[libvirt] [PATCH 0/5] Enable secure boot

Michal Privoznik mprivozn at redhat.com
Thu Aug 4 15:29:36 UTC 2016


On 27.07.2016 10:43, Michal Privoznik wrote:
> We have UEFI enabled guests for a while now. But only recently
> qemu introduced secure boot. We should reflect that in our code
> too.
> 
> Michal Privoznik (5):
>   qemuBuildMachineCommandLine: Follow our pattern
>   Introduce SMM feature
>   Introduce @secure attribute to os loader element
>   qemu: Enable secure boot
>   qemu: Advertise OVMF_CODE.secboot.fd
> 
>  docs/formatdomain.html.in                          | 13 ++++-
>  docs/schemas/domaincommon.rng                      | 17 +++++++
>  src/conf/domain_conf.c                             | 19 ++++++-
>  src/conf/domain_conf.h                             |  2 +
>  src/qemu/qemu_capabilities.c                       | 16 ++++++
>  src/qemu/qemu_capabilities.h                       |  4 ++
>  src/qemu/qemu_command.c                            | 58 ++++++++++++++--------
>  src/qemu/qemu_conf.c                               | 13 +++--
>  src/qemu/qemu_domain.c                             | 27 ++++++++++
>  tests/qemucapabilitiesdata/caps_2.4.0.x86_64.xml   |  1 +
>  tests/qemucapabilitiesdata/caps_2.5.0.x86_64.xml   |  1 +
>  .../caps_2.6.0-gicv2.aarch64.xml                   |  1 +
>  .../caps_2.6.0-gicv3.aarch64.xml                   |  1 +
>  tests/qemucapabilitiesdata/caps_2.6.0.ppc64le.xml  |  1 +
>  tests/qemucapabilitiesdata/caps_2.6.0.x86_64.xml   |  1 +
>  .../qemuxml2argv-bios-nvram-secure.args            | 29 +++++++++++
>  .../qemuxml2argv-bios-nvram-secure.xml             | 41 +++++++++++++++
>  .../qemuxml2argv-machine-smm-opt.args              | 25 ++++++++++
>  .../qemuxml2argv-machine-smm-opt.xml               | 28 +++++++++++
>  tests/qemuxml2argvtest.c                           | 14 ++++++
>  20 files changed, 284 insertions(+), 28 deletions(-)
>  create mode 100644 tests/qemuxml2argvdata/qemuxml2argv-bios-nvram-secure.args
>  create mode 100644 tests/qemuxml2argvdata/qemuxml2argv-bios-nvram-secure.xml
>  create mode 100644 tests/qemuxml2argvdata/qemuxml2argv-machine-smm-opt.args
>  create mode 100644 tests/qemuxml2argvdata/qemuxml2argv-machine-smm-opt.xml
> 

Thank you all gyus. I've pushed these.

Michal




More information about the libvir-list mailing list