Skip to content

Update ip commands for MACsec for Bookworm#1368

Merged
saiarcot895 merged 3 commits intosonic-net:masterfrom
saiarcot895:update-macsec-for-bookworm
Apr 4, 2024
Merged

Update ip commands for MACsec for Bookworm#1368
saiarcot895 merged 3 commits intosonic-net:masterfrom
saiarcot895:update-macsec-for-bookworm

Conversation

@saiarcot895
Copy link
Contributor

Bookworm's iproute2 has built-in support for configuring MACsec with XPN ciphers. Unfortunately, the syntax is slightly different, which means changes are needed for this to work on Bookworm.

Update the iproute2 commands run for Bookworm. This does mean compatibility with Bullseye will break.

Bookworm's iproute2 has built-in support for configuring MACsec with XPN
ciphers. Unfortunately, the syntax is slightly different, which means
changes are needed for this to work on Bookworm.

Update the iproute2 commands run for Bookworm. This does mean
compatibility with Bullseye will break.

Signed-off-by: Saikrishna Arcot <sarcot@microsoft.com>
Pterosaur
Pterosaur previously approved these changes Apr 3, 2024
@Pterosaur
Copy link
Contributor

#1369

@kcudnik
Copy link
Collaborator

kcudnik commented Apr 3, 2024

you can add tests in the same PR, you dont need extra pr just for tests

@Pterosaur
Copy link
Contributor

you can add tests in the same PR, you dont need extra pr just for tests

Yes, but I'm not sure whether my changes will fix this coverage issue, Meanwhile, I feel I don't have the write permission for this PR.
So, just raise a draft PR and ask @saiarcot895 to pick up my change.

Signed-off-by: Ze Gan <ganze718@gmail.com>
@saiarcot895 saiarcot895 requested a review from kcudnik April 4, 2024 06:38
@saiarcot895 saiarcot895 merged commit d9ba01b into sonic-net:master Apr 4, 2024
@saiarcot895 saiarcot895 deleted the update-macsec-for-bookworm branch April 4, 2024 18:44
saiarcot895 added a commit to saiarcot895/sonic-buildimage that referenced this pull request Apr 17, 2024
This submodule update needs to go as part of this change because it
would break compatibility with Bullseye for MACsec, but adds
compatibility for Bookworm, which is what is needed here.

This brings in the following commits:

```
73ada8d5 Fix SSCI parameter when creating MACsec tunnels on Bookworm (sonic-net/sonic-sairedis#1372)
c41a0cb9 SAI submodule update to bring saithrift changes for syncd bookworm (sonic-net/sonic-sairedis#1370)
be47489f Add Bookworm build to PR checks (sonic-net/sonic-sairedis#1371)
d9ba01b5 Update ip commands for MACsec for Bookworm (sonic-net/sonic-sairedis#1368)
```

Signed-off-by: Saikrishna Arcot <sarcot@microsoft.com>
yxieca pushed a commit to sonic-net/sonic-buildimage that referenced this pull request Apr 22, 2024
* Upgrade VS syncd to Bookworm

As part of this, iproute2 is no longer compiled here, since the
macsec patch is now in version 6.1. In addition, for docker-sonic-vs,
version 6.1 of iproute2 is pulled from the bullseye-backports repo.

* Update sonic-sairedis submodule

This submodule update needs to go as part of this change because it
would break compatibility with Bullseye for MACsec, but adds
compatibility for Bookworm, which is what is needed here.

This brings in the following commits:

```
73ada8d5 Fix SSCI parameter when creating MACsec tunnels on Bookworm (sonic-net/sonic-sairedis#1372)
c41a0cb9 SAI submodule update to bring saithrift changes for syncd bookworm (sonic-net/sonic-sairedis#1370)
be47489f Add Bookworm build to PR checks (sonic-net/sonic-sairedis#1371)
d9ba01b5 Update ip commands for MACsec for Bookworm (sonic-net/sonic-sairedis#1368)
```

Signed-off-by: Saikrishna Arcot <sarcot@microsoft.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants