|
 |
2fcb9a5 |
|
|
|
2fcb9a5 |
[opts.ovmf.common]
|
|
|
2fcb9a5 |
NETWORK_HTTP_BOOT_ENABLE = TRUE
|
|
|
2fcb9a5 |
NETWORK_IP6_ENABLE = TRUE
|
|
|
2fcb9a5 |
NETWORK_TLS_ENABLE = TRUE
|
|
|
2fcb9a5 |
NETWORK_ISCSI_ENABLE = TRUE
|
|
|
2fcb9a5 |
NETWORK_ALLOW_HTTP_CONNECTIONS = TRUE
|
|
|
2fcb9a5 |
TPM2_ENABLE = TRUE
|
|
|
2fcb9a5 |
TPM2_CONFIG_ENABLE = TRUE
|
|
|
2fcb9a5 |
TPM1_ENABLE = TRUE
|
|
|
2fcb9a5 |
|
|
|
2fcb9a5 |
[opts.ovmf.4m]
|
|
|
2fcb9a5 |
FD_SIZE_4MB = TRUE
|
|
|
2fcb9a5 |
|
|
|
2fcb9a5 |
[opts.ovmf.2m]
|
|
|
2fcb9a5 |
FD_SIZE_2MB = TRUE
|
|
|
2fcb9a5 |
NETWORK_ISCSI_ENABLE = FALSE
|
|
|
2fcb9a5 |
|
|
|
2fcb9a5 |
[opts.ovmf.sb.smm]
|
|
|
2fcb9a5 |
SECURE_BOOT_ENABLE = TRUE
|
|
|
2fcb9a5 |
SMM_REQUIRE = TRUE
|
|
|
2fcb9a5 |
# old downstream
|
|
|
2fcb9a5 |
EXCLUDE_SHELL_FROM_FD = TRUE
|
|
|
2fcb9a5 |
# new upstream
|
|
|
2fcb9a5 |
BUILD_SHELL = FALSE
|
|
|
2fcb9a5 |
|
|
|
cde80e5 |
# requires edk2 2022-11 or newer
|
|
|
cde80e5 |
[opts.ovmf.sb.stateless]
|
|
|
cde80e5 |
SECURE_BOOT_ENABLE = TRUE
|
|
|
cde80e5 |
SMM_REQUIRE = FALSE
|
|
|
cde80e5 |
|
|
|
2fcb9a5 |
[opts.armvirt.verbose]
|
|
|
2fcb9a5 |
DEBUG_PRINT_ERROR_LEVEL = 0x8040004F
|
|
|
2fcb9a5 |
|
|
|
2fcb9a5 |
[opts.armvirt.silent]
|
|
|
2fcb9a5 |
DEBUG_PRINT_ERROR_LEVEL = 0x80000000
|
|
|
2fcb9a5 |
|
|
|
2fcb9a5 |
|
|
|
fbbab03 |
[pcds.nx.strict]
|
|
|
fbbab03 |
PcdDxeNxMemoryProtectionPolicy = 0xC000000000007FD5
|
|
|
fbbab03 |
|
|
|
fbbab03 |
[pcds.nx.broken.grub]
|
|
|
fbbab03 |
# grub.efi uses EfiLoaderData for code
|
|
|
fbbab03 |
PcdDxeNxMemoryProtectionPolicy = 0xC000000000007FD1
|
|
|
fbbab03 |
|
|
|
fbbab03 |
|
|
|
2fcb9a5 |
#####################################################################
|
|
|
2fcb9a5 |
# stateful ovmf builds (with vars in flash)
|
|
|
2fcb9a5 |
|
|
|
2fcb9a5 |
[build.ovmf.2m.default]
|
|
|
2fcb9a5 |
desc = ovmf build (64-bit, 2MB)
|
|
|
2fcb9a5 |
conf = OvmfPkg/OvmfPkgX64.dsc
|
|
|
2fcb9a5 |
arch = X64
|
|
|
fbbab03 |
opts = ovmf.common
|
|
|
fbbab03 |
ovmf.2m
|
|
|
2fcb9a5 |
plat = OvmfX64
|
|
|
2fcb9a5 |
dest = Fedora/ovmf
|
|
|
2fcb9a5 |
cpy1 = FV/OVMF_CODE.fd
|
|
|
2fcb9a5 |
cpy2 = FV/OVMF_VARS.fd
|
|
|
2fcb9a5 |
cpy3 = X64/Shell.efi
|
|
|
2fcb9a5 |
|
|
|
2fcb9a5 |
[build.ovmf.4m.default]
|
|
|
2fcb9a5 |
desc = ovmf build (64-bit, 4MB)
|
|
|
2fcb9a5 |
conf = OvmfPkg/OvmfPkgX64.dsc
|
|
|
2fcb9a5 |
arch = X64
|
|
|
fbbab03 |
opts = ovmf.common
|
|
|
fbbab03 |
ovmf.4m
|
|
|
2fcb9a5 |
plat = OvmfX64
|
|
|
2fcb9a5 |
dest = Fedora/ovmf-4m
|
|
|
2fcb9a5 |
cpy1 = FV/OVMF_CODE.fd
|
|
|
2fcb9a5 |
cpy2 = FV/OVMF_VARS.fd
|
|
|
2fcb9a5 |
|
|
|
2fcb9a5 |
[build.ovmf.2m.sb.smm]
|
|
|
2fcb9a5 |
desc = ovmf build (32/64-bit, 2MB, q35 only, needs smm, secure boot)
|
|
|
2fcb9a5 |
conf = OvmfPkg/OvmfPkgIa32X64.dsc
|
|
|
2fcb9a5 |
arch = IA32 X64
|
|
|
fbbab03 |
opts = ovmf.common
|
|
|
fbbab03 |
ovmf.2m
|
|
|
fbbab03 |
ovmf.sb.smm
|
|
|
2fcb9a5 |
plat = Ovmf3264
|
|
|
2fcb9a5 |
dest = Fedora/ovmf
|
|
|
2fcb9a5 |
cpy1 = FV/OVMF_CODE.fd OVMF_CODE.secboot.fd
|
|
|
2fcb9a5 |
cpy2 = X64/EnrollDefaultKeys.efi
|
|
|
2fcb9a5 |
|
|
|
2fcb9a5 |
[build.ovmf.4m.sb.smm]
|
|
|
2fcb9a5 |
desc = ovmf build (32/64-bit, 4MB, q35 only, needs smm, secure boot)
|
|
|
2fcb9a5 |
conf = OvmfPkg/OvmfPkgIa32X64.dsc
|
|
|
2fcb9a5 |
arch = IA32 X64
|
|
|
fbbab03 |
opts = ovmf.common
|
|
|
fbbab03 |
ovmf.4m
|
|
|
fbbab03 |
ovmf.sb.smm
|
|
|
2fcb9a5 |
plat = Ovmf3264
|
|
|
2fcb9a5 |
dest = Fedora/ovmf-4m
|
|
|
2fcb9a5 |
cpy1 = FV/OVMF_CODE.fd OVMF_CODE.secboot.fd
|
|
|
2fcb9a5 |
|
|
|
2fcb9a5 |
|
|
|
2fcb9a5 |
#####################################################################
|
|
|
2fcb9a5 |
# stateless ovmf builds (firmware in rom or r/o flash)
|
|
|
2fcb9a5 |
|
|
|
2fcb9a5 |
[build.ovmf.microvm]
|
|
|
2fcb9a5 |
desc = ovmf build for qemu microvm (2MB)
|
|
|
2fcb9a5 |
conf = OvmfPkg/Microvm/MicrovmX64.dsc
|
|
|
2fcb9a5 |
arch = X64
|
|
|
fbbab03 |
opts = ovmf.common
|
|
|
fbbab03 |
ovmf.2m
|
|
|
2fcb9a5 |
plat = MicrovmX64
|
|
|
2fcb9a5 |
dest = Fedora/ovmf
|
|
|
2fcb9a5 |
cpy1 = FV/MICROVM.fd
|
|
|
2fcb9a5 |
|
|
|
2fcb9a5 |
[build.ovmf.amdsev]
|
|
|
2fcb9a5 |
desc = ovmf build for AmdSev (2MB)
|
|
|
2fcb9a5 |
conf = OvmfPkg/AmdSev/AmdSevX64.dsc
|
|
|
2fcb9a5 |
arch = X64
|
|
|
fbbab03 |
opts = ovmf.common
|
|
|
fbbab03 |
ovmf.2m
|
|
|
2fcb9a5 |
plat = AmdSev
|
|
|
2fcb9a5 |
dest = Fedora/ovmf
|
|
|
2fcb9a5 |
cpy1 = FV/OVMF.fd OVMF.amdsev.fd
|
|
|
2fcb9a5 |
|
|
|
2fcb9a5 |
[build.ovmf.inteltdx]
|
|
|
2fcb9a5 |
desc = ovmf build for IntelTdx (2MB)
|
|
|
2fcb9a5 |
conf = OvmfPkg/IntelTdx/IntelTdxX64.dsc
|
|
|
2fcb9a5 |
arch = X64
|
|
|
2fcb9a5 |
opts = ovmf.common ovmf.2m
|
|
|
2fcb9a5 |
plat = IntelTdx
|
|
|
2fcb9a5 |
dest = Fedora/ovmf
|
|
|
2fcb9a5 |
cpy1 = FV/OVMF.fd OVMF.inteltdx.fd
|
|
|
2fcb9a5 |
|
|
|
2fcb9a5 |
|
|
|
2fcb9a5 |
#####################################################################
|
|
|
2fcb9a5 |
# armvirt builds
|
|
|
2fcb9a5 |
|
|
|
2fcb9a5 |
[build.armvirt.aa64.verbose]
|
|
|
2fcb9a5 |
desc = ArmVirt build for qemu, 64-bit (arm v8), verbose
|
|
|
2fcb9a5 |
conf = ArmVirtPkg/ArmVirtQemu.dsc
|
|
|
2fcb9a5 |
arch = AARCH64
|
|
|
fbbab03 |
opts = ovmf.common
|
|
|
fbbab03 |
armvirt.verbose
|
|
|
fbbab03 |
pcds = nx.broken.grub
|
|
|
2fcb9a5 |
plat = ArmVirtQemu-AARCH64
|
|
|
2fcb9a5 |
dest = Fedora/aarch64
|
|
|
2fcb9a5 |
cpy1 = FV/QEMU_EFI.fd
|
|
|
2fcb9a5 |
cpy2 = FV/QEMU_VARS.fd
|
|
|
2fcb9a5 |
cpy3 = FV/QEMU_EFI.fd QEMU_EFI-pflash.raw
|
|
|
2fcb9a5 |
cpy4 = FV/QEMU_VARS.fd vars-template-pflash.raw
|
|
|
2fcb9a5 |
pad3 = QEMU_EFI-pflash.raw 64m
|
|
|
2fcb9a5 |
pad4 = vars-template-pflash.raw 64m
|
|
|
2fcb9a5 |
|
|
|
2fcb9a5 |
[build.armvirt.aa64.silent]
|
|
|
2fcb9a5 |
desc = ArmVirt build for qemu, 64-bit (arm v8), silent
|
|
|
2fcb9a5 |
conf = ArmVirtPkg/ArmVirtQemu.dsc
|
|
|
2fcb9a5 |
arch = AARCH64
|
|
|
fbbab03 |
opts = ovmf.common
|
|
|
fbbab03 |
armvirt.silent
|
|
|
fbbab03 |
pcds = nx.broken.grub
|
|
|
2fcb9a5 |
plat = ArmVirtQemu-AARCH64
|
|
|
2fcb9a5 |
dest = Fedora/aarch64
|
|
|
2fcb9a5 |
cpy1 = FV/QEMU_EFI.fd QEMU_EFI.silent.fd
|
|
|
2fcb9a5 |
cpy2 = FV/QEMU_EFI.fd QEMU_EFI-silent-pflash.raw
|
|
|
2fcb9a5 |
pad2 = QEMU_EFI-silent-pflash.raw 64m
|
|
|
2fcb9a5 |
|
|
|
2fcb9a5 |
|
|
|
2fcb9a5 |
#####################################################################
|
|
|
2fcb9a5 |
# 32-bit builds
|
|
|
2fcb9a5 |
|
|
|
2fcb9a5 |
[build.ovmf.ia32.default]
|
|
|
2fcb9a5 |
desc = ovmf build (32-bit, 2MB)
|
|
|
2fcb9a5 |
conf = OvmfPkg/OvmfPkgIa32.dsc
|
|
|
2fcb9a5 |
arch = IA32
|
|
|
fbbab03 |
opts = ovmf.common
|
|
|
fbbab03 |
ovmf.2m
|
|
|
2fcb9a5 |
plat = OvmfIa32
|
|
|
2fcb9a5 |
dest = Fedora/ovmf-ia32
|
|
|
2fcb9a5 |
cpy1 = FV/OVMF_CODE.fd
|
|
|
2fcb9a5 |
cpy2 = FV/OVMF_VARS.fd
|
|
|
2fcb9a5 |
cpy3 = IA32/Shell.efi
|
|
|
2fcb9a5 |
|
|
|
2fcb9a5 |
[build.ovmf.ia32.sb.smm]
|
|
|
2fcb9a5 |
desc = ovmf build (32-bit, 2MB, q35 only, needs smm, secure boot)
|
|
|
2fcb9a5 |
conf = OvmfPkg/OvmfPkgIa32.dsc
|
|
|
2fcb9a5 |
arch = IA32
|
|
|
fbbab03 |
opts = ovmf.common
|
|
|
fbbab03 |
ovmf.2m
|
|
|
fbbab03 |
ovmf.sb.smm
|
|
|
2fcb9a5 |
plat = OvmfIa32
|
|
|
2fcb9a5 |
dest = Fedora/ovmf-ia32
|
|
|
2fcb9a5 |
cpy1 = FV/OVMF_CODE.fd OVMF_CODE.secboot.fd
|
|
|
2fcb9a5 |
cpy2 = IA32/EnrollDefaultKeys.efi
|
|
|
2fcb9a5 |
|
|
|
2fcb9a5 |
[build.armvirt.arm]
|
|
|
2fcb9a5 |
desc = ArmVirt build for qemu, 32-bit (arm v7)
|
|
|
2fcb9a5 |
conf = ArmVirtPkg/ArmVirtQemu.dsc
|
|
|
2fcb9a5 |
arch = ARM
|
|
|
2fcb9a5 |
opts = ovmf.common
|
|
|
fbbab03 |
pcds = nx.broken.grub
|
|
|
2fcb9a5 |
plat = ArmVirtQemu-ARM
|
|
|
2fcb9a5 |
dest = Fedora/arm
|
|
|
2fcb9a5 |
cpy1 = FV/QEMU_EFI.fd
|
|
|
2fcb9a5 |
cpy2 = FV/QEMU_VARS.fd
|
|
|
2fcb9a5 |
cpy3 = FV/QEMU_EFI.fd QEMU_EFI-pflash.raw
|
|
|
2fcb9a5 |
cpy4 = FV/QEMU_VARS.fd vars-template-pflash.raw
|
|
|
2fcb9a5 |
pad3 = QEMU_EFI-pflash.raw 64m
|
|
|
2fcb9a5 |
pad4 = vars-template-pflash.raw 64m
|
|
|
cde80e5 |
|
|
|
cde80e5 |
|
|
|
cde80e5 |
#####################################################################
|
|
|
cde80e5 |
# experimental builds
|
|
|
cde80e5 |
|
|
|
cde80e5 |
[build.ovmf.sb.stateless]
|
|
|
cde80e5 |
desc = ovmf build (64-bit, stateless secure boot)
|
|
|
cde80e5 |
conf = OvmfPkg/OvmfPkgX64.dsc
|
|
|
cde80e5 |
arch = X64
|
|
|
fbbab03 |
opts = ovmf.common
|
|
|
fbbab03 |
ovmf.4m
|
|
|
fbbab03 |
ovmf.sb.stateless
|
|
|
cde80e5 |
plat = OvmfX64
|
|
|
cde80e5 |
dest = Fedora/experimental
|
|
|
cde80e5 |
cpy1 = FV/OVMF.fd OVMF.stateless.fd
|
|
|
fbbab03 |
|
|
|
fbbab03 |
[build.ovmf.strict.nx]
|
|
|
fbbab03 |
desc = ovmf build (32/64-bit, 4MB, q35 only, needs smm, secure boot, strict nx)
|
|
|
fbbab03 |
conf = OvmfPkg/OvmfPkgIa32X64.dsc
|
|
|
fbbab03 |
arch = IA32 X64
|
|
|
fbbab03 |
opts = ovmf.common
|
|
|
fbbab03 |
ovmf.4m
|
|
|
fbbab03 |
ovmf.sb.smm
|
|
|
fbbab03 |
pcds = nx.strict
|
|
|
fbbab03 |
plat = Ovmf3264
|
|
|
fbbab03 |
dest = Fedora/experimental
|
|
|
fbbab03 |
cpy1 = FV/OVMF_CODE.fd OVMF_CODE.4m.secboot.strictnx.fd
|
|
|
fbbab03 |
|
|
|
fbbab03 |
[build.armvirt.aa64.strict.nx]
|
|
|
fbbab03 |
desc = ArmVirt build for qemu, 64-bit (arm v8), verbose
|
|
|
fbbab03 |
conf = ArmVirtPkg/ArmVirtQemu.dsc
|
|
|
fbbab03 |
arch = AARCH64
|
|
|
fbbab03 |
opts = ovmf.common
|
|
|
fbbab03 |
armvirt.verbose
|
|
|
fbbab03 |
pcds = nx.strict
|
|
|
fbbab03 |
plat = ArmVirtQemu-AARCH64
|
|
|
fbbab03 |
dest = Fedora/experimental
|
|
|
fbbab03 |
cpy1 = FV/QEMU_EFI.fd QEMU_EFI.strictnx.fd
|
|
|
fbbab03 |
cpy3 = FV/QEMU_EFI.fd QEMU_EFI-strictnx-pflash.raw
|
|
|
fbbab03 |
pad3 = QEMU_EFI-strictnx-pflash.raw 64m
|