[dpdk-dev] [PATCH v2 1/1] doc: document vfio-pci usage with QAT PMD
Burakov, Anatoly
anatoly.burakov at intel.com
Wed Sep 9 12:51:48 CEST 2020
On 08-Sep-20 5:19 PM, Adam Dybkowski wrote:
> This patch marks the old igb-uio driver as unsecure when used
> with the QAT PMD and updates all examples to recommend using
> vfio-pci instead.
> It also mentions security issues with the QAT CPM and provides
> information about the new vfio-pci parameter 'disable_denylist'
> available in Linux kernels 5.9 and later.
>
> Signed-off-by: Adam Dybkowski <adamx.dybkowski at intel.com>
> Acked-by: Fiona Trahe <fiona.trahe at intel.com>
> ---
<snip>
>
> cd to the top-level DPDK directory
> modprobe uio
No need to modprobe uio if you're using VFIO.
> - insmod ./build/kmod/igb_uio.ko
> - echo "8086 37c9" > /sys/bus/pci/drivers/igb_uio/new_id
> + modprobe vfio-pci
> + echo "8086 37c9" > /sys/bus/pci/drivers/vfio-pci/new_id
This seems like very outdated instructions from when we had a PCI ID
filtering in igb_uio. Devbind way is better in every way, so why keep
this at all?
> lspci -vvd:37c9
>
> +Use ``modprobe vfio-pci disable_denylist=1`` from kernel 5.9 onwards.
> +See note in the section `Binding the available VFs to the vfio-pci driver`_
> +above.
>
> -Another way to bind the VFs to the DPDK UIO driver is by using the
> +Another way to bind the VFs to the vfio-pci driver is by using the
> ``dpdk-devbind.py`` script::
>
> cd to the top-level DPDK directory
> - ./usertools/dpdk-devbind.py -b igb_uio 0000:03:01.1
> + ./usertools/dpdk-devbind.py -b vfio-pci 0000:03:01.1
>
> Testing
> ~~~~~~~
>
--
Thanks,
Anatoly
More information about the dev
mailing list