]> git.ipfire.org Git - thirdparty/libvirt.git/commit
vmx: Get the VMware boolean uefi.secureBoot.enabled
authorRichard W.M. Jones <rjones@redhat.com>
Mon, 18 Nov 2024 13:53:48 +0000 (13:53 +0000)
committerMichal Privoznik <mprivozn@redhat.com>
Mon, 18 Nov 2024 14:29:43 +0000 (15:29 +0100)
commit7b73e681a24fb2542e135ce4df2d540f52f1bdd2
treedc485f5f347e52352f0b4bb3414e8b97a3298718
parentec8be9acebdae084e46ec91d67f37cf13a24609d
vmx: Get the VMware boolean uefi.secureBoot.enabled

Some VMware guests have a boolean uefi.secureBoot.enabled.  If found,
and it's set to "TRUE", and if it's a UEFI guest, then add this clause
into the domain XML:

  <os firmware='efi'>
    <firmware>
      <feature enabled='yes' name='enrolled-keys'/>
      <feature enabled='yes' name='secure-boot'/>
    </firmware>
  </os>

This approximates the meaning of this VMware flag.

Signed-off-by: Richard W.M. Jones <rjones@redhat.com>
Fixes: https://issues.redhat.com/browse/RHEL-67836
Reviewed-by: Michal Privoznik <mprivozn@redhat.com>
src/vmx/vmx.c
tests/vmx2xmldata/esx-in-the-wild-12.xml