From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mails.dpdk.org (mails.dpdk.org [217.70.189.124]) by inbox.dpdk.org (Postfix) with ESMTP id 276E9A0C46; Tue, 31 Aug 2021 17:35:11 +0200 (CEST) Received: from [217.70.189.124] (localhost [127.0.0.1]) by mails.dpdk.org (Postfix) with ESMTP id DF6FD40686; Tue, 31 Aug 2021 17:35:10 +0200 (CEST) Received: from us-smtp-delivery-124.mimecast.com (us-smtp-delivery-124.mimecast.com [170.10.133.124]) by mails.dpdk.org (Postfix) with ESMTP id 571B540142 for ; Tue, 31 Aug 2021 17:35:09 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=redhat.com; s=mimecast20190719; t=1630424108; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: in-reply-to:in-reply-to:references:references; bh=yKrd1sEvFSnaG8ogDE7xDsU90zHyYT7SYSJxz0cbmOU=; b=Mfg+ygAQDQ+a7Uv41rm5v4JZFviWB4x/ERCJkykkbMrFSL2IFbMu33KLKqwBrxXTiueqUI t2pR6q4Ir+WlboOLv/GU469QCODK2CMDRo7jrNPmNKqvZ+CHOHOvElH2BfdFB1YtqbReqe BgFJ/+r96gdJb7CtSclvRRUaONcmgWg= Received: from mail-lj1-f198.google.com (mail-lj1-f198.google.com [209.85.208.198]) (Using TLS) by relay.mimecast.com with ESMTP id us-mta-580-UgJmLGLBNDGGLBZ_4-MmEQ-1; Tue, 31 Aug 2021 11:35:05 -0400 X-MC-Unique: UgJmLGLBNDGGLBZ_4-MmEQ-1 Received: by mail-lj1-f198.google.com with SMTP id s15-20020a2eb8cf000000b001cbf358ed4eso8150206ljp.14 for ; Tue, 31 Aug 2021 08:35:05 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=yKrd1sEvFSnaG8ogDE7xDsU90zHyYT7SYSJxz0cbmOU=; b=ChJrcQM07ohnnMT4862OKqJ8CQK7p2JyU3DTVj2e2ubCup2u1WwI1dc6I6V9VTjXPo Z+j1P0++JQCvRL3xoxMabDYNZA5g/gJq33CDb4h4AVWx7MOuLx1KuTbo7DiUGgLD2REa OMWeK+RP8O9t2ZckbD7yeqirQSplxQMKdFclk+D3g8fPwr6wVHXvFbLICz0pbR7dQ3q4 e5Ar0vxCF5v92EyIDhVikB/kbVogHOgvmAmczmwg6RREgmAc0BFLIeIJDzo9XcTmIPTq fNZyUNorHhJq+wp5hNvSUwFMS6P8PPYLY+HSQn0WdSGmfutx8D9LhwYvZZRuD7AwmWaZ ZvKQ== X-Gm-Message-State: AOAM530bdeb4iEAy82tWQD7MdJhqnytMCwqZaRbDwr+B1jkfyklpo0EG q7Mu9eyWW1bQhd8854xGNO5dJL9yNy1EPrPS8oiFNPIN4SNxjl38teqZJeMkZj5eWOkDcemqSvH qjAHd2JcTEO/Bybh4N/A= X-Received: by 2002:a2e:91d0:: with SMTP id u16mr25787825ljg.324.1630424104104; Tue, 31 Aug 2021 08:35:04 -0700 (PDT) X-Google-Smtp-Source: ABdhPJwbKyqqEGUr4oRXNnxr778c3RYk66DqmuBW1Y4QZJypGLDPd2OQUqB2v5m5smlTL5nXGwrRmMuHA3L7vOFqNRc= X-Received: by 2002:a2e:91d0:: with SMTP id u16mr25787794ljg.324.1630424103826; Tue, 31 Aug 2021 08:35:03 -0700 (PDT) MIME-Version: 1.0 References: <66ba0b52-83bf-f7a0-aa79-66a267af32c4@intel.com> <3485790.tFL5Z3R0ll@thomas> In-Reply-To: From: David Marchand Date: Tue, 31 Aug 2021 17:34:52 +0200 Message-ID: To: Kamaraj P Cc: Thomas Monjalon , dev , Anatoly Burakov , Ferruh Yigit , ksimha@cisco.com, kalas@cisco.com, seveluch@cisco.com, "techboard@dpdk.org" , hpai@cisco.com, ppitchai@cisco.com, Aaron Conole Authentication-Results: relay.mimecast.com; auth=pass smtp.auth=CUSA124A263 smtp.mailfrom=dmarchan@redhat.com X-Mimecast-Spam-Score: 0 X-Mimecast-Originator: redhat.com Content-Type: text/plain; charset="UTF-8" Subject: Re: [dpdk-dev] Running DPDK application with non-previlege mode X-BeenThere: dev@dpdk.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: DPDK patches and discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: dev-bounces@dpdk.org Sender: "dev" On Tue, Aug 31, 2021 at 5:27 PM Kamaraj P wrote: > > Hi Thomas, > We are trying with the IGB_UIO driver in our DPDK application. Running with igb-uio as a non priviledged user is not possible (or, at best, makes little sense). > Is there any documentation where we need to start to run a DPDK application with minimal system capability? > Also please let us know if there is any known dependency with DPDK versions (dpdk application with 18, 19.11 versions etc) when we run with sys capabilit. > > Hi David, > Can you please share with us the pointer for OVS integration(DPDK running as non-privileged mode ?) I don't have a full list, here is what I have in mind. For non mellanox devices, you'll have to rely on vfio-pci bound devices and setup access to those fds. https://github.com/openvswitch/ovs/blob/master/rhel/usr_lib_udev_rules.d_91-vfio.rules For mellanox devices and some parts of dpdk, you need (quite) some capabilities: https://github.com/openvswitch/ovs/blob/master/lib/daemon-unix.c#L812 There are also hugepages accesses to consider: https://github.com/openvswitch/ovs/blob/master/rhel/usr_lib_systemd_system_ovs-vswitchd.service.in#L20 There are selinux considerations too. -- David Marchand