Comment # 19
on bug 1018741
from lists dev
I entered chroot
exec'd
mkinitrd
grub2-install
created
edit /boot/grub2/custom.cfg
menuentry 'PVHVM' {
load_video
set gfxpayload=keep
insmod gzio
insmod part_gpt
insmod ext2
search --no-floppy --fs-uuid --set=root
740be582-590a-46d7-947a-d94218b05421
linuxefi /vmlinuz root=/dev/xvdg1 resume=/dev/xvdf1 headless text
quiet nofb apparmor=0 edd=off splash=silent noshell showopts net.ifnames=0
systemd.log_target=kmsg earlyprintk=vga,keep systemd.log_level=debug
initrdefi /initrd
}
exec'd
grub2-mkconfig -o /boot/grub2/grub.cfg
echo "fs0:\EFI\opensuse\grubx64.efi" > /boot/efi/startup.nsh
and boot the guest.
I see a grub menu, it selects the 'custom' PVHVM entry, and gets as far as
xl dmesg
...
(d12) [2017-01-10 05:57:18] Multiprocessor initialisation:
(d12) [2017-01-10 05:57:18] - CPU0 ... 39-bit phys ... fixed MTRRs ...
var MTRRs [1/8] ... done.
(d12) [2017-01-10 05:57:18] Writing SMBIOS tables ...
(d12) [2017-01-10 05:57:18] Loading OVMF ...
(XEN) [2017-01-10 05:57:18] d12v0 Over-allocation for domain 12: 524545
> 524544
(d12) [2017-01-10 05:57:18] Loading ACPI ...
(d12) [2017-01-10 05:57:18] vm86 TSS at fc00a400
(d12) [2017-01-10 05:57:18] BIOS map:
(d12) [2017-01-10 05:57:18] ffe00000-ffffffff: Main BIOS
(d12) [2017-01-10 05:57:18] E820 table:
(d12) [2017-01-10 05:57:18] [00]: 00000000:00000000 -
00000000:000a0000: RAM
(d12) [2017-01-10 05:57:18] HOLE: 00000000:000a0000 -
00000000:000f0000
(d12) [2017-01-10 05:57:18] [01]: 00000000:000f0000 -
00000000:00100000: RESERVED
(d12) [2017-01-10 05:57:18] [02]: 00000000:00100000 -
00000000:7eeb5000: RAM
(d12) [2017-01-10 05:57:18] HOLE: 00000000:7eeb5000 -
00000000:fc000000
(d12) [2017-01-10 05:57:18] [03]: 00000000:fc000000 -
00000001:00000000: RESERVED
(d12) [2017-01-10 05:57:18] Invoking OVMF ...
cat debug.log
[Bds]=============Begin Load Options Dumping ...=============
Driver Options:
SysPrep Options:
Boot Options:
Boot0009: opensuse-secureboot 0x0001
Boot0000: UiApp 0x0109
Boot0001: UEFI Floppy 0x0001
Boot0002: UEFI Floppy 2 0x0001
Boot0003: UEFI QEMU HARDDISK QM00001 0x0001
Boot0004: UEFI Misc Device 0x0001
Boot0005: UEFI Misc Device 2 0x0001
Boot0006: UEFI Misc Device 3 0x0001
Boot0007: UEFI Misc Device 4 0x0001
Boot0008: EFI Internal Shell 0x0001
PlatformRecovery Options:
PlatformRecovery0000: Default PlatformRecovery 0x0001
[Bds]=============End Load Options Dumping=============
[Bds]BdsWait ...Zzzzzzzzzzzz...
[Bds]Exit the waiting!
[Bds]Stop Hotkey Service!
[Bds]UnregisterKeyNotify: 000C/0000 Success
[Bds]UnregisterKeyNotify: 0017/0000 Success
[Bds]UnregisterKeyNotify: 0000/000D Success
Memory Previous Current Next
Type Pages Pages Pages
====== ======== ======== ========
0A 00000004 00000001 00000004
09 00000008 00000011 00000015
00 00000004 00000001 00000004
06 00000024 000000FE 0000013D
05 00000030 000000A4 000000CD
03 00000180 000003C4 000004B5
04 00000F00 000013DA 000018D0
[Bds]Booting opensuse-secureboot
FSOpen: Open '\EFI\opensuse\shim.efi' Success
[Bds] DevicePath expand:
HD(1,GPT,12A830DE-7E2F-4DC6-B64F-B886FB80E77C,0x800,0x3F7DF)/\EFI\opensuse\shim.efi
->
PciRoot(0x0)/Pci(0x1,0x1)/Ata(Primary,Master,0x0)/HD(1,GPT,12A830DE-7E2F-4DC6-B64F-B886FB80E77C,0x800,0x3F7DF)/\EFI\opensuse\shim.efi
[Security] 3rd party image[0] can be loaded after EndOfDxe:
PciRoot(0x0)/Pci(0x1,0x1)/Ata(Primary,Master,0x0)/HD(1,GPT,12A830DE-7E2F-4DC6-B64F-B886FB80E77C,0x800,0x3F7DF)/\EFI\opensuse\shim.efi.
InstallProtocolInterface: 5B1B31A1-9562-11D2-8E3F-00A0C969723B 7DB68040
Loading driver at 0x0007CFBC000 EntryPoint=0x0007CFDA000
InstallProtocolInterface: BC62157E-3E33-4FEC-9920-2D3B36D750DF 7DB73018
FSOpen: Open '\EFI\opensuse\grub.efi' Success
PixelBlueGreenRedReserved8BitPerColor
ConvertPages: Incompatible memory types
PixelBlueGreenRedReserved8BitPerColor
ConvertPages: Incompatible memory types
XenBus: Set state to 5
XenBus: Set state to 5, done
XenStore: Watch event 7E065418
XenBus: Set state to 6
XenBus: Set state to 6, done
XenStore: Watch event 7E065418
XenBus: Set state to 1
XenBus: Set state to 1, done
XenStore: Watch event 7E065418
XenBus: Set state to 5
XenBus: Set state to 5, done
XenStore: Watch event 7DBCBA98
XenBus: Set state to 6
XenBus: Set state to 6, done
XenStore: Watch event 7DBCBA98
XenBus: Set state to 1
XenBus: Set state to 1, done
XenStore: Watch event 7DBCBA98
XenBus: Set state to 5
XenBus: Set state to 5, done
XenStore: Watch event 7DBCE498
XenBus: Set state to 6
XenBus: Set state to 6, done
XenStore: Watch event 7DBCE498
XenBus: Set state to 1
XenBus: Set state to 1, done
XenStore: Watch event 7DBCE498
XenBus: Set state to 5
XenBus: Set state to 5, done
XenStore: Watch event 7DBCC798
XenBus: Set state to 6
XenBus: Set state to 6, done
XenStore: Watch event 7DBCC798
XenBus: Set state to 1
XenBus: Set state to 1, done
XenStore: Watch event 7DBCC798
Xen GrantTable, removing F0003
Xen GrantTable, removing F0002
Xen GrantTable, removing F0001
Xen GrantTable, removing F0000
and there it sits
xl list
Name ID Mem VCPUs State Time(s)
Domain-0 0 4096 1 r----- 533.7
opensuse 12 2048 1 -b---- 16.7
progressing no further
Looking at the output above
[Bds]Booting opensuse-secureboot
FSOpen: Open '\EFI\opensuse\shim.efi' Success
[Bds] DevicePath expand:
HD(1,GPT,12A830DE-7E2F-4DC6-B64F-B886FB80E77C,0x800,0x3F7DF)/\EFI\opensuse\shim.efi
->
PciRoot(0x0)/Pci(0x1,0x1)/Ata(Primary,Master,0x0)/HD(1,GPT,12A830DE-7E2F-4DC6-B64F-B886FB80E77C,
it's still booting in 'secureboot' mode.
Rebooting, & checking in TianoCore config, however, it reports
Secure Boot Configuration
Current Secure Boot State Disabled
Attempt Secure Boot [ ]
Secure Boot Mode <standard Mode>
so it thinks it should be in NON-SecureBoot mode.
So, why isn't it is the question.