hi,

I simply prefer the manipulation of a few keys in the Windows registry at
the time of installation to the "complex" Qemu boot (SecureBoot and TPM).

however, I tried to install W$11 with native (passthrough) and emulated
(swtpm) TPM support, but I always get the warning that the (virtual)
computer is not compatible.
unfortunately, this warning does not specify at what level the
incompatibility is.
I would lean towards SecureBoot that I can't implement with Qemu (the
screen stays frozen on "Guest has not initialized the display (yet).").

# chmod 666 /dev/tpm0
$ /usr/bin/qemu-system-x86_64 -accel kvm -machine q35 -m 4096 -device
nec-usb-xhci -device usb-tablet -cpu host -parallel null -serial mon:stdio
-bios /usr/share/edk2-ovmf/x64/OVMF.fd -hda 11.disk -cdrom 11.iso -tpmdev
passthrough,id=tpm0,path=/dev/tpm0 -device tpm-tis,tpmdev=tpm0

$ swtpm socket --tpm2 --tpmstate dir=/tmp/mytpm --ctrl
type=unixio,path=/tmp/mytpm/swtpm-sock
$ /usr/bin/qemu-system-x86_64 -accel kvm -machine q35 -m 4096 -device
nec-usb-xhci -device usb-tablet -cpu host -parallel null -serial mon:stdio
-bios /usr/share/edk2-ovmf/x64/OVMF.fd -hda 11.disk -cdrom 11.iso -chardev
socket,id=chrtpm,path=/tmp/mytpm/swtpm-sock -tpmdev
emulator,id=tpm0,chardev=chrtpm -device tpm-tis,tpmdev=tpm0

Le ven. 15 oct. 2021 à 18:36, Stefano Cappa <stefano.cappa.k...@gmail.com>
a écrit :

> Totally agree with Friedrich, there is no reason to use workaround or
> hacks. You can simply use a tpm emulator. I'm using swtpm (it's open source
> and available on github) since this August and it works perfectly.
>
> Stefano
>
> Il ven 15 ott 2021, 18:31 Friedrich Oslage <friedr...@oslage.de> ha
> scritto:
>
>> Why do you want to use the registry workarounds? It's a lot easier to
>> just emulate a TPM and Secure-Boot. And yes, Windows 11 works just fine
>> in a Qemu VM which meets the requirements.
>>
>> Also, I'd recommend using libvirt instead of executing qemu directly, it
>> just makes everything easier. For instance in libvirt adding a TPM is
>> just "<tpm model='tpm-crb'><backend type='emulator'
>> version='2.0'/></tpm>", with plain Qemu you need to manage everything
>> yourself, including control socket and state directory.
>>
>> Regards
>> Friedrich
>>
>> On 10/15/21 1:42 PM, Pascal wrote:
>> > hi everyone,
>> > here is the "environment" used (but it still doesn't work :-() :
>>
>>

Reply via email to