infrastructure/mw-pfeddersheim-workstation
2
0
Fork 0
Code Issues 2 Pull Requests Actions Packages Projects Releases Wiki Activity

feat(tech): add fwupd setup and firmware update research

Browse Source 
- Install fwupd 2.1.1, refresh LVFS metadata
- Detect 7 devices: NVMe, SATA SSD, CPU, AMD TPM 2.0, 3 displays
- LVFS: no updates published for Samsung SSDs
- New discovery: AMD fTPM 2.0 (v3.8.0.3) not in original inventory
- NVMe firmware GXA7802Q available via nvme-cli (not LVFS)
- Action plan: 1 medium-risk update (NVMe), rest up-to-date or EOL
This commit is contained in:
ja
2026-04-02 10:02:15 +02:00
parent 9494d1693b
commit b80dad6a75
1 changed files with 35 additions and 14 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/tech/firmware-update-research.md
+35 -14
View File
@@ -171,19 +171,40 @@ nvme list
## fwupd Status
`fwupd` is **not installed** on this workstation.
**Installed**: fwupd 2.1.1 (2026-04-02)
**Recommendation**: Install fwupd for future firmware management via LVFS (Linux Vendor Firmware Service).
### Detected Devices (7 total)
```bash
sudo pacman -S fwupd
sudo systemctl enable --now fwupd
fwupdmgr refresh
fwupdmgr get-devices
fwupdmgr get-updates
| Device | Type | Current Version | Updatable via LVFS? |
|--------|------|-----------------|---------------------|
| MZVL2512HCJQ-00B00 | NVMe SSD | GXA7401Q | Yes (flag) / No update published |
| SSD 840 EVO 500GB | SATA SSD | EXT0BB6Q | Yes (flag) / No update published |
| Ryzen 7 2700X | CPU Microcode | 0x0800820e | No |
| AMD TPM 2.0 | TPM | 3.8.0.3 | Yes (flag, signed payload) |
| Unknown (PNP:WOR) | Display (?) | - | No |
| Unknown (PNP:BNQ) | Display (?) | - | No |
| Unknown (PNP:WOR) | Display (?) | - | No |
### LVFS Update Check Result
```
No updatable devices
```
fwupd can manage UEFI firmware, some SSD firmware, and select USB devices through LVFS.
Samsung does not publish PM9A1 or 840 EVO firmware on LVFS. The NVMe firmware update to GXA7802Q (see §2) must be done via `nvme-cli` with the OVHCloud firmware binary.
### New Discovery: AMD TPM 2.0
fwupd detected an **AMD TPM 2.0** device (version 3.8.0.3) not in original inventory. This is the firmware TPM (fTPM) built into the Ryzen processor. It supports signed payload updates via fwupd/LVFS. Currently no update is published.
### fwupd Verification Commands
```bash
fwupdmgr refresh # Refresh metadata from LVFS
fwupdmgr get-devices # List all detected devices
fwupdmgr get-updates # Check for available updates
fwupdmgr update # Apply available updates
```
---
@@ -191,11 +212,11 @@ fwupd can manage UEFI firmware, some SSD firmware, and select USB devices throug
### Immediate (Low Risk)
| # | Action | Command |
|---|--------|---------|
| 1 | Install fwupd | `sudo pacman -S fwupd` |
| 2 | Update linux-firmware | `sudo pacman -Syu linux-firmware` |
| 3 | Check NVIDIA driver version | `pacman -Q nvidia` |
| # | Action | Command | Status |
|---|--------|---------|--------|
| 1 | Install fwupd | `sudo pacman -S fwupd` | **Done** (fwupd 2.1.1) |
| 2 | Update linux-firmware | `sudo pacman -Syu linux-firmware` | Pending |
| 3 | Check NVIDIA driver version | `pacman -Q nvidia` | Pending |
### Scheduled (Medium Risk - Requires Maintenance Window)