diff --git a/src/cmd-osbuild b/src/cmd-osbuild
index 0e2377522f..1e8b1ca2fd 100755
--- a/src/cmd-osbuild
+++ b/src/cmd-osbuild
@@ -84,7 +84,7 @@ postprocess_qemu_secex() {
    # Basic qemu args:
    qemu_args=(); blk_size="512"
    [[ $platform == metal4k ]] && blk_size="4096"
-   qemu_args+=("-drive" "if=none,id=target,format=qcow,file=${imgpath},cache=unsafe" \
+   qemu_args+=("-drive" "if=none,id=target,format=qcow2,file=${imgpath},cache=unsafe" \
     "-device" "virtio-blk,serial=target,drive=target,physical_block_size=${blk_size},logical_block_size=${blk_size}")
 
    # SecureVM (holding Universal Key for all IBM Z Mainframes) requires scripts to execute genprotimg