Start using the newly created NodeFeatureRule configs with SGX.
This allows to drop the custom worker config.
Additionally, split the example NFD deployment into two steps
1) plain NFD (+SGX json patches)
2) NodeFeatureRule creation
NodeFeatureRule creation is not guaranteed to succeed when it's
part of the same kustomization with the CRD creation. Users may
also have NFD already running so allowing 2) alone works better
in that scenario.
Signed-off-by: Mikko Ylinen <mikko.ylinen@intel.com>
In Debian, uuid and uuid-dev are totally different things.
accel-config build depends on uuid-dev headers but the runtime
library is libuuid1. This is part of debian:sid-slim so we can
just drop installing uuid. Moreover, it's sufficient that we
only ship accel-config source.
Also, correctly ship OPAE SDK COPYING in the final image.
Signed-off-by: Mikko Ylinen <mikko.ylinen@intel.com>
accel-config v3.4.3 dropped libkmod, libudev dependencies, update
initcontainer to v3.4.3 and drop local customizations / workarounds.
Signed-off-by: Oleg Zhurakivskyy <oleg.zhurakivskyy@intel.com>
Remove libdlb-demo yaml that should have been dropped since dlb-libdlb-demo-pod yaml file replaced it
Signed-off-by: Hyeongju Johannes Lee <hyeongju.lee@intel.com>
The provisioning config can be optionally stored in the ProvisioningConfig
configMap which is then passed to initcontainer through the volume mount.
There's also a possibility for a node specific congfiguration through
passing a nodename via NODE_NAME into initcontainer's environment
and passing a node specific profile via configMap volume mount.
Signed-off-by: Oleg Zhurakivskyy <oleg.zhurakivskyy@intel.com>
This updates the QAT driver to the latest, QAT engine to the latest,
IPSEC MB to the latest, and IPP CRYPTO to the latest. A basic test
was done in a Kata container and openssl was able to find the qat-hw
engine. I don't have a way to test if qat-sw works as the configure
parameters have changed.
Signed-off-by: Eric Adams <eric.adams@intel.com>
Add checksum checks for toybox and qat driver
Use toybox version 0.8.5 instead of 0.8.4
Update toybox-config
Signed-off-by: Hyeongju Johannes Lee <hyeongju.lee@intel.com>
The version of the compute-runtime project installed in ubuntu-demo-opencl
is not working with the most recent GPUs anymore. Instead of updating it,
move to use pre-built images. This is inlined with our goal to speed-up CI
by skipping unnecessary demo images.
Signed-off-by: Mikko Ylinen <mikko.ylinen@intel.com>
The run-dpdk-test helper script builds dpdk-test-[compress|crypto]-perf
command line parameters dynamically. Some of the parameters were changed
in the recent DPDK builds and need updating.
Signed-off-by: Mikko Ylinen <mikko.ylinen@intel.com>
This updates the QAT driver to the latest version
and updates the new driver download location on
downloadmirror. Also, this openssl container build
requires yasm so it was added as well.
Signed-off-by: Eric Adams <eric.adams@intel.com>
With GCC 11, the build triggers errors:
/usr/src/opae/opae-sdk-1.5.0-2/opae-libs/include/opae/log.h:51:1: error: this 'if' clause does not guard... [-Werror=misleading-indentation]
51 | if (p > file) \
| ^~
...
Workaround the problem with -Wno-misleading-indentation.
Signed-off-by: Mikko Ylinen <mikko.ylinen@intel.com>
With the recent move to NFD custom source config for SGX features,
we no longer get SGX* cpuid labels but custom-intel.sgx so the grep
fails. Move to lowercase only checks.
Signed-off-by: Mikko Ylinen <mikko.ylinen@intel.com>
