1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
|
* Assembly
Lots of impedance mismatches between "documentation" and actual
hardware:
- CPU cooler (fan) has spring screws; diagrams show retention clips.
Had to dig into the [[https://www.amd.com/en/support/kb/faq/cpu-7][AMD knowledge base]] to find that some
motherboards come with "speculative" clips, which must be unscrewed
and removed in order to install the spring-screw cooler.
- Diagrams say to add thermal paste, but the fan already comes with a
pre-applied layer.
- Documentation shows RAM clips for both ends of the sticks; the
motherboard seems to only have clips for one end.
- =SYS_FAN1= header has 4 pins; front fan plug has 3 holes. The
Internet says it's fine ([[https://old.reddit.com/r/buildapc/comments/4139k8/3_pin_sys_fan2_vs_4_pin_sys_fan1/][[1]]], [[https://forums.tomshardware.com/threads/sys_fan1-and-sys_fan2.3195778/][[2]]]).
- Motherboard has [[https://www.msi.com/Motherboard/B550M-A-PRO/Specification]["8 mounting holes"]] but covers only 6 of the case's
standoffs; none of the diagrams in the case's manual match the
format of the motherboard.
- The diagram for inserting the power supply unit leaves a lot to the
imagination.
- The [[https://www.snia.org/forums/cmsi/knowledge/formfactors#U2][SSD dimension nomenclature]] is weird as hell. The SSD's user
manual seems to imply that I have a 2.5″ model, but my measuring
tape says the drive is 2.75″×3.875″ (diagonal 4.625″).
- The link to the LDLC guide for mounting the SSD is dead; the page is
[[https://web.archive.org/web/20170901191800/http://www.ldlc.com/guides/AL00000817/comment-installer-un-ssd-dans-un-pc/][archived]], and merely contains a link to a [[https://www.youtube.com/watch?v=t1dHVb6VuWU][video]]. No matter though,
since it does not describe how to mount the drive on a 2.5″ bay.
- The case user manual says to use specific screws for the SSD drive;
the SSD comes with its own set of screws. Are they meant for the
3.5″ adapter? 🤷
For novices, some steps range from "not very reassuring" to "downright
hostile":
- The amount of force needed to connect the CPU fan's first two
diagonal screws is terrifying.
- The fan's case is asymmetric: one side has a small bump featuring
the maker's brand. If one does not attention when mounting the fan,
there is a 50% chance that this bump will get in the way of a RAM
stick.
- No instruction on [[https://www.youtube.com/watch?v=XAWNzd-gc3Q&t=74s][how to force that I/O shield in]].
- No instruction on how to snap the motherboard into the I/O shield.
- Holy =$DEITY= that power supply unit has a *lot* of cables. And of
course I enthusiastically passed most of the small-headed ones
through the designated case hole, and had to pass them back out
because there was no room left to pass the 20-pin ATX connector.
- Power supply user manual was taped to the bubble wrap, so part of
the "warnings" section got torn off.
* Front panel
The case's manual has a terse illustration with two arrows to pull the
front panel "away and up" from the rest of the case.
Here too, the amount of force required to do that is terrifying.
Notice how [[https://www.youtube.com/watch?v=nUD0HyzVpLg][our friend here]] cuts abruptly at 8:17; that's because the
levels of violence required to tear that panel off are too graphic for
YouTube.
* Front fan
Remember that fan from earlier, the one with only 3 holes for the
motherboard's 4 pins? Turns out
1. that last "optional" pin is supposed to allow speed control;
without it, the fan always spins at full speed;
2. the fan itself (ZA1225ASL) is [[https://www.youtube.com/watch?v=pd6gDY7LPlU][complete and utter crap]]: it cannot be
disassembled, so no cleaning off the dirt, no greasing.
So the thing is loud, it always spins at full speed, and if one day it
decides to become even louder than usual, you're SOL.
* Motherboard
** Firmware updates
*** Prologue
Quoth ~fwupdmgr get-devices~:
#+begin_example
WARNING: UEFI capsule updates not available or enabled in firmware setup
See https://github.com/fwupd/fwupd/wiki/PluginFlag:capsules-unsupported for more information.
#+end_example
Quoth the wiki:
#+begin_quote
Most typically entering the firmware setup screen and enabling capsule
updates will cause this warning to disappear, and also make firmware
updates possible. The relevant option may be poorly labelled, for
example "allow Windows UEFI updates".
#+end_quote
Not seeing any such option in the boot menu.
#+begin_quote
It is possible, but unlikely, that flashing the latest vendor BIOS,
using either Windows or a LiveCD, will add support for [the thing that
correlates with capsule updates being enabled].
#+end_quote
Well then. [[https://www.msi.com/Motherboard/B550M-A-PRO/support#bios][Vendor says]] "put this on a stick; reboot; ask the menu to
flash from the stick". Putting some feelers out first:
#+begin_quote
If you execute a UEFI update, this update might delete the existing
UEFI boot entries
— [[https://wiki.archlinux.org/title/GRUB#Installation][ArchWiki]], 2024
#+end_quote
#+begin_quote
Like others in this forum, I too suffered from a reformatted EFI
partition following a BIOS update on my desktop pc. I had no idea
that the MSI BIOS team doesn’t care about Linux installs, so to my
surprise, following the update, my system booted straight to windows.
[…]
Ultimately, I completely wiped and recreated the EFI partition with
gparted (fat32), changed the structure to GPT with gdisk, and then
mounted that partition in the /mnt/efi location, and then proceeded to
generate a new fstab with genfstab. After arch-chroot’ing into my
endeavoros install, I ran bootctl install (which complained about boot
loader not setting esp information) and then reinstall-kernels. I
updated the loader.conf with the correct default boot ID, and set the
recommended options. That got me back into my system after quite a
bit of trial and error.
— [[https://forum.endeavouros.com/t/endeavoros-efi-partition-wiped-by-msi-bios-update/54740][EndeavorOS forums]], May 2024
#+end_quote
#+begin_quote
when updating the bios, it cleared all my settings. Apparently, this
includes clearing the list of boot loaders, which it set back to the
default of just Windows. Sadly this bios does not provide the tools
to add boot entries as, apparently, some do. To fix it, I managed to
boot to a Linux live USB and add the missing entry using the efiboomgr
command line tool.
— [[https://forum-en.msi.com/index.php?threads/updating-to-bios-7a32v1q1-wont-see-linux-uefi-boot.388109/][MSI AMD forums]], August 2023
#+end_quote
Welp.
OT1H, I could dedicate a couple of week-ends learning the joys and
wonders of efibootmgr, gdisk & friends. OTOH I sort of like keeping
my desktop station… not bricked?
Pity, because otherwise I've had smooth and incident-free firmware
updates on other stations with ~fwupdmgr~ 🤷
*** But then
{{{narrator(waves vaguely toward [[file:killing-time.org][that whole debacle]])}}}
*** Our protagonist sets forth
Put the =.2G1= file on the USB stick, rebooted into UEFI, rebooted
into "M-Flash", did the thing, rebooted.
Predictably:
#+begin_example
Entering rescue mode...
grub rescue> help
Unknown command `help'.
grub rescue>
#+end_example
=ls='d and =set='d around, browsed a couple of online posts from
similarly marooned comrades[fn:: Not sure why I did not think of
consulting [[info:grub2#GRUB only offers a rescue shell][the fine manual]].]. Luckily my patience for QWERTY drained
out before I could damage things further; disabled Secure Boot on a
whim and lo! It Booteþ Again!
*** But doþ it fwupdate þough?
#+begin_example
$ fwupdmgr update
WARNING: UEFI capsule updates not available or enabled in firmware setup
See https://github.com/fwupd/fwupd/wiki/PluginFlag:capsules-unsupported for more information.
#+end_example
😾
{{{ad(But wait\, there's more!)}}}
#+begin_example
╔══════════════════════════════════════════════════════════════════════════════╗
║ Upgrade UEFI dbx from 20230501 to 20241101? ║
╠══════════════════════════════════════════════════════════════════════════════╣
║ This updates the list of forbidden signatures (the "dbx") to the latest ║
║ release from Microsoft. ║
║ ║
║ An insecure version of Howyar's SysReturn software was added, due to a ║
║ security vulnerability that allowed an attacker to bypass UEFI Secure Boot. ║
║ ║
╚══════════════════════════════════════════════════════════════════════════════╝
Perform operation? [Y|n]: n
Devices with no available firmware updates:
• SA400S37480G
• SSD 980 500GB
#+end_example
Getting mixed signals here.
*** Can I have Secure Boot back though?
Off the top of my head:
- that dbx update?
- ~sudo blarney-grub2 --pretty -pls --with-sugar=top --with-sugar=top~?
- dracut?
dbx update: nope.
~efibootmgr~ only shows =opensuse=, not =opensuse-secure=.
- After ~udpate-bootloader --install~, =opensuse-secure= shows up; no
change though, enabling Secure Boot still lands me in =grub rescue=.
- Change bootorder with =-o 0,1=?
#+begin_example
$ sudo udpate-bootloader --install
$ sudo efibootmgr
BootCurrent: 0001
Timeout: 1 seconds
BootOrder: 0001,0000
Boot0000* opensuse-secureboot HD(1,GPT,2ffd6bee-1b1e-4088-8fdf-0c9321c861a3,0x800,0x100000)/File(\EFI\OPENSUSE\SHIM.EFI)
Boot0001* opensuse HD(1,GPT,2ffd6bee-1b1e-4088-8fdf-0c9321c861a3,0x800,0x100000)/File(\EFI\OPENSUSE\GRUBX64.EFI)0000424f
$ sudo efibootmgr -o 0,1
BootCurrent: 0001
Timeout: 1 seconds
BootOrder: 0000,0001
Boot0000* opensuse-secureboot HD(1,GPT,2ffd6bee-1b1e-4088-8fdf-0c9321c861a3,0x800,0x100000)/File(\EFI\OPENSUSE\SHIM.EFI)
Boot0001* opensuse HD(1,GPT,2ffd6bee-1b1e-4088-8fdf-0c9321c861a3,0x800,0x100000)/File(\EFI\OPENSUSE\GRUBX64.EFI)0000424f
#+end_example
Does not seem to persist after reboot 🤷
*** The Twist
#+begin_example
$ sudo journalctl --grep 'secure boot .*abled'
Nov 28 20:37:13 localhost kernel: secureboot: Secure boot disabled
[… an so on, for every boot until today …]
#+end_example
… I'm an idiot; I never had Secure Boot enabled on that machine,
apparently. I guess the BIOS update just turned it on silently.
*** Can I have Secure Boot at all though?
Personal takeaways from [[https://github.com/Foxboron/sbctl/issues/181][Foxboron/sbctl#181]]: maybe, but it involves so
much futzing around and has such a high chance of [[https://github.com/Foxboron/sbctl/issues/181#issuecomment-1354247722][false positives]],
that I will tentatively conclude "not worth it".
* SSD
LDLC's off-brand SSD died, fortunately within the warranty period.
Replaced it, and… I guess I should shoehorn a joke about "a descent
into hell" or "the beginning of a nightmare", but that just twists
[[./killing-time.org][the knife]] ☹️
|
