Skip to content

guest_os_booting: enable secure boot firmware feature on aarch64#6904

Open
hholoubk wants to merge 2 commits into
autotest:masterfrom
hholoubk:guest_os_booting/ovmf_firmware_feature_aarch64_secure_boot
Open

guest_os_booting: enable secure boot firmware feature on aarch64#6904
hholoubk wants to merge 2 commits into
autotest:masterfrom
hholoubk:guest_os_booting/ovmf_firmware_feature_aarch64_secure_boot

Conversation

@hholoubk

@hholoubk hholoubk commented Jun 19, 2026

Copy link
Copy Markdown
Contributor

Summary

  • Extend guest_os_booting.ovmf_firmware_feature.positive_test.enable_secure_boot to aarch64
  • On ARM, libvirt selects the uefi-vars firmware (QEMU_EFI.qemuvars.fd + vars.secboot.json varstore) instead of pflash OVMF
  • Gate the aarch64 variant on libvirt 12.1+ and QEMU 10.2+, where uefi-vars secure boot support is available
  • Add QEMU version check in ovmf_firmware_feature.py via is_qemu_function_supported()

Test plan

  • Run on x86 q35: avocado run --vt-type libvirt guest_os_booting.ovmf_firmware_feature.positive_test.enable_secure_boot — should pass unchanged
  • Run on aarch64 with libvirt >= 12.1 and QEMU >= 10.2: same test name — should define varstore/rom loader and boot successfully
  • Run on aarch64 with older libvirt/QEMU — test should cancel with unsupported version message

Summary by CodeRabbit

Release Notes

  • Tests
    • Enhanced AArch64 OVMF firmware testing with version-specific configuration and loader support.
    • Added QEMU capability validation to ensure supported functionality before test execution.

Extend ovmf_firmware_feature enable_secure_boot to aarch64 using libvirt's
uefi-vars varstore firmware path. Gate the variant on libvirt 12.1+ and
QEMU 10.2+ where the feature is available.

Assisted-by: Auto (Cursor) (~90%)
Signed-off-by: hholoubk <hholoubk@redhat.com>
@coderabbitai

coderabbitai Bot commented Jun 19, 2026

Copy link
Copy Markdown

Review Change Stack

Walkthrough

The enable_secure_boot test case previously excluded AArch64 (no aarch64). This PR replaces that exclusion with an AArch64-specific configuration block in ovmf_firmware_feature.cfg that adds libvirt and QEMU version gating, sets loader_path to the AArch64 QEMU EFI firmware, defines a varstore_template, and updates firmware_xpath to use AArch64-specific varstore template lookup and a rom loader type instead of pflash. In the test runner ovmf_firmware_feature.py, utils_misc is imported from virttest and utils_misc.is_qemu_function_supported(params) is called at the start of run() before guest preparation proceeds.

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~5 minutes

🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check name Status Explanation
Title check ✅ Passed The title clearly and specifically summarizes the main change: enabling secure boot firmware feature support on aarch64 architecture, which is the primary objective of this PR.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.

✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

Replace nested aarch64: condition with explicit only/no aarch64 variant
split, matching disable_secure_boot and cartesian guest arch selection.

Assisted-by: Auto (Cursor) (~90%)
Signed-off-by: hholoubk <hholoubk@redhat.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant