mara/hyperhive
mara/hyperhive
Watch
0
0
Fork
You've already forked hyperhive
 0
Code Activity

egress anti-spoof: the vm test names drop as explicit, and the log default waits for the stale-delete lines

Browse source
This commit is contained in:
atlas 2026-11-15 01:21:31 +01:00 • committed by mara
commit a812e4dd21
1 changed files with 7 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

6
nix/vm-tests/hive-egress-antispoof.nix
View file

@ -221,9 +221,9 @@ pkgs.testers.runNixOSTest {
host.wait_for_unit("multi-user.target")
host.wait_for_unit("dnsmasq.service")
host.wait_for_unit("hive-egress.service")
# The default verdict, loaded before either container exists: the first
# lease of each container below is taken with the drop rule in place.
assert "counter drop" in host.succeed(f"nft list chain {TABLE} spoof"), "the default is drop"
# `drop` is set explicitly on the host above, loaded before either container
# exists: the first lease of each container below is taken with it in place.
assert "counter drop" in host.succeed(f"nft list chain {TABLE} spoof"), "antiSpoof = drop is loaded"
for name in ("a", "b"):
host.wait_for_unit(f"container@{name}.service")
host.wait_until_succeeds(