Set the record straight

1 files changed, 36 insertions, 2 deletions

diff --git a/guides/sysadmin/machines/amdahl30/maintenance.org b/guides/sysadmin/machines/amdahl30/maintenance.org
index 7546447..18a30dc 100644
--- a/guides/sysadmin/machines/amdahl30/maintenance.org
+++ b/guides/sysadmin/machines/amdahl30/maintenance.org
@@ -146,8 +146,42 @@ Off the top of my head:
 - that dbx update?
 - ~sudo blarney-grub2 --pretty -pls --with-sugar=top --with-sugar=top~?
 - dracut?
+
+dbx update: nope.
+
+~efibootmgr~ only shows =opensuse=, not =opensuse-secure=.
+- After ~udpate-bootloader --install~, =opensuse-secure= shows up; no
+  change though, enabling Secure Boot still lands me in =grub rescue=.
+- Change bootorder with =-o 0,1=?
+
+  #+begin_example
+  $ sudo udpate-bootloader --install
+  $ sudo efibootmgr
+  BootCurrent: 0001
+  Timeout: 1 seconds
+  BootOrder: 0001,0000
+  Boot0000* opensuse-secureboot   HD(1,GPT,2ffd6bee-1b1e-4088-8fdf-0c9321c861a3,0x800,0x100000)/File(\EFI\OPENSUSE\SHIM.EFI)
+  Boot0001* opensuse      HD(1,GPT,2ffd6bee-1b1e-4088-8fdf-0c9321c861a3,0x800,0x100000)/File(\EFI\OPENSUSE\GRUBX64.EFI)0000424f
+  $ sudo efibootmgr -o 0,1
+  BootCurrent: 0001
+  Timeout: 1 seconds
+  BootOrder: 0000,0001
+  Boot0000* opensuse-secureboot   HD(1,GPT,2ffd6bee-1b1e-4088-8fdf-0c9321c861a3,0x800,0x100000)/File(\EFI\OPENSUSE\SHIM.EFI)
+  Boot0001* opensuse      HD(1,GPT,2ffd6bee-1b1e-4088-8fdf-0c9321c861a3,0x800,0x100000)/File(\EFI\OPENSUSE\GRUBX64.EFI)0000424f
+  #+end_example
+
+  Does not seem to persist after reboot 🤷
+*** The Twist
+#+begin_example
+$ sudo journalctl --grep 'secure boot .*abled'
+Nov 28 20:37:13 localhost kernel: secureboot: Secure boot disabled
+[… an so on, for every boot until today …]
+#+end_example
+
+… I'm an idiot; I never had Secure Boot enabled on that machine,
+apparently.  I guess the BIOS update just turned it on silently.
 * SSD
 LDLC's off-brand SSD died, fortunately within the warranty period.
 Replaced it, and… I guess I should shoehorn a joke about "a descent
-into hell" or "the beginning of a nightmare", but that just twists [[./killing-time.org][the
-knife]] ☹️
+into hell" or "the beginning of a nightmare", but that just twists
+[[./killing-time.org][the knife]] ☹️