Bug 872095

Summary:	sys-firmware/edk2-ovmf only generates 2mb images
Product:	Gentoo Linux	Reporter:	Chris Henhawke <chris>
Component:	Current packages	Assignee:	Matthias Maier <tamiko>
Status:	RESOLVED INVALID
Severity:	normal	CC:	virtualization
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
URL:	https://github.com/tianocore/edk2/discussions/3221
Whiteboard:
Package list:		Runtime testing required:	---

Description Chris Henhawke 2022-09-20 21:08:54 UTC

sys-firmware/edk2-ovmf currently only generates 2mb images, but some other distros ship 4mb images as well.  I believe this could help with Windows 11 VMs on gentoo hosts, due to running into issues applying KB5012170 to the VM.

Reproducible: Always

Steps to Reproduce:
1. Install sys-firmware/edk2-ovmf
2. Set up a Windows 11 VM with TPM and secure boot enabled UEFI
3. Try applying KB5012170
Actual Results:  
1. Run into error 0x800f0845 applying the KB
2. Download the UEFI DBX file, the powershell script to cut up the file
3. Try applying the DBX using the powershell script, get another obscure error number

Expected Results:  
DBX update gets applied to the UEFI of the VM

Comment 1 Chris Henhawke 2022-09-20 22:54:16 UTC

Please disregard, I think the real issue is that it really wants the Microsoft keys, even though manually-created keys on Windows, and supplying the KEK and DB was sufficient enough to enable secure boot.