Attention is currently required from: laforge, pespin. neels has posted comments on this change. ( https://gerrit.osmocom.org/c/osmo-upf/+/28309 )

Change subject: implement GTP tunnel mapping via netfilter ......................................................................

Patch Set 5:

(1 comment)

Patchset:

PS5:

Agreeing with pau

you misunderstand. Of course the VTY tests are not doing anything related to administrative parmissions.

It is osmo-upf preparing the nftables feature *upon startup*. Whenever osmo-upf starts, it opens the nftables socket and creates an empty table. So even before the VTY tests begin, the premission error happens.

I've tried to discuss this already in my previous comments, maybe it was not clear enough.

I wrote before already: we can skip opening the nftables socket until it is actually needed. But i would prefer osmo-upf to complain about permission problems directly upon startup.