From 08a079ead2121967e96f4da74c2994f73b6ee855 Mon Sep 17 00:00:00 2001 From: Mikko Ylinen Date: Fri, 7 Jun 2019 19:56:02 +0300 Subject: [PATCH] crypto-perf: use IPC_LOCK to ensure mmap() works Change SYS_ADMIN to IPC_LOCK capability to ensure DPDK gets to mmap() hugepages. Signed-off-by: Mikko Ylinen --- cmd/qat_plugin/README.md | 3 +++ demo/crypto-perf-dpdk-pod-requesting-qat.yaml | 2 +- 2 files changed, 4 insertions(+), 1 deletion(-) diff --git a/cmd/qat_plugin/README.md b/cmd/qat_plugin/README.md index 38b06e29..bc979f08 100644 --- a/cmd/qat_plugin/README.md +++ b/cmd/qat_plugin/README.md @@ -109,6 +109,9 @@ $ kubectl describe node | grep qat.intel.com/generic ``` + **Note**: If the `igb_uio` VF driver is used with the QAT device plugin, + the workload be deployed with `SYS_ADMIN` capabilities added. + 3. Manually execute the `dpdk-test-crypto-perf` application to review the logs: ``` $ kubectl exec -it dpdkqatuio bash diff --git a/demo/crypto-perf-dpdk-pod-requesting-qat.yaml b/demo/crypto-perf-dpdk-pod-requesting-qat.yaml index 427a1015..d381c90b 100644 --- a/demo/crypto-perf-dpdk-pod-requesting-qat.yaml +++ b/demo/crypto-perf-dpdk-pod-requesting-qat.yaml @@ -26,7 +26,7 @@ spec: securityContext: capabilities: add: - [SYS_ADMIN] + ["IPC_LOCK"] volumes: - name: hugepage emptyDir: