Thanks Ferruh.
One more option which we have figured out to resolve this error by adding
SYS_NICE capability ( --cap-add=NET_ADMIN --cap-add=SYS_RESOURCE
--cap-add=SYS_NICE).
Not sure whether it will work for all the scenarios. However the above
options will ensure DPDK application can run as non-previlage mode ?
Please suggest the right approach which should work for all the DPDK
versions.

Thanks,
Kamaraj

On Mon, Aug 30, 2021 at 4:57 PM Ferruh Yigit [off-list ref] wrote:

On 8/30/2021 8:52 AM, Kamaraj P wrote:

quoted

Hello All,
Some more info.
We are using DPDK 19.11.

When we bringup application with --security-opt seccomp=unconfined
option..
THe application bringup successfully and didnt observe any error when

DPDK

quoted

init logs.
Will that --security-opt seccomp=unconfined option recommended for
non-previlege mode for DPDK application ?
Please suggest.

+ Anatoly, he may have experience on running on non-privilege mode.


Thomas, David,

What do you think documenting how to run as non root, we had similar
question
before, if memory serves me right Red Hat was looking for same thing at
some point.

If we are agree, perhaps we can find a volunteer in the tech board for it.

quoted

Thanks,
Kamaraj

On Mon, Aug 30, 2021 at 1:07 PM Kamaraj P [off-list ref] wrote:

quoted

Hello All,

We are not able to run the DPDK allocation without using privilege

option.

quoted

quoted

Able to see the below erors:

set_mempolicy: Operation not permitted
set_mempolicy: Operation not permitted
set_mempolicy: Operation not permitted
set_mempolicy: Operation not permitted
set_mempolicy: Operation not permitted
set_mempolicy: Operation not permitted
set_mempolicy: Operation not permitted
set_mempolicy: Operation not permitted
EAL: FATAL: rte_service_init() failed
Failed to init DPDK.set_mempolicy: Operation not permitted
set_mempolicy: Operation not permitted
set_mempolicy: Operation not permitted
set_mempolicy: Operation not permitted
set_mempolicy: Operation not permitted
set_mempolicy: Operation not permitted
set_mempolicy: Operation not permitted
set_mempolicy: Operation not permitted
Failed to create mbuf for pool DPDK_POOL_0 frame_len=2048

num_mbufs=13824

quoted

quoted

ret (Exec format error)

BTW we are also enabling --iova-mode=va option as part DPDK init.

Can anyone please throw some light on this ?

Thanks,
Kamaraj