Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
33 commits
Select commit Hold shift + click to select a range
63672a4
[ci/build]: Upgrade SONiC package versions (#24920)
mssonicbld Mar 29, 2026
19920f2
fix: golang security and security apt upgrade (#26420)
auspham Mar 30, 2026
4586319
fix: tornato and natsever security (#26460)
auspham Apr 7, 2026
778da86
[submodule] Update submodule sonic-platform-daemons to the latest HEA…
mssonicbld Apr 8, 2026
c7ed4d3
[submodule] Update submodule sonic-swss to the latest HEAD automatica…
mssonicbld Apr 8, 2026
e6e29a6
[202505] Upgrade Broadcom xgs SAI version to 13.2.1.36 (#26481)
Gfrom2016 Apr 9, 2026
7ec3ad4
[Arista] Update thermal sensors after adding TH5 diodes in platform d…
mssonicbld Apr 9, 2026
43fbbee
[submodule] Update submodule sonic-swss to the latest HEAD automatica…
mssonicbld Apr 10, 2026
87517a2
Enable PORT PHY attribute collection by default (#26716)
mssonicbld Apr 11, 2026
8373293
[build] Fix grpcio 1.15.1 install failure in arm64 env. (#26682)
mssonicbld Apr 12, 2026
44db870
[build] Enable pip no build isolation config for swi tools (#26684)
yijingyan2 Apr 14, 2026
9fa82d4
[build] upgrade p4lang package versions (#26732)
yijingyan2 Apr 15, 2026
cf556da
[build][202505] Avoid using jsonpath_ng v1.8.0 in sonic slave image. …
yijingyan2 Apr 16, 2026
4dae75f
fix: resolve April 2026 docker-ptf security vulnerabilities (#26860)
auspham Apr 20, 2026
dd8c3d9
Update apt source list to azure mirror in docker dash-engine (#26868)
yijingyan2 Apr 20, 2026
043b744
[build] Install python3-gi in docker-sonic-vs as pygobject's dependen…
mssonicbld Apr 20, 2026
70c6c2c
[ci/build]: Upgrade SONiC package versions (#26905)
mssonicbld Apr 21, 2026
bafdd0d
chore: pin ptf_nn_agent.py to use nnpy (#26942)
mssonicbld Apr 30, 2026
168bf62
fix: security vulnerability docker-ptf (#27091)
auspham May 2, 2026
80152de
Open [202505][build] use deb.debian.org for openssh source dget (#27331)
yijingyan2 May 13, 2026
9480dca
[PrefixListMgr]: Refactor PrefixListMgr to support multiple prefix ty…
mssonicbld May 13, 2026
37897b9
fix: docker-ptf May vulnerability (#27358)
auspham May 15, 2026
da6da86
[202505][build] remove redundant pip bootstrp from docker-ptf (#27354)
yijingyan2 May 15, 2026
8d9faf4
[build] replace deprecated setup.py install with pip installation for…
yijingyan2 May 27, 2026
8dbbf05
[submodule] Update submodule sonic-linux-kernel to the latest HEAD au…
mssonicbld May 27, 2026
a8d922b
[ci/build]: Upgrade SONiC package versions (#27560)
mssonicbld May 28, 2026
b01f37e
[ci/build]: Upgrade SONiC package versions (#27628)
mssonicbld May 31, 2026
ecc562c
[ci/build]: Upgrade SONiC package versions (#27872)
mssonicbld Jun 13, 2026
ea78c5f
[build] upgrade p4lang-pi to 0.1.1-1 (#28064)
lunyue-ms Jun 24, 2026
fc4955b
[build] Add timeout for apt-get build hook to prevent long hangs (#26…
lunyue-ms Jun 24, 2026
30dd7a8
[ci/build]: Upgrade SONiC package versions (#28121)
mssonicbld Jun 27, 2026
5837dce
ci: disable KVM PR tests on 202505, keep build (#28230)
auspham Jul 3, 2026
b4aaf04
Merge sonic-net/sonic-buildimage 202505 into Azure/sonic-buildimage-m…
kktheballer Jul 22, 2026
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
820 changes: 410 additions & 410 deletions azure-pipelines.yml

Large diffs are not rendered by default.

3 changes: 1 addition & 2 deletions build_debian.sh
Original file line number Diff line number Diff line change
Expand Up @@ -120,8 +120,7 @@ sudo LANG=C chroot $FILESYSTEM_ROOT mount
## Pointing apt to public apt mirrors and getting latest packages, needed for latest security updates
scripts/build_mirror_config.sh files/apt $CONFIGURED_ARCH $IMAGE_DISTRO
sudo cp files/apt/sources.list.$CONFIGURED_ARCH $FILESYSTEM_ROOT/etc/apt/sources.list
sudo cp files/apt/apt-retries-count $FILESYSTEM_ROOT/etc/apt/apt.conf.d/
sudo cp files/apt/apt.conf.d/{81norecommends,apt-{clean,gzip-indexes,no-languages},no-check-valid-until} $FILESYSTEM_ROOT/etc/apt/apt.conf.d/
sudo cp files/apt/apt.conf.d/{81norecommends,apt-{clean,gzip-indexes,no-languages,timeout-n-retries},no-check-valid-until} $FILESYSTEM_ROOT/etc/apt/apt.conf.d/

## Note: set lang to prevent locale warnings in your chroot
sudo LANG=C chroot $FILESYSTEM_ROOT apt-get -y update
Expand Down
8 changes: 8 additions & 0 deletions device/arista/x86_64-arista_7060x6_64pe/platform.json
Original file line number Diff line number Diff line change
Expand Up @@ -110,6 +110,14 @@
{
"name": "Management Card Inlet",
"controllable": false
},
{
"name": "TH5 Diode 1",
"controllable": false
},
{
"name": "TH5 Diode 2",
"controllable": false
}
],
"sfps": [
Expand Down
2 changes: 0 additions & 2 deletions device/arista/x86_64-arista_7060x6_64pe/sensors.conf
Original file line number Diff line number Diff line change
Expand Up @@ -5,8 +5,6 @@ bus "i2c-29" "SCD 0000:03:00.0 SMBus master 1 bus 4"
chip "max6581-i2c-25-4d"
ignore temp5
ignore temp6
ignore temp7
ignore temp8

chip "nvme-pci-0400"
# TODO: sensors complaining about tempX_min and tempX_max
Expand Down
8 changes: 8 additions & 0 deletions device/arista/x86_64-arista_7060x6_64pe_b/platform.json
Original file line number Diff line number Diff line change
Expand Up @@ -118,6 +118,14 @@
{
"name": "Management Card Inlet",
"controllable": false
},
{
"name": "TH5 Diode 1",
"controllable": false
},
{
"name": "TH5 Diode 2",
"controllable": false
}
],
"sfps": [
Expand Down
2 changes: 0 additions & 2 deletions device/arista/x86_64-arista_7060x6_64pe_b/sensors.conf
Original file line number Diff line number Diff line change
Expand Up @@ -5,8 +5,6 @@ bus "i2c-31" "SCD 0000:08:00.0 SMBus master 1 bus 4"
chip "max6581-i2c-27-4d"
ignore temp5
ignore temp6
ignore temp7
ignore temp8

chip "nvme-pci-0400"
# TODO: sensors complaining about tempX_min and tempX_max
Expand Down
6 changes: 4 additions & 2 deletions dockers/docker-base-bookworm/Dockerfile.j2
Original file line number Diff line number Diff line change
Expand Up @@ -28,8 +28,10 @@ ENV DEBIAN_FRONTEND=noninteractive
# Configure data sources for apt/dpkg
COPY ["dpkg_01_drop", "/etc/dpkg/dpkg.cfg.d/01_drop"]
COPY ["sources.list.{{ CONFIGURED_ARCH }}", "/etc/apt/sources.list"]
COPY ["no_install_recommend_suggest", "/etc/apt/apt.conf.d"]
COPY ["no-check-valid-until", "/etc/apt/apt.conf.d"]
COPY ["files/apt/apt.conf.d/", "/etc/apt/apt.conf.d/"]
# Install certificates by disabling the peer verification
RUN apt -o Acquire::https::Verify-Peer=false update && \
apt -o Acquire::https::Verify-Peer=false install -y ca-certificates

# Update apt cache and
# pre-install fundamental packages
Expand Down
4 changes: 0 additions & 4 deletions dockers/docker-base-bookworm/no-check-valid-until

This file was deleted.

5 changes: 0 additions & 5 deletions dockers/docker-base-bookworm/no_install_recommend_suggest

This file was deleted.

44 changes: 33 additions & 11 deletions dockers/docker-fpm-frr/base_image_files/prefix_list
Original file line number Diff line number Diff line change
Expand Up @@ -32,17 +32,37 @@ check_root_privileges() {
fi
}

# Function to check if the device is supported device with type spine routers and subtype UpstreamLC
check_spine_router() {
type=$(sonic-cfggen -d -v DEVICE_METADATA.localhost.type)
subtype=$(sonic-cfggen -d -v DEVICE_METADATA.localhost.subtype)

# only supported on UpstreamLC or UpperSpineRouter
if [[ ("$type" == "SpineRouter" && "$subtype" == "UpstreamLC") || "$type" == "UpperSpineRouter" ]]; then
return
# Function to check if the device is a supported device type
DEVICE_TYPE=""
DEVICE_SUBTYPE=""

read_device_metadata() {
if [[ -z "$DEVICE_TYPE" ]]; then
DEVICE_TYPE=$(sonic-cfggen -d -v DEVICE_METADATA.localhost.type)
DEVICE_SUBTYPE=$(sonic-cfggen -d -v DEVICE_METADATA.localhost.subtype)
fi
}

echo "Operation is only supported on Upstream SpineRouter." >&2
declare -A prefix_type_devices
prefix_type_devices=(
["ANCHOR_PREFIX"]="SpineRouter:UpstreamLC UpperSpineRouter"
["SUPPRESS_PREFIX"]=""
)

validate_device_for_type() {
local prefix_type=$1
local allowed="${prefix_type_devices[$prefix_type]}"
[[ -z "$allowed" ]] && return
read_device_metadata
local device_id="$DEVICE_TYPE:$DEVICE_SUBTYPE"
for entry in $allowed; do
if [[ "$entry" == *":"* ]]; then
[[ "$device_id" == "$entry" ]] && return
else
[[ "$DEVICE_TYPE" == "$entry" ]] && return
fi
done
echo "Prefix type '$prefix_type' is not supported on device type '$DEVICE_TYPE' (subtype: '$DEVICE_SUBTYPE')." >&2
exit 1
}

Expand Down Expand Up @@ -147,7 +167,7 @@ handle_prefix_list_single() {
}

prefix_list_operations=("add" "remove" "status")
supported_prefix_types=("ANCHOR_PREFIX")
supported_prefix_types=("ANCHOR_PREFIX" "SUPPRESS_PREFIX")
# Main script execution
if [[ "$1" == "-h" || "$1" == "--help" ]]; then
display_help
Expand All @@ -156,10 +176,12 @@ fi
if [ "$1" != "status" ]; then
check_root_privileges
fi
check_spine_router
skip_chassis_supervisor

validate_operation $1 $2
if [[ "$1" == "add" || "$1" == "remove" ]]; then
validate_device_for_type "$2"
fi

# Read SONiC immutable variables
[ -f /etc/sonic/sonic-environment ] && . /etc/sonic/sonic-environment
Expand Down
Original file line number Diff line number Diff line change
@@ -0,0 +1 @@
{{ data.ipv }} prefix-list {{ data.prefix_list_name }} permit {{ data.prefix }}
Original file line number Diff line number Diff line change
@@ -0,0 +1 @@
no {{ data.ipv }} prefix-list {{ data.prefix_list_name }} permit {{ data.prefix }}
2 changes: 1 addition & 1 deletion dockers/docker-platform-monitor/Dockerfile.j2
Original file line number Diff line number Diff line change
Expand Up @@ -44,7 +44,7 @@ RUN apt-get install -y -t bookworm-backports \
# install any dependencies required by the Arista sonic_platform package.
# TODO: eliminate the need to install these explicitly.
RUN pip3 install grpcio==1.51.1 \
grpcio-tools==1.51.1
grpcio-tools==1.51.1 --no-build-isolation

# Barefoot platform vendors' sonic_platform packages import these Python libraries
RUN pip3 install thrift==0.13.0 netifaces
Expand Down
5 changes: 2 additions & 3 deletions dockers/docker-ptf-sai/Dockerfile.j2
Original file line number Diff line number Diff line change
Expand Up @@ -45,9 +45,8 @@ RUN dpkg -r python-ptf
RUN pip3 install setuptools==51.0.0
{% endif %}
# Install new ptf package
RUN git clone https://github.com/p4lang/ptf.git \
&& cd ptf \
&& python3 setup.py install --single-version-externally-managed --record /tmp/ptf_install.txt
RUN pip3 install git+https://github.com/p4lang/ptf.git \
&& pip3 show -f ptf > /tmp/ptf_install.txt

run echo "declare -x LANG=\"C.UTF-8\"" >> /root/.bashrc
run echo "declare -x LC_ALL=\"C.UTF-8\"" >> /root/.bashrc
Expand Down
Loading
Loading