From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mails.dpdk.org (mails.dpdk.org [217.70.189.124]) by inbox.dpdk.org (Postfix) with ESMTP id 4D73BA034F; Mon, 30 Aug 2021 13:45:35 +0200 (CEST) Received: from [217.70.189.124] (localhost [127.0.0.1]) by mails.dpdk.org (Postfix) with ESMTP id 0F22D406A3; Mon, 30 Aug 2021 13:45:35 +0200 (CEST) Received: from mail-lj1-f173.google.com (mail-lj1-f173.google.com [209.85.208.173]) by mails.dpdk.org (Postfix) with ESMTP id 3201540687; Mon, 30 Aug 2021 13:45:33 +0200 (CEST) Received: by mail-lj1-f173.google.com with SMTP id f2so25396445ljn.1; Mon, 30 Aug 2021 04:45:33 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=7xUq34XOauhXlU+vFSEhGAmoQ3rLizDstWGThYPJKv8=; b=dJkZ7Y6LaH/zdxhOhAd8jTXYVc4cdA3+S9dh8t0fLPNkjzTxGhzGNuVIiEofHMtf1m og0dp/YDiyY89Oymwng2lRysCmCUKHVnJpGrDQAP/0hkRqtEjkejGZpRL3ZzfCrF6k97 VmOvfhGDCMcVUK2j7hpBguUX+3wiWPovOMp5S+pDytW4qG8x3kasxUHGacksrIhPQvAx kWRxW6EL+q08pSTGIwDzIiVv9ClqJIXzi0spCvDMZvjOEveEJ3XQvIWpky1QEOYtLZQn v5EsAZjQO/C2sNuTKSxjOdVsgqoB+JPg1tSU20zxOql/pfCGxAXw9NGMg90Lj5ikl9kO Mo2Q== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=7xUq34XOauhXlU+vFSEhGAmoQ3rLizDstWGThYPJKv8=; b=nA7zy07KBZXXFfez+vLfK3ngklPxEZm0zvFrJgcaiobGJAj91d18BnUC9B8GQGdDfA 5iK6YkLSv07jiD4p1jhUdFAYZn21SPGShK7YDvi/qh5LnlnM7TIw3byuiCt7qDm77VUi li3B4pnyxPA0Vcv9rDLn68LVSvEtWzJuLlZ5czSwe89OEAE74KiEALvj7qiIw4/0bysu leHSIWX4cALo429mqseB5cJEKNVaGHXfoNrxki0cjdTipYWaLMdFI8RxHKKy6xT4k93J JA2zFDXOeOLVrVlfC/Ri5/IRp//rkiIJ0JjTCAYb03mJkcQ2FAEKDPweqH+o5GOvcSqv XDAw== X-Gm-Message-State: AOAM533W56WdpZd5BSEqufQqvrR+DJm8v19XpOslvoCzsNwDvZVgc8yg qRd1xpEoxaEDWl1bVAJBKwJJy5Ly35cxBSR5jwU= X-Google-Smtp-Source: ABdhPJzCekycKc5c/lMvSKh5DB3VN6TzEj2gzqfz9zhVTyQFdYIFfKEm7Q3wEUYXym4jWMiqR1P1QWfEKrD2OTCNAjc= X-Received: by 2002:a2e:96c7:: with SMTP id d7mr20096968ljj.191.1630323932683; Mon, 30 Aug 2021 04:45:32 -0700 (PDT) MIME-Version: 1.0 References: <66ba0b52-83bf-f7a0-aa79-66a267af32c4@intel.com> In-Reply-To: <66ba0b52-83bf-f7a0-aa79-66a267af32c4@intel.com> From: Kamaraj P Date: Mon, 30 Aug 2021 17:15:21 +0530 Message-ID: To: Ferruh Yigit Cc: dev@dpdk.org, Anatoly Burakov , David Marchand , Thomas Monjalon , ksimha@cisco.com, kalas@cisco.com, seveluch@cisco.com, "techboard@dpdk.org" , hpai@cisco.com Content-Type: text/plain; charset="UTF-8" X-Content-Filtered-By: Mailman/MimeDel 2.1.29 Subject: Re: [dpdk-dev] Running DPDK application with non-previlege mode X-BeenThere: dev@dpdk.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: DPDK patches and discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: dev-bounces@dpdk.org Sender: "dev" Thanks Ferruh. One more option which we have figured out to resolve this error by adding SYS_NICE capability ( --cap-add=NET_ADMIN --cap-add=SYS_RESOURCE --cap-add=SYS_NICE). Not sure whether it will work for all the scenarios. However the above options will ensure DPDK application can run as non-previlage mode ? Please suggest the right approach which should work for all the DPDK versions. Thanks, Kamaraj On Mon, Aug 30, 2021 at 4:57 PM Ferruh Yigit wrote: > On 8/30/2021 8:52 AM, Kamaraj P wrote: > > Hello All, > > Some more info. > > We are using DPDK 19.11. > > > > When we bringup application with --security-opt seccomp=unconfined > > option.. > > THe application bringup successfully and didnt observe any error when > DPDK > > init logs. > > Will that --security-opt seccomp=unconfined option recommended for > > non-previlege mode for DPDK application ? > > Please suggest. > > > > + Anatoly, he may have experience on running on non-privilege mode. > > > Thomas, David, > > What do you think documenting how to run as non root, we had similar > question > before, if memory serves me right Red Hat was looking for same thing at > some point. > > If we are agree, perhaps we can find a volunteer in the tech board for it. > > > > Thanks, > > Kamaraj > > > > On Mon, Aug 30, 2021 at 1:07 PM Kamaraj P wrote: > > > >> Hello All, > >> > >> We are not able to run the DPDK allocation without using privilege > option. > >> > >> Able to see the below erors: > >> > >> set_mempolicy: Operation not permitted > >> set_mempolicy: Operation not permitted > >> set_mempolicy: Operation not permitted > >> set_mempolicy: Operation not permitted > >> set_mempolicy: Operation not permitted > >> set_mempolicy: Operation not permitted > >> set_mempolicy: Operation not permitted > >> set_mempolicy: Operation not permitted > >> EAL: FATAL: rte_service_init() failed > >> Failed to init DPDK.set_mempolicy: Operation not permitted > >> set_mempolicy: Operation not permitted > >> set_mempolicy: Operation not permitted > >> set_mempolicy: Operation not permitted > >> set_mempolicy: Operation not permitted > >> set_mempolicy: Operation not permitted > >> set_mempolicy: Operation not permitted > >> set_mempolicy: Operation not permitted > >> Failed to create mbuf for pool DPDK_POOL_0 frame_len=2048 > num_mbufs=13824 > >> ret (Exec format error) > >> > >> BTW we are also enabling --iova-mode=va option as part DPDK init. > >> > >> Can anyone please throw some light on this ? > >> > >> Thanks, > >> Kamaraj > >> > >