Johnathan Corgan c8a0ac5fca Stop a node whose logs cannot be read from counting as a clean node ...

count_log_pattern summed a per-node `docker logs | grep -c ... || true`, so a
node the harness could not read contributed zero. The six assert_zero_count
callers are negative health assertions -- no panics, no ERROR lines, no AEAD
decrypt failures, no rekey msg2 failures -- and a contributed zero reads as
clean, so one unreadable node silently weakened the assertion and all of them
voided it. This is the family the harness-fallback issue was raised to high
priority for, and it is the one remaining audit residual that can make a green
rekey run lie about protocol code.

The read now fails the count rather than degrading it, printing a sentinel that
names the container. Both callers split the declaration from the assignment,
because `local c=$(fn)` takes local's exit status and discards the function's --
which is how the original defect stayed invisible.

Validated by breaking what it guards rather than by observing green: against
absent containers the old reader returns 0 and assert_zero_count passes
vacuously, while the new one returns rc=1 and reports a failure. Checked the
other direction too, since a fix that reds a legitimately clean run is no use: a
genuine zero across readable nodes still returns 0, and the sum is unchanged at
2+1+0 for a shimmed three-node read.

2026-07-23 15:30:01 +00:00

..

admission-cap-test.sh

Let the static test network float so concurrent CI runs cannot collide

2026-07-23 02:05:56 +00:00

bench-multirun.sh

Let the static test network float so concurrent CI runs cannot collide

2026-07-23 02:05:56 +00:00

gateway-test.sh

Reject an unanswered show_mappings instead of reading it as zero

2026-07-23 04:16:42 +00:00

generate-configs.sh

Let the static test network float so concurrent CI runs cannot collide

2026-07-23 02:05:56 +00:00

iperf-compare-refs.sh

testing: add boringtun throughput benchmark and iperf ref-compare harness

2026-05-15 18:03:42 +00:00

iperf-test.sh

Let the static test network float so concurrent CI runs cannot collide

2026-07-23 02:05:56 +00:00

netem.sh

Stop concurrent local CI runs from clobbering each other's containers

2026-07-19 06:41:25 +00:00

ping-test.sh

Fail the ping test on an unknown topology profile

2026-07-23 07:13:32 +00:00

rekey-test.sh

Stop a node whose logs cannot be read from counting as a clean node

2026-07-23 15:30:01 +00:00