secubox/secubox-deb
1
0
Fork 0
mirror of https://github.com/CyberMind-FR/secubox-deb.git synced 2026-07-28 21:17:36 +00:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity

fix: QEMU ARM64 script use AAVMF firmware and jq for format

Browse Source 
- Prefer AAVMF firmware (64MB) over QEMU_EFI (2MB) for UEFI vars
- Use jq instead of grep for reliable format extraction
- Copy AAVMF_VARS.fd template when available

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
This commit is contained in:
CyberMind-FR 2026-04-08 10:38:17 +02:00
parent 5ebc80fc4b
commit ff4b1f2c5b
1 changed files with 19 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

29
image/create-qemu-arm64-vm.sh
View File

@ -85,18 +85,22 @@ done
# Check dependencies
command -v qemu-system-aarch64 >/dev/null || fail "qemu-system-aarch64 not found. Install: apt install qemu-system-arm"
# Find UEFI firmware
# Find UEFI firmware (prefer AAVMF which has consistent 64MB size)
UEFI_CODE=""
UEFI_VARS=""
for path in /usr/share/qemu-efi-aarch64/QEMU_EFI.fd \
/usr/share/AAVMF/AAVMF_CODE.fd \
/usr/share/edk2/aarch64/QEMU_EFI.fd; do
UEFI_VARS_TEMPLATE=""
for path in /usr/share/AAVMF/AAVMF_CODE.fd \
/usr/share/edk2/aarch64/QEMU_EFI.fd \
/usr/share/qemu-efi-aarch64/QEMU_EFI.fd; do
if [[ -f "$path" ]]; then
UEFI_CODE="$path"
# Get matching VARS template if AAVMF
if [[ "$path" == *AAVMF* ]]; then
UEFI_VARS_TEMPLATE="${path%_CODE.fd}_VARS.fd"
fi
break
fi
done
[[ -z "$UEFI_CODE" ]] && fail "UEFI firmware not found. Install: apt install qemu-efi-aarch64"
[[ -z "$UEFI_CODE" ]] && fail "UEFI firmware not found. Install: apt install qemu-efi-aarch64 ovmf"
# Prepare image
log "Preparing image: $IMAGE"
@ -127,9 +131,14 @@ fi
# Create UEFI vars file (writable copy)
VARS_FILE="/tmp/${VM_NAME}-uefi-vars.fd"
if [[ ! -f "$VARS_FILE" ]]; then
# Create empty 64MB file for UEFI variables
truncate -s 64M "$VARS_FILE"
if [[ ! -f "$VARS_FILE" ]] || [[ $(stat -c%s "$VARS_FILE") -ne $(stat -c%s "$UEFI_CODE") ]]; then
if [[ -n "$UEFI_VARS_TEMPLATE" ]] && [[ -f "$UEFI_VARS_TEMPLATE" ]]; then
cp "$UEFI_VARS_TEMPLATE" "$VARS_FILE"
log "Using UEFI vars template: $UEFI_VARS_TEMPLATE"
else
# Create file matching firmware size
truncate -s "$(stat -c%s "$UEFI_CODE")" "$VARS_FILE"
fi
fi
# Build QEMU command
@ -146,7 +155,7 @@ QEMU_CMD=(
-drive "if=pflash,format=raw,file=$VARS_FILE"
# Boot disk
-drive "if=virtio,format=$(qemu-img info --output=json "$IMAGE" | grep -o '"format": "[^"]*"' | cut -d'"' -f4),file=$IMAGE"
-drive "if=virtio,format=$(qemu-img info --output=json "$IMAGE" | jq -r '.format'),file=$IMAGE"
# Network with port forwarding
-netdev "user,id=net0,hostfwd=tcp::${SSH_PORT}-:22,hostfwd=tcp::${HTTP_PORT}-:80,hostfwd=tcp::$((HTTP_PORT+363))-:443"