On 6/7/23 18:51, Guillaume Nault wrote:
On Wed, Jun 07, 2023 at 12:04:52AM +0200, Mirsad Goran Todorovac wrote:
I cannot tell if those are new for the architecture (Ubuntu 22.04 + AMD Ryzen)
However, Ubuntu's unsigned 6.3.1 generic mainline kernel is also affected.
So, it might seem like an old problem.
(If you could isolate the exact tests, I could try a bisect.)
[...]
TEST: ping local, VRF bind - ns-A IP [ OK ]
TEST: ping local, VRF bind - VRF IP [FAIL]
TEST: ping local, VRF bind - loopback [ OK ]
TEST: ping local, device bind - ns-A IP [FAIL]
TEST: ping local, device bind - VRF IP [ OK ]
[...]
SYSCTL: net.ipv4.raw_l3mdev_accept=1
[...]
TEST: ping local, VRF bind - ns-A IP [ OK ]
TEST: ping local, VRF bind - VRF IP [FAIL]
TEST: ping local, VRF bind - loopback [ OK ]
TEST: ping local, device bind - ns-A IP [FAIL]
TEST: ping local, device bind - VRF IP [ OK ]
[...]
Yes, just tested, w commit 42510dffd0e2 these are still present
in fcnal-test.sh output:
[...]
TEST: ping local, VRF bind - ns-A IP [ OK ]
TEST: ping local, VRF bind - VRF IP [FAIL]
TEST: ping local, VRF bind - loopback [ OK ]
TEST: ping local, device bind - ns-A IP [FAIL]
TEST: ping local, device bind - VRF IP [ OK ]
[...]
TEST: ping local, VRF bind - ns-A IP [ OK ]
TEST: ping local, VRF bind - VRF IP [FAIL]
TEST: ping local, VRF bind - loopback [ OK ]
TEST: ping local, device bind - ns-A IP [FAIL]
TEST: ping local, device bind - VRF IP [ OK ]
[...]
I have the same failures here. They don't seem to be recent.
I'll take a look.
Certainly. I thought it might be something architecture-specific?
I have reproduced it also on a Lenovo IdeaPad 3 with Ubuntu 22.10,
but on Lenovo desktop with AlmaLinux 8.8 (CentOS fork), the result
was "888/888 passed".
However, I have a question:
In the ping + "With VRF" section, the tests with net.ipv4.raw_l3mdev_accept=1
are repeated twice, while "No VRF" section has the versions:
SYSCTL: net.ipv4.raw_l3mdev_accept=0
and
SYSCTL: net.ipv4.raw_l3mdev_accept=1
The same happens with the IPv6 ping tests.
In that case, it could be that we have only 2 actual FAIL cases,
because the error is reported twice.
Is this intentional?
Thanks,
Mirsad
74 #################################################################
75 With VRF
76
77 SYSCTL: net.ipv4.raw_l3mdev_accept=1
78
79 TEST: ping out, VRF bind - ns-B IP [ OK ]
80 TEST: ping out, device bind - ns-B IP [ OK ]
81 TEST: ping out, vrf device + dev address bind - ns-B IP [ OK ]
82 TEST: ping out, vrf device + vrf address bind - ns-B IP [ OK ]
83 TEST: ping out, VRF bind - ns-B loopback IP [ OK ]
84 TEST: ping out, device bind - ns-B loopback IP [ OK ]
85 TEST: ping out, vrf device + dev address bind - ns-B loopback IP [ OK ]
86 TEST: ping out, vrf device + vrf address bind - ns-B loopback IP [ OK ]
87 TEST: ping in - ns-A IP [ OK ]
88 TEST: ping in - VRF IP [ OK ]
89 TEST: ping local, VRF bind - ns-A IP [ OK ]
90 TEST: ping local, VRF bind - VRF IP [FAIL]
91 TEST: ping local, VRF bind - loopback [ OK ]
92 TEST: ping local, device bind - ns-A IP [FAIL]
93 TEST: ping local, device bind - VRF IP [ OK ]
94 TEST: ping local, device bind - loopback [ OK ]
95 TEST: ping out, vrf bind, blocked by rule - ns-B loopback IP [ OK ]
96 TEST: ping out, device bind, blocked by rule - ns-B loopback IP [ OK ]
97 TEST: ping in, blocked by rule - ns-A loopback IP [ OK ]
98 TEST: ping out, vrf bind, unreachable route - ns-B loopback IP [ OK ]
99 TEST: ping out, device bind, unreachable route - ns-B loopback IP [ OK ]
100 TEST: ping in, unreachable route - ns-A loopback IP [ OK ]
101 SYSCTL: net.ipv4.ping_group_range=0 2147483647
102
103 SYSCTL: net.ipv4.raw_l3mdev_accept=1
104
105 TEST: ping out, VRF bind - ns-B IP [ OK ]
106 TEST: ping out, device bind - ns-B IP [ OK ]
107 TEST: ping out, vrf device + dev address bind - ns-B IP [ OK ]
108 TEST: ping out, vrf device + vrf address bind - ns-B IP [ OK ]
109 TEST: ping out, VRF bind - ns-B loopback IP [ OK ]
110 TEST: ping out, device bind - ns-B loopback IP [ OK ]
111 TEST: ping out, vrf device + dev address bind - ns-B loopback IP [ OK ]
112 TEST: ping out, vrf device + vrf address bind - ns-B loopback IP [ OK ]
113 TEST: ping in - ns-A IP [ OK ]
114 TEST: ping in - VRF IP [ OK ]
115 TEST: ping local, VRF bind - ns-A IP [ OK ]
116 TEST: ping local, VRF bind - VRF IP [FAIL]
117 TEST: ping local, VRF bind - loopback [ OK ]
118 TEST: ping local, device bind - ns-A IP [FAIL]
119 TEST: ping local, device bind - VRF IP [ OK ]
