Unverified Commit 0703a702 authored by Shea Levy's avatar Shea Levy
Browse files

OVMF: Expose flag to require SMM with secure boot

parent 294ded9e

pkgs/applications/virtualization/OVMF/default.nix

+4 −0
Original line number Diff line number Diff line
@@ -3,6 +3,7 @@ 
, fdSize2MB ? csmSupport

, fdSize4MB ? false

, secureBoot ? false

, systemManagementModeRequired ? secureBoot && stdenv.hostPlatform.isx86

, httpSupport ? false

, tpmSupport ? false

, tlsSupport ? false
@@ -36,6 +37,8 @@ let 


in



assert systemManagementModeRequired -> stdenv.hostPlatform.isx86;



edk2.mkDerivation projectDscPath (finalAttrs: {

  pname = "OVMF";

  inherit version;
@@ -54,6 +57,7 @@ edk2.mkDerivation projectDscPath (finalAttrs: { 
    ++ lib.optionals debug [ "-D DEBUG_ON_SERIAL_PORT=TRUE" ]

    ++ lib.optionals sourceDebug [ "-D SOURCE_DEBUG_ENABLE=TRUE" ]

    ++ lib.optionals secureBoot [ "-D SECURE_BOOT_ENABLE=TRUE" ]

    ++ lib.optionals systemManagementModeRequired [ "-D SMM_REQUIRE=TRUE" ]

    ++ lib.optionals csmSupport [ "-D CSM_ENABLE" ]

    ++ lib.optionals fdSize2MB ["-D FD_SIZE_2MB"]

    ++ lib.optionals fdSize4MB ["-D FD_SIZE_4MB"]