Filter container interfaces from device discovery and policies

2026-08-07 17:16:36 +03:00
parent 53e6cf2146
commit 608f8cfcf2
8 changed files with 68 additions and 16 deletions
@@ -18,6 +18,8 @@ test('device policy rules match the full identity before the TPROXY fallback', (
  assert.deepEqual(normalizeDirectDevices([{ ...directDevice, mac: directDevice.mac.toUpperCase() }]), [directDevice]);
  assert.throws(() => normalizeDirectDevices([directDevice, directDevice]), /повторяющаяся/);
  assert.throws(() => normalizeDirectDevices([{ ...directDevice, interface: 'br-user' }]), /identity/);
+  assert.throws(() => normalizeDirectDevices([{ ...directDevice, interface: 'docker0' }]), /identity/);
+  assert.throws(() => normalizeDirectDevices([{ ...directDevice, interface: 'veth1234' }]), /identity/);

  const restore = buildDevicePolicyRestore({
    devices: [directDevice],