All of lore.kernel.org
 help / color / mirror / Atom feed
From: Kamaraj P <pkamaraj@gmail.com>
To: Ferruh Yigit <ferruh.yigit@intel.com>
Cc: dev@dpdk.org, Anatoly Burakov <anatoly.burakov@intel.com>,
	 David Marchand <david.marchand@redhat.com>,
	Thomas Monjalon <thomas@monjalon.net>,
	ksimha@cisco.com,  kalas@cisco.com, seveluch@cisco.com,
	 "techboard@dpdk.org" <techboard@dpdk.org>,
	hpai@cisco.com
Subject: Re: [dpdk-dev] Running DPDK application with non-previlege mode
Date: Mon, 30 Aug 2021 17:15:21 +0530	[thread overview]
Message-ID: <CAG8PAaoD-z3BjbHfMyfnsRv9x6Rmeb0+kfV9sV-dDEMytu5qCg@mail.gmail.com> (raw)
In-Reply-To: <66ba0b52-83bf-f7a0-aa79-66a267af32c4@intel.com>

Thanks Ferruh.
One more option which we have figured out to resolve this error by adding
SYS_NICE capability ( --cap-add=NET_ADMIN --cap-add=SYS_RESOURCE
--cap-add=SYS_NICE).
Not sure whether it will work for all the scenarios. However the above
options will ensure DPDK application can run as non-previlage mode ?
Please suggest the right approach which should work for all the DPDK
versions.

Thanks,
Kamaraj

On Mon, Aug 30, 2021 at 4:57 PM Ferruh Yigit <ferruh.yigit@intel.com> wrote:

> On 8/30/2021 8:52 AM, Kamaraj P wrote:
> > Hello All,
> > Some more info.
> > We are using DPDK 19.11.
> >
> > When we bringup application with --security-opt seccomp=unconfined
> > option..
> > THe application bringup successfully and didnt observe any error when
> DPDK
> > init logs.
> > Will that --security-opt seccomp=unconfined option recommended for
> > non-previlege mode for DPDK application ?
> > Please suggest.
> >
>
> + Anatoly, he may have experience on running on non-privilege mode.
>
>
> Thomas, David,
>
> What do you think documenting how to run as non root, we had similar
> question
> before, if memory serves me right Red Hat was looking for same thing at
> some point.
>
> If we are agree, perhaps we can find a volunteer in the tech board for it.
>
>
> > Thanks,
> > Kamaraj
> >
> > On Mon, Aug 30, 2021 at 1:07 PM Kamaraj P <pkamaraj@gmail.com> wrote:
> >
> >> Hello All,
> >>
> >> We are not able to run the DPDK allocation without using privilege
> option.
> >>
> >> Able to see the below erors:
> >>
> >> set_mempolicy: Operation not permitted
> >> set_mempolicy: Operation not permitted
> >> set_mempolicy: Operation not permitted
> >> set_mempolicy: Operation not permitted
> >> set_mempolicy: Operation not permitted
> >> set_mempolicy: Operation not permitted
> >> set_mempolicy: Operation not permitted
> >> set_mempolicy: Operation not permitted
> >> EAL: FATAL: rte_service_init() failed
> >> Failed to init DPDK.set_mempolicy: Operation not permitted
> >> set_mempolicy: Operation not permitted
> >> set_mempolicy: Operation not permitted
> >> set_mempolicy: Operation not permitted
> >> set_mempolicy: Operation not permitted
> >> set_mempolicy: Operation not permitted
> >> set_mempolicy: Operation not permitted
> >> set_mempolicy: Operation not permitted
> >> Failed to create mbuf for pool DPDK_POOL_0 frame_len=2048
> num_mbufs=13824
> >> ret (Exec format error)
> >>
> >> BTW we are also enabling --iova-mode=va option as part DPDK init.
> >>
> >> Can anyone please throw some light on this ?
> >>
> >> Thanks,
> >> Kamaraj
> >>
>
>

  reply	other threads:[~2021-08-30 11:45 UTC|newest]

Thread overview: 17+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2021-08-30  7:37 [dpdk-dev] Running DPDK application without non-previlege mode Kamaraj P
2021-08-30  7:52 ` [dpdk-dev] Running DPDK application with " Kamaraj P
2021-08-30  8:37   ` Kamaraj P
2021-08-30 11:26   ` Ferruh Yigit
2021-08-30 11:45     ` Kamaraj P [this message]
2021-08-30 12:05       ` Thomas Monjalon
2021-08-30 11:59     ` Thomas Monjalon
2021-08-30 12:06       ` David Marchand
2021-08-31 15:27         ` Kamaraj P
2021-08-31 15:34           ` David Marchand
2021-08-31 16:20             ` Kamaraj P
2021-08-31 19:44               ` Bruce Richardson
2021-09-01 16:09                 ` Kamaraj P
2021-09-01 17:52                   ` Thomas Monjalon
2021-09-05 16:54                     ` Kamaraj P
2021-09-06 14:02                       ` Kamaraj P
2021-08-31 17:49             ` Aaron Conole

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=CAG8PAaoD-z3BjbHfMyfnsRv9x6Rmeb0+kfV9sV-dDEMytu5qCg@mail.gmail.com \
    --to=pkamaraj@gmail.com \
    --cc=anatoly.burakov@intel.com \
    --cc=david.marchand@redhat.com \
    --cc=dev@dpdk.org \
    --cc=ferruh.yigit@intel.com \
    --cc=hpai@cisco.com \
    --cc=kalas@cisco.com \
    --cc=ksimha@cisco.com \
    --cc=seveluch@cisco.com \
    --cc=techboard@dpdk.org \
    --cc=thomas@monjalon.net \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body. 
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.