Re: Encrypting boot partition in guest results in boot failure libvirt qemu-kvm

From	john doe <johndoe65534@mail.com>
Newsgroups	linux.debian.user
Subject	Re: Encrypting boot partition in guest results in boot failure libvirt qemu-kvm
Date	2020-10-13 13:10 +0200
Message-ID	<AZqlQ-69n-17@gated-at.bofh.it> (permalink)
References	<AY4nn-4qf-1@gated-at.bofh.it> <AY6yS-5HL-7@gated-at.bofh.it> <AYgeR-3E3-3@gated-at.bofh.it> <AYprP-19g-5@gated-at.bofh.it> <AYpUS-1z3-3@gated-at.bofh.it>
Organization	linux.* mail to news gateway

Show all headers | View raw

On 10/10/2020 6:25 PM, john doe wrote:
> On 10/10/2020 5:10 PM, Charles Curley wrote:
>> On Sat, 10 Oct 2020 08:06:16 +0200
>> john doe <johndoe65534@mail.com> wrote:
>>
>>> No, I'm not even getting the grub bootloader.
>>
>> If you aren't even getting to to GRUB, then your problem isn't an
>> encrypted /boot partition, it's something else. Possibly something you
>> did in the process of encrypting /boot. Possibly a limitation in
>> libvirt.
>>
>
> Okay, I have installed Debian Buster encrypted lvm using virt-install,
> done the commands to encrypt the boot partition.
> If I boot the VM with qemu directly, it works as I would expected to but
> as long as I use Libvirt it does not.
>
> With apparmor disabled, I as you conclude that the issue is libvirt
> related.
>
> I'm not seeing anything in the log that would indicate where the issue
> lies.
>
>>>
>>> Is it working for you?
>>
>> No. I have looked at the process but not tried it yet. I will probably
>> experiment with a Bullseye installation.
>>
>
> Installing the VM with encrypted lvm is straight forward making the root
> partition encrypted and working well.
>

Thanks to the libvirt folks (1), I got it working by doing:

Add those two lines in the domain xml in the os section

   <os>
     ....
     <bootmenu enable='yes'/>
     <bios useserial='yes'/>
   </os>


The package 'sgabios' may also be needed.


1)  https://www.redhat.com/archives/libvirt-users/2020-October/msg00052.html

--
John Doe

Back to linux.debian.user | Previous | Next — Previous in thread | Find similar | Unroll thread

Thread

Encrypting boot partition in guest results in boot failure libvirt  qemu-kvm john doe <johndoe65534@mail.com> - 2020-10-09 19:30 +0200
  Re: Encrypting boot partition in guest results in boot failure  libvirt qemu-kvm Charles Curley <charlescurley@charlescurley.com> - 2020-10-09 21:50 +0200
    Re: Encrypting boot partition in guest results in boot failure  libvirt qemu-kvm john doe <johndoe65534@mail.com> - 2020-10-10 08:10 +0200
      Re: Encrypting boot partition in guest results in boot failure  libvirt qemu-kvm Charles Curley <charlescurley@charlescurley.com> - 2020-10-10 18:00 +0200
        Re: Encrypting boot partition in guest results in boot failure  libvirt qemu-kvm john doe <johndoe65534@mail.com> - 2020-10-10 18:30 +0200
          Re: Encrypting boot partition in guest results in boot failure  libvirt qemu-kvm john doe <johndoe65534@mail.com> - 2020-10-13 13:10 +0200

csiph-web