Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add check for permissions and better error message #1668

Open
ondrej-fabry opened this issue Jun 16, 2020 · 0 comments
Open

Add check for permissions and better error message #1668

ondrej-fabry opened this issue Jun 16, 2020 · 0 comments

Comments

@ondrej-fabry
Copy link
Member

Problem

VPP Agent and VPP expect sufficient privileges for some of the features which are usually not enabled by default in the containers and users (especially newcomers) often forget to add them or perhaps don't even realize they are needed.

Because of insufficient privileges, there are different kinds of errors that can show up in the log. Most common ones are:

  • VPP cannot allocate huge pages:
    buffer: vlib_physmem_shared_map_create: pmalloc_map_pages: Unable to lock pages: Cannot allocate memory

  • VPP Agent is unable to switch network namespace:
    Failed to switch to Linux network namespace (<nil>): operation not permitted

  • VPP cannot create TAP interface:
    VPPApiError: System call error #2 (-12)

Solution

VPP Agent should check for required permissions before running operations that require them. If the required permissions are not found then more informative error message should be shown to the user. The error message could include info how to add required permissions.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant