diff options
| author | Shea Levy <shea@shealevy.com> | 2024-02-04 08:28:30 -0500 |
|---|---|---|
| committer | Shea Levy <shea@shealevy.com> | 2024-02-15 12:13:05 -0500 |
| commit | 9188bb5186c88b9e98da1de9420e53bf9d68180d (patch) | |
| tree | 2587bb1e0d88064e48962d6d5fa8ea51121f392c /nixos/lib/make-disk-image.nix | |
| parent | 4673ad725460b0539f3bbe94494cc013260d4015 (diff) | |
OVMF: Add test with secure boot enabled
Co-authored-by: Arthur Gautier <arthur.gautier@arista.com>
Diffstat (limited to 'nixos/lib/make-disk-image.nix')
| -rw-r--r-- | nixos/lib/make-disk-image.nix | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/nixos/lib/make-disk-image.nix b/nixos/lib/make-disk-image.nix index 1a33abd01ea18..047e72e2ac0df 100644 --- a/nixos/lib/make-disk-image.nix +++ b/nixos/lib/make-disk-image.nix @@ -536,6 +536,9 @@ let format' = format; in let concatStringsSep " " (lib.optional useEFIBoot "-drive if=pflash,format=raw,unit=0,readonly=on,file=${efiFirmware}" ++ lib.optionals touchEFIVars [ "-drive if=pflash,format=raw,unit=1,file=$efiVars" + ] ++ lib.optionals (OVMF.systemManagementModeRequired or false) [ + "-machine" "q35,smm=on" + "-global" "driver=cfi.pflash01,property=secure,value=on" ] ); inherit memSize; |