From 905fff4902347e1c981c9769ed38ec1415e27c5b Mon Sep 17 00:00:00 2001 From: Stoiko Ivanov Date: Fri, 19 Apr 2024 20:43:29 +0200 Subject: [PATCH] firmware: adapt to proxmox packaged fwupd MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit We ship our own fwupd package, since it needs to handle the differently named efi_os_dir (proxmox vs debian). Due to our experience with `udisks2` causing issues on hypervisors, our package downgraded the Recommends udisks2, to a Suggests. The downside is, that users need to explicitly set their ESP mountpoint in the config file. Additionally a minor stylistic rephrasing (is an option vs. could be an option). Tested this today, while giving our fwupd package a spin. Suggested-by: Fabian Grünbichler Signed-off-by: Stoiko Ivanov --- firmware-updates.adoc | 21 +++++++++++++++------ 1 file changed, 15 insertions(+), 6 deletions(-) diff --git a/firmware-updates.adoc b/firmware-updates.adoc index 279cf11..8354955 100644 --- a/firmware-updates.adoc +++ b/firmware-updates.adoc @@ -43,13 +43,22 @@ ConnectX or https://techdocs.broadcom.com/us/en/storage-and-ethernet-connectivity/ethernet-nic-controllers/bcm957xxx/adapters/software-installation/updating-the-firmware/manually-updating-the-adapter-firmware-on-linuxesx.html['bnxtnvm'/'niccli'] for Broadcom network cards. -* https://fwupd.org[LVFS] could also be an option if there is a cooperation with -a https://fwupd.org/lvfs/vendors/[vendor] and +* https://fwupd.org[LVFS] is also an option if there is a cooperation with +the https://fwupd.org/lvfs/vendors/[hardware vendor] and https://fwupd.org/lvfs/devices/[supported hardware] in use. The technical -requirement for this is that the system was manufactured after 2014, is booted -via UEFI and the easiest way is to mount the EFI partition from which you boot -(`mount /dev/disk/by-partuuid/ /boot/efi`) before installing -'fwupd'. +requirement for this is that the system was manufactured after 2014 and is +booted via UEFI. + +Since {pve} ships its own version of the `fwupd` package, for Secure Boot +Support with the Proxmox signing key, which does not recommend the `udisks2` +package, due to observed issues with its use on hypervisors setting the mount +point of the EFI partition in `/etc/fwupd/daemon.conf` is necessary: + +.File `/etc/fwupd/daemon.conf` +---- +# Override the location used for the EFI system partition (ESP) path. +EspLocation=/boot/efi +---- TIP: If the update instructions require a host reboot, make sure that it can be done safely. See also xref:ha_manager_node_maintenance[Node Maintenance].