On Tue, Aug 31, 2021 at 5:52 AM Dmitrii Banshchikov [off-list ref] wrote:

Is it ok to add an external dependency to tests? The unit test
will need to execute iptables binary.

Ideally not, but sometimes it's unavoidable.
iptables cmd is generally available.
selftests/bpf already have few tests that shell out to it.
They're not part of test_progs though.