Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

support for non-root non-privileged mode #333

Open
aseaudi opened this issue Jun 7, 2023 · 2 comments
Open

support for non-root non-privileged mode #333

aseaudi opened this issue Jun 7, 2023 · 2 comments

Comments

@aseaudi
Copy link

aseaudi commented Jun 7, 2023

Hello

Due to security constraints, we need to run upg in rootless mode and without privileged mode.

Is there a way to run upg in such an environment ?

Thanks,

@RoadRunnr
Copy link
Member

maybe, be have not tried or needed that.

UPG being a VPP plugin is not doing anything special that would require root access. So, the question realy is: can VPP be run rootless? Your best bet on getting a comprehensive answer to that is to ask the VPP community.

@hcbwiz
Copy link

hcbwiz commented Sep 25, 2023

You can try to uses "VFIO-PCI".

  1. make sure the devices in /dev/vfio has the rw permission for the user.
  2. make sure your "hugepage mounted directory" has the rw permission for the user
  3. use "iova-mode=va" in the "dpdk section" of VPP configuration.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants