NetVM: harden up/down against zombie-netns interface strays

2026-10-03 00:37:43 -04:00
parent c3d85377ba
commit ecb9c50f86
2 changed files with 4 additions and 1 deletions
@@ -7,8 +7,10 @@ VETH="veth-${NODE}"
 IDX=$(( $(echo -n "$NODE" | cksum | cut -d' ' -f1) % 60 + 10 ))
 SUB="10.201.${IDX}.0/30"
 nsexec() { ip netns exec "$NETNS" "$@"; }
-nsexec ip link set "wg-${NODE}" down 2>/dev/null || true
+nsexec ip link del "wg-${NODE}" 2>/dev/null || true  # inside netns first
 ip link del "$VETH" 2>/dev/null || true   # also drops the netns-side peer
+ip link del "wg-${NODE}" 2>/dev/null || true  # stray host-side copy
 iptables -t nat -D POSTROUTING -s "$SUB" -j MASQUERADE 2>/dev/null || true
 ip netns del "$NETNS" 2>/dev/null || true
+ip link del "wg-${NODE}" 2>/dev/null || true  # final sweep post-reap
 echo "node=$NODE down"