crypto-perf: use IPC_LOCK to ensure mmap() works

Change SYS_ADMIN to IPC_LOCK capability to ensure DPDK gets to mmap() hugepages.

Signed-off-by: Mikko Ylinen <mikko.ylinen@intel.com>
This commit is contained in:
Mikko Ylinen 2019-06-07 19:56:02 +03:00
parent 156970adca
commit 08a079ead2
2 changed files with 4 additions and 1 deletions

View File

@ -109,6 +109,9 @@ $ kubectl describe node <node name> | grep qat.intel.com/generic
```
**Note**: If the `igb_uio` VF driver is used with the QAT device plugin,
the workload be deployed with `SYS_ADMIN` capabilities added.
3. Manually execute the `dpdk-test-crypto-perf` application to review the logs:
```
$ kubectl exec -it dpdkqatuio bash

View File

@ -26,7 +26,7 @@ spec:
securityContext:
capabilities:
add:
[SYS_ADMIN]
["IPC_LOCK"]
volumes:
- name: hugepage
emptyDir: