Thanks Ferruh. One more option which we have figured out to resolve this error by adding SYS_NICE capability ( --cap-add=NET_ADMIN --cap-add=SYS_RESOURCE --cap-add=SYS_NICE). Not sure whether it will work for all the scenarios. However the above options will ensure DPDK application can run as non-previlage mode ? Please suggest the right approach which should work for all the DPDK versions.
Thanks, Kamaraj On Mon, Aug 30, 2021 at 4:57 PM Ferruh Yigit <ferruh.yi...@intel.com> wrote: > On 8/30/2021 8:52 AM, Kamaraj P wrote: > > Hello All, > > Some more info. > > We are using DPDK 19.11. > > > > When we bringup application with --security-opt seccomp=unconfined > > option.. > > THe application bringup successfully and didnt observe any error when > DPDK > > init logs. > > Will that --security-opt seccomp=unconfined option recommended for > > non-previlege mode for DPDK application ? > > Please suggest. > > > > + Anatoly, he may have experience on running on non-privilege mode. > > > Thomas, David, > > What do you think documenting how to run as non root, we had similar > question > before, if memory serves me right Red Hat was looking for same thing at > some point. > > If we are agree, perhaps we can find a volunteer in the tech board for it. > > > > Thanks, > > Kamaraj > > > > On Mon, Aug 30, 2021 at 1:07 PM Kamaraj P <pkama...@gmail.com> wrote: > > > >> Hello All, > >> > >> We are not able to run the DPDK allocation without using privilege > option. > >> > >> Able to see the below erors: > >> > >> set_mempolicy: Operation not permitted > >> set_mempolicy: Operation not permitted > >> set_mempolicy: Operation not permitted > >> set_mempolicy: Operation not permitted > >> set_mempolicy: Operation not permitted > >> set_mempolicy: Operation not permitted > >> set_mempolicy: Operation not permitted > >> set_mempolicy: Operation not permitted > >> EAL: FATAL: rte_service_init() failed > >> Failed to init DPDK.set_mempolicy: Operation not permitted > >> set_mempolicy: Operation not permitted > >> set_mempolicy: Operation not permitted > >> set_mempolicy: Operation not permitted > >> set_mempolicy: Operation not permitted > >> set_mempolicy: Operation not permitted > >> set_mempolicy: Operation not permitted > >> set_mempolicy: Operation not permitted > >> Failed to create mbuf for pool DPDK_POOL_0 frame_len=2048 > num_mbufs=13824 > >> ret (Exec format error) > >> > >> BTW we are also enabling --iova-mode=va option as part DPDK init. > >> > >> Can anyone please throw some light on this ? > >> > >> Thanks, > >> Kamaraj > >> > >
