28845521706
79%

Ran 07 Jul 2026 06:11AM UTC

Jobs 1

Files 36

Run time 1min

Badge

Embed ▾

Committed 07 Jul 2026 06:01AM UTC coverage: 78.996%. Remained the same

Build # 28845521706

Build Type

push

github

Committed by

web-flow

Commit Message

auto-mark new VMs for Secure Boot certificate update on boot (#7155)

Microsoft's 2011 Secure Boot certificates expire between June and
October 2026. XenServer already has a remediation workflow (the per-VM
field `VM.secureboot_certificates_state` plus
`VM.update_secureboot_certificates_on_boot`) that lets an admin mark a
VM so its Secure Boot certificates are replaced on the next (re)boot.
CVAD MCS (Citrix Machine Creation Services) stores a copy of the VM
NVRAM per catalog and supplies it on VM.create; catalogs built from
2011-only VMs therefore keep creating 2011-only VMs, which can fail to
boot once the disk relies on 2023 certs. This feature lets a pool opt in
to having xapi auto-mark such freshly created VMs so the certs are
updated on first boot.

Tested:
1. Mock varstore-nvram-certcheck to always return `update_required`.
2. Use `VM.create` to trigger the logic:
```
Test A (flag=true):  state = update_on_boot  (expect update_on_boot)
Test B (flag=false): state = ok  (expect ok)
```

Coverage Stats

3667 of 4642 relevant lines covered (79.0%)

0.79 hits per line

Jobs

ID	Job ID	Ran	Files	Coverage
1	python3.11 - 28845521706.1	07 Jul 2026 06:11AM UTC	36	79.0	GitHub Action Run

xapi-project / xen-api / 28845521706
79%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 28845521706

xapi-project / xen-api / 28845521706 79%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 28845521706

xapi-project / xen-api / 28845521706
79%

README BADGES
x