Hi Adam, > -----Original Message----- > From: Dybkowski, AdamX <adamx.dybkow...@intel.com> > Sent: Tuesday, September 8, 2020 3:21 PM > To: dev@dpdk.org; Trahe, Fiona <fiona.tr...@intel.com>; akhil.go...@nxp.com; > Mcnamara, John > <john.mcnam...@intel.com> > Cc: Dybkowski, AdamX <adamx.dybkow...@intel.com> > Subject: [PATCH] doc: document vfio-pci usage with QAT PMD > > This patch marks the old igb-uio driver as unsecure when used > with the QAT PMD and updates all examples to recommend using > vfio-pci instead. > It also mentions security issues with the QAT CPM and provides > information about the new vfio-pci parameter 'disable_denylist' > available in Linux kernels 5.9 and later. > > Signed-off-by: Adam Dybkowski <adamx.dybkow...@intel.com> > ---
//snip/// > +Load the vfio-pci driver, bind the VF PCI Device id to it and use lspci > +to confirm the VF devices are now in use by vfio-pci kernel driver, > e.g. for the C62x device:: > > cd to the top-level DPDK directory > modprobe uio > - insmod ./build/kmod/igb_uio.ko > - echo "8086 37c9" > /sys/bus/pci/drivers/igb_uio/new_id > + modprobe vfio-pci [Fiona] it would be useful to also add a note here - something like "Use modprobe vfio-pci disable_denylist=1" from kernel 5.9 onwards. See note in Section xxx above" Apart from this Acked-by: Fiona Trahe <fiona.tr...@intel.com>
