This commit builds on the non-root ovs work and adds a udev rule which will automatically set the group permissions of vfio devices.
Signed-off-by: Aaron Conole <acon...@redhat.com> --- Systemd folks say that this is not something that should be a part of systemd, but should be part of openvswitch. I can make a case for either, but it seems it's probably an uphill battle to get it in through systemd. This should be applied on branch-2.8, as it _could_ be considered a "fix" for commit e3e738a3d058 ("redhat: allow dpdk to also run as non-root user"). rhel/automake.mk | 1 + rhel/openvswitch-fedora.spec.in | 8 ++++++++ rhel/usr_lib_udev_rules.d_91-vfio.rules | 1 + 3 files changed, 10 insertions(+) create mode 100644 rhel/usr_lib_udev_rules.d_91-vfio.rules diff --git a/rhel/automake.mk b/rhel/automake.mk index 11c8be0..1d1ac1a 100644 --- a/rhel/automake.mk +++ b/rhel/automake.mk @@ -26,6 +26,7 @@ EXTRA_DIST += \ rhel/openvswitch-fedora.spec.in \ rhel/usr_share_openvswitch_scripts_sysconfig.template \ rhel/usr_share_openvswitch_scripts_systemd_sysconfig.template \ + rhel/usr_lib_udev_rules.d_91-vfio.rules \ rhel/usr_lib_systemd_system_openvswitch.service \ rhel/usr_lib_systemd_system_ovsdb-server.service \ rhel/usr_lib_systemd_system_ovs-vswitchd.service.in \ diff --git a/rhel/openvswitch-fedora.spec.in b/rhel/openvswitch-fedora.spec.in index 2eccada..59e8ff8 100644 --- a/rhel/openvswitch-fedora.spec.in +++ b/rhel/openvswitch-fedora.spec.in @@ -250,6 +250,11 @@ install -d -m 0755 $RPM_BUILD_ROOT%{_rundir}/openvswitch install -d -m 0750 $RPM_BUILD_ROOT%{_localstatedir}/log/openvswitch install -d -m 0755 $RPM_BUILD_ROOT%{_sysconfdir}/openvswitch +%if %{with dpdk} +install -p -D -m 0644 rhel/usr_lib_udev_rules.d_91-vfio.rules \ + $RPM_BUILD_ROOT%{_prefix}/lib/udev/rules.d/91-vfio.rules +%endif + install -p -D -m 0644 \ rhel/usr_share_openvswitch_scripts_systemd_sysconfig.template \ $RPM_BUILD_ROOT/%{_sysconfdir}/sysconfig/openvswitch @@ -566,6 +571,9 @@ fi %{_mandir}/man8/ovs-vswitchd.8* %{_mandir}/man8/ovs-parse-backtrace.8* %{_mandir}/man8/ovs-testcontroller.8* +%if %{with dpdk} +%{_prefix}/lib/udev/rules.d/91-vfio.rules +%endif %doc COPYING NOTICE README.rst NEWS rhel/README.RHEL.rst /var/lib/openvswitch /var/log/openvswitch diff --git a/rhel/usr_lib_udev_rules.d_91-vfio.rules b/rhel/usr_lib_udev_rules.d_91-vfio.rules new file mode 100644 index 0000000..8e34b2a --- /dev/null +++ b/rhel/usr_lib_udev_rules.d_91-vfio.rules @@ -0,0 +1 @@ +ACTION=="add", SUBSYSTEM=="vfio*", GROUP="hugetlbfs", MODE="0660" -- 2.9.4 _______________________________________________ dev mailing list d...@openvswitch.org https://mail.openvswitch.org/mailman/listinfo/ovs-dev