This was not planned for this weekend, but having to reboot my #homelab main machine, I decided to upgrade the installed #debian from bookwork to trixie.

Reading the known issues made me resize the /boot partition before said upgrade. Thanks to the #gparted live CD and my #jetkvm I did it remotely without any issue.

The upgrade after that was also smooth. My only issue was to get my #Windows10 VM to boot, but even that was solved, by pointing to the correct #ovmf file.

Just learned how to update OVMF_VARS.fd offline before running QEMU:

virt-fw-vars \ --input "$OUTPUT/OVMF_VARS.fd" \ --output "$OUTPUT/OVMF_VARS.fd" \ --append-boot-filepath /EFI/debian/grubx64.efi

E.g., in Debian the package containing virt-fw-vars is python3-virt-firmware but it is also available from PIP: https://pypi.org/project/virt-firmware/

#qemu #ovmf

Client Challenge

Petite visite à L’OVMF hier pour leur concert N64. Quel super ensemble!!

#musique #zelda #orchestre #ovmf

Quick recipes to get OVMF and AAVMF anywhere:

OVMF:

curl -sSf https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/ovmf-0.0.202308-r2.apk | tar zx --strip-components 3 usr/share/OVMF/OVMF.fd

AAVMF:

curl -sSf https://dl-cdn.alpinelinux.org/alpine/edge/community/aarch64/aavmf-0.0.202308-r2.apk | tar xz --strip-components 3 usr/share/AAVMF/QEMU_EFI.fd

Distributions place these files in variable places when they deploy QEMU and EDK2 so it is is good to have ubiquitous method for acquiring them for e.g. kernel testing.

#alpinelinux #qemu #edk2 #ovmf #aavmf

I'm trying to make my #QEMU #VM resilient against software that tries to detect it's running inside of a VM. Seems like I have to do a lot to make this work. Like changing QEMU and #OVMF #source #code. Currently I'm trying to remove the detectable overhead of executing the instructions RDTSC -> CPUID -> RDTSC in sequence. Which results in a much longer delay within VMs.
Reproduced with multiple #qemu and #ovmf versions. Wonder who I'd even report it to.

I need a way to dump .fd files, i.e. ovmf.fd from qemu/TianoCore

I will fall back to booting Linux in QEMU or finding some UEFI mode tool.

#AskFedi #OVMF #UEFI #TianoCore

Starting to #bisect #edk2 #ovmf stuff because the #microvm blobs don't build anymore since last release...

If only they had a build system that is at least somewhat comprehensive and not a bizarre monster of #shell and #python scripts mangled together with some #make and other bits and pieces 🥺

#archlinux #packagerlife

I recently upstreamed a script to spawn a QEMU virtual machine running UEFI Shell + CHIPSEC which helps debug issues and implement new features: https://github.com/chipsec/chipsec/blob/1.9.0/scripts/qemu_efi.py

This script has an issue: to launch the OVMF shell in QEMU, it disables networking (-nic none), otherwise OVMF tries PXE Boot. If you know how to keep networking, or sense other ways to improve this script, feel free to contribute to https://github.com/chipsec/chipsec 💻​
#chipsec #uefishell #OVMF

chipsec/qemu_efi.py at 1.9.0 · chipsec/chipsec

Platform Security Assessment Framework. Contribute to chipsec/chipsec development by creating an account on GitHub.

GitHub