Skip to content

Conversation

@ysmanman
Copy link
Contributor

Passing -M option to orchange to enable SAI MACSec POST when:

  • FIPS is enabled in SONiC; AND
  • MACSec is enabled on platform.

Why I did it

sonic-net/sonic-swss#3836 adds -M option to orchagent to enable SAI MACSec POST. This PR passes the option to orchagent when:

  • FIPS is enabled in SONiC; AND
  • MACSec is enabled on platform.
Work item tracking
  • Microsoft ADO (number only):

How I did it

How to verify it

Which release branch to backport (provide reason below if selected)

  • 202205
  • 202211
  • 202305
  • 202311
  • 202405
  • 202411
  • 202505

Tested branch (Please provide the tested image version)

Description for the changelog

Link to config_db schema for YANG module changes

A picture of a cute animal (not mandatory but encouraged)

- FIPS is enabled in SONiC; AND
- MACSec is enabled on platform.
@ysmanman ysmanman requested a review from lguohan as a code owner November 11, 2025 18:50
@mssonicbld
Copy link
Collaborator

/azp run Azure.sonic-buildimage

@azure-pipelines
Copy link

Azure Pipelines successfully started running 1 pipeline(s).

@ysmanman
Copy link
Contributor Author

@judyjoseph
Copy link
Contributor

/azp run Azure.sonic-buildimage

@azure-pipelines
Copy link

Azure Pipelines successfully started running 1 pipeline(s).

# - FIPS is enabled in SONiC (either in /proc/cmdline or /etc/fips/fips_enable); AND
# - MACSec is enabled on platform.
if grep -q "sonic_fips=1" /proc/cmdline || grep -q "1" /etc/fips/fips_enable ; then
if grep -q "macsec_enabled=1" /usr/share/sonic/platform/platform_env.conf 2>/dev/null ; then
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Hi @judyjoseph update review to source platform_env.conf as suggested.

@mssonicbld
Copy link
Collaborator

/azp run Azure.sonic-buildimage

@azure-pipelines
Copy link

Azure Pipelines successfully started running 1 pipeline(s).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

Status: No status

Development

Successfully merging this pull request may close these issues.

3 participants