[PATCH 10/10] start_vm: add support for secureboot

[Felix Moessbauer <felix.moessbauer@siemens.com>]

This patch adds a new -s parameter to enable the qemu secureboot
support. To handle the persistency across reboots of the machine, we
create a copy of the OVMF variables and pass that into qemu.

Signed-off-by: Felix Moessbauer <felix.moessbauer@siemens.com>
---
 scripts/start_vm | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/scripts/start_vm b/scripts/start_vm
index 3c0ba16..9cb7b9a 100755
--- a/scripts/start_vm
+++ b/scripts/start_vm
@@ -51,6 +51,7 @@ show_help() {
     echo "    -o, --out FILE        Route QEMU console output to"
     echo "                          specified file."
     echo "    -p, --pid FILE        Store QEMU pid to file."
+    echo "    -s, --secureboot      Enable secureboot with default MS keys."
     echo "    --help                display this message and exit."
     echo
     echo "Exit status:"
@@ -93,6 +94,12 @@ do
         EXTRA_ARGS="$EXTRA_ARGS -pidfile $2"
         shift
         ;;
+    -s|--secureboot)
+        OVMF_VARS_ORIG="/usr/share/OVMF/OVMF_VARS_4M.ms.fd"
+        OVMF_VARS="$(basename "${OVMF_VARS_ORIG}")"
+        cp "${OVMF_VARS_ORIG}" "${OVMF_VARS}"
+        EXTRA_ARGS="$EXTRA_ARGS -drive if=pflash,format=raw,unit=1,file=${OVMF_VARS}"
+        ;;
     *)
         echo "error: invalid parameter '$key', please try '--help' to get list of supported parameters"
         exit $ES_BUG
-- 
2.34.1