shaba/one
1
0
Fork 0
mirror of https://github.com/OpenNebula/one.git synced 2025-03-16 22:50:10 +03:00
Code Releases Wiki Activity

B #-: No tag secure when using UEFI loader (#1462)

Browse Source
This commit is contained in:
Ricardo Diaz 2021-09-17 14:14:20 +02:00 committed by GitHub
parent 609eed7667
commit 66ce6f3c98
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 22 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

26
src/vmm/LibVirtDriverKVM.cc
View File

@ -417,7 +417,7 @@ int LibVirtDriver::validate_template(const VirtualMachine* vm, int hid,
string firmware;
get_attribute(vm, host, cluster, "OS", "FIRMWARE", firmware);
get_attribute(vm, nullptr, nullptr, "OS", "FIRMWARE", firmware);
if ( !firmware.empty() && !one_util::icasecmp(firmware, "BIOS") )
{
@ -798,11 +798,24 @@ int LibVirtDriver::deployment_description_kvm(
<< "</bootloader>\n";
}
bool boot_secure = false;
string firmware;
get_attribute(vm, host, cluster, "OS", "FIRMWARE", firmware);
get_attribute(vm, nullptr, nullptr, "OS", "FIRMWARE", firmware);
if ( !firmware.empty() && !one_util::icasecmp(firmware, "BIOS") )
{
file << "\t\t<loader readonly=\"yes\" type=\"pflash\">"
string firmware_secure = "no";
if ( get_attribute(vm, nullptr, nullptr, "OS", "FIRMWARE_SECURE", boot_secure) &&
boot_secure)
{
firmware_secure = "yes";
}
file << "\t\t<loader readonly=\"yes\" type=\"pflash\" "
<< "secure=\"" << firmware_secure << "\">"
<< firmware
<< "</loader>\n";
file << "\t\t<nvram>"
@ -1830,7 +1843,7 @@ int LibVirtDriver::deployment_description_kvm(
get_attribute(vm, host, cluster, "FEATURES", "GUEST_AGENT", guest_agent);
get_attribute(vm, host, cluster, "FEATURES", "VIRTIO_SCSI_QUEUES", virtio_scsi_queues);
if ( acpi || pae || apic || hyperv )
if ( acpi || pae || apic || hyperv || boot_secure)
{
file << "\t<features>" << endl;
@ -1858,6 +1871,11 @@ int LibVirtDriver::deployment_description_kvm(
file << "\t\t</hyperv>" << endl;
}
if ( boot_secure )
{
file << "\t\t<smm state=\"on\"/>" << endl;
}
file << "\t</features>" << endl;
}