http://bugzilla.opensuse.org/show_bug.cgi?id=1018741
http://bugzilla.opensuse.org/show_bug.cgi?id=1018741#c25
--- Comment #25 from lists dev
I guess the guest booted with ovmf-x86_64-ms before so the MS keys were written into NvVars. I'll try to reproduce the issue with my machine.
In current state, [case 1] edit guest.cfg ... bios = 'ovmf' # bios_path_override = ... chroot into guest rm -f /boot/efi/NvVars exit chroot xl create guest.cfg screen (1) TianoCore logo screen (2) dialog: Trust openSUSE Certificate Do you agree to use the built-in openSUSE certificate to verify boot loaders and kernels? [No] [Yes] select/enter [Yes] screen (3) quick flash of "System bootloader not found ... ..." then ERROR Verification failed: (15) Access Denied [OK] xl destroy guest chroot into guest note 'NvVars' created ls -al /boot/efi total 18K drwxr-xr-x 3 root root 512 Dec 31 1969 ./ drwxr-xr-x 5 root root 4.0K Jan 10 08:44 ../ drwxr-xr-x 4 root root 512 Jun 21 2016 EFI/ -rwxr-xr-x 1 root root 13K Jan 10 16:41 NvVars* exit chroot xl create guest screen (1) TianoCore logo screen (2) ERROR Verification failed: (15) Access Denied [OK] [case 2] edit guest.cfg ... bios = 'ovmf' bios_path_override = '/usr/share/qemu/ovmf-x86_64.bin' ... chroot into guest rm -f /boot/efi/NvVars exit chroot xl create guest.cfg screen (1) TianoCore logo screen (2) GNU GRUB version 2.02^beta3 OpenSUSE Advanced options for OpenSUSE [PVHVM] boots 'PVHVM' automatically ... stalls, as reported [case 3] edit guest.cfg ... bios = 'ovmf' bios_path_override = '/usr/share/qemu/ovmf-x86_64-ms.bin' ... chroot into guest rm -f /boot/efi/NvVars exit chroot xl create guest.cfg screen (1) TianoCore logo screen (2) dialog: Trust openSUSE Certificate Do you agree to use the built-in openSUSE certificate to verify boot loaders and kernels? [No] [Yes] select/enter [Yes] screen (3) quick flash of "System bootloader not found ... ..." then ERROR Verification failed: (15) Access Denied [OK] -- You are receiving this mail because: You are on the CC list for the bug.