Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-39051

Secure Boot VM fails to boot on RHEL 9 KVM

Linking RHIVOS CVEs to...Migration: Automation ...Sync from "Extern...XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Done
    • Icon: Major Major
    • None
    • rhel-9.2.0, rhel-9.4
    • shim
    • None
    • None
    • Important
    • rhel-bootloader
    • ssg_display
    • 5
    • False
    • False
    • Hide

      None

      Show
      None
    • None
    • None
    • None
    • None
    • None

      What were you trying to do that didn't work?

      Creating new Virtual Machine 7.9 using RHEL ISO, with Secure Boot Option will fail to boot.

      Please provide the package NVR for which bug is seen:

      $ grep ovmf sos_commands/rpm/sh_c_rpm_nodigest_-qa_-qf_-59_NVRA_INSTALLTIME_date_sort_-V
      edk2-ovmf-20231122-6.el9.noarch Tue May 21 10:54:40 2024

      How reproducible:

      Everytime

      Steps to reproduce

      1. Create a Virtual Machine on KVM RHEL 9.4 using RHEL 7.9 ISO with Secure Boot UEFI > where edk2-ovmf package is set on edk2-ovmf-20231122-6.el9.noarch
      2. $ virt-install        -machine q35   --boot uefi,firmware.feature0.name=secure-boot,firmware.feature0.enabled=yes,firmware.feature1.name=enrolled-keys,firmware.feature1.enabled=yes       --name test-edk2        memory 4096   --vcpus 2     --disk size=10  graphics none         --os-variant rhel7.9    cpu host      -cdrom /home/yash/yash/rhel-server-7.9-x86_64-dvd.iso 

      Expected results

      VM should boot.

      Actual results

      Fails to boot with below TraceBack on console. 

       

      BdsDxe: loading Boot0001 "UEFI QEMU DVD-ROM QM00001 " from PciRoot(0x0)/Pci(0x1F,0x2)/Sata(0x0,0xFFFF,0x0)
      BdsDxe: failed to load Boot0001 "UEFI QEMU DVD-ROM QM00001 " from PciRoot(0x0)/Pci(0x1F,0x2)/Sata(0x0,0xFFFF,0x0): Access Denied
      BdsDxe: failed to load Boot0002 "UEFI Misc Device" from PciRoot(0x0)/Pci(0x1,0x3)/Pci(0x0,0x0): Not Found
      BdsDxe: No bootable option or device was found.
      BdsDxe: Press any key to enter the Boot Manager Menu.

        1. rhel790_secure_boot.png
          rhel790_secure_boot.png
          25 kB
        2. rhel790_sec_boot2.png
          rhel790_sec_boot2.png
          7 kB
        3. rhel790_sec_boot1.png
          rhel790_sec_boot1.png
          5 kB
        4. rhel790_installation.sh
          5 kB
        5. rhel790_edk2_log
          712 kB
        6. edk2_debug_.log
          1012 kB

              bootloader-eng-team bootloader -eng-team
              rhn-support-ymotiyel Yash Motiyele
              bootloader -eng-team bootloader -eng-team
              Release Test Team Release Test Team
              Votes:
              0 Vote for this issue
              Watchers:
              15 Start watching this issue

                Created:
                Updated:
                Resolved: