UEFI/SECURE boot is not working with OVA templates

[kricud]

ISSUE TYPE

• Bug Report

COMPONENT NAME

ACS

CLOUDSTACK VERSION

4.15.2.0

CONFIGURATION

OS / ENVIRONMENT

ESXi 6.7 and Windows

SUMMARY

STEPS TO REPRODUCE

UEFI/SECURE works in general:
Create new instance with UEFI/SECURE

Works us expected

Problem with template prepared for UEFI/SECURE:
Upload ova template that has been created to boot with UEFI/SECURE

Edit template settings to add support for UEFI/SECURE boot

Create instance from template
(Advanced settings are not used from template)

Deployed instance contains settings for UEFI/SECURE

Hypervisor settings are for BIOS – VM will not boot as its prepared for UEFI/SECURE boot.

Workaround is to “Read VM settings from OVA”
With this approach end user cannot edit settings as they are controlled by OVA. I think that its correct behavior as “Read VM settings from OVA” where implemented for appliances that could contain some not standard things.

EXPECTED RESULTS

Instance created from template with UEFI/SECURE boots

ACTUAL RESULTS

Instance is not booting as its configured for BIOS/Legacy boot

[DaanHoogland]

@kricud this would be a regression as the initial UEFI support was not written with deploy as is in mind. Do you have no way to deploy the template at this time?

[kricud]

Workaround is to use “Read VM settings from OVA” it has its limitations in flexibility what can be initial configuration, important part is templet starts/boots and is not creating ticket in helpdesk.

[nvazquez]

Hi @kricud, from your images I see you have set BIOS on the VM deployment wizard, this would override the template settings. Have you tried deploying another VM from the same template but specifying UEFI on the VM deployment wizard as well?

[kricud]

Hi @nvazquez if I’m changing settings in Advanced Mode to UEFI/SECURE it works.
I have no way of telling to all my users that for this template you need to go and change settings in “Advanced Mode” to UEFI/SECURE from BIOS/LEGACY.

In process of creating Instance from template Advanced Mode settings are not impacted from template settings where UEFI/SECURE is defined.

[nvazquez]

Copy that, thanks @kricud. I agree it would be a good enhancement if the UI automatically detects the boot mode from the template settings