We have UEFI enabled guests for a while now. But only recently qemu introduced secure boot. We should reflect that in our code too. Michal Privoznik (5): qemuBuildMachineCommandLine: Follow our pattern Introduce SMM feature Introduce @secure attribute to os loader element qemu: Enable secure boot qemu: Advertise OVMF_CODE.secboot.fd docs/formatdomain.html.in | 13 ++++- docs/schemas/domaincommon.rng | 17 +++++++ src/conf/domain_conf.c | 19 ++++++- src/conf/domain_conf.h | 2 + src/qemu/qemu_capabilities.c | 16 ++++++ src/qemu/qemu_capabilities.h | 4 ++ src/qemu/qemu_command.c | 58 ++++++++++++++-------- src/qemu/qemu_conf.c | 13 +++-- src/qemu/qemu_domain.c | 27 ++++++++++ tests/qemucapabilitiesdata/caps_2.4.0.x86_64.xml | 1 + tests/qemucapabilitiesdata/caps_2.5.0.x86_64.xml | 1 + .../caps_2.6.0-gicv2.aarch64.xml | 1 + .../caps_2.6.0-gicv3.aarch64.xml | 1 + tests/qemucapabilitiesdata/caps_2.6.0.ppc64le.xml | 1 + tests/qemucapabilitiesdata/caps_2.6.0.x86_64.xml | 1 + .../qemuxml2argv-bios-nvram-secure.args | 29 +++++++++++ .../qemuxml2argv-bios-nvram-secure.xml | 41 +++++++++++++++ .../qemuxml2argv-machine-smm-opt.args | 25 ++++++++++ .../qemuxml2argv-machine-smm-opt.xml | 28 +++++++++++ tests/qemuxml2argvtest.c | 14 ++++++ 20 files changed, 284 insertions(+), 28 deletions(-) create mode 100644 tests/qemuxml2argvdata/qemuxml2argv-bios-nvram-secure.args create mode 100644 tests/qemuxml2argvdata/qemuxml2argv-bios-nvram-secure.xml create mode 100644 tests/qemuxml2argvdata/qemuxml2argv-machine-smm-opt.args create mode 100644 tests/qemuxml2argvdata/qemuxml2argv-machine-smm-opt.xml -- 2.8.4 -- libvir-list mailing list libvir-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/libvir-list