* Tue Aug 12 2025 Miroslav Rezanina <mrezanin@redhat.com> - 10.0.0-10

- kvm-Enable-uefi-variable-service-for-edk2.patch [RHEL-102325]
- Resolves: RHEL-102325
  ([qemu] enable variable service for edk2)

kvm-Enable-uefi-variable-service-for-edk2.patch

@@ -0,0 +1,45 @@
+From 058b99a669b3cdd55a8c0c685d2fbfae0935d79e Mon Sep 17 00:00:00 2001
+From: Shaoqin Huang <shahuang@redhat.com>
+Date: Wed, 6 Aug 2025 22:31:50 -0400
+Subject: [PATCH] Enable uefi variable service for edk2
+
+RH-Author: Shaoqin Huang <shahuang@redhat.com>
+RH-MergeRequest: 398: Enable uefi variable service for edk2
+RH-Jira: RHEL-102325
+RH-Acked-by: Gerd Hoffmann <kraxel@redhat.com>
+RH-Acked-by: Miroslav Rezanina <mrezanin@redhat.com>
+RH-Acked-by: Eric Auger <eric.auger@redhat.com>
+RH-Commit: [1/1] b498b1f4fbdb31b7bb1122caaacd8f391124b1a0 (shahuang/qemu-kvm)
+
+JIRA: https://issues.redhat.com/browse/RHEL-102325
+
+To support secure boot, we need the uefi variable service for edk2 to be
+available.
+
+Signed-off-by: Shaoqin Huang <shahuang@redhat.com>
+---
+ configs/devices/aarch64-softmmu/aarch64-rh-devices.mak | 1 +
+ configs/devices/x86_64-softmmu/x86_64-rh-devices.mak   | 1 +
+ 2 files changed, 2 insertions(+)
+
+diff --git a/configs/devices/aarch64-softmmu/aarch64-rh-devices.mak b/configs/devices/aarch64-softmmu/aarch64-rh-devices.mak
+index 197fabeb00..855278f70e 100644
+--- a/configs/devices/aarch64-softmmu/aarch64-rh-devices.mak
++++ b/configs/devices/aarch64-softmmu/aarch64-rh-devices.mak
+@@ -46,3 +46,4 @@ CONFIG_IOMMUFD=y
+ CONFIG_VHOST_USER_SND=y
+ CONFIG_VHOST_USER_SCMI=y
+ CONFIG_VHOST_USER_GPU=y
++CONFIG_UEFI_VARS=y
+diff --git a/configs/devices/x86_64-softmmu/x86_64-rh-devices.mak b/configs/devices/x86_64-softmmu/x86_64-rh-devices.mak
+index 26e51b1edf..828cb8aa6f 100644
+--- a/configs/devices/x86_64-softmmu/x86_64-rh-devices.mak
++++ b/configs/devices/x86_64-softmmu/x86_64-rh-devices.mak
+@@ -115,3 +115,4 @@ CONFIG_VHOST_USER_FS=y
+ CONFIG_IOMMUFD=y
+ CONFIG_VHOST_USER_SND=y
+ CONFIG_VHOST_USER_GPU=y
++CONFIG_UEFI_VARS=y
+-- 
+2.39.3
+

qemu-kvm.spec

@@ -143,7 +143,7 @@ Obsoletes: %{name}-block-ssh <= %{epoch}:%{version}                    \
 Summary: QEMU is a machine emulator and virtualizer
 Name: qemu-kvm
 Version: 10.0.0
-Release: 9%{?rcrel}%{?dist}%{?cc_suffix}
+Release: 10%{?rcrel}%{?dist}%{?cc_suffix}
 # Epoch because we pushed a qemu-1.0 package. AIUI this can't ever be dropped
 # Epoch 15 used for RHEL 8
 # Epoch 17 used for RHEL 9 (due to release versioning offset in RHEL 8.5)
@@ -416,6 +416,8 @@ Patch126: kvm-iotests-graph-changes-while-io-remove-image-file-aft.patch
 Patch127: kvm-iotests-graph-changes-while-io-add-test-case-with-re.patch
 # For RHEL-45624 - Deprecate rtl8139 NIC in QEMU
 Patch128: kvm-Declare-rtl8139-as-deprecated.patch
+# For RHEL-102325 - [qemu] enable variable service for edk2
+Patch129: kvm-Enable-uefi-variable-service-for-edk2.patch
 
 %if %{have_clang}
 BuildRequires: clang
@@ -1498,6 +1500,11 @@ useradd -r -u 107 -g qemu -G kvm -d / -s /sbin/nologin \
 %endif
 
 %changelog
+* Tue Aug 12 2025 Miroslav Rezanina <mrezanin@redhat.com> - 10.0.0-10
+- kvm-Enable-uefi-variable-service-for-edk2.patch [RHEL-102325]
+- Resolves: RHEL-102325
+  ([qemu] enable variable service for edk2)
+
 * Mon Aug 04 2025 Miroslav Rezanina <mrezanin@redhat.com> - 10.0.0-9
 - kvm-Declare-rtl8139-as-deprecated.patch [RHEL-45624]
 - Resolves: RHEL-45624