872095 – sys-firmware/edk2-ovmf only generates 2mb images

Bug 872095 - sys-firmware/edk2-ovmf only generates 2mb images

Summary: sys-firmware/edk2-ovmf only generates 2mb images

Status:	RESOLVED INVALID

Alias:	None

Product:	Gentoo Linux
Classification:	Unclassified
Component:	Current packages (show other bugs)
Hardware:	All Linux

Importance:	Normal normal (vote)
Assignee:	Matthias Maier

URL:	https://github.com/tianocore/edk2/dis...
Whiteboard:
Keywords:

Depends on:
Blocks:

Reported:	2022-09-20 21:08 UTC by Chris Henhawke
Modified:	2022-09-20 23:18 UTC (History)
CC List:	1 user (show)

See Also:
Package list:
Runtime testing required:	---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Chris Henhawke 2022-09-20 21:08:54 UTC

sys-firmware/edk2-ovmf currently only generates 2mb images, but some other distros ship 4mb images as well.  I believe this could help with Windows 11 VMs on gentoo hosts, due to running into issues applying KB5012170 to the VM.

Reproducible: Always

Steps to Reproduce:
1. Install sys-firmware/edk2-ovmf
2. Set up a Windows 11 VM with TPM and secure boot enabled UEFI
3. Try applying KB5012170
Actual Results:  
1. Run into error 0x800f0845 applying the KB
2. Download the UEFI DBX file, the powershell script to cut up the file
3. Try applying the DBX using the powershell script, get another obscure error number

Expected Results:  
DBX update gets applied to the UEFI of the VM

Comment 1 Chris Henhawke 2022-09-20 22:54:16 UTC

Please disregard, I think the real issue is that it really wants the Microsoft keys, even though manually-created keys on Windows, and supplying the KEK and DB was sufficient enough to enable secure boot.