Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-39663

Secure Boot VM fails to boot on RHEL 10 KVM

Linking RHIVOS CVEs to...Migration: Automation ...Sync from "Extern...XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Done
    • Icon: Undefined Undefined
    • None
    • rhel-10.0.beta
    • edk2
    • None
    • None
    • Important
    • TestOnly, CustomerScenariosInitiative
    • rhel-virt-confidential-firmware
    • ssg_virtualization
    • 5
    • False
    • False
    • Hide

      None

      Show
      None
    • None
    • None
    • None
    • Automated
    • None

      What were you trying to do that didn't work?

      Creating new Virtual Machine 7.9 using RHEL ISO, with Secure Boot Option will fail to boot.

      Please provide the package NVR for which bug is seen:

      $ grep ovmf sos_commands/rpm/sh_c_rpm_nodigest_-qa_-qf_-59_NVRA_INSTALLTIME_date_sort_-V
      edk2-ovmf-20231122-6.el9.noarch Tue May 21 10:54:40 2024

      How reproducible:

      Everytime

      Steps to reproduce

      1. Create a Virtual Machine on KVM RHEL 9.4 using RHEL 7.9 ISO with Secure Boot UEFI > where edk2-ovmf package is set on edk2-ovmf-20231122-6.el9.noarch
      2. $ virt-install        -machine q35   --boot uefi,firmware.feature0.name=secure-boot,firmware.feature0.enabled=yes,firmware.feature1.name=enrolled-keys,firmware.feature1.enabled=yes       --name test-edk2        memory 4096   --vcpus 2     --disk size=10  graphics none         --os-variant rhel7.9    cpu host      -cdrom /home/yash/yash/rhel-server-7.9-x86_64-dvd.iso 

      Expected results

      VM should boot.

      Actual results

      Fails to boot with below TraceBack on console. 

       

      BdsDxe: loading Boot0001 "UEFI QEMU DVD-ROM QM00001 " from PciRoot(0x0)/Pci(0x1F,0x2)/Sata(0x0,0xFFFF,0x0)
      BdsDxe: failed to load Boot0001 "UEFI QEMU DVD-ROM QM00001 " from PciRoot(0x0)/Pci(0x1F,0x2)/Sata(0x0,0xFFFF,0x0): Access Denied
      BdsDxe: failed to load Boot0002 "UEFI Misc Device" from PciRoot(0x0)/Pci(0x1,0x3)/Pci(0x0,0x0): Not Found
      BdsDxe: No bootable option or device was found.
      BdsDxe: Press any key to enter the Boot Manager Menu.

        1. edk2_debug_.log
          1012 kB
          Xueqiang Wei
        2. rhel790_installation.sh
          5 kB
          Xueqiang Wei
        3. rhel790_secure_boot.png
          25 kB
          Xueqiang Wei

              rhn-engineering-ghoffman Gerd Hoffmann
              jetwei Xueqiang Wei
              virt-maint virt-maint
              Xueqiang Wei Xueqiang Wei
              Votes:
              0 Vote for this issue
              Watchers:
              7 Start watching this issue

                Created:
                Updated:
                Resolved: