Hi Lejeczek,

Please try to disable secure boot with:

<os firmware='efi'>
  <firmware>
    <feature enabled='no' name='secure-boot'/>
  </firmware>
</os>

Refer to https://libvirt.org/kbase/secureboot.html

BR,
Yalan

On Fri, Dec 1, 2023 at 9:49 PM lejeczek via Users <users@lists.libvirt.org> wrote:

Hi guys

I have VMs which fail to boot with error as per the subject.
I suspect this is due to:

<os firmware='efi'>
    <type arch='x86_64' machine='pc-q35-rhel9.2.0'>hvm</type>
    <firmware>
      <feature enabled='yes' name='enrolled-keys'/> <--- HERE
      <feature enabled='yes' name='secure-boot'/> <---- HERE ?
    </firmware>
    <loader readonly='yes' secure='yes' type='pflash'>/usr/share/edk2/ovmf/OVMF_CODE.secboot.fd</loader>
    <nvram template='/usr/share/edk2/ovmf/OVMF_VARS.secboot.fd'>/var/lib/libvirt/qemu/nvram/centos-efi_VARS.fd</nvram>
    <boot dev='network'/>
    <boot dev='hd'/>
</os>

Would you have any thoughts on how to fix, to work around it?
many thanks, L.

_______________________________________________
Users mailing list -- users@lists.libvirt.org
To unsubscribe send an email to users-leave@lists.libvirt.org