[Bug 1216472] VMs with secure boot do not start (assertion in edk2)
https://bugzilla.suse.com/show_bug.cgi?id=1216472 https://bugzilla.suse.com/show_bug.cgi?id=1216472#c13 --- Comment #13 from Joey Lee <jlee@suse.com> --- Hi Vasily (In reply to Vasily Ulyanov from comment #4)
Created attachment 870566 [details] Domain xml
Per your xml, the cpu mode is: <cpu mode="custom" match="exact" check="full"> <model fallback="forbid">SapphireRapids</model> <vendor>Intel</vendor> <topology sockets="1" dies="1" cores="1" threads="1"/> <feature policy="require" name="ss"/> <feature policy="require" name="vmx"/> <feature policy="require" name="pdcm"/> <feature policy="require" name="hypervisor"/> <feature policy="require" name="tsc_adjust"/> <feature policy="require" name="cldemote"/> <feature policy="require" name="movdiri"/> <feature policy="require" name="movdir64b"/> <feature policy="require" name="md-clear"/> <feature policy="require" name="stibp"/> <feature policy="require" name="ibpb"/> <feature policy="require" name="ibrs"/> <feature policy="require" name="amd-stibp"/> <feature policy="require" name="amd-ssbd"/> <feature policy="require" name="tsx-ctrl"/> <feature policy="require" name="sbdr-ssdp-no"/> <feature policy="require" name="fbsdp-no"/> <feature policy="require" name="psdp-no"/> <feature policy="disable" name="amx-bf16"/> <feature policy="disable" name="amx-tile"/> <feature policy="disable" name="amx-int8"/> <feature policy="disable" name="fzrm"/> <feature policy="disable" name="fsrs"/> <feature policy="disable" name="fsrc"/> <feature policy="disable" name="xfd"/> </cpu> Could you please also try to change the cpu mode to this? <cpu mode='host-model' check='partial'/> The above model is my setting. It works to me. -- You are receiving this mail because: You are on the CC list for the bug.
participants (1)
-
bugzilla_noreply@suse.com