From: Daan De Meyer <daan.j.demeyer@gmail.com>
Date: Fri, 28 Jun 2024 13:16:37 +0000 (+0200)
Subject: Default to no secure boot for non-x86 architectures
X-Git-Tag: v24~80
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=827bbbe64e96e179207b4cb7c73dcf307610d44b;p=thirdparty%2Fmkosi.git

Default to no secure boot for non-x86 architectures
---

diff --git a/mkosi/qemu.py b/mkosi/qemu.py
index 5acb5d336..c270e8d4f 100644
--- a/mkosi/qemu.py
+++ b/mkosi/qemu.py
@@ -599,7 +599,9 @@ def finalize_qemu_firmware(config: Config, kernel: Optional[Path]) -> QemuFirmwa
         ):
             return QemuFirmware.linux
         else:
-            return QemuFirmware.uefi_secure_boot
+            # At the moment there are no qemu firmware descriptions for non-x86 architectures that advertise
+            # secure-boot support so let's default to no secure boot for non-x86 architectures.
+            return QemuFirmware.uefi_secure_boot if config.architecture.is_x86_variant() else QemuFirmware.uefi
     else:
         return config.qemu_firmware