diff --git a/MODULE.bazel b/MODULE.bazel
index 11389a889af546d26ab7274080d40e7ab3049e36..febbacef6084d2166db900aeeb0c305a1afb9cf4 100644
--- a/MODULE.bazel
+++ b/MODULE.bazel
@@ -94,6 +94,7 @@ download_archive = use_repo_rule("@download_utils//download/archive:defs.bzl", "
         ("all", "qemu-system-data", "7.2+dfsg-7+deb12u7", "q", "qemu", "sha256-SYbtlNWvP/Gw6Cm0Qqg/O8lErczThTXdTa/xxCNbiSM="),
         ("all", "readline-common", "8.2-1.3", "r", "readline", "sha256-aTF1I/5WQpqjYVRUFq0znROMFQDlpgSFaoDdkHS041w="),
         ("all", "seabios", "1.16.2-1", "s", "seabios", "sha256-COWz92E3nxemBRcxyvoD6XaGBJ4swbi9zMWpEGRuLY4="),
+        ("all", "qemu-efi-aarch64", "2022.11-6+deb12u1", "e", "edk2", "sha256-m3GACq0ux4KK6jFU3c7u0p0CdaEkDu555OcXQN3rDxc="),
         ("amd64", "cdebconf", "0.270", "c", "cdebconf", "sha256-Lp3oi0y4os6tt4X6v/Ao2IP5psNSiRZGT7OPSDfBVic="),
         ("amd64", "dpkg", "1.21.22", "d", "dpkg", "sha256-nZfyfYqKBt1IAOjgKRM3ygLhHN/X3wmkVmqYKm2f5MQ="),
         ("amd64", "gcc-12-base", "12.2.0-14", "g", "gcc-12", "sha256-GgPfWleDPWW1uwjPoZ1Q528pCI3J5k+5NK9C2QI6CAc="),
diff --git a/qemu/efi_firmware/BUILD.bazel b/qemu/efi_firmware/BUILD.bazel
new file mode 100644
index 0000000000000000000000000000000000000000..17285f28a061f875e35ee97754ca01a07de675ac
--- /dev/null
+++ b/qemu/efi_firmware/BUILD.bazel
@@ -0,0 +1,28 @@
+load("@bazel_skylib//rules:build_test.bzl", "build_test")
+load("@rules_tar//tar/unpack:defs.bzl", "tar_unpack")
+
+tar_unpack(
+    name = "unpack",
+    src = "@all-qemu-efi-aarch64//:data.tar.xz",
+)
+
+genrule(
+    name = "efi_firmware",
+    outs = [
+        "flash0.img",
+        "flash1.img",
+    ],
+    cmd = """
+        dd if=/dev/zero of=$(location flash1.img) bs=1M count=64
+        dd if=/dev/zero of=$(location flash0.img) bs=1M count=64
+        dd if=$(location :unpack)/usr/share/qemu-efi-aarch64/QEMU_EFI.fd of=$(location flash0.img) conv=notrunc
+    """,
+    srcs = [
+        ":unpack",
+    ]
+)
+
+build_test(
+    name = "test",
+    targets = [":efi_firmware"],
+)