Skip to content

Commit 359e692

Browse files
authored
Disable Key Validation feature during sonic-installation for Cisco Platforms (#3115)
Disabling key validation feature in grub file as its not yet supported for Cisco platforms What I did Check if the platform we are installing the image on is a Cisco platform Return success if it is so we are on Cisco platform. This way, we do not perform signature verification as this feature is not yet supported on our platforms. How I did it Modified sonic-installer grub.py code
1 parent 9515c64 commit 359e692

File tree

1 file changed

+4
-1
lines changed

1 file changed

+4
-1
lines changed

sonic_installer/bootloader/grub.py

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -157,7 +157,10 @@ def is_secure_upgrade_image_verification_supported(self):
157157

158158
check_if_verification_is_enabled_and_supported_code = '''
159159
SECURE_UPGRADE_ENABLED=0
160-
if [ -d "/sys/firmware/efi/efivars" ]; then
160+
#Disabling the check for cisco-8000 platforms as platform-side support is not ready yet. This will be removed once platform
161+
#support is added.
162+
ASIC_TYPE=$(sonic-cfggen -y /etc/sonic/sonic_version.yml -v asic_type)
163+
if [ -d "/sys/firmware/efi/efivars" ] && [[ ${ASIC_TYPE} != *"cisco-8000"* ]]; then
161164
if ! [ -n "$(ls -A /sys/firmware/efi/efivars 2>/dev/null)" ]; then
162165
mount -t efivarfs none /sys/firmware/efi/efivars 2>/dev/null
163166
fi

0 commit comments

Comments
 (0)