Attachment 22067 Details for Bug 60240 – полный лог ошибки

полный лог ошибки

error.log (text/x-log), 3.25 KB, created by Лавренко Егор Сергеевич on 2026-08-21 16:16:03 MSK

(hide)

Description:

Filename:

MIME Type:

Creator: Лавренко Егор Сергеевич

Created: 2026-08-21 16:16:03 MSK

Size: 3.25 KB

patch

obsolete

>update VM 100: -efidisk0 efitype=4m,file=dir:100/vm-100-disk-0.qcow2,ms-cert=2023k,pre-enrolled-keys=1,size=528K
>efidisk0: enrolling Microsoft UEFI CA 2023
>INFO: reading raw edk2 varstore from /var/run/qemu-server/qsd-vm-100-efi-enroll-efidisk0-enroll.fuse
>INFO: var store range: 0x64 -> 0x40000
>/usr/lib/python3/site-packages/virt/firmware/efi/siglist.py:58: CryptographyDeprecationWarning: Parsed a serial number which wasn't positive (i.e., it was negative or zero), which is disallowed by RFC 5280. Loading this certificate will cause an exception in a future release of cryptography.
>  self.x509 = x509.load_der_x509_certificate(data, default_backend())
>INFO: add db cert /usr/lib/python3/site-packages/virt/firmware/certs/microsoft.com/ms-uefi-2011.pem
>INFO: certificate already present, skipping
>INFO: add db cert /usr/lib/python3/site-packages/virt/firmware/certs/microsoft.com/ms-uefi-2023.pem
>INFO: certificate already present, skipping
>INFO: add db cert /usr/lib/python3/site-packages/virt/firmware/certs/microsoft.com/windows-2011.pem
>INFO: certificate already present, skipping
>INFO: add db cert /usr/lib/python3/site-packages/virt/firmware/certs/microsoft.com/windows-2023.pem
>INFO: certificate already present, skipping
>INFO: add KEK cert /usr/lib/python3/dist-packages/virt/firmware/certs/MicrosoftCorporationKEK2KCA2023.pem
>Traceback (most recent call last):
>  File "/bin/virt-fw-vars", line 9, in <module>
>    sys.exit(main())
>             ~~~~^^
>  File "/usr/lib/python3/site-packages/virt/firmware/vars.py", line 309, in main
>    varlist.add_cert('KEK', item[0], item[1])
>    ~~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^
>  File "/usr/lib/python3/site-packages/virt/firmware/efi/efivar.py", line 450, in add_cert
>    var.sigdb_add_cert(guids.parse_str(owner), filename)
>    ~~~~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
>  File "/usr/lib/python3/site-packages/virt/firmware/efi/efivar.py", line 243, in sigdb_add_cert
>    self.sigdb.add_cert(guid, filename)
>    ~~~~~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^
>  File "/usr/lib/python3/site-packages/virt/firmware/efi/siglist.py", line 144, in add_cert
>    siglist.add_cert(guid, filename)
>    ~~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^
>  File "/usr/lib/python3/site-packages/virt/firmware/efi/siglist.py", line 71, in add_cert
>    with open(filename, "rb") as f:
>         ~~~~^^^^^^^^^^^^^^^^
>FileNotFoundError: [Errno 2] No such file or directory: '/usr/lib/python3/dist-packages/virt/firmware/certs/MicrosoftCorporationKEK2KCA2023.pem'
>unable to apply pending change efidisk0 : efidisk0: enrolling Microsoft UEFI CA 2023 failed - command 'virt-fw-vars --inplace /var/run/qemu-server/qsd-vm-100-efi-enroll-efidisk0-enroll.fuse --distro-keys ms-uefi --distro-keys windows --add-kek 77fa9abd-0359-4d32-bd60-28f4e78f784b /usr/lib/python3/dist-packages/virt/firmware/certs/MicrosoftCorporationKEK2KCA2023.pem' failed: exit code 1
>TASK ERROR: 400 Parameter verification failed. efidisk0: unable to apply pending change efidisk0 : efidisk0: enrolling Microsoft UEFI CA 2023 failed - command 'virt-fw-vars --inplace /var/run/qemu-server/qsd-vm-100-efi-enroll-efidisk0-enroll.fuse --distro-keys ms-uefi --distro-keys windows --add-kek 77fa9abd-0359-4d32-bd60-28f4e78f784b /usr/lib/python3/dist-packages/virt/firmware/certs/MicrosoftCorporationKEK2KCA2023.pem' failed: exit code 1

Actions: View

Attachments on bug 60240: 22067