How to build OVMF.tdx.fd to support Secure Boot on Ubuntu 25.04?

[jkr0103]

Describe the support request
6.3 Secure Boot TD says secure boot is supported ONLY with Host running Ubuntu Noble 24.04 ⚠️

Can I get more info why secure boot is not supported on Ubuntu 25.04 and How can I build OVMF which supports secure boot on Ubuntu 25.05 if possible?

System report
NA

[syncronize-issues-to-jira]

Thank you for reporting your feedback to us!

The internal ticket has been created: https://warthogs.atlassian.net/browse/PEK-2491.

This message was autogenerated

[hector-cao]

Hello @jkr0103 ,

This is not supported because we consider it is not a major feature for the scope of this repository.

Basically, if we have the full confidential computing story with attestation capability, we do not really need secure boot

[jkr0103]

Thanks for the info @hector-cao.

I have another related question. When we use secure boot enabled OVMF on ubuntu 24.04, we don't see CMDLINE measurement part of RTMR2. Is it done intentionally or it's a bug?