[Bug 1789319] Re: Unable to load shimx64.efi using iPXE over UEFI

[Julian Andres Klode]

I reproduced this using:

$ kvm -bios /usr/share/OVMF/OVMF_CODE.fd -device e1000,netdev=n1 -netdev
user,id=n1,tftp=/boot/efi,bootfile=/EFI/ubuntu/grubx64.efi

and manually booting shim from the iPXE commandline which then tries to
chainload grubx64.efi.

iPXE> boot tftp://10.0.2.2/EFI/boot/bootx64.efi
tftp://10.0.2.2/EFI/boot/bootx64.efi... ok
Fetching Netboot Image
Malformed binary after Attribute Certificate Table
datasize: 4194304 SumOfBytesHashed: 1103360 SecDir->Size: 1912
hashsize: 3089032 SecDir->VirtualAddress: 0x0010D600
Failed to load image: Invalid Parameter
start_image() returned Invalid Parameter
Could not boot: Error 0x7f048282 (http://ipxe.org/7f048282)

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to shim in Ubuntu.
https://bugs.launchpad.net/bugs/1789319

Title:
  Unable to load shimx64.efi using iPXE over UEFI

Status in MAAS:
  Triaged
Status in grub2 package in Ubuntu:
  Confirmed
Status in shim package in Ubuntu:
  Triaged

Bug description:
  libvirt supports creating virtual machines running in UEFI mode and
  uses iPXE to enable network booting. When MAAS gives shimx64.efi, as
  it does on all UEFI systems, to iPXE it chainloads grub but fails to
  the grub prompt. If I modify MAAS to give grubx64.efi instead of
  shimx64.efi UEFI booting works.

  Ideally iPXE would be modified to properly chainload the shim however
  MAAS could also check the user-agent when returning the boot file as
  follows.

  if option arch = 00:00 {
      # pxe
      filename "lpxelinux.0";
  } elsif option arch = 00:07 and exists user-class and option user-class = "iPXE" {
      # iPXE uefi_amd64
      filename "grubx64.efi";
  } elsif option arch = 00:07 {
      # uefi_amd64
      filename "bootx64.efi";
  } elsif option arch = 00:09 and exists user-class and option user-class = "iPXE" {
      # iPXE uefi_amd64
      filename "grubx64.efi";
  } elsif option arch = 00:09 {
      # uefi_amd64
      filename "bootx64.efi";
  } elsif option arch = 00:0B {
      # uefi_arm64
      filename "grubaa64.efi";
  } elsif option arch = 00:0C {
      # open-firmware_ppc64el
      filename "bootppc64.bin";
  } elsif option arch = 00:0E {
      # powernv
      filename "pxelinux.0";
      option path-prefix "ppc64el/";
  } elsif option arch = 00:1F {
      # s390x
      filename "boots390x.bin";
      option path-prefix "s390x/";
  } else {
      # pxe
      filename "lpxelinux.0";
  }

To manage notifications about this bug go to:
https://bugs.launchpad.net/maas/+bug/1789319/+subscriptions