Merge ~lvoytek/ubuntu/+source/libvirt:libvirt-fix-swtpm-apparmor-rules into ubuntu/+source/libvirt:ubuntu/devel
Status: | Merged | ||||
---|---|---|---|---|---|
Merged at revision: | 8d587bbb1382323a626311051c34a4725952080b | ||||
Proposed branch: | ~lvoytek/ubuntu/+source/libvirt:libvirt-fix-swtpm-apparmor-rules | ||||
Merge into: | ubuntu/+source/libvirt:ubuntu/devel | ||||
Diff against target: |
66 lines (+44/-0) 3 files modified
debian/changelog (+8/-0) debian/patches/series (+1/-0) debian/patches/ubuntu-aa/0035-apparmor-separate-swtpm-rules.patch (+35/-0) |
||||
Related bugs: |
|
Reviewer | Review Type | Date Requested | Status |
---|---|---|---|
Christian Ehrhardt (community) | Approve | ||
Canonical Server Core Reviewers | Pending | ||
Canonical Server | Pending | ||
Review via email: mp+419329@code.launchpad.net |
Description of the change
Allow swtpm to use its own apparmor profile when run by libvirt and add swtpm interaction permissions
See also: https:/
ppa: ppa:lvoytek/
tested by setting up a Windows 11 instance using virt-manager and qemu on its own
tested standalone swtpm
Test details:
Runing help and version:
$ swtpm --help
$ swtpm --version
Using QEMU:
$ /usr/share/
$ qemu-img create -f qcow2 win11.img 64G
$ mkdir /tmp/emulated_tpm
$ swtpm socket --tpmstate dir=/tmp/
$ sudo qemu-system-x86_64 -hda win11.img -boot d -m 4096 -enable-kvm -chardev socket,
Using virt-manager
> Open virt-manager
> Click New Virtual Machine button
Step 1:
> Select "Local install media (ISO image or CDROM)
> Click Forward
Step 2:
> Click Browse and find Windows 11 iso
> Select "Automatically detect from the installation media / source"
> Click Forward
Step 3:
> Use >= 4096 MiB for Memory
> Use >= 2 CPUs
> Click Forward
Step 4:
> Select "Enable storage for this virtual machine"
> Use >= 70 GiB for storage size
> Click Forward
Step 5:
> Select "Customize configuration before install"
> Click Finish
Config Screen:
> For Overview > Firmware select UEFI x86_64: /usr/share/
> For Boot Options select "SATA CDROM 1" and move it to top
> Click Add Hardware
> Select TPM with Model "TIS" and version 2.0
> Click "Begin Installation"
I tested my prior repro for these bugs using a uvt-kvm testguest with TPM.
Worked fine as well