https://www.youtube.com/watch?v=ggK2sV8 … p=iAQB8AUB Black Sabbath - Ancient Warrior

I also find it annoying, with UEFI_as_firmware_machines, that "boot from ssd immediately"-thing. Many times i had to keep F-buttons down in the keyboard while pushing powerbutton. That seems to be a reliable way to get that configuration- or boot-menu.

I rarely even log into X as root. I think about  1-2 years ago i had to, after screwing up with slim somehow.

But anyways. I have browsed grub's documentation, it seems that it can verfify signatures. So it should be possible tp sign the whole kernel and initrd. So no need to use openssl to sign every module that goes into initrd.

And if /boot-partition doesn't change too often, it may be practical to calculate hash of the whole partition and store it somewhere. To check just before giving control from firmware to bootloader. And warning user if content has changed.

Unattended access could be bigger problem with laptops than with desktops, i thjink.

Maybe {Core/LIbre}boot could be run inaide a vm? Would like to find out how that software works in practice.

https://www.youtube.com/watch?v=oGED_XorcRY a.k.a
FAUN - Ylfa Spere (Official Video)

That forum link seemed intresting.
The shop i bought Fujitsu from, told me to first try "push power button for x second"-trick which i already know from BIOS-machines.
The hopes were, that the settings which told to read from ssd before doing anything else, would go away. And maybe also those settings that say that the primary ssd is disabled.
That trick haven't worked. yet

Right after pushing powerbutton, F2 results in a beep and the screen goes from black ro dark gray. So the machine has noticed that i have pushed a key bot nothing else happens after that.
And F12 right after powerbutton results to a beep and dark gray screen also.

The next step would be to send that machine back to that shop. And it would take yet-to.-be-determined amount of money and time.
I'm between sixes and sevens, should i  sent that machine back or not.

On the other hand, that old laptop will cease to work some day.

I have tried many times, to get into the Fujitsu's UEFI configuration menu, to no avail. So i cannot reset to factory defaults.
It was a Big Mistake to disable the primary ssd. And also forgetting to do domething about those remains of previous install in that boot menu, that was a BIg Mistake too.

Found out the Hard Way that is not a proper way to enforce booting from optical disk.
It doesn't matter if that ssd is connected or not.

Now Lord Anubis is in need for a new host.

Set a main passwd for the firmware.
Set passwd for ssd, disabled asking it later.
Enabled tpm, disabled secureboot.
Enabled booting for removable drives.
Enabled boot menu also.
Enabled that boot menu for all users, not just for admin.

And noticed that cannot boot from usb-dvd-drive if that ssd is disconnected.
It may have been a mistake to set that disk passwd. I suspect it to be the cause that firmware needs ssd before booting from optical.

In boot order optical is before ssd, but not the absolutely first, i think. Have to confirm if i get a chance.

E. Firmware version is 1.28 . The date of it is from december of 2022, i think. Suspect that date is when the firmware was updated, not the date when fujitsu published it.

If you have rules you're happy with, there's also netfilter-persistent and iptables-persistent.

I don't think sudo in itself is a disease. But that "ALL=ALL NOPASSWD"-thing definitely is.

Tried heads once, 4 years ago. For some reason the dvd i burned didn't boot. Would like to try again some day with more recent .iso .

I haven't been troubled with rubber-feets of laptops.

But hardware support is always a problem with linux. Even with desktops.
Ok, usually you can get your graphics card working, kind of. But then you'll be stuck with the distro's kernel. No compiling the latest from kernel.org if you want those blobs working.

And then there's the new firmware that replaced BIOS. Recently noticed that  i cannot boot from dvd if ssd is removed. What will i do if that ssd breaks?
With old hardware i could boot from dvd even after removing the hdd. But not necessarily with new machines.
I find that annoying.

This mis-adventure continues.

Today i noticed: https://wiki.archlinux.org/title/intel_ … stallation .
These sounded familiar: "There have been couple reports where the whole graphics stack hard freezes" , "not even switching to a different virtual console work" .
And I think there's intel graphic chip in that machine.

But it will take a while to get a chance to try SysRq.
Last night i started the reinstall process. Erased the ssd with dd as a first step, to start with a "clean slate".

Now i have a "kind of a theory" why "freezing" happens. When trying to log out, lightdm tries to communicate with polkit but it can't and freezes. But on the other hand, then i would expect that package to go away when removing polkit-packages.
Not yet sure how that explains problems with startx. Should find out if there is xterm installed outside of vm.

And btw, couldn't reproduce the "freezing situation" inside a vm just yet. Did many things differently from 2-3 months ago, thats for sure. Should have documented better how the install went during march-april.

Edit. https://pkginfo.devuan.org/cgi-bin/pack … d=246.10-5 the "Recommends:"-part.
So changing displaymanager won't necessarily help if it is elogind that tries to access policykit-related stuff that is not available.

And elogind need dbus also.