On 08-Sep-20 5:19 PM, Adam Dybkowski wrote:
This patch marks the old igb-uio driver as unsecure when used
with the QAT PMD and updates all examples to recommend using
vfio-pci instead.
It also mentions security issues with the QAT CPM and provides
information about the new vfio-pci parameter 'disable_denylist'
available in Linux kernels 5.9 and later.
Signed-off-by: Adam Dybkowski <adamx.dybkow...@intel.com>
Acked-by: Fiona Trahe <fiona.tr...@intel.com>
---
<snip>
cd to the top-level DPDK directory
modprobe uio
No need to modprobe uio if you're using VFIO.
- insmod ./build/kmod/igb_uio.ko
- echo "8086 37c9" > /sys/bus/pci/drivers/igb_uio/new_id
+ modprobe vfio-pci
+ echo "8086 37c9" > /sys/bus/pci/drivers/vfio-pci/new_id
This seems like very outdated instructions from when we had a PCI ID
filtering in igb_uio. Devbind way is better in every way, so why keep
this at all?
lspci -vvd:37c9
+Use ``modprobe vfio-pci disable_denylist=1`` from kernel 5.9 onwards.
+See note in the section `Binding the available VFs to the vfio-pci driver`_
+above.
-Another way to bind the VFs to the DPDK UIO driver is by using the
+Another way to bind the VFs to the vfio-pci driver is by using the
``dpdk-devbind.py`` script::
cd to the top-level DPDK directory
- ./usertools/dpdk-devbind.py -b igb_uio 0000:03:01.1
+ ./usertools/dpdk-devbind.py -b vfio-pci 0000:03:01.1
Testing
~~~~~~~
--
Thanks,
Anatoly
