sys-firmware/edk2-ovmf currently only generates 2mb images, but some other distros ship 4mb images as well. I believe this could help with Windows 11 VMs on gentoo hosts, due to running into issues applying KB5012170 to the VM. Reproducible: Always Steps to Reproduce: 1. Install sys-firmware/edk2-ovmf 2. Set up a Windows 11 VM with TPM and secure boot enabled UEFI 3. Try applying KB5012170 Actual Results: 1. Run into error 0x800f0845 applying the KB 2. Download the UEFI DBX file, the powershell script to cut up the file 3. Try applying the DBX using the powershell script, get another obscure error number Expected Results: DBX update gets applied to the UEFI of the VM
Please disregard, I think the real issue is that it really wants the Microsoft keys, even though manually-created keys on Windows, and supplying the KEK and DB was sufficient enough to enable secure boot.