|
Add `--boot uefi` to your `virt-install` command. Example:
|
|
|
Badly formatted
|
|
|
Category:Virtualization Category:QA '''
|
|
|
Click 'Begin Installation'
|
|
|
Click 'Customize before install', then select 'Finish'
|
|
|
Create a new VM in virt-manager. When you get to the final page of the 'New VM' wizard, do the following:
|
|
|
Creating a VM
|
|
|
Extra links
|
|
|
{{#fedoradocs: https://docs.fedoraproject.org/whatever-the-of-this-new-page}}
|
|
|
Firmware installation
|
|
|
(Formerly this article recommended the independent utility "LockDown_ms.efi".)
|
|
|
FS0:\> EnrollDefaultKeys.efi
|
|
|
FS0:\> reset
|
|
|
Gerd Hoffmann, Red Hatter and QEMU developer, has a dnf repo on his personal site that provides nightly builds of a whole bunch of QEMU/KVM firmware, including EDK2/OVMF.
|
|
|
Here's how to pull down the nightly builds for x86:
|
|
|
However, if you want to use custom binaries, you will need to edit the nvram variable in /etc/libvirt/qemu.conf and restart libvirtd.
|
|
|
http://en.opensuse.org/openSUSE:UEFI_Secure_boot_using_qemu-kvm[OpenSUSE secureboot page]
|
|
|
https://wiki.ubuntu.com/SecurityTeam/SecureBoot[Ubuntu secureboot page]
|
|
|
http://www.labbott.name/blog/2016/09/15/secure-ish-boot-with-qemu/[Using SecureBoot with QEMU]
|
|
|
http://www.linux-kvm.org/page/OVMF[KVM wiki OVMF page]
|
|
