fix: 清理 Linux-only 防火墙测试中残留的 allowedPorts 测试、修正前端文案和 uat 脚本

Author: ZaneL1u

internal/network/worker_firewall_linux_test.go

@@ -188,46 +188,6 @@ func TestApplyWorkerFirewallRules_Basic(t *testing.T) {
 	}
 }
 
-// TestApplyWorkerFirewallRules_WithAllowedPorts 验证额外端口映射规则。
-func TestApplyWorkerFirewallRules_WithAllowedPorts(t *testing.T) {
-	ns, origNS := newTestNetNS(t)
-	defer cleanupTestNetNS(t, ns, origNS)
-
-	gwIP := net.ParseIP("10.0.0.1")
-	bridgeGW := net.ParseIP("172.18.0.1")
-	allowedPorts := []uint16{8080, 8443}
-
-	err := ApplyWorkerFirewallRules(ns, gwIP, bridgeGW, 22, allowedPorts)
-	if err != nil {
-		t.Fatalf("ApplyWorkerFirewallRules failed: %v", err)
-	}
-
-	conn, err := nftables.New(nftables.WithNetNSFd(int(ns)))
-	if err != nil {
-		t.Fatalf("open nftables conn: %v", err)
-	}
-
-	tbl := getTableByName(t, conn, "cloudproxy")
-	if tbl == nil {
-		t.Fatal("cloudproxy table not found")
-	}
-
-	inputChain := getChainByName(t, conn, tbl, "input")
-	if inputChain == nil {
-		t.Fatal("input chain not found")
-	}
-
-	inputRules, err := conn.GetRules(tbl, inputChain)
-	if err != nil {
-		t.Fatalf("get input rules: %v", err)
-	}
-
-	// 基础规则 5 条 + 2 个额外端口 = 7 条
-	expectedMin := 5 + len(allowedPorts)
-	if len(inputRules) < expectedMin {
-		t.Fatalf("input rules = %d, want >= %d", len(inputRules), expectedMin)
-	}
-}
 
 // TestApplyWorkerFirewallRules_InvalidNetNS 验证无效 netns handle 返回错误。
 func TestApplyWorkerFirewallRules_InvalidNetNS(t *testing.T) {
@@ -439,60 +399,7 @@ func TestApplyWorkerFirewallRules_CustomSSHPort(t *testing.T) {
 	}
 }
 
-// TestApplyWorkerFirewallRules_NilAllowedPorts 验证 nil allowedPorts 不 panic。
-func TestApplyWorkerFirewallRules_NilAllowedPorts(t *testing.T) {
-	ns, origNS := newTestNetNS(t)
-	defer cleanupTestNetNS(t, ns, origNS)
 
-	gwIP := net.ParseIP("10.0.0.1")
-	bridgeGW := net.ParseIP("172.18.0.1")
-
-	// nil allowedPorts
-	err := ApplyWorkerFirewallRules(ns, gwIP, bridgeGW, 22, nil)
-	if err != nil {
-		t.Fatalf("ApplyWorkerFirewallRules with nil allowedPorts failed: %v", err)
-	}
-}
-
-// TestApplyWorkerFirewallRules_EmptyAllowedPorts 验证空 allowedPorts 切片。
-func TestApplyWorkerFirewallRules_EmptyAllowedPorts(t *testing.T) {
-	ns, origNS := newTestNetNS(t)
-	defer cleanupTestNetNS(t, ns, origNS)
-
-	gwIP := net.ParseIP("10.0.0.1")
-	bridgeGW := net.ParseIP("172.18.0.1")
-
-	// 空切片
-	err := ApplyWorkerFirewallRules(ns, gwIP, bridgeGW, 22, []uint16{})
-	if err != nil {
-		t.Fatalf("ApplyWorkerFirewallRules with empty allowedPorts failed: %v", err)
-	}
-
-	conn, err := nftables.New(nftables.WithNetNSFd(int(ns)))
-	if err != nil {
-		t.Fatalf("open nftables conn: %v", err)
-	}
-
-	tbl := getTableByName(t, conn, "cloudproxy")
-	if tbl == nil {
-		t.Fatal("cloudproxy table not found")
-	}
-
-	inputChain := getChainByName(t, conn, tbl, "input")
-	if inputChain == nil {
-		t.Fatal("input chain not found")
-	}
-
-	inputRules, err := conn.GetRules(tbl, inputChain)
-	if err != nil {
-		t.Fatalf("get input rules: %v", err)
-	}
-
-	// lo + ct_established + gwIP + bridgeGW + SSH = 5 条（无额外端口）
-	if len(inputRules) != 5 {
-		t.Fatalf("input rules = %d, want 5", len(inputRules))
-	}
-}
 
 // TestApplyThenCleanupThenApply 验证清理后可以重新应用规则。
 func TestApplyThenCleanupThenApply(t *testing.T) {

tests/scripts/uat-vscode-remote-ssh.sh

@@ -590,7 +590,7 @@ scenario_direct_tcpip_forward() {
   local ssh_port
   ssh_port="$(detect_ssh_port "$container")"
   if [ -z "$ssh_port" ]; then
-    skip "direct_tcpip_forward" "无法确定 SSH 端口（设置 --ssh-port 或确保容器有端口映射）"
+    skip "direct_tcpip_forward" "无法确定 SSH 端口（设置 --ssh-port 或确保容器已启动）"
     write_json_report "direct_tcpip_forward" "skip"
     return 0
   fi

web/admin/src/routes/_dashboard/hosts/$hostId.tsx

@@ -390,7 +390,7 @@ function HostDetailPage() {
             </div>
             <div>
               <span className="block text-sm font-semibold">配置详情</span>
-              <span className="text-xs text-muted-foreground">出口 IP 绑定、挂载路径、端口映射</span>
+              <span className="text-xs text-muted-foreground">出口 IP 绑定、挂载路径</span>
             </div>
           </div>
           <ChevronDown className={`h-4 w-4 text-muted-foreground transition-transform ${configOpen ? "" : "-rotate-90"}`} />
@@ -403,15 +403,11 @@ function HostDetailPage() {
                 <p className="mb-4 text-xs text-muted-foreground">每台主机必须绑定一个出口 IP</p>
                 <BindingManager hostId={hostId} hostStatus={host.status} bindings={bindings} />
               </div>
-              <div className="px-2 py-2 lg:border-r lg:border-border/40 lg:px-4">
+              <div className="px-2 py-2 lg:px-4">
                 <h3 className="mb-1 text-sm font-semibold">挂载路径</h3>
                 <p className="mb-4 text-xs text-muted-foreground">{isRunning ? "运行中不可编辑" : "停止中，可以编辑"}</p>
                 <MountManager hostId={hostId} hostStatus={host.status} mounts={host.host_mounts ?? []} />
               </div>
-              <div className="px-2 py-2 lg:px-4">
-                <h3 className="mb-1 text-sm font-semibold">端口映射</h3>
-                <p className="mb-4 text-xs text-muted-foreground">{isRunning ? "运行中不可编辑" : "停止中，可以编辑"}</p>
-              </div>
             </div>
           </div>
         )}