From c3a90917b1412ebb838fe165565f064b9ed000c5 Mon Sep 17 00:00:00 2001 From: Martynas Pumputis Date: Wed, 20 Dec 2023 13:52:37 +0100 Subject: [PATCH] gh/workflows: Use the kprobe backend To fix the loading issue on the bpf-next kernel [1]. [1]: https://github.com/cilium/pwru/issues/284 Signed-off-by: Martynas Pumputis --- .github/workflows/test.yml | 10 ++++++++-- 1 file changed, 8 insertions(+), 2 deletions(-) diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index 41123f98..d3903d01 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -70,6 +70,7 @@ jobs: with: test-name: basic-ipv4 pwru-pcap-filter: 'dst host 1.0.0.1 and port 8080' + pwru-flags: --backend=kprobe traffic-setup: | iptables -I OUTPUT 1 -m tcp --proto tcp --dst 1.0.0.1/32 --dport 8080 -j DROP curl -vvv -sS --fail --connect-timeout "1" -o /dev/null http://1.0.0.1:8080 || true @@ -80,6 +81,7 @@ jobs: with: test-name: basic-ipv6 pwru-pcap-filter: 'dst host 2606:4700:4700::1001 and port 8080' + pwru-flags: --backend=kprobe traffic-setup: | ip6tables -I OUTPUT 1 -m tcp --proto tcp --dst 2606:4700:4700::1001 --dport 8080 -j DROP curl -vvv -sS --fail --connect-timeout "1" -o /dev/null http://[2606:4700:4700::1001]:8080 || true @@ -90,6 +92,7 @@ jobs: with: test-name: advanced-ipv4 pwru-pcap-filter: 'tcp[tcpflags] = tcp-syn' + pwru-flags: --backend=kprobe traffic-setup: | iptables -I OUTPUT 1 -m tcp --proto tcp --dst 1.0.0.2/32 --dport 8080 -j DROP curl -vvv -sS --fail --connect-timeout "1" -o /dev/null http://1.0.0.2:8080 || true @@ -100,6 +103,7 @@ jobs: with: test-name: advanced-ipv6 pwru-pcap-filter: 'ip6[53] & 0x3f = 0x2' + pwru-flags: --backend=kprobe traffic-setup: | ip6tables -I OUTPUT 1 -m tcp --proto tcp --dst 2606:4700:4700::1002 --dport 8080 -j DROP curl -vvv -sS --fail --connect-timeout "1" -o /dev/null http://[2606:4700:4700::1002]:8080 || true @@ -110,6 +114,7 @@ jobs: with: test-name: pcap-filter-stack pwru-pcap-filter: '(((ip[2:2] - ((ip[0]&0xf)<<2)) - ((tcp[12]&0xf0)>>2)) != 0)' + pwru-flags: --backend=kprobe traffic-setup: curl -vvv -sS --fail --connect-timeout "1" -o /dev/null http://1.1.1.1 || true expected-output-pattern: '1.1.1.1:80' @@ -117,7 +122,7 @@ jobs: uses: ./.github/actions/pwru-test with: test-name: filter-track-skb - pwru-flags: --filter-track-skb + pwru-flags: --filter-track-skb --backend=kprobe pwru-pcap-filter: dst host 10.10.20.99 traffic-setup: | iptables -t nat -I OUTPUT 1 -d 10.10.20.99/32 -j DNAT --to-destination 10.10.14.2 @@ -129,6 +134,7 @@ jobs: with: test-name: filter-arp pwru-pcap-filter: 'arp and arp[7] = 1 and arp[24]= 169 and arp[25] = 254 and arp[26] = 0 and arp[27] = 1' + pwru-flags: --backend=kprobe traffic-setup: | ip net a pwru ip l a pwru-veth type veth peer name pwru-veth-peer @@ -147,7 +153,7 @@ jobs: uses: ./.github/actions/pwru-test with: test-name: filter-ifname - pwru-flags: --filter-ifname lo + pwru-flags: --filter-ifname lo --backend=kprobe pwru-pcap-filter: icmp traffic-setup: | ping -W1 -c1 127.0.0.1 || true