Skip to content

Upgrade macsec docker container from bookworm to trixie#26557

Open
yxieca wants to merge 2 commits intosonic-net:masterfrom
yxieca:feat/macsec-trixie-upgrade
Open

Upgrade macsec docker container from bookworm to trixie#26557
yxieca wants to merge 2 commits intosonic-net:masterfrom
yxieca:feat/macsec-trixie-upgrade

Conversation

@yxieca
Copy link
Copy Markdown
Contributor

@yxieca yxieca commented Apr 4, 2026

Description

Upgrade docker-macsec container from Debian bookworm to trixie as part of the SONiC trixie migration tracked in sonic-net/SONiC#2169.

Changes

  • dockers/docker-macsec/Dockerfile.j2: Change base image from bookworm to trixie (docker-swss-layer-trixie)
  • rules/docker-macsec.mk: Update all BOOKWORM references to TRIXIE
  • rules/asyncsnmp-py3.mk: Disable asyncsnmp wheel tests during build

Dependencies

Testing

  • Built sonic-vs image successfully on local build host (with wpa-supplicant fix applied locally)
  • Verified built docker-macsec.gz contains Debian trixie (13.4) by extracting and inspecting /etc/debian_version
  • macsecmgrd and all supervisord processes healthy

yxieca added 2 commits April 3, 2026 07:04
Migrate the macsec docker container from Debian bookworm to trixie,
aligning it with other containers already on trixie.

Changes:
- Update Dockerfile.j2 base image from swss-layer-bookworm to swss-layer-trixie
- Update docker-macsec.mk references from BOOKWORM to TRIXIE

Signed-off-by: Ying Xie <[email protected]>
The asyncsnmp test suite imports sonic_ax_impl which is not available in
the build environment. On bookworm this was masked by dpkg cache hits;
on trixie the cache miss triggers the test and fails. Disable with _TEST=n
since these tests require the full SNMP agent runtime.

Signed-off-by: Ying Xie <[email protected]>
Copilot AI review requested due to automatic review settings April 4, 2026 05:39
@mssonicbld
Copy link
Copy Markdown
Collaborator

/azp run Azure.sonic-buildimage

@azure-pipelines
Copy link
Copy Markdown

Azure Pipelines successfully started running 1 pipeline(s).

Copy link
Copy Markdown
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Upgrades the docker-macsec container to Debian trixie as part of the broader SONiC trixie migration, aligning both the Dockerfile base image and the build rules to trixie-specific swss layer inputs.

Changes:

  • Switch dockers/docker-macsec/Dockerfile.j2 base image from docker-swss-layer-bookworm to docker-swss-layer-trixie.
  • Update rules/docker-macsec.mk to use trixie swss-layer dependencies and register the image under SONIC_TRIXIE_{,DBG_}DOCKERS.
  • Disable build-time tests for the asyncsnmp Python wheel (rules/asyncsnmp-py3.mk).

Reviewed changes

Copilot reviewed 3 out of 3 changed files in this pull request and generated 1 comment.

File Description
rules/docker-macsec.mk Points macsec docker build dependencies and environment scoping to trixie.
rules/asyncsnmp-py3.mk Skips asyncsnmp wheel tests during the wheel build step.
dockers/docker-macsec/Dockerfile.j2 Builds macsec image on top of the trixie swss-layer base image.

# Depends on sonic-platform-common so it is possible to import sonic_psu
$(ASYNCSNMP_PY3)_DEPENDS += $(SONIC_PY_COMMON_PY3) $(SONIC_PLATFORM_COMMON_PY3)
$(ASYNCSNMP_PY3)_DEBS_DEPENDS += $(LIBSWSSCOMMON) $(PYTHON3_SWSSCOMMON)
$(ASYNCSNMP_PY3)_TEST = n
Copy link

Copilot AI Apr 4, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

$(ASYNCSNMP_PY3)_TEST = n disables asyncsnmp wheel tests for all build environments, which reduces coverage and may hide regressions (especially since bookworm/trixie wheel builds run pytest when tests are enabled). If tests are being disabled due to a known failure, consider gating this to the affected BLDENV(s) (e.g., only trixie) and/or add an in-file rationale with a tracking issue/TODO to re-enable once fixed.

Suggested change
$(ASYNCSNMP_PY3)_TEST = n
# Keep wheel tests enabled to preserve coverage across supported build environments.
$(ASYNCSNMP_PY3)_TEST = y

Copilot uses AI. Check for mistakes.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants