package networking

import (
	"os"
	"testing"

	"github.com/moby/moby/client"
	"github.com/moby/moby/v2/integration/internal/testutils/networking"
	"github.com/moby/moby/v2/internal/testutil/daemon"
	"github.com/moby/moby/v2/internal/testutil/request"
	"gotest.tools/v3/assert"
	is "gotest.tools/v3/assert/cmp"
)

const defaultFirewallBackend = "iptables"

func TestInfoFirewallBackend(t *testing.T) {
	ctx := setupTest(t)

	d := daemon.New(t)
	d.StartWithBusybox(ctx, t)
	t.Cleanup(func() { d.Stop(t) })

	c := d.NewClientT(t)
	t.Cleanup(func() { c.Close() })

	expDriver := defaultFirewallBackend
	if val := os.Getenv("DOCKER_FIREWALL_BACKEND"); val != "" {
		expDriver = val
	}
	if !testEnv.IsRootless() && networking.FirewalldRunning() {
		expDriver += "+firewalld"
	}
	result, err := c.Info(ctx, client.InfoOptions{})
	assert.NilError(t, err)
	info := result.Info
	assert.Assert(t, info.FirewallBackend != nil, "expected firewall backend in info response")
	t.Log("FirewallBackend: Driver:", info.FirewallBackend.Driver)
	for _, kv := range info.FirewallBackend.Info {
		t.Logf("FirewallBackend: %s: %s", kv[0], kv[1])
	}
	assert.Check(t, is.Equal(info.FirewallBackend.Driver, expDriver))

	// Check FirewallBackend is omitted for API <= 1.48.
	t.Run("api 1.48", func(t *testing.T) {
		c148 := request.NewAPIClient(t, client.WithAPIVersion("1.48"))
		result, err := c148.Info(ctx, client.InfoOptions{})
		assert.NilError(t, err)
		info148 := result.Info
		assert.Check(t, is.Nil(info148.FirewallBackend))
	})
}