On Wed, May 22, 2019 at 04:19 AM, Tomas Pilar (tpilar) wrote:<br/>
<blockquote><!-- [if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><!-- [if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!-- [if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
<div class="WordSection1">
<p class="DefangedMsoNormal" style="margin:0px;"><span style="mso-fareast-language: EN-US;">Hi Pavan,</span></p>
<p class="DefangedMsoNormal" style="margin:0px;"><span style="mso-fareast-language: EN-US;"> </span></p>
<p class="DefangedMsoNormal" style="margin:0px;"><span style="mso-fareast-language: EN-US;">I am currently playing around with setting up a OVMF based test framework myself. You likely need to tell qemu to use OVMF as it’s firmware. I attach my current working libvirt XML file for creating UEFI VMs (diskless) – note the &lt;loader&gt; and the &lt;nvram&gt; elements within the &lt;os&gt; element.</span></p>
<p class="DefangedMsoNormal" style="margin:0px;"><span style="mso-fareast-language: EN-US;"> </span></p>
<p class="DefangedMsoNormal" style="margin:0px;"><span style="mso-fareast-language: EN-US;">You want to add a disk sourced from the qcow image and that should work.</span></p>
<p class="DefangedMsoNormal" style="margin:0px;"><span style="mso-fareast-language: EN-US;"> </span></p>
<p class="DefangedMsoNormal" style="margin:0px;"><span style="mso-fareast-language: EN-US;">Cheers,</span></p>
<p class="DefangedMsoNormal" style="margin:0px;"><span style="mso-fareast-language: EN-US;">Tom</span></p>
<p class="DefangedMsoNormal" style="margin:0px;"><span style="mso-fareast-language: EN-US;"> </span></p>
<div>
<div style="border: none; border-top: solid #E1E1E1 1.0pt; padding: 3.0pt 0cm 0cm 0cm;">
<p class="DefangedMsoNormal" style="margin:0px;"><strong><span lang="EN-US">From:</span></strong><span lang="EN-US"> devel@edk2.groups.io &lt;devel@edk2.groups.io&gt; <strong>On Behalf Of </strong>Pavan Kumar Aravapalli<br/><strong>Sent:</strong> 22 May 2019 12:02<br/><strong>To:</strong> Devel EDK2 &lt;devel@edk2.groups.io&gt;<br/><strong>Subject:</strong> [edk2-devel] Help needed in building UEFI qcow2 images</span></p>
</div>
</div>
<p class="DefangedMsoNormal" style="margin:0px;"> </p>
<div id="divtagdefaultwrapper">
<p><span style="font-size: 12.0pt; color: black;">Hi, </span></p>
<p><span style="font-size: 12.0pt; color: black;"> </span></p>
<p><span style="font-size: 12.0pt; color: black;">[re-posting the question]</span></p>
<p><span style="font-size: 12.0pt; color: black;"> </span></p>
<p><span style="font-size: 12.0pt; color: black;">I am looking for information/documentation which helps me in enabling UEFI boot to the existing (KVM)VM template. I am trying for CentOS 6.5(64-bit) no GUI 64-bit (KVM) template. </span></p>
<p><span style="font-size: 12.0pt; color: black;"> </span></p>
<p><span style="font-size: 12.0pt; color: black;"> </span></p>
<p><span style="font-size: 12.0pt; color: black;">I found some images available over <a id="LPlnk45207" href="https://urldefense.proofpoint.com/v2/url?u=https-3A__www.kraxel.org_repos_images_&amp;d=DwMFAw&amp;c=euGZstcaTDllvimEN8b7jXrwqOf-v5A_CdpgnVfiiMM&amp;r=SzAVyxtJHZm7PriTfxFyvkqqZ_OgUqnNtgjrlf7jVU4&amp;m=txzCgRJWkEmPJeuUxTWCEaTYpYEUWr6BmgcbVIpvuI0&amp;s=VNfaavLgc8f7brJsIT2rTlp9QzZRyNUOTsp7rqTHK6E&amp;e=" target="_blank" rel="noopener">https://www.kraxel.org/repos/images/</a> with fedora os, but I am looking for uefi enabled Cent OS template. It would be helpfull if any documentation or steps provided for the same.</span></p>
<p class="DefangedMsoNormal" style="margin:0px;"><span style="font-size: 12.0pt; color: black;"> </span></p>
<p><span style="font-size: 12.0pt; color: black;"> </span></p>
<p><span style="font-size: 12.0pt; color: black;">Regards, </span></p>
<p><span style="font-size: 12.0pt; color: black;">Pavan.</span></p>
</div>
<p class="DefangedMsoNormal" style="margin:0px;">DISCLAIMER<br/>==========<br/>This e-mail may contain privileged and confidential information which is the property of Accelerite, a Persistent Systems business. It is intended only for the use of the individual or entity to which it is addressed. If you are not the intended recipient, you are not authorized to read, retain, copy, print, distribute or use this message. If you have received this communication in error, please notify the sender and delete all copies of this message. Accelerite, a Persistent Systems business does not accept any liability for virus infected mails.</p>
<div>
<p class="DefangedMsoNormal" style="margin:0px;"> </p>
</div>
</div>
</blockquote>
<br/> Hi Tomas, <br/><br/>Thanks for your response, I have already found  a way to boot a Guest VM to boot using image <a href="https://www.kraxel.org/repos/images/fedora-29-efi-systemd-x86_64.qcow2.xz" target="_blank" rel="noopener">https://www.kraxel.org/repos/images/fedora-29-efi-systemd-x86_64.qcow2.xz</a> . <br/>I have attached the domain dump xml file with this mail attachment[normal-vm.xml]. <br/><br/>And Sorry for the lengthy message for the following , Let me write up all my questions here . It would be more helpful if you can point me to fix or resolve the following. <br/><br/>Actually i am struggling to done below two items <br/>
<ol>
<li> We have CentOS flavoured qcow2 image which is used to boot Guest VM&#39;s in Apache CloudStack. We are trying to enable these CentOS qcow2 images with UEFI support.  I found &#39;.EFI&#39; file inside <a href="https://www.kraxel.org/repos/images/fedora-29-efi-systemd-x86_64.qcow2.xz" target="_blank" rel="noopener">fedora-29-efi-systemd-x86_64.qcow2.xz</a> image. How can i do the same thing for CentOS images. </li>
<li>I have been struggling to secure boot Guest VM using UEFI.  I have enclosed my secure boot domain dumpxml [secure-vm.xml]with this mail too. When i try to boot with this xml i am  ended up with an Exception . I have attached the error screen shot too . </li>
</ol>
<br/>I don&#39;t know, what could be wrong in Environment.  here is my Host Environment details<br/><br/>
<div>[root@localhost ~]# cat /etc/redhat-release</div>
<div>CentOS Linux release 7.6.1810 (Core)</div>
<div><br/>[root@localhost ~]# /usr/libexec/qemu-kvm --machine help</div>
<div>Supported machines are:</div>
<div>pc                   RHEL 7.6.0 PC (i440FX + PIIX, 1996) (alias of pc-i440fx-rhel7.6.0)</div>
<div>pc-i440fx-rhel7.6.0  RHEL 7.6.0 PC (i440FX + PIIX, 1996) (default)</div>
<div>pc-i440fx-rhel7.5.0  RHEL 7.5.0 PC (i440FX + PIIX, 1996)</div>
<div>pc-i440fx-rhel7.4.0  RHEL 7.4.0 PC (i440FX + PIIX, 1996)</div>
<div>pc-i440fx-rhel7.3.0  RHEL 7.3.0 PC (i440FX + PIIX, 1996)</div>
<div>pc-i440fx-rhel7.2.0  RHEL 7.2.0 PC (i440FX + PIIX, 1996)</div>
<div>pc-i440fx-rhel7.1.0  RHEL 7.1.0 PC (i440FX + PIIX, 1996)</div>
<div>pc-i440fx-rhel7.0.0  RHEL 7.0.0 PC (i440FX + PIIX, 1996)</div>
<div>rhel6.6.0            RHEL 6.6.0 PC</div>
<div>rhel6.5.0            RHEL 6.5.0 PC</div>
<div>rhel6.4.0            RHEL 6.4.0 PC</div>
<div>rhel6.3.0            RHEL 6.3.0 PC</div>
<div>rhel6.2.0            RHEL 6.2.0 PC</div>
<div>rhel6.1.0            RHEL 6.1.0 PC</div>
<div>rhel6.0.0            RHEL 6.0.0 PC</div>
<div>q35                  RHEL-7.6.0 PC (Q35 + ICH9, 2009) (alias of pc-q35-rhel7.6.0)</div>
<div>pc-q35-rhel7.6.0     RHEL-7.6.0 PC (Q35 + ICH9, 2009)</div>
<div>pc-q35-rhel7.5.0     RHEL-7.5.0 PC (Q35 + ICH9, 2009)</div>
<div>pc-q35-rhel7.4.0     RHEL-7.4.0 PC (Q35 + ICH9, 2009)</div>
<div>pc-q35-rhel7.3.0     RHEL-7.3.0 PC (Q35 + ICH9, 2009)</div>
<div>none                 empty machine</div>
<div><br/>[root@localhost ~]# rpm -qa | grep qemu</div>
<div>qemu-img-ev-2.12.0-18.el7_6.5.1.x86_64</div>
<div>centos-release-qemu-ev-1.0-4.el7.centos.noarch</div>
<div>qemu-kvm-common-ev-2.12.0-18.el7_6.5.1.x86_64</div>
<div>libvirt-daemon-driver-qemu-4.5.0-10.el7_6.10.x86_64</div>
<div>ipxe-roms-qemu-20170123-1.git4e85b27.el7_4.1.noarch</div>
<div>qemu-kvm-ev-2.12.0-18.el7_6.5.1.x86_64</div>
<div><br/>[root@localhost ~]# cat /proc/cpuinfo | grep ept</div>
<div>fpu_exception<span style="white-space: pre;"> </span>: yes</div>
<div>flags<span style="white-space: pre;"> </span>: fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush dts acpi mmx fxsr sse sse2 ss ht tm pbe syscall nx rdtscp lm constant_tsc arch_perfmon pebs bts rep_good nopl xtopology nonstop_tsc aperfmperf eagerfpu pni pclmulqdq dtes64 monitor ds_cpl vmx smx est tm2 ssse3 cx16 xtpr pdcm pcid sse4_1 sse4_2 x2apic popcnt tsc_deadline_timer aes xsave avx lahf_lm epb ssbd ibrs ibpb stibp tpr_shadow vnmi flexpriority ept vpid xsaveopt dtherm ida arat pln pts spec_ctrl intel_stibp flush_l1d</div>
<div>fpu_exception<span style="white-space: pre;"> </span>: yes</div>
<div>flags<span style="white-space: pre;"> </span>: fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush dts acpi mmx fxsr sse sse2 ss ht tm pbe syscall nx rdtscp lm constant_tsc arch_perfmon pebs bts rep_good nopl xtopology nonstop_tsc aperfmperf eagerfpu pni pclmulqdq dtes64 monitor ds_cpl vmx smx est tm2 ssse3 cx16 xtpr pdcm pcid sse4_1 sse4_2 x2apic popcnt tsc_deadline_timer aes xsave avx lahf_lm epb ssbd ibrs ibpb stibp tpr_shadow vnmi flexpriority ept vpid xsaveopt dtherm ida arat pln pts spec_ctrl intel_stibp flush_l1d</div>
<div>fpu_exception<span style="white-space: pre;"> </span>: yes</div>
<div>flags<span style="white-space: pre;"> </span>: fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush dts acpi mmx fxsr sse sse2 ss ht tm pbe syscall nx rdtscp lm constant_tsc arch_perfmon pebs bts rep_good nopl xtopology nonstop_tsc aperfmperf eagerfpu pni pclmulqdq dtes64 monitor ds_cpl vmx smx est tm2 ssse3 cx16 xtpr pdcm pcid sse4_1 sse4_2 x2apic popcnt tsc_deadline_timer aes xsave avx lahf_lm epb ssbd ibrs ibpb stibp tpr_shadow vnmi flexpriority ept vpid xsaveopt dtherm ida arat pln pts spec_ctrl intel_stibp flush_l1d</div>
<div>fpu_exception<span style="white-space: pre;"> </span>: yes</div>
<div>flags<span style="white-space: pre;"> </span>: fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush dts acpi mmx fxsr sse sse2 ss ht tm pbe syscall nx rdtscp lm constant_tsc arch_perfmon pebs bts rep_good nopl xtopology nonstop_tsc aperfmperf eagerfpu pni pclmulqdq dtes64 monitor ds_cpl vmx smx est tm2 ssse3 cx16 xtpr pdcm pcid sse4_1 sse4_2 x2apic popcnt tsc_deadline_timer aes xsave avx lahf_lm epb ssbd ibrs ibpb stibp tpr_shadow vnmi flexpriority ept vpid xsaveopt dtherm ida arat pln pts spec_ctrl intel_stibp flush_l1d</div>
<div><br/><br/></div>
<div>[root@localhost ~]# rpm -qa | grep libvirt</div>
<div>libvirt-client-4.5.0-10.el7_6.10.x86_64</div>
<div>libvirt-daemon-driver-nwfilter-4.5.0-10.el7_6.10.x86_64</div>
<div>libvirt-daemon-driver-nodedev-4.5.0-10.el7_6.10.x86_64</div>
<div>libvirt-daemon-driver-storage-scsi-4.5.0-10.el7_6.10.x86_64</div>
<div>libvirt-daemon-driver-storage-iscsi-4.5.0-10.el7_6.10.x86_64</div>
<div>libvirt-daemon-kvm-4.5.0-10.el7_6.10.x86_64</div>
<div>libvirt-bash-completion-4.5.0-10.el7_6.10.x86_64</div>
<div>libvirt-libs-4.5.0-10.el7_6.10.x86_64</div>
<div>libvirt-daemon-4.5.0-10.el7_6.10.x86_64</div>
<div>libvirt-daemon-driver-network-4.5.0-10.el7_6.10.x86_64</div>
<div>libvirt-daemon-driver-qemu-4.5.0-10.el7_6.10.x86_64</div>
<div>libvirt-daemon-driver-interface-4.5.0-10.el7_6.10.x86_64</div>
<div>libvirt-daemon-config-nwfilter-4.5.0-10.el7_6.10.x86_64</div>
<div>libvirt-daemon-config-network-4.5.0-10.el7_6.10.x86_64</div>
<div>libvirt-daemon-driver-storage-disk-4.5.0-10.el7_6.10.x86_64</div>
<div>libvirt-daemon-driver-storage-rbd-4.5.0-10.el7_6.10.x86_64</div>
<div>libvirt-daemon-driver-storage-logical-4.5.0-10.el7_6.10.x86_64</div>
<div>libvirt-daemon-driver-storage-4.5.0-10.el7_6.10.x86_64</div>
<div>libvirt-python-4.5.0-1.el7.x86_64</div>
<div>libvirt-daemon-driver-storage-core-4.5.0-10.el7_6.10.x86_64</div>
<div>libvirt-daemon-driver-secret-4.5.0-10.el7_6.10.x86_64</div>
<div>libvirt-daemon-driver-lxc-4.5.0-10.el7_6.10.x86_64</div>
<div>libvirt-daemon-driver-storage-mpath-4.5.0-10.el7_6.10.x86_64</div>
<div>libvirt-daemon-driver-storage-gluster-4.5.0-10.el7_6.10.x86_64</div>
<div>libvirt-4.5.0-10.el7_6.10.x86_64<br/><br/><br/><br/><br/><br/><br/>Regards, <br/>Pavan.</div>