super/box
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

NetVM: harden up/down against zombie-netns interface strays

Browse Source
This commit is contained in:
Antigravity Agent
2026-10-03 00:37:43 -04:00
parent c3d85377ba
commit ecb9c50f86
2 changed files with 4 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
bin/netvm-node-down.sh
+3 -1
View File
@@ -7,8 +7,10 @@ VETH="veth-${NODE}"
IDX=$(( $(echo -n "$NODE" | cksum | cut -d' ' -f1) % 60 + 10 )) IDX=$(( $(echo -n "$NODE" | cksum | cut -d' ' -f1) % 60 + 10 ))
SUB="10.201.${IDX}.0/30" SUB="10.201.${IDX}.0/30"
nsexec() { ip netns exec "$NETNS" "$@"; } nsexec() { ip netns exec "$NETNS" "$@"; }
nsexec ip link set "wg-${NODE}" down 2>/dev/null || true nsexec ip link del "wg-${NODE}" 2>/dev/null || true # inside netns first
ip link del "$VETH" 2>/dev/null || true # also drops the netns-side peer ip link del "$VETH" 2>/dev/null || true # also drops the netns-side peer
ip link del "wg-${NODE}" 2>/dev/null || true # stray host-side copy
iptables -t nat -D POSTROUTING -s "$SUB" -j MASQUERADE 2>/dev/null || true iptables -t nat -D POSTROUTING -s "$SUB" -j MASQUERADE 2>/dev/null || true
ip netns del "$NETNS" 2>/dev/null || true ip netns del "$NETNS" 2>/dev/null || true
ip link del "wg-${NODE}" 2>/dev/null || true # final sweep post-reap
echo "node=$NODE down" echo "node=$NODE down"
bin/netvm-node-up.sh
+1
View File
@@ -50,6 +50,7 @@ done
# wireguard interface (wg setconf rejects wg-quick extensions: strip them) # wireguard interface (wg setconf rejects wg-quick extensions: strip them)
if ! nsexec ip link show "$WG" >/dev/null 2>&1; then if ! nsexec ip link show "$WG" >/dev/null 2>&1; then
ip link del "$WG" 2>/dev/null || true # stale host-side (reaped zombie netns)
ip link add "$WG" type wireguard ip link add "$WG" type wireguard
ip link set "$WG" netns "$NETNS" ip link set "$WG" netns "$NETNS"
fi fi