Opened 4 years ago

Closed 3 years ago

#61996 closed defect (fixed)

qemu hvf support on Big Sur requires signing security entitlement

Reported by: jxy (Xiao-Yong) Owned by: raimue (Rainer Müller)
Priority: Normal Milestone:
Component: ports Version:
Keywords: Cc:
Port: qemu

Description

When running qemu-system-x86_64 -machine accel=hvf ... on macOS Big Sur, qemu exits with qemu-system-x86_64: Error: HV_ERROR. After performing 'ad-hoc signing' and giving it the com.apple.security.hypervisor entitlement, it works. Perhaps we need a post-destroot that runs codesign. Here is what I did. 

% ed ent.xml
a
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>com.apple.security.hypervisor</key>
    <true/>
</dict>
</plist>
.
wq
% sudo codesign -s - --entitlements ent.xml /opt/local/bin/qemu-system-x86_64

Change History (3)

comment:1 Changed 4 years ago by jmroot (Joshua Root)

Owner: set to raimue
Status: new → assigned

comment:2 Changed 4 years ago by trodemaster (Blake Garner)

this patch exists and hopefully will get upstreamed. ​https://patchew.org/QEMU/20210120224444.71840-1-agraf@csgraf.de/20210120224444.71840-2-agraf@csgraf.de/

comment:3 Changed 3 years ago by raimue (Rainer Müller)

Resolution: → fixed
Status: assigned → closed

I think this problem has already been resolved and should work with qemu @6.2.0.

Note: See TracTickets for help on using tickets.