firewall4/tests/mocks/fs, branch master

fw4: support automatic includes

2022-08-12T12:35:58Z

Introduce a new directory tree /usr/share/nftables.d/ which may contain partial nftables files being included into the rendered ruleset. The include position is derived from the file path; - Files in .../nftables.d/table-pre/ and .../nftables.d/table-post/ are included before and after the `table inet fw4 { ... }` declaration respectively - Files in .../nftables.d/ruleset-pre/ and .../nftables.d/ruleset-post/ are included before the first chain and after the last chain declaration within the fw4 table respectively - Files in .../nftables.d/chain-pre/${chain}/ and .../chain-post/${chain}/ are included before the first and after the last rule within the mentioned chain of the fw4 table respectively Automatic includes can be disabled by setting the `auto_includes` option to `0` in the global defaults section. Also adjust testcases accordingly. Signed-off-by: Jo-Philipp Wich

tests: add missing fs.stat) mock data for `nf_conntrack_dummy`

2022-08-08T19:09:12Z

Fixes: 111a7f7 ("fw4: don't inherit zone family from ct helpers") Signed-off-by: Jo-Philipp Wich

tests: change mocked wan interface type to PPPoE

2022-02-12T19:36:46Z

Change the WAN interface type in the mock data to PPPoE. PPPoE interfaces are special because their L3 device differs from the L2 one which becomes important later for resolving hw offloaded flowtable devices. Adjust the test cases accordingly. Signed-off-by: Jo-Philipp Wich

fw4: consolidate helper code

2022-02-05T23:33:04Z

- Move various local helper functions out of main.uc into the fw4 class - Rework settype reading to use nft JSON output as terse mode now works - Simplify testing flowtable enable conditions - Adjust testcases to changed flowtable logic Signed-off-by: Jo-Philipp Wich

Initial commit

2021-03-19T18:26:04Z

Signed-off-by: Jo-Philipp Wich