feat: add support for lenovo gb300s (#2753)

This PR adds support for Lenovo-AMI GB300s and bumps libredfish to
`v0.44.12`

## Type of Change
<!-- Check one that best describes this PR -->
- [x] **Add** - New feature or capability
- [ ] **Change** - Changes in existing functionality
- [ ] **Fix** - Bug fixes
- [ ] **Remove** - Removed features or deprecated functionality
- [ ] **Internal** - Internal changes (refactoring, tests, docs, etc.)

## Breaking Changes
<!-- If checked, describe the breaking changes and migration steps -->
<!-- Breaking changes are not generally permitted, please discuss on a
GitHub discussion or with the development team if you believe you need
to break a backward compatibility guarantee -->
- [ ] **This PR contains breaking changes**

## Testing
<!-- How was this tested? Check all that apply -->
- [ ] Unit tests added/updated
- [ ] Integration tests added/updated
- [x] Manual testing performed
- [ ] No testing required (docs, internal refactor, etc.)

## Additional Notes
<!-- Any additional context, deployment notes, or reviewer guidance -->

---------

Signed-off-by: Krish Dandiwala <kdandiwala@nvidia.com>

Author: krish-nvidia

Cargo.lock

@@ -26,7 +26,7 @@ authors = ["NVIDIA Carbide Engineering <carbide-dev@exchange.nvidia.com>"]
 
 [workspace.dependencies]
 clap = { version = "4", features = ["derive", "env"] }
-libredfish = { git = "https://github.com/NVIDIA/libredfish.git", tag = "v0.44.11" }
+libredfish = { git = "https://github.com/NVIDIA/libredfish.git", tag = "v0.44.12" }
 librms = { git = "https://github.com/NVIDIA/nv-rms-client.git", tag = "v0.9.0-rc1" }
 ansi-to-html = "0.2.2"
 

Cargo.toml

@@ -243,7 +243,8 @@ impl<B: Bmc> ExploredChassis<B> {
         let serial_number = self
             .assembly_sn
             .clone()
-            .or(hw_id.serial_number.map(|v| v.to_string()));
+            .or(hw_id.serial_number.map(|v| v.to_string()))
+            .map(|s| s.trim().to_string());
 
         let nvidia_oem = self
             .chassis

crates/bmc-explorer/src/chassis.rs

@@ -159,6 +159,10 @@ pub async fn nv_generate_exploration_report<B: Bmc>(
                 need_oem_ami_config_bmc: true,
                 ..Default::default()
             },
+            hw::HwType::LenovoGb300 => manager::Config {
+                need_host_interfaces: true,
+                ..Default::default()
+            },
             hw::HwType::Supermicro => manager::Config {
                 need_host_interfaces: true,
                 need_oem_supermicro_kcs_interface: true,
@@ -376,6 +380,29 @@ fn lockdown_status<B: Bmc>(
             .map(|status| Some(LockdownStatus { status, message }))
         }
 
+        // LenovoGB300 (Grace-based AMI host BMC) has neither the KCS BIOS
+        // attribute nor the OEM ConfigBMC endpoint. Lockdown is read from the
+        // USB support attribute (attribute-id prefixed enum, e.g.
+        // "USB000Disabled") together with the host interface state.
+        hw::HwType::LenovoGb300 => {
+            let bios = bios.as_ref().ok_or_else(Error::bmc_not_provided("bios"))?;
+            let usb000 = bios.attribute("USB000");
+            let usb000 = usb000.as_ref().and_then(|v| v.str_value());
+            let hi_enabled = explored_manager
+                .host_interfaces
+                .as_ref()
+                .ok_or_else(Error::bmc_not_provided("host interfaces"))?
+                .iter()
+                .any(|i| i.interface_enabled().is_none_or(identity));
+            let message = format!("usb_support={usb000:?}; host_interface={hi_enabled}");
+            match (usb000, hi_enabled) {
+                (Some("USB000Disabled"), false) => Ok(InternalLockdownStatus::Enabled),
+                (Some("USB000Enabled"), true) => Ok(InternalLockdownStatus::Disabled),
+                _ => Ok(InternalLockdownStatus::Partial),
+            }
+            .map(|status| Some(LockdownStatus { status, message }))
+        }
+
         hw::HwType::Dell => {
             let attributes = explored_manager
                 .oem_dell_attributes

crates/bmc-explorer/src/lib.rs

@@ -20,7 +20,7 @@ use bmc_explorer::hw::HwType;
 use bmc_explorer::nv_generate_exploration_report;
 use bmc_explorer::test_support::detect_hw_type;
 use bmc_mock::test_support;
-use model::site_explorer::EndpointType;
+use model::site_explorer::{EndpointType, InternalLockdownStatus};
 use tokio::test;
 
 /// A Lenovo GB300 (AMI BMC) must classify as the GB300 platform regardless of the
@@ -49,4 +49,9 @@ async fn explore_lenovo_gb300() {
     assert_eq!(report.vendor, Some(bmc_vendor::BMCVendor::LenovoAMI));
     assert!(!report.systems.is_empty(), "systems must be present");
     assert!(!report.chassis.is_empty(), "chassis must be present");
+
+    let lockdown = report
+        .lockdown_status
+        .expect("GB300 lockdown status must be populated");
+    assert_eq!(lockdown.status, InternalLockdownStatus::Partial);
 }

crates/bmc-explorer/tests/lenovo_gb300_explore.rs

@@ -159,7 +159,7 @@ pub fn bmc_vendor(r: libredfish::model::service_root::RedfishVendor) -> BMCVendo
         RedfishVendor::Dell => BMCVendor::Dell,
         RedfishVendor::Hpe => BMCVendor::Hpe,
         RedfishVendor::Lenovo => BMCVendor::Lenovo,
-        RedfishVendor::LenovoAMI => BMCVendor::LenovoAMI,
+        RedfishVendor::LenovoAMI | RedfishVendor::LenovoGB300 => BMCVendor::LenovoAMI,
         RedfishVendor::LiteOnPowerShelf => BMCVendor::Liteon,
         RedfishVendor::DeltaPowerShelf => BMCVendor::Delta,
         RedfishVendor::Supermicro => BMCVendor::Supermicro,

crates/redfish/src/libredfish/conv.rs

@@ -230,8 +230,10 @@ impl RedfishClient {
                     .map_err(|err| redact_password(err, curr_password.as_str()))
                     .map_err(map_redfish_error)?;
             }
-            // Handle Vikings
-            RedfishVendor::AMI => {
+            // Vikings and Lenovo GB300s. GB300s are detected as AMI at this
+            // point (vendor isn't refined to LenovoGB300 until later), but both
+            // rotate via the same admin account, so handle them together.
+            RedfishVendor::AMI | RedfishVendor::LenovoGB300 => {
                 /*
                 https://docs.nvidia.com/dgx/dgxh100-user-guide/redfish-api-supp.html