From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from dpdk.org (dpdk.org [92.243.14.124]) by inbox.dpdk.org (Postfix) with ESMTP id E4FE2A04B1; Tue, 8 Sep 2020 18:00:35 +0200 (CEST) Received: from [92.243.14.124] (localhost [127.0.0.1]) by dpdk.org (Postfix) with ESMTP id 5D84C4C99; Tue, 8 Sep 2020 18:00:35 +0200 (CEST) Received: from mga03.intel.com (mga03.intel.com [134.134.136.65]) by dpdk.org (Postfix) with ESMTP id 21852A3 for ; Tue, 8 Sep 2020 18:00:33 +0200 (CEST) IronPort-SDR: sJ8iIwSNmFeeNyVay7D+qXryOYSpaGRaycmP39y9dNDwvmiLuIJ6YjSkoXEmvf94Cd94KUxFod j4SBxdDnjqFQ== X-IronPort-AV: E=McAfee;i="6000,8403,9738"; a="158189008" X-IronPort-AV: E=Sophos;i="5.76,406,1592895600"; d="scan'208";a="158189008" X-Amp-Result: SKIPPED(no attachment in message) X-Amp-File-Uploaded: False Received: from orsmga007.jf.intel.com ([10.7.209.58]) by orsmga103.jf.intel.com with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 08 Sep 2020 09:00:30 -0700 IronPort-SDR: wrFF8po+kH+XPVlvSo41RWjgZ/nS2E/M2TVTuZDqnIJM9ASqHazI4ySHqEKAc7RYbahZRhD1Gl +zf3vwIYgghA== X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="5.76,406,1592895600"; d="scan'208";a="343575664" Received: from orsmsx602.amr.corp.intel.com ([10.22.229.15]) by orsmga007.jf.intel.com with ESMTP; 08 Sep 2020 09:00:30 -0700 Received: from orsmsx602.amr.corp.intel.com (10.22.229.15) by ORSMSX602.amr.corp.intel.com (10.22.229.15) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.1713.5; Tue, 8 Sep 2020 09:00:29 -0700 Received: from orsmsx154.amr.corp.intel.com (10.22.226.12) by orsmsx602.amr.corp.intel.com (10.22.229.15) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256) id 15.1.1713.5 via Frontend Transport; Tue, 8 Sep 2020 09:00:29 -0700 Received: from ORSEDG601.ED.cps.intel.com (10.7.248.6) by ORSMSX154.amr.corp.intel.com (10.22.226.12) with Microsoft SMTP Server (TLS) id 14.3.439.0; Tue, 8 Sep 2020 09:00:29 -0700 Received: from NAM12-BN8-obe.outbound.protection.outlook.com (104.47.55.168) by edgegateway.intel.com (134.134.137.102) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.1.1713.5; Tue, 8 Sep 2020 09:00:29 -0700 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=PXTqL9X/r96JB56/qEyRgRoj1D9OCVq2sgry5+qtodkI+OjZj14lJx/KNyEo0fP0Rv9ebGD3DHw/E8nmULfV31H5CAOYrdHrkFE0WMSHySBW0Mh22N4ubOSK0yfNqrNB8tR9zrpRQM9XwGH5E6cGmyYqGGgLZYNDk4fKtap4fzluP45LEOiOzCQAADLsRR0qRRMqSotPnmmYoKbV4KHoEPgc6mKv7YBY391hRjrRLoYDA3e7C/RhMaKy0tpHZuupdYBs8twZJkODw/+OsB0QO6312FZQu2TLg2Ias0SzNf7ubRo16aAAyAEkJXflpRgg0OJVEiAiY6NsPo6BfcEvLg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=mBlR79jGN50LuANfGNmm66LvdfvqM9O0jC/8qeHP+/M=; b=So+pS/YBzmDrXRzU5gcuChreJJyWJJCCBpGMC/sxoZGT3OH8rpTSf7DYD3PXS13v9MvAZI1EPKd3BFzF3oOyLt/Au2iP4JeM0WJmYEozSLgvG8rYd+QzGKHDN+RcVgFCsSOqXFmH1uux5G6ic1H8XPmFPKS4fJTOvAiBlp3Xrfdov5NZ1VwxCihkaXvBnZZ1Cj3BED8ut++qTHWpg2oMHgva4sS4Tz05JweBh5jWJONCYM8p0Me1OTOtetFp6dekiqjKD63kCPY7FXooW4S6e+Gwfr6hpWmJolpT+i4qj1hEsbFscNp6rE91HAE+tzv3I79bkCLxHY00O5IHPpCPxA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=intel.com; dmarc=pass action=none header.from=intel.com; dkim=pass header.d=intel.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=intel.onmicrosoft.com; s=selector2-intel-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=mBlR79jGN50LuANfGNmm66LvdfvqM9O0jC/8qeHP+/M=; b=g+JzHBOpkHoW+QFPDQbCHoc9mu+cgCNSjiQzVvEj4lGCaIFgZZ8BJxeqg5DLhPzcLjX7Vm+Z5gEy+253mCqDeECGfDFZ+X+ly6NujpR+8n62t9yUNhbfAQ8N6Gc6siQ5e996592jD+oGtuNIOe0QqP/xL10dpwGtdKe4sD5xEnk= Received: from SN6PR11MB2880.namprd11.prod.outlook.com (2603:10b6:805:58::15) by SN6PR11MB2783.namprd11.prod.outlook.com (2603:10b6:805:5a::30) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3348.19; Tue, 8 Sep 2020 16:00:27 +0000 Received: from SN6PR11MB2880.namprd11.prod.outlook.com ([fe80::f133:96bb:9f7f:e17c]) by SN6PR11MB2880.namprd11.prod.outlook.com ([fe80::f133:96bb:9f7f:e17c%7]) with mapi id 15.20.3348.019; Tue, 8 Sep 2020 16:00:27 +0000 From: "Trahe, Fiona" To: "Dybkowski, AdamX" , "dev@dpdk.org" , "akhil.goyal@nxp.com" , "Mcnamara, John" CC: "Trahe, Fiona" Thread-Topic: [PATCH] doc: document vfio-pci usage with QAT PMD Thread-Index: AQHWhetH44QWn9WXKUWq5yHv5vi/F6le5Gnw Date: Tue, 8 Sep 2020 16:00:27 +0000 Message-ID: References: <20200908142047.331-1-adamx.dybkowski@intel.com> In-Reply-To: <20200908142047.331-1-adamx.dybkowski@intel.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: dlp-product: dlpe-windows dlp-reaction: no-action dlp-version: 11.5.1.3 authentication-results: intel.com; dkim=none (message not signed) header.d=none;intel.com; dmarc=none action=none header.from=intel.com; x-originating-ip: [109.78.162.118] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: eb53e455-5cfa-49ad-5855-08d854104e17 x-ms-traffictypediagnostic: SN6PR11MB2783: x-ms-exchange-transport-forked: True x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:7219; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: PN2R6+ac2XmnNy+tVQim7lmv2Jn4rZ6scBid79IfnjrAz0CEBOd8kL6/gAIWu8xnpsSXRtcHxLvF0ZIBVtyRTlqkllTuJte9VKQnB2bbm6lreusPiXqiLEYQwP4m1qzRVzh6GQVX8pfo289guyL4hkZA1kaJ3G4+gG4akyRu17SmjD0ndV+Ne15COxdWGPk/KOGMGt+vFTSF7YH+T3z1yxKUxGirDpCSHGPYsrHzsPy4jdZ+yKWXxMRziUq1f7AzEk5Dv42iuWfZM5HZJABkjM3OVAjy73CBGRSoH3X2/3KRpUNbu1XLgJQw5zBkCe3+KUQ5m74lamBTv/eLuWRYFI5MSNhZESIENLIEMdt+NWFfJ1Tvn7b6dF78PSC8+PWo x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:SN6PR11MB2880.namprd11.prod.outlook.com; PTR:; CAT:NONE; SFS:(4636009)(136003)(39860400002)(346002)(376002)(366004)(396003)(6506007)(53546011)(86362001)(186003)(33656002)(478600001)(6636002)(4326008)(107886003)(316002)(7696005)(52536014)(83380400001)(55016002)(8936002)(5660300002)(110136005)(9686003)(26005)(71200400001)(76116006)(66446008)(66476007)(2906002)(66946007)(8676002)(64756008)(66556008)(21314003); DIR:OUT; SFP:1102; x-ms-exchange-antispam-messagedata: 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 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: SN6PR11MB2880.namprd11.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: eb53e455-5cfa-49ad-5855-08d854104e17 X-MS-Exchange-CrossTenant-originalarrivaltime: 08 Sep 2020 16:00:27.8218 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 46c98d88-e344-4ed4-8496-4ed7712e255d X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: 6bQdNk3bbnv65Wk5JGYwfXdkUA23Vm5bPf26zWpghOioGDD5CHrQqOKWB/i2M7AdZsUN6KfbOI9Hc19TgNVqlg== X-MS-Exchange-Transport-CrossTenantHeadersStamped: SN6PR11MB2783 X-OriginatorOrg: intel.com Subject: Re: [dpdk-dev] [PATCH] doc: document vfio-pci usage with QAT PMD X-BeenThere: dev@dpdk.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: DPDK patches and discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: dev-bounces@dpdk.org Sender: "dev" Hi Adam, > -----Original Message----- > From: Dybkowski, AdamX > Sent: Tuesday, September 8, 2020 3:21 PM > To: dev@dpdk.org; Trahe, Fiona ; akhil.goyal@nxp.c= om; Mcnamara, John > > Cc: Dybkowski, AdamX > Subject: [PATCH] doc: document vfio-pci usage with QAT PMD >=20 > This patch marks the old igb-uio driver as unsecure when used > with the QAT PMD and updates all examples to recommend using > vfio-pci instead. > It also mentions security issues with the QAT CPM and provides > information about the new vfio-pci parameter 'disable_denylist' > available in Linux kernels 5.9 and later. >=20 > Signed-off-by: Adam Dybkowski > --- //snip/// > +Load the vfio-pci driver, bind the VF PCI Device id to it and use lspci > +to confirm the VF devices are now in use by vfio-pci kernel driver, > e.g. for the C62x device:: >=20 > cd to the top-level DPDK directory > modprobe uio > - insmod ./build/kmod/igb_uio.ko > - echo "8086 37c9" > /sys/bus/pci/drivers/igb_uio/new_id > + modprobe vfio-pci [Fiona] it would be useful to also add a note here - something like "Use modprobe vfio-pci disable_denylist=3D1" from kernel 5.9 onwards. See n= ote in Section xxx above" Apart from this=20 Acked-by: Fiona Trahe