88 lines
2.7 KiB
Bash
88 lines
2.7 KiB
Bash
#!/usr/bin/env bash
|
|
set -eo pipefail
|
|
|
|
ROOT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
|
|
FORKOP_LIB="$ROOT_DIR/forkop/files/usr/lib"
|
|
VALIDATOR="$FORKOP_LIB/config/validator.uc"
|
|
WORK_DIR="$(mktemp -d)"
|
|
|
|
cleanup() {
|
|
rm -rf "$WORK_DIR"
|
|
}
|
|
trap cleanup EXIT
|
|
|
|
fail() {
|
|
printf 'FAIL: %s\n' "$1" >&2
|
|
exit 1
|
|
}
|
|
|
|
assert_no_overlap() {
|
|
local label="$1"
|
|
local mark="$2"
|
|
local mask="$3"
|
|
local mask_label="$4"
|
|
|
|
if (( (mark & mask) != 0 )); then
|
|
printf 'FAIL: %s mark 0x%08x overlaps %s 0x%08x\n' "$label" "$mark" "$mask_label" "$mask" >&2
|
|
exit 1
|
|
fi
|
|
}
|
|
|
|
assert_mark_range_no_overlap() {
|
|
local label="$1"
|
|
local base="$2"
|
|
local range_size="$3"
|
|
local mask="$4"
|
|
local mask_label="$5"
|
|
local index mark
|
|
|
|
for ((index = 1; index <= range_size; index++)); do
|
|
mark=$((base + index))
|
|
assert_no_overlap "${label}[$index]" "$mark" "$mask" "$mask_label"
|
|
done
|
|
}
|
|
|
|
eval "$(ucode -L "$FORKOP_LIB" "$FORKOP_LIB/core/constants.uc" shell-env)"
|
|
|
|
assert_mark_range_no_overlap "Zapret" "$((ZAPRET_ROUTE_MARK_BASE))" "$ZAPRET_QUEUE_RANGE_SIZE" "$((NFT_FAKEIP_MARK))" "FakeIP"
|
|
assert_mark_range_no_overlap "Zapret" "$((ZAPRET_ROUTE_MARK_BASE))" "$ZAPRET_QUEUE_RANGE_SIZE" "$((NFT_OUTBOUND_MARK))" "outbound"
|
|
assert_mark_range_no_overlap "Zapret2" "$((ZAPRET2_ROUTE_MARK_BASE))" "$ZAPRET2_QUEUE_RANGE_SIZE" "$((NFT_FAKEIP_MARK))" "FakeIP"
|
|
assert_mark_range_no_overlap "Zapret2" "$((ZAPRET2_ROUTE_MARK_BASE))" "$ZAPRET2_QUEUE_RANGE_SIZE" "$((NFT_OUTBOUND_MARK))" "outbound"
|
|
|
|
cat >"$WORK_DIR/fixture.json" <<'JSON'
|
|
{
|
|
"settings": { ".name": "settings", ".type": "settings", "dns_server": [ "77.88.8.8" ], "bootstrap_dns_server": [ "77.88.8.8" ] }
|
|
}
|
|
JSON
|
|
|
|
context_json() {
|
|
local zapret2_base="${1:-$ZAPRET2_ROUTE_MARK_BASE}"
|
|
|
|
cat <<JSON
|
|
{
|
|
"community_services": "$COMMUNITY_SERVICES",
|
|
"byedpi_default_cmd_opts": "",
|
|
"zapret_default_nfqws_opt": "",
|
|
"zapret_legacy_default_nfqws_opt": "",
|
|
"zapret2_default_nfqws2_opt": "",
|
|
"byedpi_installed": false,
|
|
"zapret_installed": false,
|
|
"zapret2_installed": false,
|
|
"zapret_route_mark_base": "$ZAPRET_ROUTE_MARK_BASE",
|
|
"zapret_queue_range_size": "$ZAPRET_QUEUE_RANGE_SIZE",
|
|
"zapret2_route_mark_base": "$zapret2_base",
|
|
"zapret2_queue_range_size": "$ZAPRET2_QUEUE_RANGE_SIZE",
|
|
"nft_fakeip_mark": "$NFT_FAKEIP_MARK",
|
|
"nft_outbound_mark": "$NFT_OUTBOUND_MARK"
|
|
}
|
|
JSON
|
|
}
|
|
|
|
FORKOP_LIB="$FORKOP_LIB" ucode -L "$FORKOP_LIB" "$VALIDATOR" validate-runtime-fixture "$WORK_DIR/fixture.json" "$(context_json)"
|
|
|
|
if FORKOP_LIB="$FORKOP_LIB" ucode -L "$FORKOP_LIB" "$VALIDATOR" validate-runtime-fixture "$WORK_DIR/fixture.json" "$(context_json "0x01100000")" >/dev/null 2>&1; then
|
|
fail "legacy Zapret2 route mark base should overlap FakeIP mark"
|
|
fi
|
|
|
|
printf 'mark range checks passed\n'
|