All of lore.kernel.org
 help / color / mirror / Atom feed
From: Aaron Conole <aconole@redhat.com>
To: David Marchand <david.marchand@redhat.com>
Cc: Kamaraj P <pkamaraj@gmail.com>,
	 Thomas Monjalon <thomas@monjalon.net>, dev <dev@dpdk.org>,
	 Anatoly Burakov <anatoly.burakov@intel.com>,
	 Ferruh Yigit <ferruh.yigit@intel.com>,
	 ksimha@cisco.com,  kalas@cisco.com, seveluch@cisco.com,
	 "techboard@dpdk.org" <techboard@dpdk.org>,
	hpai@cisco.com,  ppitchai@cisco.com
Subject: Re: [dpdk-dev] Running DPDK application with non-previlege mode
Date: Tue, 31 Aug 2021 13:49:38 -0400	[thread overview]
Message-ID: <f7t5yvla4i5.fsf@redhat.com> (raw)
In-Reply-To: <CAJFAV8x2Jgp056xSkonmWfBu+-7to=MpN0XAUY7610k-bXERKg@mail.gmail.com> (David Marchand's message of "Tue, 31 Aug 2021 17:34:52 +0200")

David Marchand <david.marchand@redhat.com> writes:

> On Tue, Aug 31, 2021 at 5:27 PM Kamaraj P <pkamaraj@gmail.com> wrote:
>>
>> Hi Thomas,
>> We are trying with the IGB_UIO driver in our DPDK application.
>
> Running with igb-uio as a non priviledged user is not possible (or, at
> best, makes little sense).
>
>
>> Is there any documentation where we need to start to run a DPDK
>> application with minimal system capability?
>> Also please let us know if there is any known dependency with DPDK
>> versions (dpdk application with 18, 19.11 versions etc) when we run
>> with sys capabilit.
>>
>> Hi David,
>> Can you please share with us the pointer for OVS integration(DPDK running as non-privileged mode ?)
>
> I don't have a full list, here is what I have in mind.
>
> For non mellanox devices, you'll have to rely on vfio-pci bound
> devices and setup access to those fds.
> https://github.com/openvswitch/ovs/blob/master/rhel/usr_lib_udev_rules.d_91-vfio.rules
>
> For mellanox devices and some parts of dpdk, you need (quite) some capabilities:
> https://github.com/openvswitch/ovs/blob/master/lib/daemon-unix.c#L812
>
> There are also hugepages accesses to consider:
> https://github.com/openvswitch/ovs/blob/master/rhel/usr_lib_systemd_system_ovs-vswitchd.service.in#L20
>
> There are selinux considerations too.

See: https://github.com/openvswitch/ovs/tree/master/selinux

Additionally, you might need to do some additional work for whatever LSM
you use.  For example, AppArmor, etc.


      parent reply	other threads:[~2021-08-31 17:49 UTC|newest]

Thread overview: 17+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2021-08-30  7:37 [dpdk-dev] Running DPDK application without " Kamaraj P
2021-08-30  7:52 ` [dpdk-dev] Running DPDK application with " Kamaraj P
2021-08-30  8:37   ` Kamaraj P
2021-08-30 11:26   ` Ferruh Yigit
2021-08-30 11:45     ` Kamaraj P
2021-08-30 12:05       ` Thomas Monjalon
2021-08-30 11:59     ` Thomas Monjalon
2021-08-30 12:06       ` David Marchand
2021-08-31 15:27         ` Kamaraj P
2021-08-31 15:34           ` David Marchand
2021-08-31 16:20             ` Kamaraj P
2021-08-31 19:44               ` Bruce Richardson
2021-09-01 16:09                 ` Kamaraj P
2021-09-01 17:52                   ` Thomas Monjalon
2021-09-05 16:54                     ` Kamaraj P
2021-09-06 14:02                       ` Kamaraj P
2021-08-31 17:49             ` Aaron Conole [this message]

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=f7t5yvla4i5.fsf@redhat.com \
    --to=aconole@redhat.com \
    --cc=anatoly.burakov@intel.com \
    --cc=david.marchand@redhat.com \
    --cc=dev@dpdk.org \
    --cc=ferruh.yigit@intel.com \
    --cc=hpai@cisco.com \
    --cc=kalas@cisco.com \
    --cc=ksimha@cisco.com \
    --cc=pkamaraj@gmail.com \
    --cc=ppitchai@cisco.com \
    --cc=seveluch@cisco.com \
    --cc=techboard@dpdk.org \
    --cc=thomas@monjalon.net \
    --subject='Re: [dpdk-dev] Running DPDK application with non-previlege mode' \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link

This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.