I also verified that 32-bit version of OVMF_CODE_4M.ms.fd works. I did cp /home/ryutaroh/OVMF_VARS_4M.ms.fd /tmp qemu-system-i386 -m 1024 -smp 1 -nographic -net nic,model=virtio -net user,hostfwd=tcp:127.0.0.1:10022-:22 \ -object rng-random,filename=/dev/urandom,id=rng0 \ -device virtio-rng-pci,rng=rng0,id=rng-device0 \ -drive file=/var/lib/debci/qemu/sid-i386-uefi-nopae.img,cache=unsafe,if=virtio,index=0,format=qcow2 \ -machine q35,smm=on -global driver=cfi.pflash01,property=secure,value=on \ -drive if=pflash,format=raw,read-only,file=/home/ryutaroh/OVMF_CODE_4M.ms.fd \ -drive if=pflash,format=raw,file=/tmp/OVMF_VARS_4M.ms.fd -enable-kvm
The important options for secure booting may be -machine q35,smm=on -global driver=cfi.pflash01,property=secure,value=on -drive if=pflash,format=raw,read-only,file=/home/ryutaroh/OVMF_CODE_4M.ms.fd -drive if=pflash,format=raw,file=/tmp/OVMF_VARS_4M.ms.fd -enable-kvm Ryutaroh
