where "OVMF.fd" was built from edk2 at then-master (14c7ed8b51f6 -- see comment 7), and "82540em.combined.rom" is the combined oprom (with HTTPS enabled in the EFI driver too) built from the problematic iPXE version(s).
OVMF was built with "-b DEBUG". ("-b RELEASE" would remove the ASSERT()s from the firmware modules.)
"debug.log" captures the firmware debug output. That's the file that ends with the ASSERT failure seen in comment 4.
I used
qemu-system-x86_64 \ snapshot= on,format= raw,file= OVMF.fd \ 82540em. combined. rom \ iobase= 0x402
-enable-kvm \
-monitor stdio \
-drive if=pflash,
-global e1000.romfile=
-debugcon file:debug.log \
-global isa-debugcon.
where "OVMF.fd" was built from edk2 at then-master (14c7ed8b51f6 -- see comment 7), and "82540em. combined. rom" is the combined oprom (with HTTPS enabled in the EFI driver too) built from the problematic iPXE version(s).
OVMF was built with "-b DEBUG". ("-b RELEASE" would remove the ASSERT()s from the firmware modules.)
"debug.log" captures the firmware debug output. That's the file that ends with the ASSERT failure seen in comment 4.