news: Document support for uefi-vars device and firmwares

Signed-off-by: Andrea Bolognani <abologna@redhat.com>
Reviewed-by: Michal Privoznik <mprivozn@redhat.com>
Acked-by: Gerd Hoffmann <kraxel@redhat.com>
Reviewed-by: Daniel P. Berrangé <berrange@redhat.com>

diff --git a/NEWS.rst b/NEWS.rst
index 7a80116de3a87c53a257bc2f64f33062bd0bce7e..71f1f214727b2e556436f1a61693068aaeea9cc6 100644 (file)
--- a/NEWS.rst
+++ b/NEWS.rst
@@ -24,6 +24,23 @@ v12.1.0 (unreleased)
     example Secure Boot support, is available for the selected architecture and
     machine type.
 
+  * qemu: Add support for uefi-vars device and firmware builds using it
+
+    This is particularly noteworthy for people running aarch64 VMs with the
+    'virt' machine type, as it makes it finally possible to use Secure Boot
+    with that combination.
+
+    In most cases, no special steps are needed to take advantage of this:
+    assuming that you have installed a recent version of QEMU, as well as a
+    build of edk2 that includes the necessary binaries, you can just `enable
+    Secure Boot <kbase/secureboot.html>`__ as you normally would.
+
+    To explicitly request that the uefi-vars device is used even for scenarios
+    where that would normally not be the case, it's enough to add an empty
+    ``<varstore/>`` element in the domain XML. More details are available in
+    the `guest firmware configuration <formatdomain.html#guest-firmware>`__
+    section of the documentation.
+
 * **Improvements**
 
 * **Bug fixes**