On 11/18/24 14:53, Richard W.M. Jones wrote: > Some VMware guests have a boolean uefi.secureBoot.enabled. If found, > and it's set to "TRUE", and if it's a UEFI guest, then add this clause > into the domain XML: > > <os firmware='efi'> > <firmware> > <feature enabled='yes' name='enrolled-keys'/> > <feature enabled='yes' name='secure-boot'/> > </firmware> > </os> > > This approximates the meaning of this VMware flag. > > Signed-off-by: Richard W.M. Jones <rjones@xxxxxxxxxx> > Fixes: https://issues.redhat.com/browse/RHEL-67836 > --- > src/vmx/vmx.c | 22 ++++++++++++++++++++++ > tests/vmx2xmldata/esx-in-the-wild-12.xml | 4 ++++ > 2 files changed, 26 insertions(+) Reviewed-by: Michal Privoznik <mprivozn@xxxxxxxxxx> and merged. Michal