search

vatesfr / xen-orchestra

The global orchestration solution to manage and backup XCP-ng and XenServer.
https://xen-orchestra.com
Other
795 stars 265 forks source link

Support for secureboot in XO #4750

Closed stormi closed 2 years ago

stormi commented 4 years ago

CH 8.1 brings support for secureboot. Here's what it looks like in XenCenter.

image

I haven't tested extensively, but I think UEFI + secureboot means the same as UEFI, plus platform:secureboot=true.

It is not certain at this stage that XCP-ng 8.1 will have secureboot support due to the proprietary stuff involved.

olivierlambert commented 4 years ago

I think it's better that we expose it for all CH/XCP-ng 8.1+, and if people try to use it on XCP-ng, the error should be pretty clear while booting the VM.

stormi commented 4 years ago

The error may be clear to someone who knows a bit about UEFI internals, but I must admit I wouldn't have understood it if I had not watched a talk about UEFI and secureboot recently. Not many people actually see secureboot-related failures, since that would usually mean that their kernel got corrupted.

image

But we'd probably be able to easily spot the cause and answer on the forum or support tickets, for sure. I'm OK with both solutions.

stormi commented 2 years ago

Done already