by this i mean since Fedora has already installed default packages edk2-ovmf and swtpm those are already enabled so Gnome Boxes can use UEFI and SECURE BOOT only issue is TPM enabled, but that can be manually added on current VM config file as <tpm model="tpm-crb"> <backend type="emulator" version="2.0"/> </tpm> on start of tag.
so what i want to achieve is Gnome Boxes actually has default TPM enabled on UEFI boot so no need manually add the line on each VM
i got W11 installed with UEFI Secure boot and TPM 2.0 just to adding that TPM line on the current VM Config file
It should work automatically when using virt-install.
As a workaround, you can script attaching a TPM device:
VM="$(virsh list --all --name)"
for VM in ${VM}
do case ${VM} in
(win*) EDITOR='sed -i -r -e "
\|<tpm\s|,\
\|</tpm>|d
s|(<devices>)|\1\
<tpm model=\"tpm-crb\">\
<backend type=\"emulator\" version=\"2.0\"/>\
</tpm>|
"' virsh edit ${VM} ;;
esac
done
yeah had to go back to Virt-manger even it is flashbang mode cant setup it to darkmode somehow. W11 was working but unstable on boxes and kept crashing constantly so virt.manager it is
found out that i can connect virt-manager to QEMU/KVM user session and Boxes uses that so much easier to edit stuff and setup if need to have more modification options and then just run on gnome boxes