Skip to content

Commit fbd6c91

Browse files
selvipalmssonicbld
authored andcommitted
Disable Key Validation feature during sonic-installation for Cisco Platforms (#3115)
Disabling key validation feature in grub file as its not yet supported for Cisco platforms What I did Check if the platform we are installing the image on is a Cisco platform Return success if it is so we are on Cisco platform. This way, we do not perform signature verification as this feature is not yet supported on our platforms. How I did it Modified sonic-installer grub.py code
1 parent 88c027f commit fbd6c91

File tree

1 file changed

+4
-1
lines changed

1 file changed

+4
-1
lines changed

sonic_installer/bootloader/grub.py

+4-1
Original file line numberDiff line numberDiff line change
@@ -157,7 +157,10 @@ def is_secure_upgrade_image_verification_supported(self):
157157

158158
check_if_verification_is_enabled_and_supported_code = '''
159159
SECURE_UPGRADE_ENABLED=0
160-
if [ -d "/sys/firmware/efi/efivars" ]; then
160+
#Disabling the check for cisco-8000 platforms as platform-side support is not ready yet. This will be removed once platform
161+
#support is added.
162+
ASIC_TYPE=$(sonic-cfggen -y /etc/sonic/sonic_version.yml -v asic_type)
163+
if [ -d "/sys/firmware/efi/efivars" ] && [[ ${ASIC_TYPE} != *"cisco-8000"* ]]; then
161164
if ! [ -n "$(ls -A /sys/firmware/efi/efivars 2>/dev/null)" ]; then
162165
mount -t efivarfs none /sys/firmware/efi/efivars 2>/dev/null
163166
fi

0 commit comments

Comments
 (0)