Skip to content

fix(core): fix build uefi and ovmf with secure boot #925

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Draft
wants to merge 23 commits into
base: main
Choose a base branch
from
Draft

fix(core): fix build uefi and ovmf with secure boot #925

wants to merge 23 commits into from

Conversation

universal-itengineer
Copy link
Member

@universal-itengineer universal-itengineer commented Apr 11, 2025 •
edited
Loading

Description

Windows and other OS with UEFI secure boot must boot with Secure boot: Enabled/On

Why do we need it, and what problem does it solve?

Fix build uefi and ovmf with secure boot

What is the expected result?

Windows Sysinfo
Secure Boot State: On

Fedora/Ubuntu
sudo dmesg | grep -i secureboot
[ 0.0000000] secureboot: Secure boot enabled

Checklist

  • The code is covered by unit tests.
  • e2e tests passed.
  • Documentation updated according to the changes.
  • Changes were tested in the Kubernetes cluster manually.

Changelog entries

section: core
type: fix
summary: fix build uefi and ovmf with secure boot

@universal-itengineer universal-itengineer added this to the v0.18.0 milestone Apr 11, 2025
@universal-itengineer universal-itengineer changed the title fix(core): fix build uefi and ovmf fix(core): fix build uefi and ovmf with secure boot Apr 11, 2025
@universal-itengineer universal-itengineer force-pushed the fix/core/build-uefi-ovmf branch 8 times, most recently from 075c3fa to 019af1a Compare April 17, 2025 18:26
@universal-itengineer universal-itengineer force-pushed the fix/core/build-uefi-ovmf branch 6 times, most recently from 74cfe10 to 0de9297 Compare April 21, 2025 08:43
@universal-itengineer
fix(core): fix build uefi and ovmf
7c0b408 
Signed-off-by: Nikita Korolev <nikita.korolev@flant.com>
@universal-itengineer
add comment for no_enroll
1956565 
Signed-off-by: Nikita Korolev <nikita.korolev@flant.com>
@universal-itengineer
exec in ci . ./edksetup.sh
b512143 
Signed-off-by: Nikita Korolev <nikita.korolev@flant.com>
@universal-itengineer
enable enroll
c1f941c 
Signed-off-by: Nikita Korolev <nikita.korolev@flant.com>
@universal-itengineer
add libs amd swtpm-localca
7f92690 
Signed-off-by: Nikita Korolev <nikita.korolev@flant.com>
@universal-itengineer
change OVMF params
e6a622a 
Signed-off-by: Nikita Korolev <nikita.korolev@flant.com>
@universal-itengineer
remove patch 029
0dd205a 
Signed-off-by: Nikita Korolev <nikita.korolev@flant.com>
@universal-itengineer
remove enroll
32d9a91 
Signed-off-by: Nikita Korolev <nikita.korolev@flant.com>
@universal-itengineer
enrol without generate
d964fef 
Signed-off-by: Nikita Korolev <nikita.korolev@flant.com>
@universal-itengineer
build efishel separate func
d1115c5 
Signed-off-by: Nikita Korolev <nikita.korolev@flant.com>
@universal-itengineer
turn off ro fs for virt-launcher
bc5cacf 
Signed-off-by: Nikita Korolev <nikita.korolev@flant.com>
@universal-itengineer
add rm after build
490889d 
Signed-off-by: Nikita Korolev <nikita.korolev@flant.com>
@universal-itengineer
add edk2-vars py
344f330 
Signed-off-by: Nikita Korolev <nikita.korolev@flant.com>
@universal-itengineer
rm swtpm pkg from pkgs list
0045e7f 
Signed-off-by: Nikita Korolev <nikita.korolev@flant.com>
@universal-itengineer
test vars-generator
861d152 
Signed-off-by: Nikita Korolev <nikita.korolev@flant.com>
@universal-itengineer
add python pkgs
78970d6 
Signed-off-by: Nikita Korolev <nikita.korolev@flant.com>
@universal-itengineer
try enrol with enroll-altlinux
0342b76 
Signed-off-by: Nikita Korolev <nikita.korolev@flant.com>
@universal-itengineer
add swtpm_user
8176c9c 
Signed-off-by: Nikita Korolev <nikita.korolev@flant.com>
@universal-itengineer
change import swtpm
1c50c21 
Signed-off-by: Nikita Korolev <nikita.korolev@flant.com>
@universal-itengineer
add lib for swtpm
70956b9 
Signed-off-by: Nikita Korolev <nikita.korolev@flant.com>
@universal-itengineer
fix libtpms, up to v 10
12f69f5 
Signed-off-by: Nikita Korolev <nikita.korolev@flant.com>
@universal-itengineer
try apply ubuntu patches
b112cbc 
Signed-off-by: Nikita Korolev <nikita.korolev@flant.com>
@universal-itengineer universal-itengineer force-pushed the fix/core/build-uefi-ovmf branch 2 times, most recently from 57cc84b to a113b2d Compare April 21, 2025 09:19
@universal-itengineer
exclude some patch
9049f3c 
Signed-off-by: Nikita Korolev <nikita.korolev@flant.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@nevermarine nevermarine Awaiting requested review from nevermarine nevermarine will be requested when the pull request is marked ready for review nevermarine is a code owner

@Isteb4k Isteb4k Awaiting requested review from Isteb4k Isteb4k will be requested when the pull request is marked ready for review Isteb4k is a code owner

@yaroslavborbat yaroslavborbat Awaiting requested review from yaroslavborbat yaroslavborbat will be requested when the pull request is marked ready for review yaroslavborbat is a code owner

@diafour diafour Awaiting requested review from diafour diafour will be requested when the pull request is marked ready for review diafour is a code owner

@fl64 fl64 Awaiting requested review from fl64 fl64 will be requested when the pull request is marked ready for review fl64 is a code owner

At least 1 approving review is required to merge this pull request.

Assignees

@universal-itengineer universal-itengineer

Labels
None yet
Projects
None yet
Milestone
v0.18.0
Development

Successfully merging this pull request may close these issues.
1 participant
@universal-itengineer