From e7eb001a6035c0acd5c96171c5e4de9e5bb16f49 Mon Sep 17 00:00:00 2001 From: Daniel Schaefer Date: Tue, 15 Sep 2026 12:07:06 +0200 Subject: [PATCH] Fix tests in OVMF. Need to enable SMM New OVMF builds enable secureboot, which needs smm in QEMU. Signed-off-by: Daniel Schaefer --- framework_uefi/Makefile | 9 ++++++--- 1 file changed, 6 insertions(+), 3 deletions(-) diff --git a/framework_uefi/Makefile b/framework_uefi/Makefile index f5010d15..9d6cd011 100644 --- a/framework_uefi/Makefile +++ b/framework_uefi/Makefile @@ -8,13 +8,16 @@ QEMU?=qemu-system-x86_64 OVMF_CODE?=$(BUILD)/OVMF_CODE.fd OVMF_VARS?=$(BUILD)/OVMF_VARS.fd +# The edk2 firmware we download is built with Secure Boot support, which +# refuses to run unless the varstore pflash is protected by SMM. QEMU_FLAGS=\ - -M q35 \ + -M q35,smm=on \ -m 1024 \ -net none \ -vga std \ - -drive if=pflash,format=raw,readonly=on,file=$(OVMF_CODE) \ - -drive if=pflash,format=raw,file=$(BUILD)/ovmf_vars.fd + -global driver=cfi.pflash01,property=secure,value=on \ + -drive if=pflash,format=raw,unit=0,readonly=on,file=$(OVMF_CODE) \ + -drive if=pflash,format=raw,unit=1,file=$(BUILD)/ovmf_vars.fd QEMU_TEST_FLAGS=\ $(QEMU_FLAGS) \