* Home :: Get a random password :: Get a multi-word password :: What is my IP? (v4 | v6)
* My projects

Enable UEFI for CloudStack KVM VMs

Tags: howto,cloudstack,uefi,kvm

Date: 20260223

Updated: 20260223

It's a simple thing, but sometimes if the information is not easily found it can become a hassle.

So how do we go about it? In 2 simple steps:

Step 1 - Make CloudStack UEFI capable by adding the appropriate content into /etc/cloudstack/agent/uefi.properties and restarting the service:
On (RH)EL:
guest.nvram.template.secure=/usr/share/edk2/ovmf/OVMF_VARS.secboot.fd
guest.nvram.template.legacy=/usr/share/edk2/ovmf/OVMF_VARS.fd
guest.nvram.path=/var/lib/libvirt/qemu/nvram/
guest.loader.secure=/usr/share/edk2/ovmf/OVMF_CODE.secboot.fd
guest.loader.legacy=/usr/share/edk2/ovmf/OVMF_CODE.cc.fd

On Ubuntu/Debian:
guest.nvram.template.secure=/usr/share/OVMF/OVMF_VARS_4M.ms.fd
guest.nvram.template.legacy=/usr/share/OVMF/OVMF_VARS_4M.fd
guest.nvram.path=/var/lib/libvirt/qemu/nvram/
guest.loader.secure=/usr/share/OVMF/OVMF_CODE_4M.secboot.fd
guest.loader.legacy=/usr/share/OVMF/OVMF_CODE_4M.fd
Step 2 - Enable UEFI boot in the VM settings in the CloudStack UI or API. The VM needs to be stopped for this to be possible. Both LEGACY and SECURE are valid options. The latter is if you need "secure boot".


That's it, enjoy!


(c)The Nux(tm) ;-)

No CSS, no Javascript, no some HTML.
No ads, no tracking, no cookies.

Optimised for Dillo browser, great in Lynx, too :)