Attempting to build the latest edk2 stable release 201905, the qemu-ovmf-secureboot ovmf-vars-generator call is hanging. The host CPU just seems to spin and spin. I haven't dug into it at all, for now I just disabled the call with the skip_enroll spec variable so the package would build If it matters, I was testing a 'fedpkg local' build on fedora 30
Laszlo explained how to fix, so rawhide has secureboot bits in place again