From 9188bb5186c88b9e98da1de9420e53bf9d68180d Mon Sep 17 00:00:00 2001 From: Shea Levy Date: Sun, 4 Feb 2024 08:28:30 -0500 Subject: OVMF: Add test with secure boot enabled Co-authored-by: Arthur Gautier --- nixos/lib/make-disk-image.nix | 3 +++ 1 file changed, 3 insertions(+) (limited to 'nixos/lib/make-disk-image.nix') diff --git a/nixos/lib/make-disk-image.nix b/nixos/lib/make-disk-image.nix index 1a33abd01ea18..047e72e2ac0df 100644 --- a/nixos/lib/make-disk-image.nix +++ b/nixos/lib/make-disk-image.nix @@ -536,6 +536,9 @@ let format' = format; in let concatStringsSep " " (lib.optional useEFIBoot "-drive if=pflash,format=raw,unit=0,readonly=on,file=${efiFirmware}" ++ lib.optionals touchEFIVars [ "-drive if=pflash,format=raw,unit=1,file=$efiVars" + ] ++ lib.optionals (OVMF.systemManagementModeRequired or false) [ + "-machine" "q35,smm=on" + "-global" "driver=cfi.pflash01,property=secure,value=on" ] ); inherit memSize; -- cgit 1.4.1