windows: preserve Secure Boot request on ARM64 guests

2026-08-08 08:39:47 -06:00 · 2026-08-08 08:39:47 -06:00 · e5d41db5fe
parent 7bd3e2985b
commit e5d41db5fe
1 changed files with 1 additions and 1 deletions
--- a/2
+++ b/2
@ -973,10 +973,10 @@ function configure_bios() {
                # This firmware is passed with -bios and does not use persistent
                # pflash variable storage.
                if [ "${guest_os}" == "windows" ] &&
+                   [ "${secureboot}" != "on" ] &&
                   [ -e "${SHARE_PATH}/edk2/aarch64/QEMU_EFI.fd" ]; then
                    EFI_CODE="${SHARE_PATH}/edk2/aarch64/QEMU_EFI.fd"
                    EFI_MODE="bios"
-                    secureboot="off"
                else
                    # AAVMF firmware paths for ARM64 guests using persistent pflash.
                    # shellcheck disable=SC2054,SC2140