Default to no secure boot for non-x86 architectures

diff --git a/mkosi/qemu.py b/mkosi/qemu.py
index 5acb5d336fccd424e0fa511edc55c8774dc24126..c270e8d4f53611612d962c59435d7ed598fcd462 100644 (file)
--- a/mkosi/qemu.py
+++ b/mkosi/qemu.py
@@ -599,7 +599,9 @@ def finalize_qemu_firmware(config: Config, kernel: Optional[Path]) -> QemuFirmwa
         ):
             return QemuFirmware.linux
         else:
-            return QemuFirmware.uefi_secure_boot
+            # At the moment there are no qemu firmware descriptions for non-x86 architectures that advertise
+            # secure-boot support so let's default to no secure boot for non-x86 architectures.
+            return QemuFirmware.uefi_secure_boot if config.architecture.is_x86_variant() else QemuFirmware.uefi
     else:
         return config.qemu_firmware