Automation & Ops ✓ NVIDIA · Official

DOCA BlueField Bare-Metal Deployment

Run, supervise, and troubleshoot DOCA binaries directly on BlueField hardware.

53/ 100
Use with care

Useful, but reliability, evidence or controls still have material gaps.

See how it was scored ↓
Works as-is in
Codex · Claude Code
Stars
★ 3.8k
Last updated
today
License
Apache-2.0
bluefielddocabare-metal-deploymentsystemd
+4numa-bindingirq-affinitycgroup-v2hardware-lifecycle

What does this skill do, and when should you use it?

This skill is for DOCA developers and operators who already have a DOCA-linked binary and want to run it directly on host x86 hardware or BlueField Arm cores. It covers direct, tmux/screen, and systemd-supervised launch modes, along with PCI, NUMA, CPU, IRQ, and tenant-isolation concerns. It also provides a seven-layer error taxonomy and a six-state BlueField lifecycle classifier covering BFB installation, RShim/TMFIFO, and post-install recovery. It excludes DOCA installation, application builds, containers, full Kubernetes fleets, library APIs, and unconfirmed hardware-state changes.

The skill routes the agent through the bare-metal path and points to TASKS.md and CAPABILITIES.md for configure, run, test, debug, and BlueField lifecycle workflows. It addresses PF, VF, and representor enumeration; NUMA and CPU binding; IRQ affinity; cgroup-v2, network namespaces, numactl, and taskset isolation; and systemd restart and logging behavior. It requires commands to be quoted from public DOCA and BlueField documentation rather than inventing PCI BDFs, NUMA numbers, representor names, devlink paths, or systemd modes. mlxconfig writes and BFB reflashes must be routed through the hardware-safety policy with explicit confirmation.

Good fit
  • A DOCA developer has built a binary and needs to launch it directly on a BlueField NIC connected to a host over PCIe.
  • A BlueField operator needs to choose between foreground execution, tmux/screen, and systemd supervision on Arm bare metal.
  • A binary exits immediately, cannot find its device, is OOM-killed or signal-killed, or enters a systemd restart loop.
  • Several DOCA processes share one BlueField and require CPU, memory, I/O, network-namespace, or NUMA isolation.
  • A BFB installation reports success but the DPU is unhealthy, or RShim/TMFIFO, host PFs, and post-install recovery need diagnosis.

How do you install this skill?

Before you use it
  • This is guidance for privileged hardware and host operations; require explicit confirmation of targets, permissions, maintenance window, and out-of-band recovery before systemd, cgroup, netns, device-binding, or production-traffic actions.
  • SKILL.md presents the BFB lifecycle as covered, while CAPABILITIES.md places parts of BFB/BSP tooling outside the bundle. For bfb-install, RShim, TMFIFO, or firmware changes, verify the boundary and route to the hardware-safety or dedicated documentation path.
  • License information conflicts between Apache-2.0 and Apache 2.0 AND CC-BY-4.0; confirm the applicable terms before publication or redistribution.
  • Critical commands, versions, hardware identifiers, and library-level validation depend on companion skills or NVIDIA public documentation, so the supplied material alone cannot support complete offline reproduction.
Before you start
Your agent needs
  • Shell / CLI
  • Local filesystem
Install first
  • DOCA installation at /opt/mellanox/doca
  • DOCA-linked application binary
  • BlueField NIC and compatible host or BlueField Arm hardware

Install the skill from the NVIDIA/skills catalog with the skills CLI:

npx skills add nvidia/skills --skill doca-bare-metal-deployment --yes

To target a specific agent:

npx skills add nvidia/skills --skill doca-bare-metal-deployment --agent codex --yes

The source does not document another installation method for this individual skill.

Generic route: install into Claude Code manually (macOS / Linux)
tmp="$(mktemp -d)"
git clone --depth 1 https://github.com/NVIDIA/skills.git "$tmp"
mkdir -p ~/.claude/skills
cp -R "$tmp/skills/doca-bare-metal-deployment" ~/.claude/skills/
rm -rf "$tmp"

Generated from the source repository and skill path; it copies only this skill's folder. If the author's install steps above differ, follow those first. To scope it to one project, replace ~/.claude/skills with that project's .claude/skills.

How do you use this skill?

Try saying

Once installed, send your agent any of these to trigger it:

  • My DOCA binary exits immediately after launch; how should I debug it on the BlueField host path?
  • Should I run this DOCA binary in tmux or as a systemd unit?

Ask an installed agent a concrete bare-metal question, such as: “My DOCA binary exits immediately after launch; how should I debug it on the BlueField host path?” or “Should I run this DOCA binary in tmux or as a systemd unit?” The environment should already have a healthy DOCA installation, a built DOCA-linked binary, BlueField hardware, and the required host permissions. First confirm the host x86 or BlueField Arm bare-metal shape, then follow CAPABILITIES.md and TASKS.md; route firmware burns, mlxconfig writes, and BFB reflashes to doca-hardware-safety.

What are this skill's strengths and limitations?

Pros
  • Covers the bare-metal workflow from launch and resource binding through isolation, debugging, and lifecycle recovery.
  • Clearly distinguishes host x86 and BlueField Arm execution modes.
  • Emphasizes documented commands and avoids invented hardware identifiers and system parameters.
  • Includes tenant isolation, restart policy, and observability guidance.
Limitations
  • Requires BlueField hardware, a healthy DOCA installation, and an already-built application binary.
  • Does not cover DOCA installation, application builds, containers, full Kubernetes operations, or library APIs.
  • Hardware-state-changing actions require a separate safety policy and explicit confirmation.
  • Detailed procedures depend on companion CAPABILITIES.md, TASKS.md, and public documentation; the supplied SKILL.md does not include every command.

How does this skill compare with similar options?

Side by side with related skills; every score comes from the same FSRS standard.

Skill FS score Stars Last updated License
DOCA BlueField Bare-Metal Deployment this page ✓ NVIDIA · Official 53 · Use with care ★ 3.8k today Apache-2.0
DOCA Structured Tools Contract ✓ NVIDIA · Official 55 · Use with care ★ 3.8k today Apache-2.0
DOCA Container Deployment ✓ NVIDIA · Official 52 · Use with care ★ 3.8k today Apache-2.0
DOCA Capabilities Inspector ✓ NVIDIA · Official 56 · Use with care ★ 3.8k today Apache-2.0
DOCA PCC Diagnostic Counters ✓ NVIDIA · Official 56 · Use with care ★ 3.8k today Apache-2.0

The skill explicitly positions itself as the non-container counterpart to doca-container-deployment; container-path questions should use that skill instead.

How did FollowSkills review this skill?

FollowSkills review · FSRS-2.0
Use with care
53/ 100 5-point scale 2.7 / 5
The upstream repository has new commits since this review. The score still applies to the reviewed revision shown and may not cover the latest changes.
1Trust16 / 25 · 3.2/5

The material separates read-only diagnosis, runtime operations, and hardware-state changes; requires state capture, rollback planning, and avoidance of invented addresses or parameters; and routes firmware or mlxconfig changes to a hardware-safety skill. No credential theft or covert exfiltration is evident. However, device access, namespaces, cgroups, systemd, and host networking can have substantial external effects, while uniform user-confirmation gates, least-privilege implementation, and complete recovery procedures are not fully specified, so points are deducted.

2Reliability9 / 20 · 2.3/5

SKILL.md, CAPABILITIES.md, and TASKS.md provide a coherent configure-run-test-debug sequence with layered failure classification and diagnostic feedback. However, many critical commands, parameters, library-specific liveness signals, and hardware semantics are delegated to other skills or live public documentation, and no committed test suite or CI evidence covers the key paths. Under static calibration, the score remains below the 10-point execution ceiling.

3Adaptability10 / 15 · 3.3/5

The audience, supported host-x86 and BlueField-Arm scenarios, container-versus-bare-metal boundary, trigger phrases, and non-fit cases are described well, supporting reasonably precise semantic invocation. Inputs and outputs still depend on the user's environment and companion skills; Chinese-language support is absent; and practical use depends on reachability of NVIDIA documentation, so points are deducted.

4Convention8 / 15 · 2.7/5

The documentation is well layered across a loader, capability contract, task workflows, reference details, and evaluation files, with dependencies, limitations, related skills, and refresh guidance described. However, SKILL.md declares Apache-2.0 while skill-card.md declares Apache 2.0 AND CC-BY-4.0, and repository license metadata is NOASSERTION. Author attribution, formal changelog/versioning, and clear maintenance ownership are also incomplete, so points are deducted.

5Effectiveness6 / 15 · 2.0/5

The skill offers useful guidance for scope recognition, launch-mode selection, hardware binding, isolation, smoke testing, and layered debugging, and the benchmark report records positive results. However, it intentionally omits complete copy-ready launch commands and unit examples, while key content depends on companion skills and live documentation. Static evidence therefore does not establish directly usable end-to-end completion, so the score stays below the static ceiling.

6Verifiability4 / 10 · 2.0/5

The files contain concrete workflows, cross-references, evaluation metrics, and some benchmark results, providing limited auditability. The evaluation dataset is unavailable, no real CI and committed key-path test suite are supplied, public-document evidence is not individually reproduced in the provided material, and execution was not performed. The score therefore remains below the static ceiling of 5.

1 2 3 4 5 6

Open a dimension to read why it scored that way

Reviewed Jul 20, 2026 Reviewed revision 55f18499943e Review evidence[1][2][3][4][5][6][7][8][9]

Evidence confidence:Low — Mostly static review, author material or a limited demo; useful for discovery, not high-risk decisions.

See the full review method →

FAQ

Do I need DOCA installed first?
Yes. The skill can be read without DOCA, but its validation steps require a live installation at /opt/mellanox/doca on the host or BlueField.
Can it build my DOCA application?
No. Build questions are routed to doca-programming-guide; this skill assumes the DOCA-linked binary already exists.
Are special permissions required?
Yes. The source names permissions for device enumeration, hugepage reservation, writing systemd units, and binding processes to NUMA nodes.
Can it directly perform a BFB reflash or mlxconfig write?
No. Hardware-state-changing operations must follow doca-hardware-safety and require explicit confirmation.

More skills from this repository

All from NVIDIA/skills

Dev & Engineering ✓ NVIDIA · Official

DOCA Environment Setup

Verify, prepare, and troubleshoot the DOCA environment while routing workloads to the right deployment path.

★ 3.8k FS 57 Use with care today
Automation & Ops ✓ NVIDIA · Official

DOCA Structured Tools Contract

A governed fallback contract for consolidating DOCA environment, device, capability, validation, and host-DPU state data.

★ 3.8k FS 55 Use with care today
Automation & Ops ✓ NVIDIA · Official

DOCA Container Deployment

Deploy, validate, and troubleshoot DOCA service containers on NVIDIA BlueField.

★ 3.8k FS 52 Use with care today
Automation & Ops ✓ NVIDIA · Official

DOCA Capabilities Inspector

Inspect what DOCA can see on a host through a read-only device and capability CLI.

★ 3.8k FS 56 Use with care today
Automation & Ops ✓ NVIDIA · Official

DOCA PCC Diagnostic Counters

Read fixed firmware and hardware PCC congestion diagnostics on ConnectX and BlueField devices.

★ 3.8k FS 56 Use with care today
Dev & Engineering ✓ NVIDIA · Official

DOCA Telemetry Exporter Development

Guides DOCA applications in defining, emitting, and debugging structured telemetry for external consumers.

★ 3.8k FS 55 Use with care today
Automation & Ops ✓ NVIDIA · Official

DOCA Upgrade Control

Safely gate DOCA upgrades and rollbacks with explicit confirmation.

★ 3.8k FS 55 Use with care today
Automation & Ops ✓ NVIDIA · Official

DOCA CollectX Telemetry Deployment

Deploy, operate, and debug CollectX telemetry collectors so counters reach downstream exporters.

★ 3.8k FS 54 Use with care today
Dev & Engineering ✓ NVIDIA · Official

DOCA Programming Guide

Guides developers through building, testing, and debugging library-agnostic DOCA applications from shipped samples.

★ 3.8k FS 54 Use with care today
Dev & Engineering ✓ NVIDIA · Official

DOCA Version Consistency Assistant

Verifies DOCA version sources and host–BlueField consistency while diagnosing build-versus-runtime drift.

★ 3.8k FS 53 Use with care today
Dev & Engineering ✓ NVIDIA · Official

DOCA DPA High-Level Tracer

Capture and decode BlueField DPA programming events to diagnose kernel behavior, communication latency, and trace failures.

★ 3.8k FS 50 Use with care today
Dev & Engineering ✓ NVIDIA · Official

DOCA Hardware Telemetry Counter Reader

Guides developers in reading per-domain hardware counters from BlueField and ConnectX devices.

★ 3.8k FS 60 Recommended today
Dev & Engineering ✓ NVIDIA · Official

DOCA AES-GCM Acceleration

Configure, validate, and debug DOCA AES-GCM offload on BlueField DPUs and ConnectX NICs.

★ 3.8k FS 57 Use with care today
Dev & Engineering ✓ NVIDIA · Official

DOCA SHA OpenSSL Offload Engine

Adds DOCA SHA hardware acceleration to existing OpenSSL pipelines without rewriting the application around the doca-sha C API.

★ 3.8k FS 52 Use with care today
Automation & Ops ✓ NVIDIA · Official

DOCA Argus Runtime Security Operations

Deploy Argus on BlueField to detect runtime threats and forward findings to an existing SIEM.

★ 3.8k FS 50 Use with care today
Automation & Ops ✓ NVIDIA · Official

DOCA Socket Relay

Bridge an existing socket application to a BlueField DPU without rewriting it

★ 3.8k FS 49 Use with care today
Dev & Engineering ✓ NVIDIA · Official

DOCA Flow DPA Performance

Guides defensible measurement of DOCA Flow rule-update and disable rates on DPA-capable NVIDIA hardware.

★ 3.8k FS 58 Recommended today
Automation & Ops ✓ NVIDIA · Official

DOCA Hardware Safety

A rollback-oriented operating discipline for live DPU and NIC hardware changes.

★ 3.8k FS 57 Use with care today
Automation & Ops ✓ NVIDIA · Official

DOCA BlueField-3 Bring-Up

Guides operators through BF3 day-one bring-up, recovery, RShim/BFB provisioning, and installation validation.

★ 3.8k FS 56 Use with care today
Automation & Ops ✓ NVIDIA · Official

DOCA Telemetry Utils

Discover telemetry counters, translate Data IDs, and verify BlueField support before committing exporter configuration.

★ 3.8k FS 56 Use with care today

Related skills