[dpdk-dev] Running DPDK application with non-previlege mode

[Kamaraj P]

Thanks Ferruh.
One more option which we have figured out to resolve this error by adding
SYS_NICE capability ( --cap-add=NET_ADMIN --cap-add=SYS_RESOURCE
--cap-add=SYS_NICE).
Not sure whether it will work for all the scenarios. However the above
options will ensure DPDK application can run as non-previlage mode ?
Please suggest the right approach which should work for all the DPDK
versions.

Thanks,
Kamaraj

On Mon, Aug 30, 2021 at 4:57 PM Ferruh Yigit <ferruh.yigit at intel.com> wrote:

> On 8/30/2021 8:52 AM, Kamaraj P wrote:
> > Hello All,
> > Some more info.
> > We are using DPDK 19.11.
> >
> > When we bringup application with --security-opt seccomp=unconfined
> > option..
> > THe application bringup successfully and didnt observe any error when
> DPDK
> > init logs.
> > Will that --security-opt seccomp=unconfined option recommended for
> > non-previlege mode for DPDK application ?
> > Please suggest.
> >
>
> + Anatoly, he may have experience on running on non-privilege mode.
>
>
> Thomas, David,
>
> What do you think documenting how to run as non root, we had similar
> question
> before, if memory serves me right Red Hat was looking for same thing at
> some point.
>
> If we are agree, perhaps we can find a volunteer in the tech board for it.
>
>
> > Thanks,
> > Kamaraj
> >
> > On Mon, Aug 30, 2021 at 1:07 PM Kamaraj P <pkamaraj at gmail.com> wrote:
> >
> >> Hello All,
> >>
> >> We are not able to run the DPDK allocation without using privilege
> option.
> >>
> >> Able to see the below erors:
> >>
> >> set_mempolicy: Operation not permitted
> >> set_mempolicy: Operation not permitted
> >> set_mempolicy: Operation not permitted
> >> set_mempolicy: Operation not permitted
> >> set_mempolicy: Operation not permitted
> >> set_mempolicy: Operation not permitted
> >> set_mempolicy: Operation not permitted
> >> set_mempolicy: Operation not permitted
> >> EAL: FATAL: rte_service_init() failed
> >> Failed to init DPDK.set_mempolicy: Operation not permitted
> >> set_mempolicy: Operation not permitted
> >> set_mempolicy: Operation not permitted
> >> set_mempolicy: Operation not permitted
> >> set_mempolicy: Operation not permitted
> >> set_mempolicy: Operation not permitted
> >> set_mempolicy: Operation not permitted
> >> set_mempolicy: Operation not permitted
> >> Failed to create mbuf for pool DPDK_POOL_0 frame_len=2048
> num_mbufs=13824
> >> ret (Exec format error)
> >>
> >> BTW we are also enabling --iova-mode=va option as part DPDK init.
> >>
> >> Can anyone please throw some light on this ?
> >>
> >> Thanks,
> >> Kamaraj
> >>
>
>