mirror of
https://gitlab.com/libvirt/libvirt.git
synced 2024-12-22 21:55:25 +00:00
7b73e681a2
Some VMware guests have a boolean uefi.secureBoot.enabled. If found,
and it's set to "TRUE", and if it's a UEFI guest, then add this clause
into the domain XML:
<os firmware='efi'>
<firmware>
<feature enabled='yes' name='enrolled-keys'/>
<feature enabled='yes' name='secure-boot'/>
</firmware>
</os>
This approximates the meaning of this VMware flag.
Signed-off-by: Richard W.M. Jones <rjones@redhat.com>
Fixes: https://issues.redhat.com/browse/RHEL-67836
Reviewed-by: Michal Privoznik <mprivozn@redhat.com>
44 lines
1.4 KiB
XML
44 lines
1.4 KiB
XML
<domain type='vmware'>
|
|
<name>Auto-esx8.0-rhell9.3-efi-with-empty-cdrom</name>
|
|
<uuid>4220fca7-11dd-d67e-19cc-fcad0a37c342</uuid>
|
|
<memory unit='KiB'>2097152</memory>
|
|
<currentMemory unit='KiB'>2097152</currentMemory>
|
|
<vcpu placement='static'>1</vcpu>
|
|
<cputune>
|
|
<shares>1000</shares>
|
|
</cputune>
|
|
<os firmware='efi'>
|
|
<type arch='x86_64'>hvm</type>
|
|
<firmware>
|
|
<feature enabled='yes' name='enrolled-keys'/>
|
|
<feature enabled='yes' name='secure-boot'/>
|
|
</firmware>
|
|
</os>
|
|
<clock offset='utc'/>
|
|
<on_poweroff>destroy</on_poweroff>
|
|
<on_reboot>restart</on_reboot>
|
|
<on_crash>destroy</on_crash>
|
|
<devices>
|
|
<disk type='file' device='disk'>
|
|
<source file='[datastore] directory/Auto-esx8.0-rhell9.3-efi-with-empty-cdrom.vmdk'/>
|
|
<target dev='sda' bus='scsi'/>
|
|
<address type='drive' controller='0' bus='0' target='0' unit='0'/>
|
|
</disk>
|
|
<disk type='file' device='cdrom'>
|
|
<target dev='sda' bus='sata'/>
|
|
<readonly/>
|
|
<address type='drive' controller='0' bus='0' target='0' unit='0'/>
|
|
</disk>
|
|
<controller type='scsi' index='0' model='vmpvscsi'/>
|
|
<controller type='sata' index='0'/>
|
|
<interface type='bridge'>
|
|
<mac address='00:50:56:a0:cf:2f' type='generated'/>
|
|
<source bridge='VM Network'/>
|
|
<model type='vmxnet3'/>
|
|
</interface>
|
|
<video>
|
|
<model type='vmvga' vram='8192' primary='yes'/>
|
|
</video>
|
|
</devices>
|
|
</domain>
|