[dpdk-dev] [PATCH] doc: document vfio-pci usage with QAT PMD

Trahe, Fiona fiona.trahe at intel.com
Tue Sep 8 18:00:27 CEST 2020


Hi Adam,

> -----Original Message-----
> From: Dybkowski, AdamX <adamx.dybkowski at intel.com>
> Sent: Tuesday, September 8, 2020 3:21 PM
> To: dev at dpdk.org; Trahe, Fiona <fiona.trahe at intel.com>; akhil.goyal at nxp.com; Mcnamara, John
> <john.mcnamara at intel.com>
> Cc: Dybkowski, AdamX <adamx.dybkowski at intel.com>
> Subject: [PATCH] doc: document vfio-pci usage with QAT PMD
> 
> This patch marks the old igb-uio driver as unsecure when used
> with the QAT PMD and updates all examples to recommend using
> vfio-pci instead.
> It also mentions security issues with the QAT CPM and provides
> information about the new vfio-pci parameter 'disable_denylist'
> available in Linux kernels 5.9 and later.
> 
> Signed-off-by: Adam Dybkowski <adamx.dybkowski at intel.com>
> ---


//snip///
> +Load the vfio-pci driver, bind the VF PCI Device id to it and use lspci
> +to confirm the VF devices are now in use by vfio-pci kernel driver,
>  e.g. for the C62x device::
> 
>      cd to the top-level DPDK directory
>      modprobe uio
> -    insmod ./build/kmod/igb_uio.ko
> -    echo "8086 37c9" > /sys/bus/pci/drivers/igb_uio/new_id
> +    modprobe vfio-pci
[Fiona] it would be useful to also add a note here - something like
"Use modprobe vfio-pci disable_denylist=1" from kernel 5.9 onwards. See note in Section xxx above"

Apart from this 
Acked-by: Fiona Trahe <fiona.trahe at intel.com>



More information about the dev mailing list