Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

MTV-1632 | Add secureboot to vsphere #1260

Merged
merged 1 commit into from
Dec 12, 2024
Merged

MTV-1632 | Add secureboot to vsphere #1260

merged 1 commit into from
Dec 12, 2024

Conversation

mnecas
Copy link
Member

@mnecas mnecas commented Dec 11, 2024

Issue: When creating the VM from vSphere on kubevirt the MTV always
defaulted the secureboot to false.

Fix: Add the secureboot to the inventory and to main controller to pass
it to the KubeVirt.

Ref: https://issues.redhat.com/browse/MTV-1632

Signed-off-by: Martin Necas mnecas@redhat.com

@mnecas mnecas requested a review from yaacov as a code owner December 11, 2024 13:22
Comment on lines -671 to -675
// We don't distinguish between UEFI and UEFI with secure boot, but we anyway would have
// disabled secure boot, even if we knew it was enabled on the source, because the guest
// OS won't be able to boot without getting the NVRAM data. By starting the VM without
// secure boot we ease the procedure users need to do in order to make a guest OS that
// was previously configured with secure boot bootable.
Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We need to make difference between measured boot and secureboot, the comment about the NVRAM is true but that contains the keys for the measured boot. Which still won't work, but we can manage the secureboot itself.

@mnecas mnecas added this to the 2.7.7 milestone Dec 11, 2024
@codecov-commenter
Copy link

codecov-commenter commented Dec 11, 2024

⚠️ Please install the 'codecov app svg image' to ensure uploads and comments are reliably processed by Codecov.

Codecov Report

Attention: Patch coverage is 12.50000% with 7 lines in your changes missing coverage. Please review.

Project coverage is 15.57%. Comparing base (ea38999) to head (fa2ed08).

Files with missing lines Patch % Lines
pkg/controller/provider/container/vsphere/model.go 0.00% 5 Missing ⚠️
pkg/controller/plan/adapter/vsphere/builder.go 0.00% 1 Missing ⚠️
pkg/controller/provider/web/vsphere/vm.go 0.00% 1 Missing ⚠️

❗ Your organization needs to install the Codecov GitHub app to enable full functionality.

Additional details and impacted files
@@            Coverage Diff             @@
##             main    #1260      +/-   ##
==========================================
- Coverage   15.57%   15.57%   -0.01%     
==========================================
  Files         112      112              
  Lines       23255    23256       +1     
==========================================
- Hits         3623     3621       -2     
- Misses      19345    19347       +2     
- Partials      287      288       +1     
Flag Coverage Δ
unittests 15.57% <12.50%> (-0.01%) ⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

Issue: When creating the VM from vSphere on kubevirt the MTV always
defaulted the secureboot to false.

Fix: Add the secureboot to the inventory and to main controller to pass
it to the KubeVirt.

Ref: https://issues.redhat.com/browse/MTV-1632

Signed-off-by: Martin Necas <mnecas@redhat.com>
@mnecas mnecas merged commit 59c31b0 into kubev2v:main Dec 12, 2024
16 checks passed
@mnecas mnecas mentioned this pull request Dec 13, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants