Skip to content

gt: allow policies to request more hugepages after boot#500

Merged
AltraMayor merged 4 commits intomasterfrom
gt_upd
Jul 6, 2021
Merged

gt: allow policies to request more hugepages after boot#500
AltraMayor merged 4 commits intomasterfrom
gt_upd

Conversation

@AltraMayor
Copy link
Owner

When more hugepages are needed after boot and a Grantor server is running with a non-root user, the following log entry may show up in the log: EAL: Couldn't get fd on hugepage file. The previous log entry is likely followed by the following entry: LPM: LPM memory allocation failed.

This pull request addresses this problem and adds a gkctl script to request the reload of the policy.

@AltraMayor AltraMayor added the Operational demand This issue would make Gatekeeper safer and/or cheaper to operate label Jun 30, 2021
@AltraMayor AltraMayor added this to the First deployment milestone Jun 30, 2021
The new script, namely gkctl/scripts/reload_policy.lua,
reloads the Lua policy from the disk and
updates the instances of the GT block.
l_update_gt_lua_states() was issueing the same error message for
failures of mb_alloc_entry() and mb_send_entry().
This patch clarifies which failure actually happened.
The capabilities CAP_DAC_OVERRIDE and CAP_SYS_ADMIN are needed
to allow policies to request more hugepages during a reload.
The capabilities CAP_DAC_OVERRIDE and CAP_SYS_ADMIN are needed
to allow policies to request more hugepages during
an incremental update.
@AltraMayor AltraMayor merged commit fd571dc into master Jul 6, 2021
@AltraMayor AltraMayor deleted the gt_upd branch July 6, 2021 21:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Operational demand This issue would make Gatekeeper safer and/or cheaper to operate

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant