From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mails.dpdk.org (mails.dpdk.org [217.70.189.124]) by inbox.dpdk.org (Postfix) with ESMTP id 400DDA034F; Mon, 30 Aug 2021 14:06:00 +0200 (CEST) Received: from [217.70.189.124] (localhost [127.0.0.1]) by mails.dpdk.org (Postfix) with ESMTP id AEA86410F6; Mon, 30 Aug 2021 14:05:59 +0200 (CEST) Received: from wout1-smtp.messagingengine.com (wout1-smtp.messagingengine.com [64.147.123.24]) by mails.dpdk.org (Postfix) with ESMTP id 51CC2406A3; Mon, 30 Aug 2021 14:05:58 +0200 (CEST) Received: from compute4.internal (compute4.nyi.internal [10.202.2.44]) by mailout.west.internal (Postfix) with ESMTP id 8BCE53200583; Mon, 30 Aug 2021 08:05:56 -0400 (EDT) Received: from mailfrontend2 ([10.202.2.163]) by compute4.internal (MEProxy); Mon, 30 Aug 2021 08:05:57 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=monjalon.net; h= from:to:cc:subject:date:message-id:in-reply-to:references :mime-version:content-transfer-encoding:content-type; s=fm2; bh= jFeGowAguDiNm2JB6d0wyasb1CgvbIklvJsvCI/GOIQ=; b=kG//Got0F7zlMfQ5 QCsMsrWAgprY9Mu5vgBvxETaMs0HKZ0iXsvfQKyo6RHo6uOcjxYFNv/KomN+tZVx RX2rubaYSAmQsfp4sXkNr7339bFP2rby0l2FzyOXpvauK9JDhRqZtJy1Dru0OJKs iQBIYZR1+aC+phcfAIUE5Sh921zWbfv3Z2Y4SsEyeOzorZl89UpNXm9AmoX5pLnN nimbZsgaKUJnhTeB+4IylX3qSnUW+dGR67AiJhwS3mef8vq1RR9nVaQkCrb5D+CE Z4D9kCmnt54Sj1ifvgTR8eRaQw3jcErENd38/qgN5pj5iFONqI9neLeYTBU999dn +a65Sg== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-transfer-encoding:content-type :date:from:in-reply-to:message-id:mime-version:references :subject:to:x-me-proxy:x-me-proxy:x-me-sender:x-me-sender :x-sasl-enc; s=fm3; bh=jFeGowAguDiNm2JB6d0wyasb1CgvbIklvJsvCI/GO IQ=; b=vqfPJ4xW+trxlwHFYuK3RRN9tSehSdwAF2/W/f43/HRCE96cKDAwaL9yg 1QA0EdKfReyqllM6/4qPdTmr3cxQ7YRlFhiXPt1mEMMaICf7xYrRzHIh2QyHRWIm G2hrR38KnfE1taVs5rmCKYmJc5BcyZUn+MTncjeCBsfEjc8JOSrjHNNWmq5qkm3B bpIeBdJpOHOwLOUOeYD7/fh0r7eeHv3EYW7per1CcFGoDime//K0yom0JxrMrNxv d2yolYggTnjamQm9gPyalpRQihcrUgoRVKXkUozKDmdjxLLscYRHBs/3XxWeej3G HnU6iLexapszIXrUU5yL+iGQCuveg== X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgedvtddrudduledggeelucetufdoteggodetrfdotf fvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdfqfgfvpdfurfetoffkrfgpnffqhgen uceurghilhhouhhtmecufedttdenucesvcftvggtihhpihgvnhhtshculddquddttddmne cujfgurhephffvufffkfgjfhgggfgtsehtufertddttddvnecuhfhrohhmpefvhhhomhgr shcuofhonhhjrghlohhnuceothhhohhmrghssehmohhnjhgrlhhonhdrnhgvtheqnecugg ftrfgrthhtvghrnhepudfgudetieduffduvdejgffgffdugfegkeeghffhkeeljeelfefg ieeiteejtddunecuffhomhgrihhnpehmohguvgdrnhgvthdptghonhhfihhguhhrrghtih honhdrnhgvthenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepmhgrihhlfhhr ohhmpehthhhomhgrshesmhhonhhjrghlohhnrdhnvght X-ME-Proxy: Received: by mail.messagingengine.com (Postfix) with ESMTPA; Mon, 30 Aug 2021 08:05:54 -0400 (EDT) From: Thomas Monjalon To: Ferruh Yigit , Kamaraj P Cc: dev@dpdk.org, Anatoly Burakov , David Marchand , ksimha@cisco.com, kalas@cisco.com, seveluch@cisco.com, "techboard@dpdk.org" , hpai@cisco.com Date: Mon, 30 Aug 2021 14:05:52 +0200 Message-ID: <1827863.rKngybTHLR@thomas> In-Reply-To: References: <66ba0b52-83bf-f7a0-aa79-66a267af32c4@intel.com> MIME-Version: 1.0 Content-Transfer-Encoding: 7Bit Content-Type: text/plain; charset="us-ascii" Subject: Re: [dpdk-dev] Running DPDK application with non-previlege mode X-BeenThere: dev@dpdk.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: DPDK patches and discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: dev-bounces@dpdk.org Sender: "dev" 30/08/2021 13:45, Kamaraj P: > Thanks Ferruh. > One more option which we have figured out to resolve this error by adding > SYS_NICE capability ( --cap-add=NET_ADMIN --cap-add=SYS_RESOURCE > --cap-add=SYS_NICE). > Not sure whether it will work for all the scenarios. However the above > options will ensure DPDK application can run as non-previlage mode ? > Please suggest the right approach which should work for all the DPDK > versions. It depends on which device/driver you use. Here are some infos: `SYS_ADMIN` Required for finding IOVA physical addresses. Not needed if using virtual addressing (DPDK default) or if Linux is older than 4.0. `SYS_NICE` Enable the syscalls `get_mempolicy` and `set_mempolicy` required for NUMA memory management. Not needed if `RTE_EAL_NUMA_AWARE_HUGEPAGES` is disabled (explicitly or because of missing libnuma). `SYS_RAWIO` Enable the syscall `iopl` required for I/O port, used for legacy virtio mode. `NET_ADMIN` Required for some device configuration. `NET_RAW` Required for mlx5 queue allocation. Enabled by default in Docker. `IPC_LOCK` Required for some DMA pinning.