Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-64642

[Regression] HTTP Boot fails to work with edk2-ovmf-20231122-6.el9_4.2 and greater [rhel-10]

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Major Major
    • rhel-10.0
    • rhel-10.0.beta, rhel-10.0
    • edk2
    • edk2-20240524-12.el10
    • Yes
    • Important
    • 1
    • rhel-sst-virt-firmware
    • ssg_virtualization
    • 1
    • False
    • Hide

      None

      Show
      None
    • Yes
    • Red Hat Enterprise Linux
    • Virt Firmware Sprint 1 - Dec24
    • Known Issue
    • Hide
      The network stack needs a random number source for security reasons, the two options for that are:
      add '-device virtio-rng-pci' to the command line, or
      use a modern cpu with rdrand instruction support. (cpu models >= Ivy-Bridge have the rdrand support)
      If either of two options is not included, this bug will be triggered.

      Network option is missing in the Boot Menu. Virtual Machine does not attempt to boot via Network.

      Workaround
      Ensure the Virtual Machine has an RNG device (i.e. virtio-rng) or the CPU model exposed to the Virtual Machine has RDRAND feature (host, passthrough, IvyBridge named model or above).
      If it does not work on an old CPU model although a virtio-rng device is present, in some cases, if the Virtual Machine has two serial devices (isa-serial), removing one of them can help.
      Show
      The network stack needs a random number source for security reasons, the two options for that are: add '-device virtio-rng-pci' to the command line, or use a modern cpu with rdrand instruction support. (cpu models >= Ivy-Bridge have the rdrand support) If either of two options is not included, this bug will be triggered. Network option is missing in the Boot Menu. Virtual Machine does not attempt to boot via Network. Workaround Ensure the Virtual Machine has an RNG device (i.e. virtio-rng) or the CPU model exposed to the Virtual Machine has RDRAND feature (host, passthrough, IvyBridge named model or above). If it does not work on an old CPU model although a virtio-rng device is present, in some cases, if the Virtual Machine has two serial devices (isa-serial), removing one of them can help.
    • Proposed
    • All
    • None

      What were you trying to do that didn't work?

      HTTP boot worked fine in edk2-ovmf-20231122-6.el9.noarch but no longer seems to be working in edk2-ovmf-20231122-6.el9_4.2 and greater. 

      What is the impact of this issue to you?

      High - Can no longer deploy VMs using HTTP Boot - blocking migrations off of RHEL 7

      Please provide the package NVR for which the bug is seen:

      edk2-ovmf-20231122-6.el9_4.2

      How reproducible is this bug?:

      Every time

      Steps to reproduce

      1. Create a VM that uses UEFI boot firmware (not BIOS boot firmware), and make sure the VM definition includes a network interface and has network boot enabled.
      2. Boot the VM and note that UEFI does not attempt PXE or HTTP boot (for edk2-ovmf-20231122-6.el9_4.3.noarch), or attempts PXE but does not attempt HTTP (for edk2-ovmf-20231122-6.el9_4.2.noarch)
      3. Boot the VM and enter either the UEFI shell or the UEFI graphical configuration tool.  Note that you should see options for PXE or HTTP boot, but they are missing for edk2-ovmf-20231122-6.el9_4.2 and greater

      Expected results

       

      Actual results

      1. Boot the VM and note that UEFI does not attempt PXE or HTTP boot (for edk2-ovmf-20231122-6.el9_4.3.noarch), or attempts PXE but does not attempt HTTP (for edk2-ovmf-20231122-6.el9_4.2.noarch)
      2. Boot the VM and enter either the UEFI shell or the UEFI graphical configuration tool.  Note that you should see options for PXE or HTTP boot, but they are missing for edk2-ovmf-20231122-6.el9_4.2 and greater

        1. bcfg_boot_dump_1.png
          bcfg_boot_dump_1.png
          19 kB
        2. boot_manager_memu.png
          boot_manager_memu.png
          9 kB
        3. new-cpu_without-rng.sh
          4 kB
        4. new-cpu_with-rng.sh
          4 kB
        5. old-cpu_with_fallback-rng.sh
          4 kB
        6. old-cpu_with_virtio-rng_one_serial-port.sh
          4 kB
        7. old-cpu_with_virtio-rng.sh
          4 kB
        8. PXE-client-boot_rhel9_rng.sh
          5 kB
        9. PXE-client-boot_rhel9.sh
          4 kB

              osteffen@redhat.com Oliver Steffen
              jetwei Xueqiang Wei
              virt-maint virt-maint
              Xueqiang Wei Xueqiang Wei
              Jiří Herrmann Jiří Herrmann
              Votes:
              0 Vote for this issue
              Watchers:
              14 Start watching this issue

                Created:
                Updated: