http://bugzilla.opensuse.org/show_bug.cgi?id=1137216 http://bugzilla.opensuse.org/show_bug.cgi?id=1137216#c1 Gary Ching-Pang Lin changed: What |Removed |Added ---------------------------------------------------------------------------- Flags| |needinfo?(afaerber@suse.com | |) --- Comment #1 from Gary Ching-Pang Lin --- Andreas, Will we release an ovmf/aavmf with embedded keys for AArch64 in SLE15-SP1? -- You are receiving this mail because: You are on the CC list for the bug.

http://bugzilla.opensuse.org/show_bug.cgi?id=1137216 http://bugzilla.opensuse.org/show_bug.cgi?id=1137216#c3 Guillaume GARDET changed: What |Removed |Added ---------------------------------------------------------------------------- Flags|needinfo?(guillaume.gardet@ | |arm.com) | --- Comment #3 from Guillaume GARDET --- (In reply to Andreas Färber from comment #2)

Guillaume, what's the use case for this? I understood that this would only allow to boot into our installation medium but not into the installed system's GRUB?

The use case is openQA. Our aarch64 worker runs Leap 15.1 and we would need those firmware to follow/test the current status of SecureBoot. It is currently broken after installation, as signed Grub is not installed properly yet. But at least we can monitor progress/regressions. -- You are receiving this mail because: You are on the CC list for the bug.

http://bugzilla.opensuse.org/show_bug.cgi?id=1137216 Oliver Kurz changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |okurz@suse.com -- You are receiving this mail because: You are on the CC list for the bug.

http://bugzilla.opensuse.org/show_bug.cgi?id=1137216 http://bugzilla.opensuse.org/show_bug.cgi?id=1137216#c5 --- Comment #5 from Guillaume GARDET --- (In reply to Oliver Kurz from comment #4)

so could you simply create a MR for Leap 15.1 (and potentially 15.0) with the changes corresponding to https://build.opensuse.org/request/show/701162 ?

ovmf is a package inherited from SLE, so updates must go through SLE. -- You are receiving this mail because: You are on the CC list for the bug.

http://bugzilla.opensuse.org/show_bug.cgi?id=1137216 Andreas Färber changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |nsinger@suse.com -- You are receiving this mail because: You are on the CC list for the bug.

http://bugzilla.opensuse.org/show_bug.cgi?id=1137216 http://bugzilla.opensuse.org/show_bug.cgi?id=1137216#c9 --- Comment #9 from Gary Ching-Pang Lin --- If it's just for test, it would be fine to extract the "code" and "vars" files from ovmf in Factory and configure openQA to use the specific firmware files. BTW, for the incoming update of ovmf/edk2 201905stable, I'm planning to drop the key embedding patch and use the upstream EnrollDefaulyKeys.efi to generate the varstore with preloaded keys. So in the future, the keys will not be in the "code" files anymore but in the "vars" files. -- You are receiving this mail because: You are on the CC list for the bug.

http://bugzilla.opensuse.org/show_bug.cgi?id=1137216 http://bugzilla.opensuse.org/show_bug.cgi?id=1137216#c11 Guillaume GARDET changed: What |Removed |Added ---------------------------------------------------------------------------- Status|IN_PROGRESS |RESOLVED Resolution|--- |WONTFIX --- Comment #11 from Guillaume GARDET --- 15.1 is EOL and this is fixed in 15.2+. -- You are receiving this mail because: You are on the CC list for the bug.