#!/usr/bin/env bash
# shellcheck source=/dev/null

if [[ -d "/host/proc/1/" ]]; then source /apps/gitrce/hook/singleton.sh "$0"; fi

__main() {
	:

	_owner_id=50000
	_chain_name="output_netflow_owner_${_owner_id}"
	# 创建链（如果不存在）
	iptables -t mangle -N "${_chain_name}" 2>/dev/null

	# 检查主链 OUTPUT 是否已有跳转规则
	if ! iptables -t mangle -C OUTPUT -m owner --gid-owner "${_owner_id}" -j "${_chain_name}" 2>/dev/null; then
		iptables -t mangle -A OUTPUT -m owner --gid-owner "${_owner_id}" -j "${_chain_name}"
	fi

	# 检查子链是否已有 RETURN
	if ! iptables -t mangle -C "${_chain_name}" -j RETURN 2>/dev/null; then
		iptables -t mangle -A "${_chain_name}" -j RETURN
	fi
}

__main

__help() {
	cat >/dev/null <<-'EOF'

	EOF
}