Install KVM
WantedBy=graphical.target
Install KVM
WantedBy=graphical.target
Original Virt-manager UEFI option setup should be configured as follows /usr/share/edk2/ovmf/OVMF_CODE_4M.qcow2 . Next step is supposed to be creating /boot/efi fat32 EFI partition during Calamares Installer virtual disk layout configuration
Creating /boot/efi partition performing instance setup via Calamares Installer
Runtime snapshots after upgrading instance deployed via ISO image as of 04/06/2024 up to Manjaro Testing Instance, followed by kernel upgrade up to 6.8.8-2
Same Virt-Manager UEFI option setup allows to deploy CachyOS-240401 KVM Guest in UEFI mode
UPDATE as of 04/19/2024 Current status of Manjaro Testing
Your installation should go through phase
END UPDATE
Per https://forum.manjaro.org/t/xz-package-contains-a-vulnerability/159028/26
Arch does not directly link openssh to liblzma, and thus this attack vector is not possible. You can confirm this by issuing the following command:
ldd "$(command -v sshd)"
However, out of an abundance of caution, we advise users to remove the malicious code from their system by upgrading either way. This is because other yet-to-be discovered methods to exploit the backdoor could exist.
– Arch Linux - News: The xz package has been backdoored
On Manjaro Testing I was able only downgrade (say) to xz-5.4.6-1 and lib32-xz-5.4.6-1
Running https://github.com/cyclone-github/scripts/blob/main/xz_cve-2... on Manjaro Testing :-
Per https://archlinux.org/news/the-xz-package-has-been-backdoored/
It is strongly advised to do a full system upgrade right away if your system currently has xz version 5.6.0-1 or 5.6.1-1 installed:
$ pacman -Syu
After running on Manjaro stable KDE as of 04/06/24
$ sudo pacman-mirrors --api --set-branch testing
$ sudo pacman-mirrors --fasttrack 5 && sudo pacman -SyuI obtained $ pacman -Ss xz core/xz 5.6.1-3 [installed]
Library and command line tools for XZ and LZMA compressed files
extra/pixz 1.0.7-4
Parallel, indexed xz compressor
multilib/lib32-xz 5.6.1-3 [installed]
Library and command line tools for XZ and LZMA compressed files (32-bit)$ pacman -Ss lib32-xz multilib/lib32-xz 5.6.1-3 [installed]
Library and command line tools for XZ and LZMA compressed files (32-bit)Per link above version 5.6.1-3 was already fixed . I'd just skipped this notice ( 5.6.1-2 had been already fixed ). See first paragraph. So, there is no need to downgrade xz-5.6.1-3 and lib32-xz-5.6.1-3 on Manjaro Testing .
The most recent version of xz released for Arch LinuxThe main purpose of this post is to demonstrate that the cockpit.service is not required for deploying KVM guests in UEFI mode on AlmaLinux 9.3, which has binary-compatibility with RHEL. Linux bridge for VMs has been installed via nmcli to avoid any involvement of cockpit.service. See for detailis http://lxer.com/module/newswire/view/338368/index.html Everything works on AlmaLinux 9.3 as on openSUSE Tumbleweed. KVM Setup on AlmaLinux 9.(X) follows standard guide lines.
When installing virt-manager, the presence of the Cockpit web console becomes optional. It's a good idea to have Cockpit Web Console installed, but it's not required. The presence of edk2-ovmf is required. We have the same situation with Tumbleweed, Ubuntu 22.04, Debian12.(X), Manjaro Linux 23.1.3