doca-dms

Operate NVIDIA DOCA Management Service daemons via gNMI and gNOI protocols.

3.2k|370|Updated Feb 25, 2026
One-click install
npx skills add https://github.com/NVIDIA/skills --skill doca-dms
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: doca-dms
Source: https://github.com/NVIDIA/skills/tree/main/skills/doca-dms
Command: npx skills add https://github.com/NVIDIA/skills --skill doca-dms

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Deploying and operating NVIDIA DOCA Management Service (DMS) to manage BlueField DPUs and ConnectX SmartNICs over gRPC is error-prone: operators must choose the right deployment shape, authentication mode, and protocol surface, and missteps with destructive gNOI operations can take production devices offline. This Skill guides agents through the documented DMS workflows so configuration, operation, and debugging follow the official public guide.

Core Features & Use Cases

  • Deployment and authentication planning: Choose between host (non-DPU), BlueField Arm, or Kubernetes pod deployment shapes, and select among localhost, PAM, credentials, or mTLS authentication modes with documented security trade-offs.
  • gNMI/gNOI operations: Issue gNMI Get/Set/Subscribe requests against YANG-modeled paths and run gNOI operations such as OS install, reboot, factory-reset, file transfer, mlxconfig, and containerz, with a mandatory confirmation gate for destructive actions.
  • Layered debugging and observability: Diagnose failures across transport, authentication, path, backend-tool, and persistency layers, and read or rotate dmsd/dmspe logs.
  • Use Case: A platform engineer needs to reboot a remote BlueField from an orchestrator. The Skill walks through verifying the target identity, obtaining explicit confirmation, and issuing the correct documented gNOI reboot operation.

Quick Start

Ask your agent to help you bring up the DMS daemon on a BlueField host and issue a gNMI Get against a documented interface path.

Frequently Asked Questions about doca-dms

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I manage a remote BlueField over gRPC with DOCA DMS?

Deploy the dmsd daemon on the appropriate shape (host, BlueField Arm, or Kubernetes pod), choose an authentication mode, then issue gNMI Get/Set requests for configuration or gNOI operations for system tasks. The public DMS guide is the authoritative source for flags and paths.

How do I choose a DMS authentication mode for production?

DMS documents four modes: localhost-only (development only, never expose externally), PAM, credentials, and mTLS. Read the Security Best Practices section of the public DMS guide before committing, and configure the -allowed_users list as the gRPC client authorization boundary.

Does DMS support gNMI Subscribe streaming telemetry?

Yes, DMS implements gNMI Subscribe with STREAM mode (SAMPLE intervals of 1s-60s) and ONCE mode; POLL and Aggregation modes are unimplemented. For a productized telemetry-aggregation surface, use the separate DOCA Telemetry Service instead.

What is the difference between -allowed_users and dmsgroup in DMS?

The -allowed_users flag (default root) is the gRPC client authorization boundary enforced by dmsd across all authentication modes. The dmsgroup Unix group is a separate gate used only by the privileged dmspe backend helper, not the boundary gRPC clients see.

Why did my DMS request fail and how do I debug it?

Debug in layers: first check transport (daemon running, listener, TLS), then authentication/authorization, then whether the path or operation is supported, then the backend tool layer (e.g. mlxconfig errors), and finally state persistency. Read frontend dmsd logs before backend dmspe logs.

When should I not use the doca-dms skill?

Do not use it for installing DOCA itself, building DOCA library applications, or turnkey telemetry aggregation. Route those to doca-setup, doca-programming-guide with the matching library skill, or the DOCA Telemetry Service respectively.