http://bugzilla.suse.com/show_bug.cgi?id=1018741 http://bugzilla.suse.com/show_bug.cgi?id=1018741#c19 --- Comment #19 from lists dev --- I entered chroot exec'd mkinitrd grub2-install created edit /boot/grub2/custom.cfg menuentry 'PVHVM' { load_video set gfxpayload=keep insmod gzio insmod part_gpt insmod ext2 search --no-floppy --fs-uuid --set=root 740be582-590a-46d7-947a-d94218b05421 linuxefi /vmlinuz root=/dev/xvdg1 resume=/dev/xvdf1 headless text quiet nofb apparmor=0 edd=off splash=silent noshell showopts net.ifnames=0 systemd.log_target=kmsg earlyprintk=vga,keep systemd.log_level=debug initrdefi /initrd } exec'd grub2-mkconfig -o /boot/grub2/grub.cfg echo "fs0:\EFI\opensuse\grubx64.efi" > /boot/efi/startup.nsh and boot the guest. I see a grub menu, it selects the 'custom' PVHVM entry, and gets as far as xl dmesg ... (d12) [2017-01-10 05:57:18] Multiprocessor initialisation: (d12) [2017-01-10 05:57:18] - CPU0 ... 39-bit phys ... fixed MTRRs ... var MTRRs [1/8] ... done. (d12) [2017-01-10 05:57:18] Writing SMBIOS tables ... (d12) [2017-01-10 05:57:18] Loading OVMF ... (XEN) [2017-01-10 05:57:18] d12v0 Over-allocation for domain 12: 524545

524544 (d12) [2017-01-10 05:57:18] Loading ACPI ... (d12) [2017-01-10 05:57:18] vm86 TSS at fc00a400 (d12) [2017-01-10 05:57:18] BIOS map: (d12) [2017-01-10 05:57:18] ffe00000-ffffffff: Main BIOS (d12) [2017-01-10 05:57:18] E820 table: (d12) [2017-01-10 05:57:18] [00]: 00000000:00000000 - 00000000:000a0000: RAM (d12) [2017-01-10 05:57:18] HOLE: 00000000:000a0000 - 00000000:000f0000 (d12) [2017-01-10 05:57:18] [01]: 00000000:000f0000 - 00000000:00100000: RESERVED (d12) [2017-01-10 05:57:18] [02]: 00000000:00100000 - 00000000:7eeb5000: RAM (d12) [2017-01-10 05:57:18] HOLE: 00000000:7eeb5000 - 00000000:fc000000 (d12) [2017-01-10 05:57:18] [03]: 00000000:fc000000 - 00000001:00000000: RESERVED (d12) [2017-01-10 05:57:18] Invoking OVMF ...

cat debug.log [Bds]=============Begin Load Options Dumping ...============= Driver Options: SysPrep Options: Boot Options: Boot0009: opensuse-secureboot 0x0001 Boot0000: UiApp 0x0109 Boot0001: UEFI Floppy 0x0001 Boot0002: UEFI Floppy 2 0x0001 Boot0003: UEFI QEMU HARDDISK QM00001 0x0001 Boot0004: UEFI Misc Device 0x0001 Boot0005: UEFI Misc Device 2 0x0001 Boot0006: UEFI Misc Device 3 0x0001 Boot0007: UEFI Misc Device 4 0x0001 Boot0008: EFI Internal Shell 0x0001 PlatformRecovery Options: PlatformRecovery0000: Default PlatformRecovery 0x0001 [Bds]=============End Load Options Dumping============= [Bds]BdsWait ...Zzzzzzzzzzzz... [Bds]Exit the waiting! [Bds]Stop Hotkey Service! [Bds]UnregisterKeyNotify: 000C/0000 Success [Bds]UnregisterKeyNotify: 0017/0000 Success [Bds]UnregisterKeyNotify: 0000/000D Success Memory Previous Current Next Type Pages Pages Pages ====== ======== ======== ======== 0A 00000004 00000001 00000004 09 00000008 00000011 00000015 00 00000004 00000001 00000004 06 00000024 000000FE 0000013D 05 00000030 000000A4 000000CD 03 00000180 000003C4 000004B5 04 00000F00 000013DA 000018D0 [Bds]Booting opensuse-secureboot FSOpen: Open '\EFI\opensuse\shim.efi' Success [Bds] DevicePath expand: HD(1,GPT,12A830DE-7E2F-4DC6-B64F-B886FB80E77C,0x800,0x3F7DF)/\EFI\opensuse\shim.efi -> PciRoot(0x0)/Pci(0x1,0x1)/Ata(Primary,Master,0x0)/HD(1,GPT,12A830DE-7E2F-4DC6-B64F-B886FB80E77C,0x800,0x3F7DF)/\EFI\opensuse\shim.efi [Security] 3rd party image[0] can be loaded after EndOfDxe: PciRoot(0x0)/Pci(0x1,0x1)/Ata(Primary,Master,0x0)/HD(1,GPT,12A830DE-7E2F-4DC6-B64F-B886FB80E77C,0x800,0x3F7DF)/\EFI\opensuse\shim.efi. InstallProtocolInterface: 5B1B31A1-9562-11D2-8E3F-00A0C969723B 7DB68040 Loading driver at 0x0007CFBC000 EntryPoint=0x0007CFDA000 InstallProtocolInterface: BC62157E-3E33-4FEC-9920-2D3B36D750DF 7DB73018 FSOpen: Open '\EFI\opensuse\grub.efi' Success PixelBlueGreenRedReserved8BitPerColor ConvertPages: Incompatible memory types PixelBlueGreenRedReserved8BitPerColor ConvertPages: Incompatible memory types XenBus: Set state to 5 XenBus: Set state to 5, done XenStore: Watch event 7E065418 XenBus: Set state to 6 XenBus: Set state to 6, done XenStore: Watch event 7E065418 XenBus: Set state to 1 XenBus: Set state to 1, done XenStore: Watch event 7E065418 XenBus: Set state to 5 XenBus: Set state to 5, done XenStore: Watch event 7DBCBA98 XenBus: Set state to 6 XenBus: Set state to 6, done XenStore: Watch event 7DBCBA98 XenBus: Set state to 1 XenBus: Set state to 1, done XenStore: Watch event 7DBCBA98 XenBus: Set state to 5 XenBus: Set state to 5, done XenStore: Watch event 7DBCE498 XenBus: Set state to 6 XenBus: Set state to 6, done XenStore: Watch event 7DBCE498 XenBus: Set state to 1 XenBus: Set state to 1, done XenStore: Watch event 7DBCE498 XenBus: Set state to 5 XenBus: Set state to 5, done XenStore: Watch event 7DBCC798 XenBus: Set state to 6 XenBus: Set state to 6, done XenStore: Watch event 7DBCC798 XenBus: Set state to 1 XenBus: Set state to 1, done XenStore: Watch event 7DBCC798 Xen GrantTable, removing F0003 Xen GrantTable, removing F0002 Xen GrantTable, removing F0001 Xen GrantTable, removing F0000 and there it sits xl list Name ID Mem VCPUs State Time(s) Domain-0 0 4096 1 r----- 533.7 opensuse 12 2048 1 -b---- 16.7 progressing no further Looking at the output above [Bds]Booting opensuse-secureboot FSOpen: Open '\EFI\opensuse\shim.efi' Success [Bds] DevicePath expand: HD(1,GPT,12A830DE-7E2F-4DC6-B64F-B886FB80E77C,0x800,0x3F7DF)/\EFI\opensuse\shim.efi -> PciRoot(0x0)/Pci(0x1,0x1)/Ata(Primary,Master,0x0)/HD(1,GPT,12A830DE-7E2F-4DC6-B64F-B886FB80E77C, it's still booting in 'secureboot' mode. Rebooting, & checking in TianoCore config, however, it reports Secure Boot Configuration Current Secure Boot State Disabled Attempt Secure Boot [ ] Secure Boot Mode <standard Mode> so it thinks it should be in NON-SecureBoot mode. So, why isn't it is the question. -- You are receiving this mail because: You are on the CC list for the bug.