo "    expected: $1"
+               echo "        have: $out"
+               rc=1
+       else
+               print_result 0 "IPv4: $2"
+       fi
 }
 
-function cleanup {
-       set +ex
-       ip netns delete at_ns0
-       ip link del veth0
-       ip link del foo
-       umount /tmp/cgroupv2
-       rm -rf /tmp/cgroupv2
-       set -ex
+check_sock6()
+{
+       out=$(test_cgrp2_sock -6)
+       echo $out | grep -q "$1"
+       if [ $? -ne 0 ]; then
+               print_result 1 "IPv6: $2"
+               echo "    expected: $1"
+               echo "        have: $out"
+               rc=1
+       else
+               print_result 0 "IPv6: $2"
+       fi
 }
 
-function do_test {
-       ping -c1 -w1 172.16.1.100
-       ping6 -c1 -w1 2401:db00::1
+################################################################################
+#
+
+cleanup()
+{
+       echo $$ >> ${CGRP_MNT}/cgroup.procs
+       rmdir ${CGRP_MNT}/sockopts
 }
 
+cleanup_and_exit()
+{
+       local rc=$1
+       local msg="$2"
+
+       [ -n "$msg" ] && echo "ERROR: $msg"
+
+       ip li del cgrp2_sock
+       umount ${CGRP_MNT}
+
+       exit $rc
+}
+
+
+################################################################################
+# main
+
+rc=0
+
+ip li add cgrp2_sock type dummy 2>/dev/null
+
+set -e
+mkdir -p ${CGRP_MNT}
+mount -t cgroup2 none ${CGRP_MNT}
+set +e
+
+
+# make sure we have a known start point
 cleanup 2>/dev/null
-config_device
-attach_bpf
-do_test
-cleanup
-echo "*** PASS ***"
+
+mkdir -p ${CGRP_MNT}/sockopts
+[ $? -ne 0 ] && cleanup_and_exit 1 "Failed to create cgroup hierarchy"
+
+
+# set pid into cgroup
+echo $$ > ${CGRP_MNT}/sockopts/cgroup.procs
+
+# no bpf program attached, so socket should show no settings
+check_sock "dev , mark 0, priority 0" "No programs attached"
+check_sock6 "dev , mark 0, priority 0" "No programs attached"
+
+# verify device is set
+#
+test_cgrp2_sock -b cgrp2_sock ${CGRP_MNT}/sockopts
+if [ $? -ne 0 ]; then
+       cleanup_and_exit 1 "Failed to install program to set device"
+fi
+check_sock "dev cgrp2_sock, mark 0, priority 0" "Device set"
+check_sock6 "dev cgrp2_sock, mark 0, priority 0" "Device set"
+
+# verify mark is set
+#
+test_cgrp2_sock -m 666 ${CGRP_MNT}/sockopts
+if [ $? -ne 0 ]; then
+       cleanup_and_exit 1 "Failed to install program to set mark"
+fi
+check_sock "dev , mark 666, priority 0" "Mark set"
+check_sock6 "dev , mark 666, priority 0" "Mark set"
+
+# verify priority is set
+#
+test_cgrp2_sock -p 123 ${CGRP_MNT}/sockopts
+if [ $? -ne 0 ]; then
+       cleanup_and_exit 1 "Failed to install program to set priority"
+fi
+check_sock "dev , mark 0, priority 123" "Priority set"
+check_sock6 "dev , mark 0, priority 123" "Priority set"
+
+# all 3 at once
+#
+test_cgrp2_sock -b cgrp2_sock -m 666 -p 123 ${CGRP_MNT}/sockopts
+if [ $? -ne 0 ]; then
+       cleanup_and_exit 1 "Failed to install program to set device, mark and priority"
+fi
+check_sock "dev cgrp2_sock, mark 666, priority 123" "Priority set"
+check_sock6 "dev cgrp2_sock, mark 666, priority 123" "Priority set"
+
+cleanup_and_exit $rc