Git-Mirrors/constellation
1
0
Fork 0
mirror of https://github.com/edgelesssys/constellation.git synced 2025-02-23 16:30:11 -05:00
Code Issues Packages Projects Releases Wiki Activity

terraform: disable secure boot for QEMU / MiniConstellation

Browse Source
This commit is contained in:
Malte Poll 2023-09-18 12:18:22 +02:00 committed by Malte Poll
parent 3543fe140e
commit 4e2b9745bb
4 changed files with 5 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
cli/internal/terraform/terraform/qemu/modules/instance_group/domain.xsl
View File

@ -14,7 +14,7 @@
<xsl:copy> <xsl:copy>
<!--<xsl:apply-templates select="node()|@*"/>--> <!--<xsl:apply-templates select="node()|@*"/>-->
<xsl:attribute name="secure"> <xsl:attribute name="secure">
<xsl:value-of select="'yes'"/> <xsl:value-of select="'no'"/>
</xsl:attribute> </xsl:attribute>
<xsl:attribute name="readonly"> <xsl:attribute name="readonly">
<xsl:value-of select="'yes'"/> <xsl:value-of select="'yes'"/>

2
cli/internal/terraform/terraform/qemu/variables.tf
View File

@ -68,7 +68,7 @@ variable "image_format" {
variable "firmware" { variable "firmware" {
type = string type = string
default = "/usr/share/OVMF/OVMF_CODE.secboot.fd" default = "/usr/share/OVMF/OVMF_CODE.secboot.fd"
description = "path to UEFI firmware file. Use \"OVMF_CODE_4M.ms.fd\" on Ubuntu and \"OVMF_CODE.secboot.fd\" on Fedora." description = "path to UEFI firmware file. Use \"OVMF_CODE_4M.ms.fd\" on Ubuntu and \"OVMF_CODE.fd\" or \"OVMF_CODE.secboot.fd\" on Fedora."
} }
variable "nvram" { variable "nvram" {

4
cli/internal/terraform/variables.go
View File

@ -360,9 +360,9 @@ func (q *QEMUVariables) String() string {
vCopy := *q vCopy := *q
switch vCopy.NVRAM { switch vCopy.NVRAM {
case "production": case "production":
vCopy.NVRAM = "/usr/share/OVMF/constellation_vars.production.fd" vCopy.NVRAM = "/usr/share/OVMF/OVMF_VARS.fd"
case "testing": case "testing":
vCopy.NVRAM = "/usr/share/OVMF/constellation_vars.testing.fd" vCopy.NVRAM = "/usr/share/OVMF/OVMF_VARS.fd"
} }
f := hclwrite.NewEmptyFile() f := hclwrite.NewEmptyFile()
gohcl.EncodeIntoBody(vCopy, f.Body()) gohcl.EncodeIntoBody(vCopy, f.Body())

2
cli/internal/terraform/variables_test.go
View File

@ -329,7 +329,7 @@ constellation_os_image = "/var/lib/libvirt/images/cluster-name.qcow2"
image_format = "raw" image_format = "raw"
metadata_api_image = "example.com/metadata-api:latest" metadata_api_image = "example.com/metadata-api:latest"
metadata_libvirt_uri = "qemu:///system" metadata_libvirt_uri = "qemu:///system"
nvram = "/usr/share/OVMF/constellation_vars.production.fd" nvram = "/usr/share/OVMF/OVMF_VARS.fd"
constellation_initrd = "/var/lib/libvirt/images/cluster-name-initrd" constellation_initrd = "/var/lib/libvirt/images/cluster-name-initrd"
constellation_cmdline = "console=ttyS0,115200n8" constellation_cmdline = "console=ttyS0,115200n8"
custom_endpoint = "example.com" custom_endpoint = "example.com"