summaryrefslogtreecommitdiff
path: root/guides/sysadmin/machines/amdahl30/maintenance.org
diff options
context:
space:
mode:
Diffstat (limited to 'guides/sysadmin/machines/amdahl30/maintenance.org')
-rw-r--r--guides/sysadmin/machines/amdahl30/maintenance.org38
1 files changed, 36 insertions, 2 deletions
diff --git a/guides/sysadmin/machines/amdahl30/maintenance.org b/guides/sysadmin/machines/amdahl30/maintenance.org
index 7546447..18a30dc 100644
--- a/guides/sysadmin/machines/amdahl30/maintenance.org
+++ b/guides/sysadmin/machines/amdahl30/maintenance.org
@@ -146,8 +146,42 @@ Off the top of my head:
- that dbx update?
- ~sudo blarney-grub2 --pretty -pls --with-sugar=top --with-sugar=top~?
- dracut?
+
+dbx update: nope.
+
+~efibootmgr~ only shows =opensuse=, not =opensuse-secure=.
+- After ~udpate-bootloader --install~, =opensuse-secure= shows up; no
+ change though, enabling Secure Boot still lands me in =grub rescue=.
+- Change bootorder with =-o 0,1=?
+
+ #+begin_example
+ $ sudo udpate-bootloader --install
+ $ sudo efibootmgr
+ BootCurrent: 0001
+ Timeout: 1 seconds
+ BootOrder: 0001,0000
+ Boot0000* opensuse-secureboot HD(1,GPT,2ffd6bee-1b1e-4088-8fdf-0c9321c861a3,0x800,0x100000)/File(\EFI\OPENSUSE\SHIM.EFI)
+ Boot0001* opensuse HD(1,GPT,2ffd6bee-1b1e-4088-8fdf-0c9321c861a3,0x800,0x100000)/File(\EFI\OPENSUSE\GRUBX64.EFI)0000424f
+ $ sudo efibootmgr -o 0,1
+ BootCurrent: 0001
+ Timeout: 1 seconds
+ BootOrder: 0000,0001
+ Boot0000* opensuse-secureboot HD(1,GPT,2ffd6bee-1b1e-4088-8fdf-0c9321c861a3,0x800,0x100000)/File(\EFI\OPENSUSE\SHIM.EFI)
+ Boot0001* opensuse HD(1,GPT,2ffd6bee-1b1e-4088-8fdf-0c9321c861a3,0x800,0x100000)/File(\EFI\OPENSUSE\GRUBX64.EFI)0000424f
+ #+end_example
+
+ Does not seem to persist after reboot 🤷
+*** The Twist
+#+begin_example
+$ sudo journalctl --grep 'secure boot .*abled'
+Nov 28 20:37:13 localhost kernel: secureboot: Secure boot disabled
+[… an so on, for every boot until today …]
+#+end_example
+
+… I'm an idiot; I never had Secure Boot enabled on that machine,
+apparently. I guess the BIOS update just turned it on silently.
* SSD
LDLC's off-brand SSD died, fortunately within the warranty period.
Replaced it, and… I guess I should shoehorn a joke about "a descent
-into hell" or "the beginning of a nightmare", but that just twists [[./killing-time.org][the
-knife]] ☹️
+into hell" or "the beginning of a nightmare", but that just twists
+[[./killing-time.org][the knife]] ☹️