feat(virtualization): enable TPM2 emulation for Secure Boot VMs

2026-04-02 04:37:28 +02:00
parent 2055863673
commit b31a5a2580
3 changed files with 21 additions and 24 deletions
--- a/roles/virtualization/defaults/main.yml
+++ b/roles/virtualization/defaults/main.yml
@@ -22,10 +22,10 @@ virtualization_libvirt_ovmf_vars: /usr/share/edk2/x64/OVMF_VARS.4m.fd

 virtualization_tpm2_enabled: >-
  {{
-    (system_cfg.luks.enabled | bool)
-    and (system_cfg.luks.auto | bool)
-    and (
-      (system_cfg.luks.method | lower)
-      == 'tpm2'
+    (
+      (system_cfg.luks.enabled | bool)
+      and (system_cfg.luks.auto | bool)
+      and (system_cfg.luks.method | lower == 'tpm2')
    )
+    or (system_cfg.features.secure_boot.enabled | default(false) | bool)
  }}