test: basic firewall container

[troglobit]

Basic Firewall Container

Verify masquerading and port forwarding using nftables container in network host mode. Proposed setup, which also verifies support for >1 container.

1. httpd container starts up on a generic port (use port 91, port 80 is used by nginx) with a single veth pair (copy an existing test that already does this)
2. allow forwarding between interfaces in Infix
3. nftables container which installs IP masquerading and port forward from ext1 port 8080 to int0 port 91 (.conf base64 encoded in configuration)

Resources

• Documentation: https://github.com/kernelkit/infix/blob/main/doc/container.md#host-networking
• Example: https://github.com/kernelkit/infix/blob/main/doc/container.md#examples

See also the blog post Firewall Container for more help and inspiration.

[troglobit]

Team reprio meeting: needs more focus until release, move assignment to @troglobit