[dpdk-dev] [PATCH] doc: document vfio-pci usage with QAT PMD
Trahe, Fiona
fiona.trahe at intel.com
Tue Sep 8 18:00:27 CEST 2020
Hi Adam,
> -----Original Message-----
> From: Dybkowski, AdamX <adamx.dybkowski at intel.com>
> Sent: Tuesday, September 8, 2020 3:21 PM
> To: dev at dpdk.org; Trahe, Fiona <fiona.trahe at intel.com>; akhil.goyal at nxp.com; Mcnamara, John
> <john.mcnamara at intel.com>
> Cc: Dybkowski, AdamX <adamx.dybkowski at intel.com>
> Subject: [PATCH] doc: document vfio-pci usage with QAT PMD
>
> This patch marks the old igb-uio driver as unsecure when used
> with the QAT PMD and updates all examples to recommend using
> vfio-pci instead.
> It also mentions security issues with the QAT CPM and provides
> information about the new vfio-pci parameter 'disable_denylist'
> available in Linux kernels 5.9 and later.
>
> Signed-off-by: Adam Dybkowski <adamx.dybkowski at intel.com>
> ---
//snip///
> +Load the vfio-pci driver, bind the VF PCI Device id to it and use lspci
> +to confirm the VF devices are now in use by vfio-pci kernel driver,
> e.g. for the C62x device::
>
> cd to the top-level DPDK directory
> modprobe uio
> - insmod ./build/kmod/igb_uio.ko
> - echo "8086 37c9" > /sys/bus/pci/drivers/igb_uio/new_id
> + modprobe vfio-pci
[Fiona] it would be useful to also add a note here - something like
"Use modprobe vfio-pci disable_denylist=1" from kernel 5.9 onwards. See note in Section xxx above"
Apart from this
Acked-by: Fiona Trahe <fiona.trahe at intel.com>
More information about the dev
mailing list