Bug 1353160

Summary: An error appears during boot RHVH from iso on UEFI machine.
Product: [oVirt] ovirt-node Reporter: cshao <cshao>
Component: Installation & UpdateAssignee: Ryan Barry <rbarry>
Status: CLOSED WONTFIX QA Contact: cshao <cshao>
Severity: medium Docs Contact:
Priority: medium    
Version: 4.0CC: bugs, dfediuck, dguo, fdeutsch, huzhao, jboggs, leiwang, pjones, rbarry, weiwang, yaniwang, ycui
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2016-08-17 16:32:22 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: Node RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
uefi-error none

Description cshao 2016-07-06 10:23:17 UTC
Created attachment 1176833 [details]
uefi-error

Description of problem:
An error appears during boot RHVH from iso in UEFI machine. 
"Failed to set MokListRT: Invalid Parameter"

Version-Release number of selected component (if applicable):
RHEV-H-7.2-20160701.2-RHVH-x86_64-dvd1.iso
redhat-release-rhev-hypervisor-4.0-0.9.el7.x86_64
imgbased-0.7.1-0.1.el7ev.noarch

How reproducible:
100%

Steps to Reproduce:
1. Boot RHVH from iso on UEFI machine.
2. Focus on the screen output.
3.

Actual results:
An error appears during boot RHVH from iso in UEFI machine. 

Expected results:
No such error during boot RHVH from iso in UEFI machine. 

Additional info:

Comment 1 Ryan Barry 2016-07-06 12:35:51 UTC
Is this only on the ISO, or also on the actual installation? I've seen this, but not after installing.

I can't reproduce this on my local test system. All references I can find to MokListRT relate to SecureBoot. Does SecureBoot work on this system?

Joey -- is there anything extra which needs to be done for SecureBoot on distilled ISOs? I imagine this works "out of the box", but can you please confirm?

Comment 2 cshao 2016-07-07 03:41:55 UTC
(In reply to Ryan Barry from comment #1)
> Is this only on the ISO, or also on the actual installation? I've seen this,
> but not after installing.
> 

Yes, it is only on the ISO, the error just appears when boot RHVH from iso, but not after installing, and the error has no affect for RHVH function.



> I can't reproduce this on my local test system. All references I can find to
> MokListRT relate to SecureBoot. Does SecureBoot work on this system?
I assume the local machine is BIOS mode, then you can't reproduce this issue, it only occurs on UEFI machine. 
I used dell R515 to testing the bug, and no "SecureBoot" option on BIOS setting.



> 
> Joey -- is there anything extra which needs to be done for SecureBoot on
> distilled ISOs? I imagine this works "out of the box", but can you please
> confirm?

Comment 3 Ryan Barry 2016-07-07 03:56:39 UTC
I tested on an EFI machine using the upstream ISO, as well as in an EFI VM (without secureboot) with the downstream ISO and could not reproduce in either case.

Does the upstream ISO also cause this error on the R515? If not, that would limit this issue to the downstream distill

Comment 4 cshao 2016-07-07 06:38:14 UTC
(In reply to Ryan Barry from comment #3)
> I tested on an EFI machine using the upstream ISO, as well as in an EFI VM
> (without secureboot) with the downstream ISO and could not reproduce in
> either case.
> 

Seem an EFI VM can't simulate physical EFI machine, I can share our test env for you if you need:)

> Does the upstream ISO also cause this error on the R515? If not, that would
> limit this issue to the downstream distill

The same issue occurs on upstream ISO.
(ovirt-node-ng-installer-ovirt-4.0-2016062804.iso)

Comment 5 Red Hat Bugzilla Rules Engine 2016-07-07 08:52:48 UTC
Target release should be placed once a package build is known to fix a issue. Since this bug is not modified, the target version has been reset. Please use target milestone to plan a fix for a oVirt release.

Comment 6 Ryan Barry 2016-07-07 13:47:38 UTC
(In reply to shaochen from comment #4)
> Seem an EFI VM can't simulate physical EFI machine, I can share our test env
> for you if you need:)

Let me try enabling secureboot in a VM to see if it works there.

> 
> > Does the upstream ISO also cause this error on the R515? If not, that would
> > limit this issue to the downstream distill
> 
> The same issue occurs on upstream ISO.
> (ovirt-node-ng-installer-ovirt-4.0-2016062804.iso)

Does this happen on other machines? I can't reproduce this on a Dell workstation here.

Peter, any ideas?

Comment 7 cshao 2016-07-08 06:42:27 UTC
(In reply to Ryan Barry from comment #6)
> (In reply to shaochen from comment #4)
> > Seem an EFI VM can't simulate physical EFI machine, I can share our test env
> > for you if you need:)
> 
> Let me try enabling secureboot in a VM to see if it works there.
> 
> > 
> > > Does the upstream ISO also cause this error on the R515? If not, that would
> > > limit this issue to the downstream distill
> > 
> > The same issue occurs on upstream ISO.
> > (ovirt-node-ng-installer-ovirt-4.0-2016062804.iso)
> 
> Does this happen on other machines? I can't reproduce this on a Dell
> workstation here.
Yes, I can reproduce this issue on other machine(e.g. Dell R210 UEFI mode)

Comment 8 Fabian Deutsch 2016-07-18 14:10:21 UTC
Lowering priority because there is no functional impact according to comment 2.

If it's a secureboot issue, then we can fix it in a z-stream.

Comment 9 Fabian Deutsch 2016-08-17 16:32:22 UTC
Closing this bug, I suspect it's the same on RHEL.

Please reopen if this issue does not happen on the RHEL boot.iso