From: Damjan Marion <damarion@cisco.com>
Date: Wed, 12 May 2021 09:51:08 +0000 (+0200)
Subject: misc: change VFIO group ownership and permissions in vfctl script
X-Git-Tag: v21.10-rc0~79
X-Git-Url: https://gerrit.fd.io/r/gitweb?a=commitdiff_plain;h=742a5039b0c1985ad90a4be6690fe75b6757d177;p=vpp.git

misc: change VFIO group ownership and permissions in vfctl script

This is missing step to allow runing VPP unpriviledged
with AVF driver.

Type: improvement
Change-Id: I37dfad9236691c1a8e2837a5811536170c65d7bc
Signed-off-by: Damjan Marion <damarion@cisco.com>
---

diff --git a/extras/scripts/vfctl b/extras/scripts/vfctl
index 9fe6c8b02e7..d3eefa9a565 100755
--- a/extras/scripts/vfctl
+++ b/extras/scripts/vfctl
@@ -96,12 +96,16 @@ function create () {
 	mac_prefix=$(cat ${netdev_path}/address | cut -d: -f1,3,4,5,6 )
 	for vf_path in ${path}/virtfn*; do
 		vf=$(basename $(readlink ${vf_path}))
+		iommu_group=$(basename $(readlink ${vf_path}/iommu_group))
 		vfid=$(basename ${vf_path//virtfn/})
 		mac="${mac_prefix}:$(printf "%02x" ${vfid})"
 		sudo ip link set dev ${netdev} vf ${vfid} mac ${mac}
 		sudo ip link set dev ${netdev} vf ${vfid} trust on
 		sudo ip link set dev ${netdev} vf ${vfid} spoofchk off
 		pci-bind ${vf} vfio-pci
+		sudo chmod g+rw /dev/vfio/${iommu_group}
+		sudo chgrp sudo /dev/vfio/${iommu_group}
+		echo "VFIO group ${iommu_group} group ownership changed to sudo, group permissions changed to rw"
 	done
 
 	[ $(cat ${path}/sriov_numvfs) -gt 0 ] && show_vfs ${path} ${netdev}