nlink 0.15.0

Async netlink library for Linux network configuration
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90

//! Sysctl integration tests.
//!
//! Tests for sysctl read/write operations inside network namespaces.

use nlink::{
    Result,
    netlink::{namespace, sysctl},
};

use crate::common::TestNamespace;

#[tokio::test]
async fn test_sysctl_get_in_namespace() -> Result<()> {
    require_root!();

    let ns = TestNamespace::new("sysctl-get")?;

    // ip_forward defaults to "0" in a new namespace
    let val = namespace::get_sysctl(ns.name(), "net.ipv4.ip_forward")?;
    assert_eq!(val, "0");

    Ok(())
}

#[tokio::test]
async fn test_sysctl_set_roundtrip() -> Result<()> {
    require_root!();

    let ns = TestNamespace::new("sysctl-set")?;

    // Set ip_forward to 1
    namespace::set_sysctl(ns.name(), "net.ipv4.ip_forward", "1")?;

    // Read it back
    let val = namespace::get_sysctl(ns.name(), "net.ipv4.ip_forward")?;
    assert_eq!(val, "1");

    // Set it back to 0
    namespace::set_sysctl(ns.name(), "net.ipv4.ip_forward", "0")?;
    let val = namespace::get_sysctl(ns.name(), "net.ipv4.ip_forward")?;
    assert_eq!(val, "0");

    Ok(())
}

#[tokio::test]
async fn test_sysctl_set_many() -> Result<()> {
    require_root!();

    let ns = TestNamespace::new("sysctl-many")?;

    namespace::set_sysctls(
        ns.name(),
        &[
            ("net.ipv4.ip_forward", "1"),
            ("net.ipv6.conf.all.forwarding", "1"),
        ],
    )?;

    assert_eq!(
        namespace::get_sysctl(ns.name(), "net.ipv4.ip_forward")?,
        "1"
    );
    assert_eq!(
        namespace::get_sysctl(ns.name(), "net.ipv6.conf.all.forwarding")?,
        "1"
    );

    Ok(())
}

#[tokio::test]
async fn test_sysctl_invalid_key() -> Result<()> {
    require_root!();

    let ns = TestNamespace::new("sysctl-inv")?;

    // Non-existent key should error
    let result = namespace::get_sysctl(ns.name(), "net.ipv4.nonexistent_key_12345");
    assert!(result.is_err());

    Ok(())
}

#[test]
fn test_sysctl_validate_key_rejects_traversal() {
    assert!(sysctl::get("net..ipv4").is_err());
    assert!(sysctl::get("/etc/passwd").is_err());
    assert!(sysctl::get("").is_err());
}