Skip to content

[Mellanox] [SED] Wipe SSD CLI - #28433

Draft
ShauliTaragin wants to merge 1 commit into
sonic-net:masterfrom
ShauliTaragin:ssd-wipe
Draft

[Mellanox] [SED] Wipe SSD CLI#28433
ShauliTaragin wants to merge 1 commit into
sonic-net:masterfrom
ShauliTaragin:ssd-wipe

Conversation

@ShauliTaragin

Copy link
Copy Markdown
Contributor

HLD: sonic-net/SONiC#2449
This PR is dependent on: sonic-net/sonic-platform-common#712

Why I did it

Support the SONiC CLI to securely wipe the SSD (crypto + block erase).

Work item tracking
  • Microsoft ADO (number only):

How I did it

  • Add ssd_erase.sh: bash orchestrator that pivots the OS to a tmpfs
    ramdisk, unmounts the boot SSD, then performs sedutil-cli PSID revert
    (crypto erase) followed by nvme sanitize --sanact=0x02 (block erase).
  • Add sed_pw_utils.sh helper for SED prerequisite checks.
  • Install rsync in the base image (required for the tmpfs pivot).

How to verify it

config sed wipe-ssd

Which release branch to backport (provide reason below if selected)

  • 202305
  • 202311
  • 202405
  • 202411
  • 202505
  • 202511

Tested branch (Please provide the tested image version)

Description for the changelog

Link to config_db schema for YANG module changes

A picture of a cute animal (not mandatory but encouraged)

Signed-off-by: Shauli Taragin <staragin@nvidia.com>
@ShauliTaragin
ShauliTaragin requested a review from lguohan as a code owner July 15, 2026 13:53
@mssonicbld

Copy link
Copy Markdown
Collaborator

/azp run Azure.sonic-buildimage

@azure-pipelines

Copy link
Copy Markdown
Azure Pipelines:
There may be pipelines that require an authorized user to comment /azp run to run.

@azure-pipelines

Copy link
Copy Markdown
Azure Pipelines:
Successfully started running 1 pipeline(s).

@ShauliTaragin

Copy link
Copy Markdown
Contributor Author

/azpw run

@mssonicbld

Copy link
Copy Markdown
Collaborator

⚠️ Notice: /azpw run only runs failed jobs now. If you want to trigger a whole pipline run, please rebase your branch or close and reopen the PR.
💡 Tip: You can also use /azpw retry to retry failed jobs directly.

Retrying failed(or canceled) jobs...

@mssonicbld

Copy link
Copy Markdown
Collaborator

Retrying failed(or canceled) stages in build 1165799:

✅Stage Build:

  • Job mellanox: retried.

@ShauliTaragin

Copy link
Copy Markdown
Contributor Author

/azpw run

@mssonicbld

Copy link
Copy Markdown
Collaborator

⚠️ Notice: /azpw run only runs failed jobs now. If you want to trigger a whole pipline run, please rebase your branch or close and reopen the PR.
💡 Tip: You can also use /azpw retry to retry failed jobs directly.

Retrying failed(or canceled) jobs...

@mssonicbld

Copy link
Copy Markdown
Collaborator

Retrying failed(or canceled) stages in build 1165799:

✅Stage Build:

  • Job mellanox: retried.

@ShauliTaragin
ShauliTaragin marked this pull request as draft July 19, 2026 11:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants