Not so sure I can help, but willing to try …wanted to ask, which KVM install method did you use virt-manager or virt-install? I’m wondering if your install is trying to use secure boot …
I use virt-install.
I tried to turn secure boot off via virsh edit, but i can’t save the configuration because there seems to be no supported efi installed.
qemu-efi-aarch64 is installed on the raspi
Maybe take a look at this post to see if it helps (turned off secure boot in UEFI shell).
If that doesn’t work, then here is another thing to try… in your virt-install add the flag (from man virt-install):
--boot loader=/.../OVMF_CODE.fd,loader.readonly=yes,loader.type=pflash,nvram.template=/.../OVMF_VARS.fd,loader_secure=no
Specify that the virtual machine use the custom OVMF binary as boot firmware, mapped as a virtual flash chip. In addition, request
that libvirt instantiate the VM-specific UEFI varstore from the custom "/.../OVMF_VARS.fd" varstore template. This is the recom‐
mended UEFI setup, and should be used if --boot uefi doesn't know about your UEFI binaries.
but goto your /usr/share/OVMF/ directory and look to see if these OVMF files are there, and if not then pick one that doesn’t have secure or secboot in their name.