From b80dad6a7554eed022515537e84276fb7c76972f Mon Sep 17 00:00:00 2001 From: Jane Alesi Date: Thu, 2 Apr 2026 10:02:15 +0200 Subject: [PATCH] feat(tech): add fwupd setup and firmware update research - Install fwupd 2.1.1, refresh LVFS metadata - Detect 7 devices: NVMe, SATA SSD, CPU, AMD TPM 2.0, 3 displays - LVFS: no updates published for Samsung SSDs - New discovery: AMD fTPM 2.0 (v3.8.0.3) not in original inventory - NVMe firmware GXA7802Q available via nvme-cli (not LVFS) - Action plan: 1 medium-risk update (NVMe), rest up-to-date or EOL --- docs/tech/firmware-update-research.md | 49 +++++++++++++++++++-------- 1 file changed, 35 insertions(+), 14 deletions(-) diff --git a/docs/tech/firmware-update-research.md b/docs/tech/firmware-update-research.md index 74d4a16..6e8e0fc 100644 --- a/docs/tech/firmware-update-research.md +++ b/docs/tech/firmware-update-research.md @@ -171,19 +171,40 @@ nvme list ## fwupd Status -`fwupd` is **not installed** on this workstation. +**Installed**: fwupd 2.1.1 (2026-04-02) -**Recommendation**: Install fwupd for future firmware management via LVFS (Linux Vendor Firmware Service). +### Detected Devices (7 total) -```bash -sudo pacman -S fwupd -sudo systemctl enable --now fwupd -fwupdmgr refresh -fwupdmgr get-devices -fwupdmgr get-updates +| Device | Type | Current Version | Updatable via LVFS? | +|--------|------|-----------------|---------------------| +| MZVL2512HCJQ-00B00 | NVMe SSD | GXA7401Q | Yes (flag) / No update published | +| SSD 840 EVO 500GB | SATA SSD | EXT0BB6Q | Yes (flag) / No update published | +| Ryzen 7 2700X | CPU Microcode | 0x0800820e | No | +| AMD TPM 2.0 | TPM | 3.8.0.3 | Yes (flag, signed payload) | +| Unknown (PNP:WOR) | Display (?) | - | No | +| Unknown (PNP:BNQ) | Display (?) | - | No | +| Unknown (PNP:WOR) | Display (?) | - | No | + +### LVFS Update Check Result + +``` +No updatable devices ``` -fwupd can manage UEFI firmware, some SSD firmware, and select USB devices through LVFS. +Samsung does not publish PM9A1 or 840 EVO firmware on LVFS. The NVMe firmware update to GXA7802Q (see ยง2) must be done via `nvme-cli` with the OVHCloud firmware binary. + +### New Discovery: AMD TPM 2.0 + +fwupd detected an **AMD TPM 2.0** device (version 3.8.0.3) not in original inventory. This is the firmware TPM (fTPM) built into the Ryzen processor. It supports signed payload updates via fwupd/LVFS. Currently no update is published. + +### fwupd Verification Commands + +```bash +fwupdmgr refresh # Refresh metadata from LVFS +fwupdmgr get-devices # List all detected devices +fwupdmgr get-updates # Check for available updates +fwupdmgr update # Apply available updates +``` --- @@ -191,11 +212,11 @@ fwupd can manage UEFI firmware, some SSD firmware, and select USB devices throug ### Immediate (Low Risk) -| # | Action | Command | -|---|--------|---------| -| 1 | Install fwupd | `sudo pacman -S fwupd` | -| 2 | Update linux-firmware | `sudo pacman -Syu linux-firmware` | -| 3 | Check NVIDIA driver version | `pacman -Q nvidia` | +| # | Action | Command | Status | +|---|--------|---------|--------| +| 1 | Install fwupd | `sudo pacman -S fwupd` | **Done** (fwupd 2.1.1) | +| 2 | Update linux-firmware | `sudo pacman -Syu linux-firmware` | Pending | +| 3 | Check NVIDIA driver version | `pacman -Q nvidia` | Pending | ### Scheduled (Medium Risk - Requires Maintenance Window)