You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
@pietrushnic - as promised, following our recent chat on Dasharo's matrix channel and successfully migrating to Dasharo on my MSI 690 pro, here's what I think was missing from the doc (and from the email I received after ordering my DES subscription). Obviously, take into consideration that I'm not a "bios" guy so there might be kinda dumb points below :)
I first found about the possibility to flash Dasharo with MSI's m-flash in Dasharo vPub video (mostly by chance); this was later confirmed by @miczyg1 in the matrix channel. FWIW a search for "m-flash" on https://docs.dasharo.com doesn't return anything.
If I'm not mistaken there isn't any mention of being able to use MSI's failsafe bios flashing in case something goes wrong (the method where you plug a USB stick and press the bios update button to power the PC). That means a chip programmer isn't needed, which is reassuring for bios noobs like me, given that the PC with this MSI board is my daily driver.
With the m-flash method, DTS zero touch initial deployment would thus only needed to create a HCL/firmware backup; so the overall procedure becomes 1/ create a USB stick with DTS, 2/ boot DTS and only create/submit a HCL/bios backup, 3/ proceed to update the bios with m-flash.
as initially mentioned, if someone was to try to flash Dasharo for the first time from DTS, the warning about Intel's ME would be a cause for concern (that's what triggered this whole discussion BTW). It's not clear what would happen if someone flashes the bios with ME enabled (it is assumed that MSI's m-flash method disables ME when flashing the bios/firmware).
it's not clear from the download FAQ above that files with dev_signed in their filename shouldn't should be downloaded because the key isn't secure (IIRC miczyg said those were for reproducible builds or something like that).
specifically for MSI 690 pro and people using linux/Qubes OS, it is possible to control sys fans with an out-of-tree module (see this issue).
I considered submitting a PR but that's quite a few changes and I thought you'd probably want to update the doc differently. I think noobs like me would like to have a more streamlined, linear doc that describes the whole initial update, and potentially updating the firmware after Dasharo is installed (eg. either with DTS - which should this time be OK since Intel's ME can be disabled in Dasharo - or with m-flash). Let me know if I can help.
reacted with thumbs up emoji reacted with thumbs down emoji reacted with laugh emoji reacted with hooray emoji reacted with confused emoji reacted with heart emoji reacted with rocket emoji reacted with eyes emoji
-
Hey!
@pietrushnic - as promised, following our recent chat on Dasharo's matrix channel and successfully migrating to Dasharo on my MSI 690 pro, here's what I think was missing from the doc (and from the email I received after ordering my DES subscription). Obviously, take into consideration that I'm not a "bios" guy so there might be kinda dumb points below :)
I first found about the possibility to flash Dasharo with MSI's m-flash in Dasharo vPub video (mostly by chance); this was later confirmed by @miczyg1 in the matrix channel. FWIW a search for "m-flash" on
https://docs.dasharo.comdoesn't return anything.If I'm not mistaken there isn't any mention of being able to use MSI's failsafe bios flashing in case something goes wrong (the method where you plug a USB stick and press the bios update button to power the PC). That means a chip programmer isn't needed, which is reassuring for bios noobs like me, given that the PC with this MSI board is my daily driver.
With the m-flash method, DTS zero touch initial deployment would thus only needed to create a HCL/firmware backup; so the overall procedure becomes 1/ create a USB stick with DTS, 2/ boot DTS and only create/submit a HCL/bios backup, 3/ proceed to update the bios with m-flash.
as initially mentioned, if someone was to try to flash Dasharo for the first time from DTS, the warning about Intel's ME would be a cause for concern (that's what triggered this whole discussion BTW). It's not clear what would happen if someone flashes the bios with ME enabled (it is assumed that MSI's m-flash method disables ME when flashing the bios/firmware).
the subscription email I received should probably have a link to download the Dasharo Entry Subscription binaries ; and/or there should be a link in the DTS/m-flash doc.
it's not clear from the download FAQ above that files with
dev_signedin their filename shouldn't should be downloaded because the key isn't secure (IIRC miczyg said those were for reproducible builds or something like that).specifically for MSI 690 pro and people using linux/Qubes OS, it is possible to control sys fans with an out-of-tree module (see this issue).
I considered submitting a PR but that's quite a few changes and I thought you'd probably want to update the doc differently. I think noobs like me would like to have a more streamlined, linear doc that describes the whole initial update, and potentially updating the firmware after Dasharo is installed (eg. either with DTS - which should this time be OK since Intel's ME can be disabled in Dasharo - or with m-flash). Let me know if I can help.
Cheers!
Beta Was this translation helpful? Give feedback.
All reactions