Bug#973780: autopkgtest: support of UEFI secure boot in autopkgtest-virt-qemu

2020-11-15 Thread Simon McVittie
On Tue, 10 Nov 2020 at 12:51:07 +0900, Ryutaroh Matsumoto wrote: > +if 'qemu-system-x86_64' in args.qemu_command: > +code = '/usr/local/share/OVMF-Fedora33/OVMF_CODE.secboot.fd' > +data = '/usr/local/share/OVMF-Fedora33/OVMF_VARS.secboot.fd' > +elif

Bug#973780: autopkgtest: support of UEFI secure boot in autopkgtest-virt-qemu

2020-11-09 Thread Ryutaroh Matsumoto
Control: tags -1 + patch Control: retitle -1 patch available: support of UEFI secure boot in autopkgtest-virt-qemu With secure boot capable OVMF installed, I verified that the attached modification to autopkgtest-virt-qemu starts Linux kernel in a testbed in the locked down mode. Specifically,

Bug#973780: autopkgtest: support of UEFI secure boot in autopkgtest-virt-qemu

2020-11-04 Thread Ryutaroh Matsumoto
Package: autopkgtest Version: 5.15 Severity: wishlist Dear Maintainer, Currently, Linux kernel in the autopkgtest-virt-qemu runs in unsecure (unlocked) mode. If it is booted in UEFI secure boot, the kernel is locked down. It should help exposing unnoticed bugs in the UEFI secure boot. To