From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <dev-bounces@dpdk.org>
Received: from mails.dpdk.org (mails.dpdk.org [217.70.189.124])
	by inbox.dpdk.org (Postfix) with ESMTP id 400DDA034F;
	Mon, 30 Aug 2021 14:06:00 +0200 (CEST)
Received: from [217.70.189.124] (localhost [127.0.0.1])
	by mails.dpdk.org (Postfix) with ESMTP id AEA86410F6;
	Mon, 30 Aug 2021 14:05:59 +0200 (CEST)
Received: from wout1-smtp.messagingengine.com (wout1-smtp.messagingengine.com
 [64.147.123.24])
 by mails.dpdk.org (Postfix) with ESMTP id 51CC2406A3;
 Mon, 30 Aug 2021 14:05:58 +0200 (CEST)
Received: from compute4.internal (compute4.nyi.internal [10.202.2.44])
 by mailout.west.internal (Postfix) with ESMTP id 8BCE53200583;
 Mon, 30 Aug 2021 08:05:56 -0400 (EDT)
Received: from mailfrontend2 ([10.202.2.163])
 by compute4.internal (MEProxy); Mon, 30 Aug 2021 08:05:57 -0400
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=monjalon.net; h=
 from:to:cc:subject:date:message-id:in-reply-to:references
 :mime-version:content-transfer-encoding:content-type; s=fm2; bh=
 jFeGowAguDiNm2JB6d0wyasb1CgvbIklvJsvCI/GOIQ=; b=kG//Got0F7zlMfQ5
 QCsMsrWAgprY9Mu5vgBvxETaMs0HKZ0iXsvfQKyo6RHo6uOcjxYFNv/KomN+tZVx
 RX2rubaYSAmQsfp4sXkNr7339bFP2rby0l2FzyOXpvauK9JDhRqZtJy1Dru0OJKs
 iQBIYZR1+aC+phcfAIUE5Sh921zWbfv3Z2Y4SsEyeOzorZl89UpNXm9AmoX5pLnN
 nimbZsgaKUJnhTeB+4IylX3qSnUW+dGR67AiJhwS3mef8vq1RR9nVaQkCrb5D+CE
 Z4D9kCmnt54Sj1ifvgTR8eRaQw3jcErENd38/qgN5pj5iFONqI9neLeYTBU999dn
 +a65Sg==
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=
 messagingengine.com; h=cc:content-transfer-encoding:content-type
 :date:from:in-reply-to:message-id:mime-version:references
 :subject:to:x-me-proxy:x-me-proxy:x-me-sender:x-me-sender
 :x-sasl-enc; s=fm3; bh=jFeGowAguDiNm2JB6d0wyasb1CgvbIklvJsvCI/GO
 IQ=; b=vqfPJ4xW+trxlwHFYuK3RRN9tSehSdwAF2/W/f43/HRCE96cKDAwaL9yg
 1QA0EdKfReyqllM6/4qPdTmr3cxQ7YRlFhiXPt1mEMMaICf7xYrRzHIh2QyHRWIm
 G2hrR38KnfE1taVs5rmCKYmJc5BcyZUn+MTncjeCBsfEjc8JOSrjHNNWmq5qkm3B
 bpIeBdJpOHOwLOUOeYD7/fh0r7eeHv3EYW7per1CcFGoDime//K0yom0JxrMrNxv
 d2yolYggTnjamQm9gPyalpRQihcrUgoRVKXkUozKDmdjxLLscYRHBs/3XxWeej3G
 HnU6iLexapszIXrUU5yL+iGQCuveg==
X-ME-Sender: <xms:o8ksYZ6WOm6ONhqHUR1Q0hAn2PTmrYhRwcx17LB3n2IKJhx1KehMLQ>
 <xme:o8ksYW4x4rf1obPEQ6i87GiqVBAoMQ5o4EM_Gylk9xZVgiqq6dTZKCea0zQ7YVT9e
 yP7k0yFACN5Dfz1IA>
X-ME-Received: <xmr:o8ksYQc4gHCT4A5J4cWqSnqCGO4pL8cuMfUQb9QSVX3Elepb03xwXkgcQh-ikpg146FztzlZXRLi1o2mcX-5nDRNZA>
X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgedvtddrudduledggeelucetufdoteggodetrfdotf
 fvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdfqfgfvpdfurfetoffkrfgpnffqhgen
 uceurghilhhouhhtmecufedttdenucesvcftvggtihhpihgvnhhtshculddquddttddmne
 cujfgurhephffvufffkfgjfhgggfgtsehtufertddttddvnecuhfhrohhmpefvhhhomhgr
 shcuofhonhhjrghlohhnuceothhhohhmrghssehmohhnjhgrlhhonhdrnhgvtheqnecugg
 ftrfgrthhtvghrnhepudfgudetieduffduvdejgffgffdugfegkeeghffhkeeljeelfefg
 ieeiteejtddunecuffhomhgrihhnpehmohguvgdrnhgvthdptghonhhfihhguhhrrghtih
 honhdrnhgvthenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepmhgrihhlfhhr
 ohhmpehthhhomhgrshesmhhonhhjrghlohhnrdhnvght
X-ME-Proxy: <xmx:o8ksYSKRRRYWuiJZ9MqUPtm-DEGNMIa6X_fxK8BIXndGVLJ4vuRd0g>
 <xmx:o8ksYdIbn3-aCma_PzcmXYo7hO_G2KfGV0JUaNdK110RHd0ZWtTjPA>
 <xmx:o8ksYbwgPIxGZi9CiPHMA_IXA9kSzkQr3FmGz-NJKfa7u9dqeCo9xQ>
 <xmx:pMksYU8w2cuEUb4vxia4oAL5UdyJsjpInm90djQx502fuvkiufVT9Q>
Received: by mail.messagingengine.com (Postfix) with ESMTPA; Mon,
 30 Aug 2021 08:05:54 -0400 (EDT)
From: Thomas Monjalon <thomas@monjalon.net>
To: Ferruh Yigit <ferruh.yigit@intel.com>, Kamaraj P <pkamaraj@gmail.com>
Cc: dev@dpdk.org, Anatoly Burakov <anatoly.burakov@intel.com>,
 David Marchand <david.marchand@redhat.com>, ksimha@cisco.com, kalas@cisco.com,
 seveluch@cisco.com, "techboard@dpdk.org" <techboard@dpdk.org>, hpai@cisco.com
Date: Mon, 30 Aug 2021 14:05:52 +0200
Message-ID: <1827863.rKngybTHLR@thomas>
In-Reply-To: <CAG8PAaoD-z3BjbHfMyfnsRv9x6Rmeb0+kfV9sV-dDEMytu5qCg@mail.gmail.com>
References: <CAG8PAarTj04Mywxf3ZQbHLkqb0sw0TqMTr_ndx6OgKcZqtu_Hw@mail.gmail.com>
 <66ba0b52-83bf-f7a0-aa79-66a267af32c4@intel.com>
 <CAG8PAaoD-z3BjbHfMyfnsRv9x6Rmeb0+kfV9sV-dDEMytu5qCg@mail.gmail.com>
MIME-Version: 1.0
Content-Transfer-Encoding: 7Bit
Content-Type: text/plain; charset="us-ascii"
Subject: Re: [dpdk-dev] Running DPDK application with non-previlege mode
X-BeenThere: dev@dpdk.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: DPDK patches and discussions <dev.dpdk.org>
List-Unsubscribe: <https://mails.dpdk.org/options/dev>,
 <mailto:dev-request@dpdk.org?subject=unsubscribe>
List-Archive: <http://mails.dpdk.org/archives/dev/>
List-Post: <mailto:dev@dpdk.org>
List-Help: <mailto:dev-request@dpdk.org?subject=help>
List-Subscribe: <https://mails.dpdk.org/listinfo/dev>,
 <mailto:dev-request@dpdk.org?subject=subscribe>
Errors-To: dev-bounces@dpdk.org
Sender: "dev" <dev-bounces@dpdk.org>

30/08/2021 13:45, Kamaraj P:
> Thanks Ferruh.
> One more option which we have figured out to resolve this error by adding
> SYS_NICE capability ( --cap-add=NET_ADMIN --cap-add=SYS_RESOURCE
> --cap-add=SYS_NICE).
> Not sure whether it will work for all the scenarios. However the above
> options will ensure DPDK application can run as non-previlage mode ?
> Please suggest the right approach which should work for all the DPDK
> versions.

It depends on which device/driver you use.

Here are some infos:

`SYS_ADMIN`
Required for finding IOVA physical addresses.
Not needed if using virtual addressing (DPDK default)                                                
or if Linux is older than 4.0.

`SYS_NICE`
Enable the syscalls `get_mempolicy` and `set_mempolicy`
required for NUMA memory management.
Not needed if `RTE_EAL_NUMA_AWARE_HUGEPAGES` is disabled
(explicitly or because of missing libnuma).

`SYS_RAWIO`
Enable the syscall `iopl` required for I/O port,
used for legacy virtio mode.

`NET_ADMIN`
Required for some device configuration.

`NET_RAW`
Required for mlx5 queue allocation. Enabled by default in Docker.

`IPC_LOCK`
Required for some DMA pinning.