Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-81731

spurious error reported when manual UEFI firmware+nvram path is used

    • Yes
    • Important
    • rhel-sst-virt-tools
    • ssg_virtualization
    • 3
    • Dev ack
    • False
    • Hide

      None

      Show
      None
    • None
    • None
    • None
    • None
    • Unspecified
    • Unspecified
    • Unspecified
    • x86_64
    • 11.2.0
    • None

      What were you trying to do that didn't work?

      error logs from virt-launcher pod:

      {"component":"virt-launcher","kind":"","level":"error","msg":"Failed to start VirtualMachineInstance with flags 0.","name":"sev","namespace":"default","pos":"manager.go:1289","reason":"virError(Code=84, Domain=10, Message='Operation not supported: conversion of the nvram template to another target format is not supported')","timestamp":"2025-02-28T13:42:03.088214Z","uid":"ff0504f0-8d69-4015-8b73-060eef1d37ee"}

       

      I login the container and do virsh start, it still reported the error 'conversion of the nvram template to another target format is not supported'

      What is the impact of this issue to you?

      Failed to start a SEV vm on kubevirt. Note I tried the latest stable version of kubevirt v1.4.0, it worked as expected, because the version of libvirt is 10.5.0

      Please provide the package NVR for which the bug is seen:

      1. kubectl version
        Client Version: v1.32.2
        Kustomize Version: v5.5.0
        Server Version: v1.32.2
      2. virtctl version
        Client Version: version.Info{GitVersion:"v1.4.0", GitCommit:"9b9b3d4e7b681af96ca1b6b6a5cea75e2f05ce5b", GitTreeState:"clean", BuildDate:"2024-11-13T08:23:36Z", GoVersion:"go1.22.8 X:nocoverageredesign", Compiler:"gc", Platform:"linux/amd64"}
        Server Version: version.Info{GitVersion:"v1.5.0-beta.0.429+4917af49284f17-dirty", GitCommit:"4917af49284f170c40cfd673f92a68761471b9eb", GitTreeState:"dirty", BuildDate:"2025-02-26T08:35:55Z", GoVersion:"go1.23.4 X:nocoverageredesign", Compiler:"gc", Platform:"linux/amd64"}

       

      Login the compute container of the virt-launcher pod:

      bash-5.1$ virsh --version
      10.10.0
      bash-5.1$ cat /etc/os-release     
      NAME="CentOS Stream"
      VERSION="9"
      ID="centos"
      ID_LIKE="rhel fedora"
      VERSION_ID="9"
      PLATFORM_ID="platform:el9"
      PRETTY_NAME="CentOS Stream 9"
      ANSI_COLOR="0;31"
      LOGO="fedora-logo-icon"
      CPE_NAME="cpe:/o:centos:centos:9"
      HOME_URL="https://centos.org/"
      BUG_REPORT_URL="https://issues.redhat.com/"
      REDHAT_SUPPORT_PRODUCT="Red Hat Enterprise Linux 9"
      REDHAT_SUPPORT_PRODUCT_VERSION="CentOS Stream"

      How reproducible is this bug?:

      100%

      Steps to reproduce

      1. use kind to setup a local k8s cluster
      2. deploy kubevirt built by myself

                  On top of commit a6ece7c37c4466259219b666adc7776e2490bc54, apply the patch https://github.com/kubevirt/kubevirt/pull/13755 , make the build

             3. Create a SEV vm

      snippet of VirualMachine

          spec:
            domain:
              machine:
                type: q35
              firmware:
                bootloader:
                  efi:
                    secureBoot: false
              launchSecurity:
                sev: {}
              features:
                acpi:
                  enabled: true
                smm:
                  enabled: false

      snippet of dumped xml:
      <os>
      <type arch="x86_64" machine="pc-q35-rhel9.6.0">hvm</type>
      <loader readonly="yes" secure="no" type="pflash" format="raw">/usr/share/OVMF/OVMF_CODE.cc.fd</loader>
      <nvram template="/usr/share/OVMF/OVMF_VARS.fd" format="raw">/var/run/kubevirt-private/libvirt/qemu/nvram/testvm_VARS.fd</nvram>
      <boot dev="hd"/>
      <smbios mode="sysinfo"/>
      </os>

      Expected results

      The vm should be started successfully

      Actual results

      Failed to start the vm

              pkrempa@redhat.com Peter Krempa
              zhencliu@redhat.com Zhenchao Liu
              Peter Krempa Peter Krempa
              Zhen Tang Zhen Tang
              Votes:
              0 Vote for this issue
              Watchers:
              8 Start watching this issue

                Created:
                Updated: