From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from Chamillionaire.breakpoint.cc (Chamillionaire.breakpoint.cc [IPv6:2a0a:51c0:0:237:300::1]) by lindbergh.monkeyblade.net (Postfix) with ESMTPS id 3F2249A for ; Wed, 6 Dec 2023 04:18:30 -0800 (PST) Received: from fw by Chamillionaire.breakpoint.cc with local (Exim 4.92) (envelope-from ) id 1rAqrE-0007pZ-IA; Wed, 06 Dec 2023 13:18:28 +0100 Date: Wed, 6 Dec 2023 13:18:28 +0100 From: Florian Westphal To: Pablo Neira Ayuso Cc: Thomas Haller , Florian Westphal , netfilter-devel@vger.kernel.org Subject: Re: [PATCH nft] tests: shell: flush ruleset with -U after feature probing Message-ID: <20231206121828.GI8352@breakpoint.cc> References: <20231205154306.154220-1-pablo@netfilter.org> <20231205192929.GB8352@breakpoint.cc> <80b4cbbb54cf17a83ccbadaa3cd194790f87f67f.camel@redhat.com> Precedence: bulk X-Mailing-List: netfilter-devel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.10.1 (2018-07-13) Pablo Neira Ayuso wrote: > > The mode without unshare exists for historic reasons, as unshare was > > added initially. At this point, what is the use of supporting or using > > that? > > This provides an easy way for me to test 'nft monitor'. > > I can keep it out of tree if you prefer -U remains broken. No no no, I was just asking if '-U' should still run the feature probes without a netns, which is what its doing right now. Perhaps -U should just disable the unshare for the actual shell tests, not for the feature probe scripts.