pxe efi boot - bdsdxe boot0002 access denied

Hi guys I have VMs which fail to boot with error as per the subject. I suspect this is due to: <os firmware='efi'> <type arch='x86_64' machine='pc-q35-rhel9.2.0'>hvm</type> <firmware> <feature enabled='yes' name='enrolled-keys'/> <--- HERE <feature enabled='yes' name='secure-boot'/> <---- HERE ? </firmware> <loader readonly='yes' secure='yes' type='pflash'>/usr/share/edk2/ovmf/OVMF_CODE.secboot.fd</loader> <nvram template='/usr/share/edk2/ovmf/OVMF_VARS.secboot.fd'>/var/lib/libvirt/qemu/nvram/centos-efi_VARS.fd</nvram> <boot dev='network'/> <boot dev='hd'/> </os> Would you have any thoughts on how to fix, to work around it? many thanks, L.

Hi Lejeczek, Please try to disable secure boot with: <os firmware='efi'> <firmware> <feature enabled='no' name='secure-boot'/> </firmware> </os> Refer to https://libvirt.org/kbase/secureboot.html BR, Yalan On Fri, Dec 1, 2023 at 9:49 PM lejeczek via Users <users@lists.libvirt.org> wrote:
Hi guys
I have VMs which fail to boot with error as per the subject. I suspect this is due to:
<os firmware='efi'> <type arch='x86_64' machine='pc-q35-rhel9.2.0'>hvm</type> <firmware> <feature enabled='yes' name='enrolled-keys'/> <--- HERE <feature enabled='yes' name='secure-boot'/> <---- HERE ? </firmware> <loader readonly='yes' secure='yes' type='pflash'>/usr/share/edk2/ovmf/OVMF_CODE.secboot.fd</loader> <nvram template='/usr/share/edk2/ovmf/OVMF_VARS.secboot.fd'>/var/lib/libvirt/qemu/nvram/centos-efi_VARS.fd</nvram> <boot dev='network'/> <boot dev='hd'/> </os>
Would you have any thoughts on how to fix, to work around it? many thanks, L. _______________________________________________ Users mailing list -- users@lists.libvirt.org To unsubscribe send an email to users-leave@lists.libvirt.org
participants (2)
-
lejeczek
-
Yalan Zhang