Jeremy Bryan Smith - User contributions [en]

Privacy-Invading Systems and How to Avoid Them

2026-04-21T15:45:05Z

Jeremy:

= Surveillance and Digital Monitoring Systems =
This page documents publicly known surveillance, device access, data extraction, monitoring, and analytics systems used by governments, police, intelligence services, and corporations. It also includes general notes on detection, likely indicators, and high-level defensive practices.

Many of these products are marketed for law enforcement, intelligence, enterprise administration, or “public safety.” In practice, they have repeatedly raised major civil-liberties and privacy concerns, especially when used in secret, without meaningful oversight, or against journalists, dissidents, immigrants, protesters, and political opponents.

== Scope and Caveats ==
This page is an overview, not an exhaustive catalogue. Some systems have extensive public documentation, while others are documented mainly through investigative journalism, court records, procurement records, leaked materials, or technical analysis by groups like Citizen Lab, Amnesty International, EFF, ACLU, and major news organizations.

The fact that a product appears here does ''not'' mean every use is unlawful, nor does it mean all publicly alleged capabilities are always available in every deployment. Some vendors deliberately keep technical details secret, and some governments hide or mischaracterize how these tools are used.

----

= Threat Model: How These Systems Fit Together =
Modern surveillance usually operates as a pipeline rather than a single tool. Understanding the layers makes it easier to understand where risk comes from and where defensive measures help.

{| class="wikitable"
! Layer
! Description
! Example systems
|-
| Device exploitation
| Direct compromise of a phone or computer
| Pegasus, Graphite, FinSpy
|-
| Device access / extraction
| Physical or forensic access to a seized device
| Cellebrite UFED, GrayKey
|-
| Interception / location
| Locating or identifying devices via network impersonation or network data
| Stingray / cell-site simulators
|-
| Aggregation
| Pulling many data sources together into one place
| Telecom logs, law-enforcement databases, brokered data
|-
| Analysis / targeting
| Correlating people, devices, places, events, and patterns
| Gotham, Foundry, AIP
|-
| Operational action
| Enforcement, deportation, arrests, raids, targeting, watchlisting, or battlefield use
| Police, intelligence, border agencies, military units
|}

A key point is that some of the most controversial platforms do ''not'' break into phones directly; instead, they ingest and analyze data gathered by other tools or agencies.<ref>[https://www.palantir.com/platforms/ Palantir platforms]</ref><ref>[https://www.palantir.com/platforms/gotham/ Palantir Gotham]</ref>

----

= Detection and Indicators =
This section covers general signs that a device, account, or movement pattern may be under surveillance. In many cases, especially with high-end spyware, there may be ''no obvious visible indicator at all''.<ref>[https://www.amnesty.org/en/latest/research/2021/07/forensic-methodology-report-how-to-catch-nso-groups-pegasus/ Amnesty International Pegasus forensic methodology]</ref><ref>[https://citizenlab.ca/research/first-forensic-confirmation-of-paragons-ios-mercenary-spyware-finds-journalists-targeted/ Citizen Lab: first forensic confirmation of Paragon spyware]</ref>

== General Device Indicators ==
A compromised or monitored device may show:
* unusual battery drain
* unexplained heat when idle
* abnormal crashes or reboots
* unexpected network usage
* new profiles, certificates, or management agents
* strange permission prompts or security warnings
* missing or altered messages, settings, or call logs

These are weak indicators on their own. Normal software bugs and bad apps can cause similar symptoms. Sophisticated spyware may leave almost no user-visible signs.<ref>[https://www.amnesty.org/en/latest/research/2021/07/forensic-methodology-report-how-to-catch-nso-groups-pegasus/ Amnesty International Pegasus forensic methodology]</ref>

== Indicators of Mobile Device Management / Administrative Control ==
A phone may be under administrative control if you see:
* a device management profile
* work container / managed app warnings
* restrictions on installing apps or changing settings
* remote wipe or compliance notices
* enterprise certificates or “managed by organization” messages

On iPhone and iPad, check settings related to device management profiles. On Android, check device admin apps, work profiles, and enterprise enrollment state.<ref>[https://learn.microsoft.com/en-us/intune/privacy/ Microsoft Intune privacy and personal data]</ref>

== Indicators of Forensic Access After Seizure ==
After a device has been seized or handled out of your control, warning signs can include:
* changed lock settings
* newly trusted computers or accessories
* modified biometric enrollment
* unexplained recent unlocks
* logs or timestamps inconsistent with your own use
* unusual files or configuration changes after return

Forensic extraction often leaves fewer obvious indicators than malware, especially if the device was unlocked or physically controlled by authorities.

== Indicators of Cell-Site Simulator / IMSI Catcher Use ==
Reliable end-user detection is difficult. Possible signals sometimes discussed by researchers and defenders include:
* sudden downgrade to weaker network modes
* unstable cellular service in a specific area
* unusual baseband / network behavior
* repeated attach / detach events
* suspicious concentration of police or surveillance vehicles during protests or targeted operations

These are not definitive. Consumer devices generally do not expose enough radio-layer detail for dependable confirmation.<ref>[https://www.eff.org/pages/cell-site-simulatorsimsi-catchers EFF: Cell-site simulators / IMSI catchers]</ref><ref>[https://www.aclu.org/issues/privacy-technology/surveillance-technologies/stingray-tracking-devices ACLU: Stingray tracking devices]</ref>

== Indicators of Camera / Vehicle Tracking Networks ==
You may be in a dense ALPR / camera surveillance area if you see:
* fixed roadside camera clusters at entrances, exits, intersections, apartment complexes, retail lots, and neighborhood choke points
* private “safety” camera branding
* police integration with neighborhood or private camera systems
* public records or council documents showing ALPR deployment

These systems often create retrospective travel histories, even when they are not continuously watched in real time.<ref>[https://www.eff.org/pages/automated-license-plate-readers-alpr EFF: Automated license plate readers]</ref><ref>[https://www.aclu.org/news/privacy-technology/flock-ceo-goes-ballistic ACLU on Flock Safety and mass driver surveillance]</ref>

== What To Do If You Suspect Surveillance ==
If compromise is plausible:
* stop assuming the device is trustworthy
* move sensitive conversations to a different device that has not been exposed
* preserve evidence before wiping or changing too much
* document dates, detentions, border crossings, suspicious messages, and unusual behavior
* seek professional forensic help if the stakes are high
* consider that your contacts may also be targeted

For high-risk users such as activists, journalists, lawyers, researchers, and political organizers, the safest assumption is often that a suspected device should not be trusted until properly examined.<ref>[https://citizenlab.ca/ Citizen Lab]</ref><ref>[https://ssd.eff.org/ Surveillance Self-Defense | EFF]</ref>

----

= Mobile Device Interception =
This category covers systems that identify, locate, or interact with mobile devices over the air, usually by imitating network infrastructure or exploiting the phone’s trust in the cellular network.

== Cell-Site Simulators (IMSI Catchers) ==
Cell-site simulators impersonate legitimate cell towers so nearby phones connect to them. This can expose device identifiers and help locate a target device. Public reporting and civil-liberties litigation have shown these tools have been used by federal, state, and local agencies in the United States and elsewhere.<ref>[https://www.eff.org/pages/cell-site-simulatorsimsi-catchers EFF: Cell-site simulators / IMSI catchers]</ref><ref>[https://epic.org/documents/epic-v-fbi-stingray-cell-site-simulator/ EPIC: Stingray / cell-site simulator records]</ref>

=== Stingray ===
StingRay is the best-known brand name for a class of cell-site simulators. The name is often used generically for similar devices.

* Vendor:
** [[Harris Corporation]] / [[L3Harris Technologies]]
* Country of origin:
** United States
* Type:
** IMSI catcher / cell-site simulator
* General description:
** A surveillance device that impersonates a cellular tower so nearby phones connect to it, revealing device identifiers and assisting in location tracking.<ref>[https://www.eff.org/pages/cell-site-simulatorsimsi-catchers EFF: Cell-site simulators / IMSI catchers]</ref><ref>[https://www.cato.org/policy-analysis/stingray-new-frontier-police-surveillance Cato: Stingray: A New Frontier in Police Surveillance]</ref>
* Capabilities:
** identifies nearby devices via IMSI/IMEI
** assists in locating a device
** can affect all phones in range, not only the target
* Publicly reported government users:
** FBI
** DEA
** CBP / ICE
** numerous state and local police agencies in the United States
** reported use by agencies in Canada and the United Kingdom as well<ref>[https://epic.org/documents/epic-v-fbi-stingray-cell-site-simulator/ EPIC: FBI use of cell-site simulators]</ref><ref>[https://www.aclu.org/cases?issue=stingray-tracking-devices ACLU stingray cases]</ref><ref>[https://www.eff.org/deeplinks/2016/04/eff-and-aclu-expose-governments-secret-stingray-use-wisconsin-case EFF on secret stingray use in Wisconsin case]</ref>
* Notable privacy / abuse stories:
** a federal judge in New York suppressed evidence after DEA used a stingray without a warrant<ref>[https://www.reuters.com/article/technology/in-first-us-judge-throws-out-cell-phone-stingray-evidence-idUSKCN0ZS2VG/ Reuters: judge throws out stingray evidence]</ref>
** ACLU and EFF litigation exposed secret stingray use that had not been disclosed to the court or defendant<ref>[https://www.eff.org/deeplinks/2016/04/eff-and-aclu-expose-governments-secret-stingray-use-wisconsin-case EFF on secret stingray use]</ref>
* Avoidance / mitigation:
** assume cellular metadata is exposed to the network operator and potentially to surveillance tools
** prefer end-to-end encrypted apps for content confidentiality
** disable radios when not needed
** avoid carrying a primary phone to highly sensitive meetings if exposure would be severe
** understand that reliable consumer-side detection is difficult

----

= Mobile Device Access =
This category covers tools used after a device has been seized, borrowed, detained, confiscated, or otherwise physically controlled by another party.

== Cellebrite (UFED) ==
Cellebrite’s UFED line is one of the best-known mobile device extraction tool families used in digital forensics. The company markets its tools to law enforcement and public-sector investigators, and public reporting has repeatedly tied its products to controversial extractions involving activists, protesters, and journalists.<ref>[https://cellebrite.com/en/ufed/ Cellebrite UFED]</ref><ref>[https://www.reuters.com/world/georgia-purchase-israeli-data-extraction-tech-amid-street-protest-crackdown-2025-02-27/ Reuters: Georgia and Cellebrite procurement]</ref>

* Vendor:
** [[Cellebrite]]
* Country of origin:
** Israel<ref>[https://www.reuters.com/world/georgia-purchase-israeli-data-extraction-tech-amid-street-protest-crackdown-2025-02-27/ Reuters: Israeli technology firm Cellebrite]</ref>
* Type:
** mobile device extraction / digital forensics
* General description:
** Commercial forensic platform used to extract and analyze data from phones and other digital devices.<ref>[https://cellebrite.com/en/ufed/ Cellebrite UFED]</ref>
* Capabilities:
** logical and physical extraction, depending on device and condition
** recovery of messages, contacts, app data, files, and other records
** analysis and review of extracted device data
* Publicly reported government users:
** FBI and other U.S. federal agencies
** police and security agencies in Serbia
** authorities in Georgia
** authorities in Jordan
** many other law-enforcement customers globally<ref>[https://www.reuters.com/technology/encrypted-chat-app-signal-reveals-flaws-cellebrite-equipment-2021-04-21/ Reuters on Cellebrite equipment]</ref><ref>[https://www.reuters.com/world/georgia-purchase-israeli-data-extraction-tech-amid-street-protest-crackdown-2025-02-27/ Reuters: Georgia procurement]</ref><ref>[https://www.reuters.com/technology/cybersecurity/serbia-used-israeli-firms-tech-enable-spy-campaign-amnesty-says-2024-12-16/ Reuters: Serbia and Cellebrite]</ref><ref>[https://www.theguardian.com/world/2026/jan/22/jordan-israeli-spyware-gaza-activists Guardian: Jordan and Cellebrite]</ref>
* Notable privacy / abuse stories:
** Amnesty and Reuters reported Serbian authorities used Cellebrite tools during detentions tied to surveillance of activists and journalists<ref>[https://www.reuters.com/technology/cybersecurity/serbia-used-israeli-firms-tech-enable-spy-campaign-amnesty-says-2024-12-16/ Reuters: Serbia used Israeli firm's tech]</ref>
** Reuters reported Georgia renewed contracts for Cellebrite tools amid protest crackdowns<ref>[https://www.reuters.com/world/georgia-purchase-israeli-data-extraction-tech-amid-street-protest-crackdown-2025-02-27/ Reuters: Georgia procurement]</ref>
** Citizen Lab / Guardian reporting tied Cellebrite tools to phone extractions of pro-Gaza activists in Jordan<ref>[https://www.theguardian.com/world/2026/jan/22/jordan-israeli-spyware-gaza-activists Guardian: Jordan used Israeli phone-cracking tool]</ref>
* Avoidance / mitigation:
** use a long alphanumeric passcode
** disable biometric unlock when coercion risk is high
** power down devices before border crossings, detention risk, or seizure risk
** keep full-disk encryption enabled
** do not surrender your primary device unlocked if you can lawfully avoid it
** separate high-risk communications from your everyday phone

----

= Mobile Device "Forensic" Tools =
This category covers specialized systems aimed at bypassing device protections and extracting data from phones, often after physical seizure.

== Grayshift (GrayKey) ==
GrayKey is a mobile-device access and extraction system used by law-enforcement and government customers. Public reporting and vendor materials indicate wide deployment across multiple countries, though details of current capabilities vary by device model and software version.<ref>[https://www.grayshift.com/ Grayshift]</ref><ref>[https://en.wikipedia.org/wiki/Grayshift Wikipedia: Grayshift]</ref>

* Vendor:
** [[Grayshift]]
* Country of origin:
** United States<ref>[https://en.wikipedia.org/wiki/Grayshift Wikipedia: Grayshift]</ref>
* Type:
** phone unlocking / forensic access tool
* General description:
** Commercial device used to attempt access to locked smartphones and support forensic extraction workflows.
* Capabilities:
** attempts to unlock supported devices
** extracts or helps acquire device data
** integrates into forensic workflows
* Publicly reported government users:
** FBI
** local police in the United States
** police and government defense agencies in multiple countries including the United Kingdom, France, Germany, Sweden, Spain, and Italy according to public reporting on the company’s own claims<ref>[https://en.wikipedia.org/wiki/Grayshift Wikipedia: Grayshift]</ref>
* Notable privacy / abuse stories:
** sustained secrecy around agency use and public-records fights over GrayKey procurement and deployment<ref>[https://www.techdirt.com/2021/08/17/redaction-failure-shows-grayshift-is-swearing-cops-to-secrecy-about-phone-cracking-tech/ Techdirt on GrayKey secrecy]</ref>
** continuing controversy around government access to phones that users believe are strongly protected
* Avoidance / mitigation:
** use a long passphrase rather than a short PIN
** keep the device updated
** configure USB restricted mode or equivalent protections
** power down the device if seizure risk is imminent
** treat any device returned after custody as potentially exposed

== Graphite ==
Graphite is a commercial spyware product made by Paragon Solutions. Public technical reporting expanded significantly in 2025, when WhatsApp and Citizen Lab publicly described attacks and forensic findings involving Paragon’s spyware against journalists and civil-society targets.<ref>[https://www.reuters.com/technology/cybersecurity/metas-whatsapp-says-israeli-spyware-company-paragon-targeted-scores-users-2025-01-31/ Reuters: WhatsApp says Paragon targeted users]</ref><ref>[https://citizenlab.ca/research/first-forensic-confirmation-of-paragons-ios-mercenary-spyware-finds-journalists-targeted/ Citizen Lab: first forensic confirmation of Paragon spyware]</ref>

* Vendor:
** [[Paragon Solutions]]
* Country of origin:
** Israel<ref>[https://www.reuters.com/technology/cybersecurity/metas-whatsapp-says-israeli-spyware-company-paragon-targeted-scores-users-2025-01-31/ Reuters: Israeli spyware company Paragon]</ref><ref>[https://www.reuters.com/markets/deals/israeli-spyware-firm-paragon-acquired-by-us-investment-group-report-says-2024-12-16/ Reuters: Paragon acquired by U.S. investment group]</ref>
* Type:
** mercenary spyware / targeted surveillance platform
* General description:
** Commercial spyware reportedly sold to government customers for covert access to mobile devices and data in encrypted apps.<ref>[https://citizenlab.ca/research/a-first-look-at-paragons-proliferating-spyware-operations/ Citizen Lab: first look at Paragon operations]</ref>
* Capabilities:
** covert device surveillance
** access to data on targeted phones
** reported access to encrypted-app data once the device is compromised
* Publicly reported government users:
** Italy acknowledged use of Paragon systems in a political scandal context
** Citizen Lab reported links to deployments associated with multiple democratic-state customers and identified infrastructure / cases in several countries<ref>[https://www.reuters.com/sustainability/society-equity/italy-has-ended-spyware-contract-with-paragon-parliamentary-document-shows-2025-06-09/ Reuters: Italy and Paragon part ways]</ref><ref>[https://citizenlab.ca/research/a-first-look-at-paragons-proliferating-spyware-operations/ Citizen Lab: Paragon operations]</ref>
* Notable privacy / abuse stories:
** WhatsApp said Paragon targeted scores of users including journalists and civil-society members<ref>[https://www.reuters.com/technology/cybersecurity/metas-whatsapp-says-israeli-spyware-company-paragon-targeted-scores-users-2025-01-31/ Reuters: WhatsApp and Paragon]</ref>
** Italy’s Paragon relationship became a major public scandal after allegations of phones of critics and activists being hacked<ref>[https://www.reuters.com/sustainability/society-equity/italy-has-ended-spyware-contract-with-paragon-parliamentary-document-shows-2025-06-09/ Reuters: Italy ended contract with Paragon]</ref>
** Citizen Lab published the first forensic confirmation of Paragon’s iOS spyware targeting journalists<ref>[https://citizenlab.ca/research/first-forensic-confirmation-of-paragons-ios-mercenary-spyware-finds-journalists-targeted/ Citizen Lab forensic confirmation]</ref>
* Avoidance / mitigation:
** keep iOS / Android fully updated
** reduce attack surface by disabling unnecessary services and apps
** be highly cautious with unsolicited files, group invites, and messages
** for high-risk users, consider hardened platforms and rapid incident response plans
** understand that sophisticated zero-click spyware may leave little visible evidence

----

= Commercial Spyware =
This section covers mercenary spyware sold by private vendors to government clients. These products are among the most dangerous classes of digital surveillance because they can turn a target’s own device into the surveillance platform.

== NSO Group (Pegasus) ==
Pegasus is one of the most widely documented commercial spyware systems in the world. Public reporting, lawsuits, and research by Amnesty, Citizen Lab, Reuters, and the Pegasus Project have linked it to surveillance of journalists, activists, lawyers, political opposition, diplomats, and government officials in many countries.<ref>[https://www.reuters.com/world/pegasus-spyware-scandal-years-questions-no-answers-mexico-victims-2021-08-09/ Reuters: Pegasus scandal]</ref><ref>[https://www.amnesty.org/en/latest/press-release/2021/07/the-pegasus-project/ Amnesty: Pegasus Project]</ref><ref>[https://www.reuters.com/technology/cybersecurity/us-judge-finds-israels-nso-group-liable-hacking-whatsapp-lawsuit-2024-12-21/ Reuters: NSO liable in WhatsApp case]</ref>

* Vendor:
** [[NSO Group]]
* Country of origin:
** Israel<ref>[https://www.reuters.com/technology/cybersecurity/us-judge-finds-israels-nso-group-liable-hacking-whatsapp-lawsuit-2024-12-21/ Reuters: Israel's NSO Group]</ref>
* Type:
** advanced mobile spyware
* General description:
** Covert spyware platform used to compromise phones and gain access to communications, files, sensors, and location data.
* Capabilities:
** full or near-full device compromise on supported targets
** access to messages, microphone, camera, photos, files, and location
** zero-click exploitation in some operations
* Publicly reported government users:
** public reporting has linked likely clients or deployments to countries including Mexico, Saudi Arabia, Hungary, India, Spain, Poland, El Salvador, and others<ref>[https://www.theguardian.com/world/2021/jul/18/revealed-leak-uncovers-global-abuse-of-cyber-surveillance-weapon-nso-group-pegasus Guardian: Pegasus Project investigation]</ref><ref>[https://www.reuters.com/world/americas/mexico-probes-whether-pegasus-spyware-purchases-were-legal-2022-10-17/ Reuters: Mexico Pegasus purchases]</ref><ref>[https://www.reuters.com/technology/spain-closes-pegasus-spyware-probe-again-saying-israel-has-not-responded-2026-01-22/ Reuters: Spain Pegasus probe]</ref>
* Notable privacy / abuse stories:
** Pegasus Project reporting on widespread targeting of journalists, activists, and political figures<ref>[https://www.amnesty.org/en/latest/press-release/2021/07/the-pegasus-project/ Amnesty: Pegasus Project]</ref><ref>[https://www.theguardian.com/world/2021/jul/18/revealed-leak-uncovers-global-abuse-of-cyber-surveillance-weapon-nso-group-pegasus Guardian: leaked global abuse investigation]</ref>
** Reuters on Mexico’s long-running Pegasus scandal<ref>[https://www.reuters.com/world/pegasus-spyware-scandal-years-questions-no-answers-mexico-victims-2021-08-09/ Reuters: Mexico victims]</ref>
** Amnesty / Citizen Lab / Reuters on Pegasus found on phones of Palestinian rights workers<ref>[https://www.reuters.com/world/amnesty-says-nsos-pegasus-used-hack-phones-palestinian-rights-workers-2021-11-08/ Reuters: Palestinian rights workers]</ref>
** U.S. court findings against NSO in the WhatsApp hacking case<ref>[https://www.reuters.com/technology/cybersecurity/us-judge-finds-israels-nso-group-liable-hacking-whatsapp-lawsuit-2024-12-21/ Reuters: NSO liable]</ref>
* Avoidance / mitigation:
** apply updates immediately
** use hardened modes such as Lockdown Mode where available
** reduce dependency on a single always-carried phone
** keep a separate low-risk device for routine life if your threat model is serious
** if you are high-risk, plan for forensic review rather than relying on visible signs

== FinFisher (FinSpy) ==
FinSpy is a long-running commercial spyware suite whose deployments have been tracked by Citizen Lab, Amnesty, EFF, and others. It has repeatedly appeared in contexts involving authoritarian abuse and surveillance of dissidents.<ref>[https://www.amnesty.org/en/latest/research/2020/09/german-made-finspy-spyware-found-in-egypt-and-mac-and-linux-versions-revealed/ Amnesty: German-made FinSpy in Egypt]</ref><ref>[https://citizenlab.ca/research/mapping-finfishers-continuing-proliferation/ Citizen Lab: Mapping FinFisher proliferation]</ref>

* Vendor:
** [[FinFisher GmbH]] / historically associated with Gamma International branding in earlier reporting
* Country of origin:
** Germany / United Kingdom in historical reporting depending on the corporate entity referenced<ref>[https://www.amnesty.org/en/latest/research/2020/09/german-made-finspy-spyware-found-in-egypt-and-mac-and-linux-versions-revealed/ Amnesty: Munich-based FinFisher GmbH]</ref><ref>[https://citizenlab.ca/research/from-bahrain-with-love-finfishers-spy-kit-exposed/ Citizen Lab: Gamma International / FinFisher]</ref>
* Type:
** spyware / remote surveillance malware suite
* General description:
** Commercial malware suite used by governments for remote surveillance of computers and phones.
* Capabilities:
** remote monitoring
** data exfiltration
** surveillance of communications and activity
* Publicly reported government users:
** Bahrain
** Ethiopia
** United Arab Emirates
** Egypt
** Turkey
** other governments identified through technical and legal reporting<ref>[https://www.amnesty.org/en/latest/research/2020/09/german-made-finspy-spyware-found-in-egypt-and-mac-and-linux-versions-revealed/ Amnesty: FinSpy in Egypt and other countries]</ref><ref>[https://citizenlab.ca/research/mapping-finfishers-continuing-proliferation/ Citizen Lab: FinFisher proliferation]</ref><ref>[https://www.reuters.com/article/world/german-firm-investigated-after-report-of-sending-spyware-to-turkey-idUSKCN1VQ1C9/ Reuters: spyware to Turkey]</ref>
* Notable privacy / abuse stories:
** Citizen Lab’s exposure of FinSpy targeting Bahraini dissidents<ref>[https://citizenlab.ca/research/from-bahrain-with-love-finfishers-spy-kit-exposed/ Citizen Lab: Bahrain with Love]</ref>
** Amnesty on German-made FinSpy found in Egypt, including versions for Mac and Linux<ref>[https://www.amnesty.org/en/latest/research/2020/09/german-made-finspy-spyware-found-in-egypt-and-mac-and-linux-versions-revealed/ Amnesty: FinSpy in Egypt]</ref>
** Reuters on investigations into alleged exports to Turkey<ref>[https://www.reuters.com/article/world/german-firm-investigated-after-report-of-sending-spyware-to-turkey-idUSKCN1VQ1C9/ Reuters: investigated over Turkey]</ref>
* Avoidance / mitigation:
** keep systems minimal
** install software only from trusted sources
** use compartmentalized systems for sensitive work
** preserve suspicious files and messages for forensic analysis
** treat politically timed phishing or attachments as high risk

----

= Enterprise / Consumer Monitoring Software =
This category includes administrative and monitoring platforms that are often deployed with organizational consent. They are not necessarily covert spyware, but they can still enable invasive control and surveillance over managed devices.

== Mobile Device Management (MDM platforms) ==
MDM platforms let an organization enforce policy, deploy apps, restrict functionality, wipe devices remotely, and monitor compliance state. In a work or school setting, these tools can legitimately manage endpoints, but they can also create a level of institutional control many users do not fully understand.<ref>[https://learn.microsoft.com/en-us/intune/privacy/ Microsoft Intune privacy and personal data]</ref>

* General description:
** Centralized management and control platforms for phones, tablets, and computers.
* Common capabilities:
** policy enforcement
** remote wipe
** app deployment
** compliance checks
** restrictions on user actions
* Publicly reported government / public-sector users:
** widely used across public-sector and enterprise environments; exact deployments vary by country and organization
* Known privacy concerns:
** users often do not understand the distinction between managed and unmanaged data
** a managed personal device can expose more administrative control than expected
* Avoidance / mitigation:
** do not enroll a personal device in organizational management unless you fully accept that control
** use separate work and personal devices
** audit management profiles regularly
** remove management enrollment when you leave the organization

== Microsoft Intune ==
Intune is one of the best-known MDM / endpoint management platforms. It is primarily an administrative control platform, not a secret hacking tool, so privacy concerns here are mostly about organizational oversight, policy enforcement, and the power to inspect or control managed devices rather than covert intrusion.<ref>[https://learn.microsoft.com/en-us/intune/privacy/ Microsoft Intune privacy and personal data]</ref>

* Vendor:
** [[Microsoft]]
* Country of origin:
** United States
* Type:
** mobile device management / endpoint management
* General description:
** Cloud-based platform for managing and securing organizational devices, apps, and access.
* Publicly reported government / public-sector users:
** broadly used by government and enterprise customers; public-sector adoption is common but varies widely
* Notable privacy / abuse stories:
** no single comparably famous covert-surveillance scandal was identified in this review
** the main concern is administrative overreach, employee monitoring, and excessive organizational control rather than clandestine exploitation
* Avoidance / mitigation:
** avoid using Intune-managed devices for truly private personal life
** read device-management prompts carefully
** assume employer-managed devices are not private

----

= Network and Bulk Data Analysis Platforms =
These platforms generally do not hack phones themselves. Instead, they fuse, search, correlate, and operationalize data gathered from many other systems.

== Gotham (Palantir Technologies) ==
Gotham is Palantir’s best-known government-facing platform. It is used for integrating datasets and building link-analysis and operational views across people, devices, places, events, and cases.<ref>[https://www.palantir.com/platforms/gotham/ Palantir Gotham]</ref>

* Vendor:
** [[Palantir Technologies]]
* Country of origin:
** United States
* Type:
** data fusion / intelligence analysis platform
* General description:
** Platform for combining many datasets and performing link analysis, geospatial analysis, investigative correlation, and operational planning.<ref>[https://www.palantir.com/platforms/gotham/ Palantir Gotham]</ref>
* Publicly reported government users:
** ICE
** other U.S. federal defense and intelligence customers
** law-enforcement and military customers in the United States and allied countries<ref>[https://www.palantir.com/ Palantir home]</ref><ref>[https://www.aclu.org/news/privacy-technology/palantir-deportation-roundup ACLU on Palantir and ICE]</ref>
* Notable privacy / abuse stories:
** longstanding criticism over Palantir’s role in ICE immigration enforcement and deportation operations<ref>[https://www.aclu.org/news/privacy-technology/palantir-deportation-roundup ACLU: ELITE and immigration enforcement]</ref>
** reporting and criticism over police and intelligence surveillance applications<ref>[https://www.theguardian.com/world/2013/feb/07/palantir-big-data-gchq-nsa Guardian on Palantir and surveillance]</ref>
* Avoidance / mitigation:
** reduce the amount of data you feed into third-party services
** minimize account sprawl and cross-linkable identity trails
** prefer providers that collect less and share less
** assume data disclosed to one system may later be fused with other records

== Foundry (Palantir Technologies) ==
Foundry is Palantir’s enterprise data platform and is increasingly part of the same broader ecosystem of data integration and decision support.

* Vendor:
** [[Palantir Technologies]]
* Country of origin:
** United States
* Type:
** enterprise data integration and analytics platform
* General description:
** Platform for ingesting, modeling, transforming, and operationalizing large organizational datasets.<ref>[https://www.palantir.com/platforms/foundry/ Palantir Foundry]</ref>
* Publicly reported government users:
** Palantir sells broadly into government and commercial sectors<ref>[https://www.palantir.com/ Palantir home]</ref>
* Notable privacy / abuse stories:
** privacy concerns here usually relate to integration of large datasets into operational decision systems rather than direct hacking
* Avoidance / mitigation:
** reduce voluntary data disclosure and avoid unnecessary centralized data collection

== Apollo (Palantir Technologies) ==
Apollo is Palantir’s deployment and orchestration platform.

* Vendor:
** [[Palantir Technologies]]
* Country of origin:
** United States
* Type:
** deployment / infrastructure control platform
* General description:
** Platform used to deploy and manage Palantir software across cloud, on-premises, and sensitive environments.<ref>[https://www.palantir.com/platforms/ Palantir platforms]</ref>
* Publicly reported government users:
** deployed as part of Palantir’s broader government stack
* Notable privacy / abuse stories:
** controversy is generally derivative of the larger Palantir ecosystem rather than Apollo alone
* Avoidance / mitigation:
** this is not a personal-device threat in the same way spyware is; the relevant defense is limiting data aggregation and institutional overreach upstream

== AIP (Palantir Technologies) ==
AIP is Palantir’s artificial-intelligence platform layered onto its broader data stack.

* Vendor:
** [[Palantir Technologies]]
* Country of origin:
** United States
* Type:
** AI / LLM operational platform
* General description:
** Platform for connecting AI systems to operational data and workflows.<ref>[https://www.palantir.com/platforms/aip/ Palantir AIP]</ref>
* Publicly reported government users:
** U.S. defense and intelligence related integrations have been publicly promoted, including collaboration with Microsoft for government cloud environments<ref>[https://www.barrons.com/articles/palantir-microsoft-stock-ai-cloud-azure-079a3311 Barron's on Palantir and Microsoft government cloud AI]</ref>
* Notable privacy / abuse stories:
** the main concern is scaled automated decision support over sensitive datasets
* Avoidance / mitigation:
** resist unnecessary centralized profiling and automated triage systems where possible

== Metropolis (Palantir Technologies) ==
Metropolis was an older Palantir finance-oriented platform and is largely superseded in current product discussions.

* Vendor:
** [[Palantir Technologies]]
* Country of origin:
** United States
* Type:
** legacy analytics platform
* General description:
** Older Palantir platform associated with financial-data analysis and related investigative workflows.
* Publicly reported government users:
** not a primary current focus in public reporting
* Notable privacy / abuse stories:
** not a major current standalone privacy story compared with Gotham or broader Palantir deployments
* Avoidance / mitigation:
** same general Palantir-oriented mitigation applies: reduce data centralization and linkability

----

= Surveillance =
This section covers camera and sensor systems that watch public or semi-public spaces and build persistent records of movement.

== CCTV / Flock Cameras ==
Camera networks, especially those tied to automated license plate recognition (ALPR), can create large searchable movement histories. These systems are increasingly networked across municipalities, private neighborhoods, apartment complexes, retailers, schools, and police systems.<ref>[https://www.eff.org/pages/automated-license-plate-readers-alpr EFF: ALPR]</ref><ref>[https://www.aclu.org/news/privacy-technology/flock-ceo-goes-ballistic ACLU on Flock Safety]</ref>

=== Flock Safety ===
Flock Safety is one of the most visible ALPR / camera-network vendors in the United States. The core privacy concern is not just the camera itself, but the searchable, shareable data network around it.<ref>[https://www.eff.org/deeplinks/2025/12/effs-investigations-expose-flock-safetys-surveillance-abuses-2025-review EFF on Flock investigations]</ref>

* Vendor:
** [[Flock Safety]]
* Country of origin:
** United States
* Type:
** ALPR / camera surveillance network
* General description:
** Networked camera platform used by police and private entities to capture and search vehicle and movement data.
* Publicly reported government users:
** numerous local police departments in the United States
** concerns about federal access or downstream access by immigration-related agencies have featured heavily in recent reporting<ref>[https://www.aclu.org/news/privacy-technology/flock-massachusetts-and-updates ACLU on Flock data sharing]</ref><ref>[https://www.sfchronicle.com/bayarea/article/mountain-view-police-flock-license-plate-readers-21330156.php San Francisco Chronicle: Mountain View turns off Flock readers]</ref>
* Notable privacy / abuse stories:
** Mountain View police shut down Flock readers after alleging unauthorized federal access<ref>[https://www.sfchronicle.com/bayarea/article/mountain-view-police-flock-license-plate-readers-21330156.php SF Chronicle: unauthorized federal use]</ref>
** ACLU and EFF have repeatedly documented Flock-related concerns around mass driver surveillance, data sharing, and activist / immigrant tracking concerns<ref>[https://www.aclu.org/news/privacy-technology/flock-ceo-goes-ballistic ACLU on mass driver surveillance]</ref><ref>[https://www.aclu.org/news/privacy-technology/flock-pushback ACLU on anti-immigrant use concerns]</ref><ref>[https://www.eff.org/deeplinks/2025/12/effs-investigations-expose-flock-safetys-surveillance-abuses-2025-review EFF on Flock abuses]</ref>
* Avoidance / mitigation:
** do not assume driving is anonymous
** avoid building predictable travel routines when privacy matters
** remember that public-space avoidance is limited and often impractical
** use the smallest possible identity footprint in travel-related services

----

= Operating Systems =
Operating systems matter because they define how much control the user actually has over the hardware, software, trust chain, telemetry, and repairability of the device. Closed platforms can be strongly secured against some threats while still denying the owner meaningful control.

== Mainstream Closed Platforms ==
These platforms dominate the consumer market, but they are not ideal choices if your priorities are transparency, auditability, local control, and resistance to centralized vendor power.

=== iOS ===
iOS is a tightly controlled Apple platform with strong sandboxing and code-signing, but limited owner control over the device and software stack.<ref>[https://support.apple.com/guide/security/welcome/web Apple Platform Security]</ref>

=== Android ===
Android is more open in theory than iOS, but most consumer deployments are still heavily mediated by Google, OEMs, carriers, locked bootloaders, and proprietary components.<ref>[https://source.android.com/security Android security]</ref>

=== Microsoft Windows ===
Windows remains dominant on desktop systems, but from a privacy and autonomy perspective it is not an ideal platform for users who want auditable, owner-controlled systems.

== Recommendation ==
If your priority is autonomy, transparency, and minimizing dependence on centralized proprietary control, it is reasonable to avoid these platforms where possible and use open-source systems instead.

== Better Open Alternatives ==
Open-source alternatives vary by use case and threat model.

* General Linux distributions:
** Debian
** Arch Linux
** Fedora
** other well-maintained Linux systems
* Security- or privacy-focused systems:
** [[Tails (operating system)|Tails]] for amnesic, anonymity-oriented sessions<ref>[https://tails.net/ Tails]</ref>
** [[Qubes OS]] for compartmentalization and strong separation between activities<ref>[https://www.qubes-os.org/ Qubes OS]</ref>
** [[GrapheneOS]] for a hardened Android-based mobile platform on supported Pixel devices<ref>[https://grapheneos.org/ GrapheneOS]</ref>

== Avoidance / mitigation ==
No operating system is magic. Still, these steps generally help:
* use open-source systems where practical
* keep the system lean
* avoid unnecessary proprietary services
* separate identities and tasks across devices or compartments
* prefer reproducible, auditable software where available

----

= Companies =
This section lists the companies behind the systems above. In most cases, the company is not merely a neutral manufacturer: its business model, customer base, and sales practices shape how the underlying technology is used.

== Palantir Technologies ==
Palantir Technologies is a U.S. software company focused on large-scale data integration, operational analytics, and decision-support platforms for government and commercial customers.<ref>[https://www.palantir.com/ Palantir]</ref>

* Country of origin:
** United States
* Main products:
** Gotham
** Foundry
** Apollo
** AIP
** Metropolis (legacy)
* General concern:
** enabling governments and institutions to fuse large datasets into actionable targeting, enforcement, or operational systems

== Cellebrite ==
Cellebrite is an Israeli digital-forensics company known for phone extraction and investigative analysis products used by law enforcement and other government customers.<ref>[https://cellebrite.com/en/ufed/ Cellebrite UFED]</ref>

* Country of origin:
** Israel
* Main products:
** UFED and related extraction / analysis tools
* General concern:
** making it easier for states to extract and operationalize intimate data from seized devices

== Grayshift ==
Grayshift is a U.S. mobile-device forensics company known primarily for GrayKey.<ref>[https://www.grayshift.com/ Grayshift]</ref>

* Country of origin:
** United States
* Main products:
** GrayKey
* General concern:
** eroding the practical security assumptions people have about locked phones

== Paragon Solutions ==
Paragon Solutions is an Israeli spyware vendor whose Graphite product became a major public controversy after reporting from WhatsApp, Reuters, and Citizen Lab in 2025.<ref>[https://www.reuters.com/technology/cybersecurity/metas-whatsapp-says-israeli-spyware-company-paragon-targeted-scores-users-2025-01-31/ Reuters: Paragon targeted WhatsApp users]</ref>

* Country of origin:
** Israel
* Main products:
** Graphite
* General concern:
** covert compromise of phones by government clients, including attacks on civil society

== NSO Group ==
NSO Group is an Israeli spyware company best known for Pegasus and for the global scandals surrounding its government clients.<ref>[https://www.reuters.com/technology/cybersecurity/us-judge-finds-israels-nso-group-liable-hacking-whatsapp-lawsuit-2024-12-21/ Reuters: NSO liable]</ref>

* Country of origin:
** Israel
* Main products:
** Pegasus
* General concern:
** repeated documented use of mercenary spyware against journalists, activists, and political targets

== FinFisher GmbH / related FinFisher entities ==
FinFisher is associated with commercial spyware long tied to authoritarian surveillance and human-rights abuses.<ref>[https://www.amnesty.org/en/latest/research/2020/09/german-made-finspy-spyware-found-in-egypt-and-mac-and-linux-versions-revealed/ Amnesty: FinSpy]</ref>

* Country of origin:
** Germany, with historical reporting also referencing UK-linked Gamma entities
* Main products:
** FinSpy / FinFisher suite
* General concern:
** export and deployment of spyware to abusive state actors

== Microsoft ==
Microsoft is a U.S. technology company whose Intune platform is included here because organizational control over endpoints can become invasive even when framed as routine administration.

* Country of origin:
** United States
* Main products relevant here:
** Intune
* General concern:
** institutional control, monitoring, and policy enforcement over managed devices

== L3Harris Technologies / Harris Corporation ==
Harris, now part of L3Harris, is the U.S. defense contractor most closely associated with the StingRay name.

* Country of origin:
** United States
* Main products relevant here:
** StingRay and related cell-site simulator family
* General concern:
** dragnet-style device identification and location tracking of phones in an area

== Flock Safety ==
Flock Safety is a U.S. camera-network and ALPR company whose systems have become a flashpoint in debates over mass movement tracking.

* Country of origin:
** United States
* Main products relevant here:
** ALPR / camera networks
* General concern:
** large searchable databases of public movement and retroactive location histories

----

= See Also =
Related subjects that help place these systems in a broader context.

* [[Mass surveillance]]
* [[Digital forensics]]
* [[Lawful interception]]
* [[Zero-day exploit]]
* [[Automated license plate recognition]]
* [[Mobile device management]]
* [[Link analysis]]
* [[Data broker]]

----

= References =
This page relies heavily on reporting and research from the following organizations, among others:

* Electronic Frontier Foundation – https://www.eff.org
* ACLU – https://www.aclu.org
* Citizen Lab – https://citizenlab.ca
* Amnesty International – https://www.amnesty.org
* Reuters – https://www.reuters.com
* The Guardian – https://www.theguardian.com

Privacy-Invading Systems and How to Avoid Them

2026-04-21T15:26:02Z

Jeremy:

= Surveillance and Digital Monitoring Systems =
This page documents publicly known surveillance, device access, data extraction, monitoring, and analytics systems used by governments, police, intelligence services, and corporations. It also includes general notes on detection, likely indicators, and high-level defensive practices.

Many of these products are marketed for law enforcement, intelligence, enterprise administration, or “public safety.” In practice, they have repeatedly raised major civil-liberties and privacy concerns, especially when used in secret, without meaningful oversight, or against journalists, dissidents, immigrants, protesters, and political opponents.

== Scope and Caveats ==
This page is an overview, not an exhaustive catalogue. Some systems have extensive public documentation, while others are documented mainly through investigative journalism, court records, procurement records, leaked materials, or technical analysis by groups like Citizen Lab, Amnesty International, EFF, ACLU, and major news organizations.

The fact that a product appears here does ''not'' mean every use is unlawful, nor does it mean all publicly alleged capabilities are always available in every deployment. Some vendors deliberately keep technical details secret, and some governments hide or mischaracterize how these tools are used.

----

= Threat Model: How These Systems Fit Together =
Modern surveillance usually operates as a pipeline rather than a single tool. Understanding the layers makes it easier to understand where risk comes from and where defensive measures help.

{| class="wikitable"
! Layer
! Description
! Example systems
|-
| Device exploitation
| Direct compromise of a phone or computer
| Pegasus, Graphite, FinSpy
|-
| Device access / extraction
| Physical or forensic access to a seized device
| Cellebrite UFED, GrayKey
|-
| Interception / location
| Locating or identifying devices via network impersonation or network data
| Stingray / cell-site simulators
|-
| Aggregation
| Pulling many data sources together into one place
| Telecom logs, law-enforcement databases, brokered data
|-
| Analysis / targeting
| Correlating people, devices, places, events, and patterns
| Gotham, Foundry, AIP
|-
| Operational action
| Enforcement, deportation, arrests, raids, targeting, watchlisting, or battlefield use
| Police, intelligence, border agencies, military units
|}

A key point is that some of the most controversial platforms do ''not'' break into phones directly; instead, they ingest and analyze data gathered by other tools or agencies.<ref>[https://www.palantir.com/platforms/ Palantir platforms]</ref><ref>[https://www.palantir.com/platforms/gotham/ Palantir Gotham]</ref>

----

= Detection and Indicators =
This section covers general signs that a device, account, or movement pattern may be under surveillance. In many cases, especially with high-end spyware, there may be ''no obvious visible indicator at all''.<ref>[https://www.amnesty.org/en/latest/research/2021/07/forensic-methodology-report-how-to-catch-nso-groups-pegasus/ Amnesty International Pegasus forensic methodology]</ref><ref>[https://citizenlab.ca/research/first-forensic-confirmation-of-paragons-ios-mercenary-spyware-finds-journalists-targeted/ Citizen Lab: first forensic confirmation of Paragon spyware]</ref>

== General Device Indicators ==
A compromised or monitored device may show:
* unusual battery drain
* unexplained heat when idle
* abnormal crashes or reboots
* unexpected network usage
* new profiles, certificates, or management agents
* strange permission prompts or security warnings
* missing or altered messages, settings, or call logs

These are weak indicators on their own. Normal software bugs and bad apps can cause similar symptoms. Sophisticated spyware may leave almost no user-visible signs.<ref>[https://www.amnesty.org/en/latest/research/2021/07/forensic-methodology-report-how-to-catch-nso-groups-pegasus/ Amnesty International Pegasus forensic methodology]</ref>

== Indicators of Mobile Device Management / Administrative Control ==
A phone may be under administrative control if you see:
* a device management profile
* work container / managed app warnings
* restrictions on installing apps or changing settings
* remote wipe or compliance notices
* enterprise certificates or “managed by organization” messages

On iPhone and iPad, check settings related to device management profiles. On Android, check device admin apps, work profiles, and enterprise enrollment state.<ref>[https://learn.microsoft.com/en-us/intune/privacy/ Microsoft Intune privacy and personal data]</ref>

== Indicators of Forensic Access After Seizure ==
After a device has been seized or handled out of your control, warning signs can include:
* changed lock settings
* newly trusted computers or accessories
* modified biometric enrollment
* unexplained recent unlocks
* logs or timestamps inconsistent with your own use
* unusual files or configuration changes after return

Forensic extraction often leaves fewer obvious indicators than malware, especially if the device was unlocked or physically controlled by authorities.

== Indicators of Cell-Site Simulator / IMSI Catcher Use ==
Reliable end-user detection is difficult. Possible signals sometimes discussed by researchers and defenders include:
* sudden downgrade to weaker network modes
* unstable cellular service in a specific area
* unusual baseband / network behavior
* repeated attach / detach events
* suspicious concentration of police or surveillance vehicles during protests or targeted operations

These are not definitive. Consumer devices generally do not expose enough radio-layer detail for dependable confirmation.<ref>[https://www.eff.org/pages/cell-site-simulatorsimsi-catchers EFF: Cell-site simulators / IMSI catchers]</ref><ref>[https://www.aclu.org/issues/privacy-technology/surveillance-technologies/stingray-tracking-devices ACLU: Stingray tracking devices]</ref>

== Indicators of Camera / Vehicle Tracking Networks ==
You may be in a dense ALPR / camera surveillance area if you see:
* fixed roadside camera clusters at entrances, exits, intersections, apartment complexes, retail lots, and neighborhood choke points
* private “safety” camera branding
* police integration with neighborhood or private camera systems
* public records or council documents showing ALPR deployment

These systems often create retrospective travel histories, even when they are not continuously watched in real time.<ref>[https://www.eff.org/pages/automated-license-plate-readers-alpr EFF: Automated license plate readers]</ref><ref>[https://www.aclu.org/news/privacy-technology/flock-ceo-goes-ballistic ACLU on Flock Safety and mass driver surveillance]</ref>

== What To Do If You Suspect Surveillance ==
If compromise is plausible:
* stop assuming the device is trustworthy
* move sensitive conversations to a different device that has not been exposed
* preserve evidence before wiping or changing too much
* document dates, detentions, border crossings, suspicious messages, and unusual behavior
* seek professional forensic help if the stakes are high
* consider that your contacts may also be targeted

For high-risk users such as activists, journalists, lawyers, researchers, and political organizers, the safest assumption is often that a suspected device should not be trusted until properly examined.<ref>[https://citizenlab.ca/ Citizen Lab]</ref><ref>[https://ssd.eff.org/ Surveillance Self-Defense | EFF]</ref>

----

= Mobile Device Interception =
This category covers systems that identify, locate, or interact with mobile devices over the air, usually by imitating network infrastructure or exploiting the phone’s trust in the cellular network.

== Cell-Site Simulators (IMSI Catchers) ==
Cell-site simulators impersonate legitimate cell towers so nearby phones connect to them. This can expose device identifiers and help locate a target device. Public reporting and civil-liberties litigation have shown these tools have been used by federal, state, and local agencies in the United States and elsewhere.<ref>[https://www.eff.org/pages/cell-site-simulatorsimsi-catchers EFF: Cell-site simulators / IMSI catchers]</ref><ref>[https://epic.org/documents/epic-v-fbi-stingray-cell-site-simulator/ EPIC: Stingray / cell-site simulator records]</ref>

=== Stingray ===
StingRay is the best-known brand name for a class of cell-site simulators. The name is often used generically for similar devices.

* Vendor:
* [[Harris Corporation]] / [[L3Harris Technologies]]
* Country of origin:
* United States
* Type:
* IMSI catcher / cell-site simulator
* General description:
* A surveillance device that impersonates a cellular tower so nearby phones connect to it, revealing device identifiers and assisting in location tracking.<ref>[https://www.eff.org/pages/cell-site-simulatorsimsi-catchers EFF: Cell-site simulators / IMSI catchers]</ref><ref>[https://www.cato.org/policy-analysis/stingray-new-frontier-police-surveillance Cato: Stingray: A New Frontier in Police Surveillance]</ref>
* Capabilities:
* identifies nearby devices via IMSI/IMEI
* assists in locating a device
* can affect all phones in range, not only the target
* Publicly reported government users:
* FBI
* DEA
* CBP / ICE
* numerous state and local police agencies in the United States
* reported use by agencies in Canada and the United Kingdom as well<ref>[https://epic.org/documents/epic-v-fbi-stingray-cell-site-simulator/ EPIC: FBI use of cell-site simulators]</ref><ref>[https://www.aclu.org/cases?issue=stingray-tracking-devices ACLU stingray cases]</ref><ref>[https://www.eff.org/deeplinks/2016/04/eff-and-aclu-expose-governments-secret-stingray-use-wisconsin-case EFF on secret stingray use in Wisconsin case]</ref>
* Notable privacy / abuse stories:
* a federal judge in New York suppressed evidence after DEA used a stingray without a warrant<ref>[https://www.reuters.com/article/technology/in-first-us-judge-throws-out-cell-phone-stingray-evidence-idUSKCN0ZS2VG/ Reuters: judge throws out stingray evidence]</ref>
* ACLU and EFF litigation exposed secret stingray use that had not been disclosed to the court or defendant<ref>[https://www.eff.org/deeplinks/2016/04/eff-and-aclu-expose-governments-secret-stingray-use-wisconsin-case EFF on secret stingray use]</ref>
* Avoidance / mitigation:
* assume cellular metadata is exposed to the network operator and potentially to surveillance tools
* prefer end-to-end encrypted apps for content confidentiality
* disable radios when not needed
* avoid carrying a primary phone to highly sensitive meetings if exposure would be severe
* understand that reliable consumer-side detection is difficult

----

= Mobile Device Access =
This category covers tools used after a device has been seized, borrowed, detained, confiscated, or otherwise physically controlled by another party.

== Cellebrite (UFED) ==
Cellebrite’s UFED line is one of the best-known mobile device extraction tool families used in digital forensics. The company markets its tools to law enforcement and public-sector investigators, and public reporting has repeatedly tied its products to controversial extractions involving activists, protesters, and journalists.<ref>[https://cellebrite.com/en/ufed/ Cellebrite UFED]</ref><ref>[https://www.reuters.com/world/georgia-purchase-israeli-data-extraction-tech-amid-street-protest-crackdown-2025-02-27/ Reuters: Georgia and Cellebrite procurement]</ref>

* Vendor:
* [[Cellebrite]]
* Country of origin:
* Israel<ref>[https://www.reuters.com/world/georgia-purchase-israeli-data-extraction-tech-amid-street-protest-crackdown-2025-02-27/ Reuters: Israeli technology firm Cellebrite]</ref>
* Type:
* mobile device extraction / digital forensics
* General description:
* Commercial forensic platform used to extract and analyze data from phones and other digital devices.<ref>[https://cellebrite.com/en/ufed/ Cellebrite UFED]</ref>
* Capabilities:
* logical and physical extraction, depending on device and condition
* recovery of messages, contacts, app data, files, and other records
* analysis and review of extracted device data
* Publicly reported government users:
* FBI and other U.S. federal agencies
* police and security agencies in Serbia
* authorities in Georgia
* authorities in Jordan
* many other law-enforcement customers globally<ref>[https://www.reuters.com/technology/encrypted-chat-app-signal-reveals-flaws-cellebrite-equipment-2021-04-21/ Reuters on Cellebrite equipment]</ref><ref>[https://www.reuters.com/world/georgia-purchase-israeli-data-extraction-tech-amid-street-protest-crackdown-2025-02-27/ Reuters: Georgia procurement]</ref><ref>[https://www.reuters.com/technology/cybersecurity/serbia-used-israeli-firms-tech-enable-spy-campaign-amnesty-says-2024-12-16/ Reuters: Serbia and Cellebrite]</ref><ref>[https://www.theguardian.com/world/2026/jan/22/jordan-israeli-spyware-gaza-activists Guardian: Jordan and Cellebrite]</ref>
* Notable privacy / abuse stories:
* Amnesty and Reuters reported Serbian authorities used Cellebrite tools during detentions tied to surveillance of activists and journalists<ref>[https://www.reuters.com/technology/cybersecurity/serbia-used-israeli-firms-tech-enable-spy-campaign-amnesty-says-2024-12-16/ Reuters: Serbia used Israeli firm's tech]</ref>
* Reuters reported Georgia renewed contracts for Cellebrite tools amid protest crackdowns<ref>[https://www.reuters.com/world/georgia-purchase-israeli-data-extraction-tech-amid-street-protest-crackdown-2025-02-27/ Reuters: Georgia procurement]</ref>
* Citizen Lab / Guardian reporting tied Cellebrite tools to phone extractions of pro-Gaza activists in Jordan<ref>[https://www.theguardian.com/world/2026/jan/22/jordan-israeli-spyware-gaza-activists Guardian: Jordan used Israeli phone-cracking tool]</ref>
* Avoidance / mitigation:
* use a long alphanumeric passcode
* disable biometric unlock when coercion risk is high
* power down devices before border crossings, detention risk, or seizure risk
* keep full-disk encryption enabled
* do not surrender your primary device unlocked if you can lawfully avoid it
* separate high-risk communications from your everyday phone

----

= Mobile Device "Forensic" Tools =
This category covers specialized systems aimed at bypassing device protections and extracting data from phones, often after physical seizure.

== Grayshift (GrayKey) ==
GrayKey is a mobile-device access and extraction system used by law-enforcement and government customers. Public reporting and vendor materials indicate wide deployment across multiple countries, though details of current capabilities vary by device model and software version.<ref>[https://www.grayshift.com/ Grayshift]</ref><ref>[https://en.wikipedia.org/wiki/Grayshift Wikipedia: Grayshift]</ref>

* Vendor:
* [[Grayshift]]
* Country of origin:
* United States<ref>[https://en.wikipedia.org/wiki/Grayshift Wikipedia: Grayshift]</ref>
* Type:
* phone unlocking / forensic access tool
* General description:
* Commercial device used to attempt access to locked smartphones and support forensic extraction workflows.
* Capabilities:
* attempts to unlock supported devices
* extracts or helps acquire device data
* integrates into forensic workflows
* Publicly reported government users:
* FBI
* local police in the United States
* police and government defense agencies in multiple countries including the United Kingdom, France, Germany, Sweden, Spain, and Italy according to public reporting on the company’s own claims<ref>[https://en.wikipedia.org/wiki/Grayshift Wikipedia: Grayshift]</ref>
* Notable privacy / abuse stories:
* sustained secrecy around agency use and public-records fights over GrayKey procurement and deployment<ref>[https://www.techdirt.com/2021/08/17/redaction-failure-shows-grayshift-is-swearing-cops-to-secrecy-about-phone-cracking-tech/ Techdirt on GrayKey secrecy]</ref>
* continuing controversy around government access to phones that users believe are strongly protected
* Avoidance / mitigation:
* use a long passphrase rather than a short PIN
* keep the device updated
* configure USB restricted mode or equivalent protections
* power down the device if seizure risk is imminent
* treat any device returned after custody as potentially exposed

== Graphite ==
Graphite is a commercial spyware product made by Paragon Solutions. Public technical reporting expanded significantly in 2025, when WhatsApp and Citizen Lab publicly described attacks and forensic findings involving Paragon’s spyware against journalists and civil-society targets.<ref>[https://www.reuters.com/technology/cybersecurity/metas-whatsapp-says-israeli-spyware-company-paragon-targeted-scores-users-2025-01-31/ Reuters: WhatsApp says Paragon targeted users]</ref><ref>[https://citizenlab.ca/research/first-forensic-confirmation-of-paragons-ios-mercenary-spyware-finds-journalists-targeted/ Citizen Lab: first forensic confirmation of Paragon spyware]</ref>

* Vendor:
* [[Paragon Solutions]]
* Country of origin:
* Israel<ref>[https://www.reuters.com/technology/cybersecurity/metas-whatsapp-says-israeli-spyware-company-paragon-targeted-scores-users-2025-01-31/ Reuters: Israeli spyware company Paragon]</ref><ref>[https://www.reuters.com/markets/deals/israeli-spyware-firm-paragon-acquired-by-us-investment-group-report-says-2024-12-16/ Reuters: Paragon acquired by U.S. investment group]</ref>
* Type:
* mercenary spyware / targeted surveillance platform
* General description:
* Commercial spyware reportedly sold to government customers for covert access to mobile devices and data in encrypted apps.<ref>[https://citizenlab.ca/research/a-first-look-at-paragons-proliferating-spyware-operations/ Citizen Lab: first look at Paragon operations]</ref>
* Capabilities:
* covert device surveillance
* access to data on targeted phones
* reported access to encrypted-app data once the device is compromised
* Publicly reported government users:
* Italy acknowledged use of Paragon systems in a political scandal context
* Citizen Lab reported links to deployments associated with multiple democratic-state customers and identified infrastructure / cases in several countries<ref>[https://www.reuters.com/sustainability/society-equity/italy-has-ended-spyware-contract-with-paragon-parliamentary-document-shows-2025-06-09/ Reuters: Italy and Paragon part ways]</ref><ref>[https://citizenlab.ca/research/a-first-look-at-paragons-proliferating-spyware-operations/ Citizen Lab: Paragon operations]</ref>
* Notable privacy / abuse stories:
* WhatsApp said Paragon targeted scores of users including journalists and civil-society members<ref>[https://www.reuters.com/technology/cybersecurity/metas-whatsapp-says-israeli-spyware-company-paragon-targeted-scores-users-2025-01-31/ Reuters: WhatsApp and Paragon]</ref>
* Italy’s Paragon relationship became a major public scandal after allegations of phones of critics and activists being hacked<ref>[https://www.reuters.com/sustainability/society-equity/italy-has-ended-spyware-contract-with-paragon-parliamentary-document-shows-2025-06-09/ Reuters: Italy ended contract with Paragon]</ref>
* Citizen Lab published the first forensic confirmation of Paragon’s iOS spyware targeting journalists<ref>[https://citizenlab.ca/research/first-forensic-confirmation-of-paragons-ios-mercenary-spyware-finds-journalists-targeted/ Citizen Lab forensic confirmation]</ref>
* Avoidance / mitigation:
* keep iOS / Android fully updated
* reduce attack surface by disabling unnecessary services and apps
* be highly cautious with unsolicited files, group invites, and messages
* for high-risk users, consider hardened platforms and rapid incident response plans
* understand that sophisticated zero-click spyware may leave little visible evidence

----

= Commercial Spyware =
This section covers mercenary spyware sold by private vendors to government clients. These products are among the most dangerous classes of digital surveillance because they can turn a target’s own device into the surveillance platform.

== NSO Group (Pegasus) ==
Pegasus is one of the most widely documented commercial spyware systems in the world. Public reporting, lawsuits, and research by Amnesty, Citizen Lab, Reuters, and the Pegasus Project have linked it to surveillance of journalists, activists, lawyers, political opposition, diplomats, and government officials in many countries.<ref>[https://www.reuters.com/world/pegasus-spyware-scandal-years-questions-no-answers-mexico-victims-2021-08-09/ Reuters: Pegasus scandal]</ref><ref>[https://www.amnesty.org/en/latest/press-release/2021/07/the-pegasus-project/ Amnesty: Pegasus Project]</ref><ref>[https://www.reuters.com/technology/cybersecurity/us-judge-finds-israels-nso-group-liable-hacking-whatsapp-lawsuit-2024-12-21/ Reuters: NSO liable in WhatsApp case]</ref>

* Vendor:
* [[NSO Group]]
* Country of origin:
* Israel<ref>[https://www.reuters.com/technology/cybersecurity/us-judge-finds-israels-nso-group-liable-hacking-whatsapp-lawsuit-2024-12-21/ Reuters: Israel's NSO Group]</ref>
* Type:
* advanced mobile spyware
* General description:
* Covert spyware platform used to compromise phones and gain access to communications, files, sensors, and location data.
* Capabilities:
* full or near-full device compromise on supported targets
* access to messages, microphone, camera, photos, files, and location
* zero-click exploitation in some operations
* Publicly reported government users:
* public reporting has linked likely clients or deployments to countries including Mexico, Saudi Arabia, Hungary, India, Spain, Poland, El Salvador, and others<ref>[https://www.theguardian.com/world/2021/jul/18/revealed-leak-uncovers-global-abuse-of-cyber-surveillance-weapon-nso-group-pegasus Guardian: Pegasus Project investigation]</ref><ref>[https://www.reuters.com/world/americas/mexico-probes-whether-pegasus-spyware-purchases-were-legal-2022-10-17/ Reuters: Mexico Pegasus purchases]</ref><ref>[https://www.reuters.com/technology/spain-closes-pegasus-spyware-probe-again-saying-israel-has-not-responded-2026-01-22/ Reuters: Spain Pegasus probe]</ref>
* Notable privacy / abuse stories:
* Pegasus Project reporting on widespread targeting of journalists, activists, and political figures<ref>[https://www.amnesty.org/en/latest/press-release/2021/07/the-pegasus-project/ Amnesty: Pegasus Project]</ref><ref>[https://www.theguardian.com/world/2021/jul/18/revealed-leak-uncovers-global-abuse-of-cyber-surveillance-weapon-nso-group-pegasus Guardian: leaked global abuse investigation]</ref>
* Reuters on Mexico’s long-running Pegasus scandal<ref>[https://www.reuters.com/world/pegasus-spyware-scandal-years-questions-no-answers-mexico-victims-2021-08-09/ Reuters: Mexico victims]</ref>
* Amnesty / Citizen Lab / Reuters on Pegasus found on phones of Palestinian rights workers<ref>[https://www.reuters.com/world/amnesty-says-nsos-pegasus-used-hack-phones-palestinian-rights-workers-2021-11-08/ Reuters: Palestinian rights workers]</ref>
* U.S. court findings against NSO in the WhatsApp hacking case<ref>[https://www.reuters.com/technology/cybersecurity/us-judge-finds-israels-nso-group-liable-hacking-whatsapp-lawsuit-2024-12-21/ Reuters: NSO liable]</ref>
* Avoidance / mitigation:
* apply updates immediately
* use hardened modes such as Lockdown Mode where available
* reduce dependency on a single always-carried phone
* keep a separate low-risk device for routine life if your threat model is serious
* if you are high-risk, plan for forensic review rather than relying on visible signs

== FinFisher (FinSpy) ==
FinSpy is a long-running commercial spyware suite whose deployments have been tracked by Citizen Lab, Amnesty, EFF, and others. It has repeatedly appeared in contexts involving authoritarian abuse and surveillance of dissidents.<ref>[https://www.amnesty.org/en/latest/research/2020/09/german-made-finspy-spyware-found-in-egypt-and-mac-and-linux-versions-revealed/ Amnesty: German-made FinSpy in Egypt]</ref><ref>[https://citizenlab.ca/research/mapping-finfishers-continuing-proliferation/ Citizen Lab: Mapping FinFisher proliferation]</ref>

* Vendor:
* [[FinFisher GmbH]] / historically associated with Gamma International branding in earlier reporting
* Country of origin:
* Germany / United Kingdom in historical reporting depending on the corporate entity referenced<ref>[https://www.amnesty.org/en/latest/research/2020/09/german-made-finspy-spyware-found-in-egypt-and-mac-and-linux-versions-revealed/ Amnesty: Munich-based FinFisher GmbH]</ref><ref>[https://citizenlab.ca/research/from-bahrain-with-love-finfishers-spy-kit-exposed/ Citizen Lab: Gamma International / FinFisher]</ref>
* Type:
* spyware / remote surveillance malware suite
* General description:
* Commercial malware suite used by governments for remote surveillance of computers and phones.
* Capabilities:
* remote monitoring
* data exfiltration
* surveillance of communications and activity
* Publicly reported government users:
* Bahrain
* Ethiopia
* United Arab Emirates
* Egypt
* Turkey
* other governments identified through technical and legal reporting<ref>[https://www.amnesty.org/en/latest/research/2020/09/german-made-finspy-spyware-found-in-egypt-and-mac-and-linux-versions-revealed/ Amnesty: FinSpy in Egypt and other countries]</ref><ref>[https://citizenlab.ca/research/mapping-finfishers-continuing-proliferation/ Citizen Lab: FinFisher proliferation]</ref><ref>[https://www.reuters.com/article/world/german-firm-investigated-after-report-of-sending-spyware-to-turkey-idUSKCN1VQ1C9/ Reuters: spyware to Turkey]</ref>
* Notable privacy / abuse stories:
* Citizen Lab’s exposure of FinSpy targeting Bahraini dissidents<ref>[https://citizenlab.ca/research/from-bahrain-with-love-finfishers-spy-kit-exposed/ Citizen Lab: Bahrain with Love]</ref>
* Amnesty on German-made FinSpy found in Egypt, including versions for Mac and Linux<ref>[https://www.amnesty.org/en/latest/research/2020/09/german-made-finspy-spyware-found-in-egypt-and-mac-and-linux-versions-revealed/ Amnesty: FinSpy in Egypt]</ref>
* Reuters on investigations into alleged exports to Turkey<ref>[https://www.reuters.com/article/world/german-firm-investigated-after-report-of-sending-spyware-to-turkey-idUSKCN1VQ1C9/ Reuters: investigated over Turkey]</ref>
* Avoidance / mitigation:
* keep systems minimal
* install software only from trusted sources
* use compartmentalized systems for sensitive work
* preserve suspicious files and messages for forensic analysis
* treat politically timed phishing or attachments as high risk

----

= Enterprise / Consumer Monitoring Software =
This category includes administrative and monitoring platforms that are often deployed with organizational consent. They are not necessarily covert spyware, but they can still enable invasive control and surveillance over managed devices.

== Mobile Device Management (MDM platforms) ==
MDM platforms let an organization enforce policy, deploy apps, restrict functionality, wipe devices remotely, and monitor compliance state. In a work or school setting, these tools can legitimately manage endpoints, but they can also create a level of institutional control many users do not fully understand.<ref>[https://learn.microsoft.com/en-us/intune/privacy/ Microsoft Intune privacy and personal data]</ref>

* General description:
* Centralized management and control platforms for phones, tablets, and computers.
* Common capabilities:
* policy enforcement
* remote wipe
* app deployment
* compliance checks
* restrictions on user actions
* Publicly reported government / public-sector users:
* widely used across public-sector and enterprise environments; exact deployments vary by country and organization
* Known privacy concerns:
* users often do not understand the distinction between managed and unmanaged data
* a managed personal device can expose more administrative control than expected
* Avoidance / mitigation:
* do not enroll a personal device in organizational management unless you fully accept that control
* use separate work and personal devices
* audit management profiles regularly
* remove management enrollment when you leave the organization

== Microsoft Intune ==
Intune is one of the best-known MDM / endpoint management platforms. It is primarily an administrative control platform, not a secret hacking tool, so privacy concerns here are mostly about organizational oversight, policy enforcement, and the power to inspect or control managed devices rather than covert intrusion.<ref>[https://learn.microsoft.com/en-us/intune/privacy/ Microsoft Intune privacy and personal data]</ref>

* Vendor:
* [[Microsoft]]
* Country of origin:
* United States
* Type:
* mobile device management / endpoint management
* General description:
* Cloud-based platform for managing and securing organizational devices, apps, and access.
* Publicly reported government / public-sector users:
* broadly used by government and enterprise customers; public-sector adoption is common but varies widely
* Notable privacy / abuse stories:
* no single comparably famous covert-surveillance scandal was identified in this review
* the main concern is administrative overreach, employee monitoring, and excessive organizational control rather than clandestine exploitation
* Avoidance / mitigation:
* avoid using Intune-managed devices for truly private personal life
* read device-management prompts carefully
* assume employer-managed devices are not private

----

= Network and Bulk Data Analysis Platforms =
These platforms generally do not hack phones themselves. Instead, they fuse, search, correlate, and operationalize data gathered from many other systems.

== Gotham (Palantir Technologies) ==
Gotham is Palantir’s best-known government-facing platform. It is used for integrating datasets and building link-analysis and operational views across people, devices, places, events, and cases.<ref>[https://www.palantir.com/platforms/gotham/ Palantir Gotham]</ref>

* Vendor:
* [[Palantir Technologies]]
* Country of origin:
* United States
* Type:
* data fusion / intelligence analysis platform
* General description:
* Platform for combining many datasets and performing link analysis, geospatial analysis, investigative correlation, and operational planning.<ref>[https://www.palantir.com/platforms/gotham/ Palantir Gotham]</ref>
* Publicly reported government users:
* ICE
* other U.S. federal defense and intelligence customers
* law-enforcement and military customers in the United States and allied countries<ref>[https://www.palantir.com/ Palantir home]</ref><ref>[https://www.aclu.org/news/privacy-technology/palantir-deportation-roundup ACLU on Palantir and ICE]</ref>
* Notable privacy / abuse stories:
* longstanding criticism over Palantir’s role in ICE immigration enforcement and deportation operations<ref>[https://www.aclu.org/news/privacy-technology/palantir-deportation-roundup ACLU: ELITE and immigration enforcement]</ref>
* reporting and criticism over police and intelligence surveillance applications<ref>[https://www.theguardian.com/world/2013/feb/07/palantir-big-data-gchq-nsa Guardian on Palantir and surveillance]</ref>
* Avoidance / mitigation:
* reduce the amount of data you feed into third-party services
* minimize account sprawl and cross-linkable identity trails
* prefer providers that collect less and share less
* assume data disclosed to one system may later be fused with other records

== Foundry (Palantir Technologies) ==
Foundry is Palantir’s enterprise data platform and is increasingly part of the same broader ecosystem of data integration and decision support.

* Vendor:
* [[Palantir Technologies]]
* Country of origin:
* United States
* Type:
* enterprise data integration and analytics platform
* General description:
* Platform for ingesting, modeling, transforming, and operationalizing large organizational datasets.<ref>[https://www.palantir.com/platforms/foundry/ Palantir Foundry]</ref>
* Publicly reported government users:
* Palantir sells broadly into government and commercial sectors<ref>[https://www.palantir.com/ Palantir home]</ref>
* Notable privacy / abuse stories:
* privacy concerns here usually relate to integration of large datasets into operational decision systems rather than direct hacking
* Avoidance / mitigation:
* reduce voluntary data disclosure and avoid unnecessary centralized data collection

== Apollo (Palantir Technologies) ==
Apollo is Palantir’s deployment and orchestration platform.

* Vendor:
* [[Palantir Technologies]]
* Country of origin:
* United States
* Type:
* deployment / infrastructure control platform
* General description:
* Platform used to deploy and manage Palantir software across cloud, on-premises, and sensitive environments.<ref>[https://www.palantir.com/platforms/ Palantir platforms]</ref>
* Publicly reported government users:
* deployed as part of Palantir’s broader government stack
* Notable privacy / abuse stories:
* controversy is generally derivative of the larger Palantir ecosystem rather than Apollo alone
* Avoidance / mitigation:
* this is not a personal-device threat in the same way spyware is; the relevant defense is limiting data aggregation and institutional overreach upstream

== AIP (Palantir Technologies) ==
AIP is Palantir’s artificial-intelligence platform layered onto its broader data stack.

* Vendor:
* [[Palantir Technologies]]
* Country of origin:
* United States
* Type:
* AI / LLM operational platform
* General description:
* Platform for connecting AI systems to operational data and workflows.<ref>[https://www.palantir.com/platforms/aip/ Palantir AIP]</ref>
* Publicly reported government users:
* U.S. defense and intelligence related integrations have been publicly promoted, including collaboration with Microsoft for government cloud environments<ref>[https://www.barrons.com/articles/palantir-microsoft-stock-ai-cloud-azure-079a3311 Barron's on Palantir and Microsoft government cloud AI]</ref>
* Notable privacy / abuse stories:
* the main concern is scaled automated decision support over sensitive datasets
* Avoidance / mitigation:
* resist unnecessary centralized profiling and automated triage systems where possible

== Metropolis (Palantir Technologies) ==
Metropolis was an older Palantir finance-oriented platform and is largely superseded in current product discussions.

* Vendor:
* [[Palantir Technologies]]
* Country of origin:
* United States
* Type:
* legacy analytics platform
* General description:
* Older Palantir platform associated with financial-data analysis and related investigative workflows.
* Publicly reported government users:
* not a primary current focus in public reporting
* Notable privacy / abuse stories:
* not a major current standalone privacy story compared with Gotham or broader Palantir deployments
* Avoidance / mitigation:
* same general Palantir-oriented mitigation applies: reduce data centralization and linkability

----

= Surveillance =
This section covers camera and sensor systems that watch public or semi-public spaces and build persistent records of movement.

== CCTV / Flock Cameras ==
Camera networks, especially those tied to automated license plate recognition (ALPR), can create large searchable movement histories. These systems are increasingly networked across municipalities, private neighborhoods, apartment complexes, retailers, schools, and police systems.<ref>[https://www.eff.org/pages/automated-license-plate-readers-alpr EFF: ALPR]</ref><ref>[https://www.aclu.org/news/privacy-technology/flock-ceo-goes-ballistic ACLU on Flock Safety]</ref>

=== Flock Safety ===
Flock Safety is one of the most visible ALPR / camera-network vendors in the United States. The core privacy concern is not just the camera itself, but the searchable, shareable data network around it.<ref>[https://www.eff.org/deeplinks/2025/12/effs-investigations-expose-flock-safetys-surveillance-abuses-2025-review EFF on Flock investigations]</ref>

* Vendor:
* [[Flock Safety]]
* Country of origin:
* United States
* Type:
* ALPR / camera surveillance network
* General description:
* Networked camera platform used by police and private entities to capture and search vehicle and movement data.
* Publicly reported government users:
* numerous local police departments in the United States
* concerns about federal access or downstream access by immigration-related agencies have featured heavily in recent reporting<ref>[https://www.aclu.org/news/privacy-technology/flock-massachusetts-and-updates ACLU on Flock data sharing]</ref><ref>[https://www.sfchronicle.com/bayarea/article/mountain-view-police-flock-license-plate-readers-21330156.php San Francisco Chronicle: Mountain View turns off Flock readers]</ref>
* Notable privacy / abuse stories:
* Mountain View police shut down Flock readers after alleging unauthorized federal access<ref>[https://www.sfchronicle.com/bayarea/article/mountain-view-police-flock-license-plate-readers-21330156.php SF Chronicle: unauthorized federal use]</ref>
* ACLU and EFF have repeatedly documented Flock-related concerns around mass driver surveillance, data sharing, and activist / immigrant tracking concerns<ref>[https://www.aclu.org/news/privacy-technology/flock-ceo-goes-ballistic ACLU on mass driver surveillance]</ref><ref>[https://www.aclu.org/news/privacy-technology/flock-pushback ACLU on anti-immigrant use concerns]</ref><ref>[https://www.eff.org/deeplinks/2025/12/effs-investigations-expose-flock-safetys-surveillance-abuses-2025-review EFF on Flock abuses]</ref>
* Avoidance / mitigation:
* do not assume driving is anonymous
* avoid building predictable travel routines when privacy matters
* remember that public-space avoidance is limited and often impractical
* use the smallest possible identity footprint in travel-related services

----

= Operating Systems =
Operating systems matter because they define how much control the user actually has over the hardware, software, trust chain, telemetry, and repairability of the device. Closed platforms can be strongly secured against some threats while still denying the owner meaningful control.

== Mainstream Closed Platforms ==
These platforms dominate the consumer market, but they are not ideal choices if your priorities are transparency, auditability, local control, and resistance to centralized vendor power.

=== iOS ===
iOS is a tightly controlled Apple platform with strong sandboxing and code-signing, but limited owner control over the device and software stack.<ref>[https://support.apple.com/guide/security/welcome/web Apple Platform Security]</ref>

=== Android ===
Android is more open in theory than iOS, but most consumer deployments are still heavily mediated by Google, OEMs, carriers, locked bootloaders, and proprietary components.<ref>[https://source.android.com/security Android security]</ref>

=== Microsoft Windows ===
Windows remains dominant on desktop systems, but from a privacy and autonomy perspective it is not an ideal platform for users who want auditable, owner-controlled systems.

== Recommendation ==
If your priority is autonomy, transparency, and minimizing dependence on centralized proprietary control, it is reasonable to avoid these platforms where possible and use open-source systems instead.

== Better Open Alternatives ==
Open-source alternatives vary by use case and threat model.

* General Linux distributions:
* Debian
* Arch Linux
* Fedora
* other well-maintained Linux systems
* Security- or privacy-focused systems:
* [[Tails (operating system)|Tails]] for amnesic, anonymity-oriented sessions<ref>[https://tails.net/ Tails]</ref>
* [[Qubes OS]] for compartmentalization and strong separation between activities<ref>[https://www.qubes-os.org/ Qubes OS]</ref>
* [[GrapheneOS]] for a hardened Android-based mobile platform on supported Pixel devices<ref>[https://grapheneos.org/ GrapheneOS]</ref>

== Avoidance / mitigation ==
No operating system is magic. Still, these steps generally help:
* use open-source systems where practical
* keep the system lean
* avoid unnecessary proprietary services
* separate identities and tasks across devices or compartments
* prefer reproducible, auditable software where available

----

= Companies =
This section lists the companies behind the systems above. In most cases, the company is not merely a neutral manufacturer: its business model, customer base, and sales practices shape how the underlying technology is used.

== Palantir Technologies ==
Palantir Technologies is a U.S. software company focused on large-scale data integration, operational analytics, and decision-support platforms for government and commercial customers.<ref>[https://www.palantir.com/ Palantir]</ref>

* Country of origin:
* United States
* Main products:
* Gotham
* Foundry
* Apollo
* AIP
* Metropolis (legacy)
* General concern:
* enabling governments and institutions to fuse large datasets into actionable targeting, enforcement, or operational systems

== Cellebrite ==
Cellebrite is an Israeli digital-forensics company known for phone extraction and investigative analysis products used by law enforcement and other government customers.<ref>[https://cellebrite.com/en/ufed/ Cellebrite UFED]</ref>

* Country of origin:
* Israel
* Main products:
* UFED and related extraction / analysis tools
* General concern:
* making it easier for states to extract and operationalize intimate data from seized devices

== Grayshift ==
Grayshift is a U.S. mobile-device forensics company known primarily for GrayKey.<ref>[https://www.grayshift.com/ Grayshift]</ref>

* Country of origin:
* United States
* Main products:
* GrayKey
* General concern:
* eroding the practical security assumptions people have about locked phones

== Paragon Solutions ==
Paragon Solutions is an Israeli spyware vendor whose Graphite product became a major public controversy after reporting from WhatsApp, Reuters, and Citizen Lab in 2025.<ref>[https://www.reuters.com/technology/cybersecurity/metas-whatsapp-says-israeli-spyware-company-paragon-targeted-scores-users-2025-01-31/ Reuters: Paragon targeted WhatsApp users]</ref>

* Country of origin:
* Israel
* Main products:
* Graphite
* General concern:
* covert compromise of phones by government clients, including attacks on civil society

== NSO Group ==
NSO Group is an Israeli spyware company best known for Pegasus and for the global scandals surrounding its government clients.<ref>[https://www.reuters.com/technology/cybersecurity/us-judge-finds-israels-nso-group-liable-hacking-whatsapp-lawsuit-2024-12-21/ Reuters: NSO liable]</ref>

* Country of origin:
* Israel
* Main products:
* Pegasus
* General concern:
* repeated documented use of mercenary spyware against journalists, activists, and political targets

== FinFisher GmbH / related FinFisher entities ==
FinFisher is associated with commercial spyware long tied to authoritarian surveillance and human-rights abuses.<ref>[https://www.amnesty.org/en/latest/research/2020/09/german-made-finspy-spyware-found-in-egypt-and-mac-and-linux-versions-revealed/ Amnesty: FinSpy]</ref>

* Country of origin:
* Germany, with historical reporting also referencing UK-linked Gamma entities
* Main products:
* FinSpy / FinFisher suite
* General concern:
* export and deployment of spyware to abusive state actors

== Microsoft ==
Microsoft is a U.S. technology company whose Intune platform is included here because organizational control over endpoints can become invasive even when framed as routine administration.

* Country of origin:
* United States
* Main products relevant here:
* Intune
* General concern:
* institutional control, monitoring, and policy enforcement over managed devices

== L3Harris Technologies / Harris Corporation ==
Harris, now part of L3Harris, is the U.S. defense contractor most closely associated with the StingRay name.

* Country of origin:
* United States
* Main products relevant here:
* StingRay and related cell-site simulator family
* General concern:
* dragnet-style device identification and location tracking of phones in an area

== Flock Safety ==
Flock Safety is a U.S. camera-network and ALPR company whose systems have become a flashpoint in debates over mass movement tracking.

* Country of origin:
* United States
* Main products relevant here:
* ALPR / camera networks
* General concern:
* large searchable databases of public movement and retroactive location histories

----

= See Also =
Related subjects that help place these systems in a broader context.

* [[Mass surveillance]]
* [[Digital forensics]]
* [[Lawful interception]]
* [[Zero-day exploit]]
* [[Automated license plate recognition]]
* [[Mobile device management]]
* [[Link analysis]]
* [[Data broker]]

----

= References =
This page relies heavily on reporting and research from the following organizations, among others:

* Electronic Frontier Foundation – https://www.eff.org
* ACLU – https://www.aclu.org
* Citizen Lab – https://citizenlab.ca
* Amnesty International – https://www.amnesty.org
* Reuters – https://www.reuters.com
* The Guardian – https://www.theguardian.com

Privacy-Invading Systems and How to Avoid Them

2026-04-21T14:09:54Z

Jeremy: Created page with "There are a frightening number of systems that are being used by entities to oppress people. Here are some known systems, what they do, and how you can avoid them. =Mobile Device Interception= ==Stringray== The Stingray is a cell-site simulator (IMSI catcher) that spoofs mobile network towers to intercept your mobile device traffic. =Mobile Device Access= ==Cellebrite (UFED)== =Mobile Device "Forensic" Tools== ==Grayshift (GrayKey)== ==Graphite== Spyware used by gove..."

There are a frightening number of systems that are being used by entities to oppress people. Here are some known systems, what they do, and how you can avoid them.

=Mobile Device Interception=
==Stringray==
The Stingray is a cell-site simulator (IMSI catcher) that spoofs mobile network towers to intercept your mobile device traffic.

=Mobile Device Access=
==Cellebrite (UFED)==

=Mobile Device "Forensic" Tools==
==Grayshift (GrayKey)==
==Graphite==
Spyware used by governments to read Signal messages

=Commercial Spyware=
==NSO Group (Pegasus)==
==FinFisher (FinSpy)==

=Enterprise / Consumer Monitoring Software=
Mobile Device Management (MDM platforms)
==Microsoft Intune==

=Network and Bulk Data Analysis Platforms=
==Gotham (Palantir Technologies)==
AI systems used to target people to kill under the name of "defense" and "intelligence"
==Foundry (Palantir Technologies)==
Commercial / enterprise data platform
==Apollo (Palantir Technologies)==
deployment and infrastructure control
==AIP (Palantir Technologies)==
Artificial Intelligence Platform
==Metropolis (Palantir Technologies)==
Older finance-focused analytics platform; largely superceded

=Surveillance=
* CCTV / Flock Cameras - Watch and track citizens

=Operating Systems=
* iOS - Treat users like infants, preventing full access to hardware
* Android - Treat users like infants, preventing full access to hardware
* Microsoft Windows - Treat users like infants, preventing full access to hardware

=Companies=
==Palantir Technologies==

Main Page

2026-04-21T13:48:16Z

Jeremy:

Welcome to the Wiki of Jeremy Bryan Smith. Here I shall disseminate knowledge that I deem important enough that I may need to recall at a later point in time and/or that I believe may be useful for others out there. 
Feel free to poke around, make comments, suggestions, and ingest the bits of information I have to share. 
Regards, 
Jeremy Bryan Smith 
 

== Find Me On ==
* [https://noc.social/@helamonster Mastodon]
* [https://github.com/helamonster Github]
* [https://www.linkedin.com/in/helamonster/ Linked In]
* [https://www.reddit.com/user/mr_helamonster Reddit]
* [https://twitter.com/helamonster Twitter]
* [https://www.facebook.com/helamonster/notes Facebook]
* [https://www.instagram.com/mr_helamonster/ Instagram]
* [https://www.youtube.com/c/JeremySmithBryan YouTube] - See my playlists
* [https://open.spotify.com/user/1277771794 Spotify] - See my playlists

==[[Veganism]]==

==Green Living==

===Air===
TODO: Add air filtration stuff here...

===Water===
You can never trust your municipal water supply. Nor can you trust that any source of water (including bottled) has not been contaminated. Do not drink unfiltered tap water. Just don't.
 
 
I have used a reverse osmosis water filter system since 2014 and have never looked back. The one I happened to have purchased was the: [https://www.amazon.com/gp/product/B005A3WM6C/ref=ppx_yo_dt_b_search_asin_title?ie=UTF8&psc=1 Home Master TMAFC Artesian Full Contact Undersink Reverse Osmosis Water Filter System]
 
 
And the following replacement filters: 
* [https://www.amazon.com/gp/product/B07BPX8K5K/ref=ppx_yo_dt_b_search_asin_title?ie=UTF8&psc=1 Membrane Solutions 75 GPD Reverse Osmosis Membrane]
* [https://www.amazon.com/gp/product/B005A3WNWK/ref=ppx_yo_dt_b_search_asin_title?ie=UTF8&psc=1 Home Master ISetTMA8 Artesian And HydroGardener Replacement Water Filter Change Set]

Along with this UV sterilizer: 
[https://www.amazon.com/gp/product/B0110LTT1I/ref=ppx_yo_dt_b_search_asin_title?ie=UTF8&psc=1 Bluonics Ultraviolet Light Water Purifier UV Sterilizer]

Super easy to install and maintain. I removed the tank once the bladder was no longer holding water and instead attached it to an ice maker: 
[https://www.amazon.com/gp/product/B0B3DH6S9D/ref=ppx_yo_dt_b_search_asin_title?ie=UTF8&psc=1 Countertop Hot & Cold Water Dispenser and Ice Maker]

===Composting===
I use this: [https://www.amazon.com/gp/product/B0121G9ZJW/ref=as_li_tl?ie=UTF8&camp=1789&creative=9325&creativeASIN=B0121G9ZJW&linkCode=as2&tag=highandlowtec-20&linkId=a27cf44c5167bf80b590bf96a469739d Envirocycle USA-made, Food Safe, BPA and Rust Free Composting Tumbler and Compost Tea Maker]

{{Special:IframePage|AmazonAffiliate|path=widgets/q?ServiceVersion=20070822&OneJS=1&Operation=GetAdHtml&MarketPlace=US&source=ac&ref=tf_til&ad_type=product_link&tracking_id=highandlowtec-20&marketplace=amazon&region=US&placement=B0121G9ZJW&asins=B0121G9ZJW&linkId=4312303f6850d7bdc370558b69a34599&show_border=false&link_opens_in_new_window=false&price_color=333333&title_color=0066c0&bg_color=ffffff}}

== Technology ==

===Random===
At some point I will organize this stuff better.
* [[Booting via GRUB 2 prompt]]
* [[Simulating keystrokes from clipboard]]
* [[Making Block Devices Read Only]]

===Applications and Plug-ins===
Here I will provide my opinions, recommendations on usage and optimal configuration, links to related third-party tools, and my own related tools
* [[Web Browsers]] - The web browsers and related extensions / plug-ins, and tweaks for usability and security, etc. that I recommend
* [[vim]] - My text editor of choice

===Devices===
* Cars
** 2012 Toyota / Scion XB
* Televisions
** [[Seiki Digital SE50UY04 50-Inch 4K UHD 120Hz LED HDTV]]
** [https://www.lg.com/us/tvs/lg-oled55cxpua-oled-4k-tv LG OLED55CXPUA 55" Class HDR 4K UHD Smart OLED TV (2020 Model)]

* Security Keys
** [[YubiKey NEO]]

* Smart Phones
** [[Samsung Galaxy Note 3]]
** [[Samsung Galaxy Tab S 10.5]]
** [[Motorola Backflip (MB300)]]
** [[Google Pixel Phone]]
** [[Google Pixel 2 XL Phone]]
** [[Google Pixel 6 Pro]]

* Tablets
** [[Samsung Galaxy Tab S 10.5" (SM-T800)]]

* eReaders
** [[Kindle Paperwhite E-reader (7th Generation)]]

* HTPCs
** [[MAGNUS EN1080 10 Year Anniversary Edition (ZBOX-EN1080)]]

* Modems
** TP-LINK TC-7620 DOCSIS 3.0 cable modem
* Servers
** [[HPE Proliant MicroServer Gen10]]
** [[Dell PowerEdge R720]]
** [[iXsystems FreeNAS Mini]]
* SoCs
** [[Intel Compute Stick STK1AW32SC]]
** [[Raspberry Pi]]
** [[Minnowboard Max]]

* Notebooks
** [[Toshiba Qosmio G35-AV660]]
** [[Toshiba Satellite L670]]
** [[Dell Latitude E6430s]]
** [[Sony Vaio Something]]
** [[Lenovo ThinkPad X1 Carbon Gen 6]]
** [[Lenovo Thinkpad X1 Extreme Gen 2]]
** [[Google Pixelbook (eve)]]

* Fanless Systems
** [[Protectli FW6D]] x 2

* Monitors / Displays
** 2 x [[Asus DisplayLink 2 External USB 3 Monitor]]
** 2 x [[ACHIEVA Shimian QH270-Lite Quad HD 2560x1440 Monitor]]
** [https://epson.com/For-Home/Projectors/Home-Cinema/PowerLite-Home-Cinema-1080-UB-Projector/p/V11H262120 Epson EPPLHC1080UB PowerLite Home Cinema 1080 UB Projector]

* Power
** [[APC Smart UPS]]
** [[APC Smart-UPS SRT 2200VA 230V and APC Smart-UPS SRT 72V 2.2kVA Battery Pack]]

* Sound
** [[Logitech Z-5500 THX-Certified 5.1 Digital Surround Sound Speaker System]]

* Cameras
** [[Canon PowerShot G9]]
** Raspberry PI 5MP Camera Board Module
** Raspberry Pi HQ Camera Module
** Arducam Day and Night Vision IMX477 HQ Camera
** Logitech HD Pro Webcam C920 (960-000764)
** LOGITECH QUICKCAM PRO 9000 R Webcam
** [[Logitech Quickcam Express]]

* Home Appliances
** [[Tap Master TMAFC Artesian Full Contact Reverse Osmosis Under Counter Water Filtration System]]

* Network
** [[SG-4860 pfSense® Security Gateway Appliance]]
** [[Protectli FW6D]] x 2

* Printers
** [[Canon MP-160]] All-in-one scanner, copier, printer

* Misc
** [http://www.istarusa.com/en/istarusa/products.php?model=WNG-1810 iStarUSA WNG-1810 18U 1000mm Depth Rack-mount Server Cabinet]
** [[Sierra Wireless AirCard 313U]]
** [[LSI SAS HBA]]
** [[Lantronix SpiderDuo]] - Single port KVM over IP with USB mass storage
** [[Apple iPod Shuffle 1st Gen/White 512 MB, Model A1112]]
** [[Chicony Saitek Eclipse II Keyboard]]
** [[GeForce 9500 GT]]
** [[GeForce GTX 550 Ti]]
** [[Snapmaker 2.0 Modular 3-in-1 3D Printer]]

===Software===
* [[Web Browsers]]
* [[Configuration Management]]
* [[Boot-Related Tools]]

===Programming===
* [[BASH]]

===Android===
* [[Running Android Apps on Linux]]
* [[Must Have Android Apps]]

===Microsoft Windows===
* [[Managing Microsoft Windows]]

===E-mail===
* [[sendmail]]
* [[E-mail Blacklists]] - How to determine if your mail server is being blocked, how to resolve.
* [[Sending System E-mails with Gmail]]

===Storage===

====U3-Enabled USB Storage Devices====
[[U3-Enabled USB Storage Devices]] USB Storage thumb drives that can emulate CD-ROM devices

====RAID====

=====From Hardware to Software=====
If you've ever been forced to use hardware RAID and then need to migrate from hardware RAID to software RAID ...
 
I had 6 disks behind a Dell PERC 6/i hardware RAID controller and wanted to set up a ZFS pool. But for reasons beyond my control at the time, changing out the controller for a proper HBA was not an option. So, I did the unthinkable and configured 6 RAID-0 devices on the PERC controller, one for each physical disk, and then created a zpool from the virtual disks the controller exposed to the OS. It worked well enough for my purposes for years, but now I have the ability to swap in a real HBA. But the question is, do I have to copy all of the data off, swap the controller, then copy all data back? I was surprised to discover that the data on the disks, with the exception of a small section of metadata at the end of each disk, was in-tact just as if the disks were being used directly. In fact, the metadata was in Linux MDADM RAID format! So that must be what those PERC controllers are doing behind the scene. No surprise there, taking advantage of open source. I wonder if they are violating the GPL. I'll have to look at the firmware. Anyway, This may only work if you configured each disk as a RAID-0. I haven't tested other configurations yet.
 
Resources:
* [https://raid.wiki.kernel.org/index.php/Linux_Raid Linux RAID Wiki]
** [https://raid.wiki.kernel.org/index.php/DDF_Fake_RAID DDF Fake RAID]
** [https://raid.wiki.kernel.org/index.php/RAID_setup RAID Setup]
 
This is what I saw:
root@ubuntu-server:~# lsblk --nodeps -I 8 -o name,maj:min,rm,size,ro,type,pttype,ptuuid,fstype,uuid,label,model,vendor
NAME MAJ:MIN RM SIZE RO TYPE PTTYPE PTUUID FSTYPE UUID LABEL MODEL VENDOR
sda 8:0 0 232.9G 0 disk gpt 5ace5e66-37f2-4d44-b518-f2a22834c3ab Samsung_SSD_860 ATA
sdb 8:16 1 29.3G 0 disk dos e16cd6ae Cruzer_Glide SanDisk
sdc 8:32 0 465.8G 0 disk ddf_raid_member Dell \x10 ST9500530NS ATA
sdd 8:48 0 465.8G 0 disk ddf_raid_member Dell \x10 ST9500530NS ATA
sde 8:64 0 465.8G 0 disk ddf_raid_member Dell \x10 ST9500530NS ATA
sdf 8:80 0 465.8G 0 disk ddf_raid_member Dell \x10 ST9500530NS ATA
sdg 8:96 0 465.8G 0 disk ddf_raid_member Dell \x10 ST9500530NS ATA
sdh 8:112 0 465.8G 0 disk ddf_raid_member Dell \x10 ST9500530NS ATA
sdi 8:128 1 235.8G 0 disk dos be730627 Voyager_SliderX2 Corsair
sdj 8:144 0 3.7T 0 disk gpt b5dcd625-9112-4f29-9b67-64e935bf15b3 My_Passport_25E2 WD
sdk 8:160 0 3.7T 0 disk gpt 31d5cc46-33c7-4806-80a6-57aaba69b38e My_Passport_25E2 WD
sdl 8:176 1 58.9G 0 disk dos d02d781a zfs_member 17764476958699951102 upool Voyager_SliderX2 Corsair
sdm 8:192 1 58.9G 0 disk dos 642fafbd zfs_member 12354630986627173815 upool Voyager_SliderX2 Corsair
sdn 8:208 1 118G 0 disk dos 604144b7 Voyager_SliderX2 Corsair
sdo 8:224 1 118G 0 disk dos 8f6dbdcd Voyager_SliderX2 Corsair
sdp 8:240 1 116.5G 0 disk dos Cruzer_Glide SanDisk


You can see the 6 500GB disks as well as a few USB drives attached. We'll ignore those and list any Linux RAID devices...

root@ubuntu-server:~# mdadm --query /dev/sd{c,d,e,f,g,h}
/dev/sdc: is not an md array
/dev/sdc: device -1393767213 in 6 device undetected container /dev/md/ddf0. Use mdadm --examine for more detail.
/dev/sdd: is not an md array
/dev/sdd: device -1811426553 in 6 device undetected container /dev/md/ddf0. Use mdadm --examine for more detail.
/dev/sde: is not an md array
/dev/sde: device 764605963 in 6 device undetected container /dev/md/ddf0. Use mdadm --examine for more detail.
/dev/sdf: is not an md array
/dev/sdf: device 1584381922 in 6 device undetected container /dev/md/ddf0. Use mdadm --examine for more detail.
/dev/sdg: is not an md array
/dev/sdg: device 896654598 in 6 device undetected container /dev/md/ddf0. Use mdadm --examine for more detail.
/dev/sdh: is not an md array
/dev/sdh: device -2108342859 in 6 device undetected container /dev/md/ddf0. Use mdadm --examine for more detail.


Hmm, not quite right, let's try dmraid ...
root@ubuntu-server:~#root@ubuntu-server:~# dmraid -r
/dev/sdh: ddf1, ".ddf1_disks", GROUP, ok, 975699968 sectors, data@ 0
/dev/sdc: ddf1, ".ddf1_disks", GROUP, ok, 975699968 sectors, data@ 0
/dev/sde: ddf1, ".ddf1_disks", GROUP, ok, 975699968 sectors, data@ 0
/dev/sdg: ddf1, ".ddf1_disks", GROUP, ok, 975699968 sectors, data@ 0
/dev/sdd: ddf1, ".ddf1_disks", GROUP, ok, 975699968 sectors, data@ 0
/dev/sdf: ddf1, ".ddf1_disks", GROUP, ok, 975699968 sectors, data@ 0


We see that the Ok, now let's inspect one of those disks' partition table...
root@ubuntu-server:~# parted /dev/sdg unit b p
Warning: Not all of the space available to /dev/sdg appears to be used, you can fix the GPT to use all of the space (an extra 1073200 blocks) or continue with the current setting?
Fix/Ignore? Ignore
Model: ATA ST9500530NS (scsi)
Disk /dev/sdg: 500107862016B
Sector size (logical/physical): 512B/512B
Partition Table: gpt
Disk Flags:

Number Start End Size File system Name Flags
1 1048576B 9437183B 8388608B Reserved
2 10485760B 18874367B 8388608B GRUB bios_grub
3 20971520B 499558366719B 499537395200B zfs ZFS


Let's step back and take a look at how the disks, partitions, and RAID devices are related ...
 lsblk -I 8,9 -o name,maj:min,size,type /dev/sdg
 NAME MAJ:MIN SIZE TYPE
sdg 8:96 465.8G disk
|-sdg1 8:97 8M part
|-sdg2 8:98 8M part
|-sdg3 8:99 465.2G part
`-md125 9:125 465.3G raid0
|-md125p1 259:3 8M part
|-md125p2 259:4 8M part
`-md125p3 259:5 465.2G part


Inspecting the corresponding MDADM RAID(s):
root@ubuntu-server:~# grep sdg /proc/mdstat
md125 : active raid0 sdg[0]
md127 : inactive sdf[5](S) sdh[4](S) sde[3](S) sdd[2](S) sdg[1](S) sdc[0](S)

root@ubuntu-server:~# mdadm --detail /dev/md125
/dev/md125:
Container : /dev/md/ddf0, member 0
Raid Level : raid0
Array Size : 487849984 (465.25 GiB 499.56 GB)
Raid Devices : 1
Total Devices : 1

State : clean
Active Devices : 1
Working Devices : 1
Failed Devices : 0
Spare Devices : 0

Chunk Size : 128K

Consistency Policy : none

Container GUID : 44656C6C:20202020:10000079:10281F17:4B825EED:49CB41EA
(Dell 02/22/20 10:39:41)
Seq : 00000004
Virtual Disks : 6

Number Major Minor RaidDevice State
0 8 96 0 active sync /dev/sdg

root@ubuntu-server:~# mdadm --detail /dev/md127
/dev/md127:
Version : ddf
Raid Level : container
Total Devices : 6

Working Devices : 6

Container GUID : 44656C6C:20202020:10000079:10281F17:4B825EED:49CB41EA
(Dell 02/22/20 10:39:41)
Seq : 00000004
Virtual Disks : 6

Member Arrays : /dev/md/disk1_0 /dev/md/disk5_0 /dev/md/disk3_0 /dev/md/disk4_0 /dev/md/disk2_0 /dev/md122

Number Major Minor RaidDevice

- 8 64 - /dev/sde
- 8 32 - /dev/sdc
- 8 112 - /dev/sdh
- 8 80 - /dev/sdf
- 8 48 - /dev/sdd
- 8 96 - /dev/sdg

And the partitions on the RAID device itself:
root@ubuntu-server:~# parted /dev/md125 unit b p
Model: Linux Software RAID Array (md)
Disk /dev/md125: 499558383616B
Sector size (logical/physical): 512B/512B
Partition Table: gpt
Disk Flags:

Number Start End Size File system Name Flags
1 1048576B 9437183B 8388608B Reserved
2 10485760B 18874367B 8388608B GRUB bios_grub
3 20971520B 499558366719B 499537395200B zfs ZFS

So, capacity of the disk itself is 500,107,862,016 bytes and the capacity of the RAID-0 device presented is 499,558,383,616 bytes. 
So, there is 500,107,862,016 - 499,558,383,616 = 549,478,400 bytes / 1024 = 536,600 KiB / 1024 = 524.0234375 MiB used up by the MDADM RAID signature at the end of the disk. 
Cool! So, can we just zero out that mdadm signature and use the disks normally? Let's see...

====Controllers====
See Serve the Home's [https://www.servethehome.com/buyers-guides/top-hardware-components-freenas-nas-servers/top-picks-freenas-hbas/ Top Picks for FreeNAS HBAs] for a good overview. 
Basically:
* Stay away from hardware RAID
* There are a few RAID cards that can be flashed to IT mode to support proper HBA (passthrough/JBOD) mode.
* There are many re-branded / OEM versions that should also work fine (Dell, IBM)
* There are many being sold used

Check these out:
* Internal
** LSI SAS HBA 9201-8i: 8 port, SATA III, 6 Gbps, ~ $40 - $50 USD on ebay as of 2020-03-02 Good replacement for PERC 6/i
** IBM M1015 (LSI 9220-8i): 8 port, SATA III, 6 Gbps,
** Dell H200: 8 port, SATA III, 6 Gbps, $30 - $40 USD on ebay as of 2020-03-02 Good replacement for PERC 6/i
* External
** LSI SAS HBA 9200-8E: 8 port, SATA III, 6 Gbps, ~ $40 - $50 USD on ebay as of 2020-03-02 Good replacement for PERC 6/e
** LSI SAS HBA 9300-8e: 8 port, SATA III. 12 Gbps, ~ $90 - $100 USD on ebay as of 2020-03-02 https://www.broadcom.com/products/storage/host-bus-adapters/sas-9300-8e

====Filesystems====
* [[ZFS]]
==== Data Integrity ====
* [[Backups]]
* [[Data Recovery]]
==== Storage Analysis ====
* [[File System / Disk Usage Analysis]]

=== Misc ===
* [[Notable]]
* [[Common Application Configuration]]
* [[Updating Samsung SSD Firmware]]
* [[Forensics]]
* [[Maintaining Connectivity]]
* [[Moving Web Browser Cache]] Why and how you would want to have your web browser cache located in a non-default location
* [[Reducing Junk Mail]]
* [[VPNs]] - Virtual Private Networks
* [[TCP over DNS]] - Bypass Wifi logins to get internet access
* [[Terminals]] - Tips and tricks for shells

=== Security/Privacy ===

* [[Best Practices for Improved Security and Privacy]]
* [[Encryption]]
* [[Secure and Private Internet Access]]
* [[Credit Cards]]
* [[Malware]]
* [[Port Knocking]]
* [[Internet of Things]]
* [[Staying Anonymous Online]]
* [[Ad Blocking]]
* [[Privacy-Invading Systems and How to Avoid Them]]
* Hardware Tools
** [https://github.com/hak5darren/USB-Rubber-Ducky USB Rubber Ducky]

==[[Admirable People]]==

== Life Lessons ==
* [[Things to remember and to remind yourself of occasionally]]

== Lists ==
* [[Travel]] - Lists for things to do before and things to bring when travelling.
* [[Playlists]] - Playlists of music, movies, etc.

IXsystems FreeNAS Mini

2026-02-19T18:15:50Z

Jeremy: Created page with " System Information Manufacturer: iXsystems Product Name: iXWS-721TQ-250B Version: 123456789 Serial Number: A1-XXXXX UUID: Not Settable Wake-up Type: Power Switch SKU Number: 081315D9 Family: SMC X10 Base Board Information Manufacturer: Supermicro Product Name: A1SRi Version: 1.00 Serial Number: NMXXXXXXXXXX Processor Information Socket Designation: CPU0 Ty..."

System Information
Manufacturer: iXsystems
Product Name: iXWS-721TQ-250B
Version: 123456789
Serial Number: A1-XXXXX
UUID: Not Settable
Wake-up Type: Power Switch
SKU Number: 081315D9
Family: SMC X10

Base Board Information
Manufacturer: Supermicro
Product Name: A1SRi
Version: 1.00
Serial Number: NMXXXXXXXXXX

Processor Information
Socket Designation: CPU0
Type: Central Processor
Family: Atom
Manufacturer: Intel(R) Corporation
ID: D8 06 04 00 FF FB EB BF
Signature: Type 0, Family 6, Model 77, Stepping 8
Flags:
FPU (Floating-point unit on-chip)
VME (Virtual mode extension)
DE (Debugging extension)
PSE (Page size extension)
TSC (Time stamp counter)
MSR (Model specific registers)
PAE (Physical address extension)
MCE (Machine check exception)
CX8 (CMPXCHG8 instruction supported)
APIC (On-chip APIC hardware supported)
SEP (Fast system call)
MTRR (Memory type range registers)
PGE (Page global enable)
MCA (Machine check architecture)
CMOV (Conditional move instruction supported)
PAT (Page attribute table)
PSE-36 (36-bit page size extension)
CLFSH (CLFLUSH instruction supported)
DS (Debug store)
ACPI (ACPI supported)
MMX (MMX technology supported)
FXSR (FXSAVE and FXSTOR instructions supported)
SSE (Streaming SIMD extensions)
SSE2 (Streaming SIMD extensions 2)
SS (Self-snoop)
HTT (Multi-threading)
TM (Thermal monitor supported)
PBE (Pending break enabled)
Version: Intel(R) Atom(TM) CPU C2758 @ 2.40GHz
Voltage: 1.6 V
External Clock: 100 MHz
Max Speed: 2600 MHz
Current Speed: 2400 MHz
Status: Populated, Enabled
Upgrade: Other
L1 Cache Handle: 0x0025
L2 Cache Handle: 0x0026
L3 Cache Handle: Not Provided
Serial Number: Not Specified
Asset Tag: ProcessorInfo_ASSET_TAG
Part Number: Not Specified
Core Count: 8
Core Enabled: 8
Thread Count: 8
Characteristics:
64-bit capable

Physical Memory Array
Location: System Board Or Motherboard
Use: System Memory
Error Correction Type: Single-bit ECC
Maximum Capacity: 64 GB
Error Information Handle: Not Provided
Number Of Devices: 4

Handle 0x002D, DMI type 17, 34 bytes
Memory Device
Array Handle: 0x002B
Error Information Handle: Not Provided
Total Width: 64 bits
Data Width: 64 bits
Size: 4 GB
Form Factor: SODIMM
Set: None
Locator: DIMMA1
Bank Locator: BANK 0
Type: DDR3
Type Detail: Synchronous Unbuffered (Unregistered)
Speed: 1600 MT/s
Manufacturer: <BAD INDEX>
Serial Number: <BAD INDEX>
Asset Tag: <BAD INDEX>
Part Number: <BAD INDEX>
Rank: 2
Configured Memory Speed: 1600 MT/s

Handle 0x0030, DMI type 17, 34 bytes
Memory Device
Array Handle: 0x002B
Error Information Handle: Not Provided
Total Width: 64 bits
Data Width: 64 bits
Size: 4 GB
Form Factor: SODIMM
Set: None
Locator: DIMMB1
Bank Locator: BANK 0
Type: DDR3
Type Detail: Synchronous Unbuffered (Unregistered)
Speed: 1600 MT/s
Manufacturer: <BAD INDEX>
Serial Number: <BAD INDEX>
Asset Tag: <BAD INDEX>
Part Number: <BAD INDEX>
Rank: 2
Configured Memory Speed: 1600 MT/s

Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
Bus 001 Device 002: ID 8087:07db Intel Corp. Atom C2000 Root Hub
Bus 002 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
Bus 002 Device 002: ID 0bda:5411 Realtek Semiconductor Corp. RTS5411 Hub
Bus 002 Device 004: ID 0bda:5411 Realtek Semiconductor Corp. RTS5411 Hub
Bus 002 Device 005: ID 0bda:5411 Realtek Semiconductor Corp. RTS5411 Hub
Bus 003 Device 001: ID 1d6b:0003 Linux Foundation 3.0 root hub
Bus 003 Device 002: ID 0bda:0411 Realtek Semiconductor Corp. Hub
Bus 003 Device 003: ID 0bda:0411 Realtek Semiconductor Corp. Hub
Bus 003 Device 004: ID 0bda:0411 Realtek Semiconductor Corp. Hub

00:00.0 Host bridge: Intel Corporation Atom processor C2000 SoC Transaction Router (rev 02)
00:01.0 PCI bridge: Intel Corporation Atom processor C2000 PCIe Root Port 1 (rev 02)
00:02.0 PCI bridge: Intel Corporation Atom processor C2000 PCIe Root Port 2 (rev 02)
00:03.0 PCI bridge: Intel Corporation Atom processor C2000 PCIe Root Port 3 (rev 02)
00:0b.0 Co-processor: Intel Corporation Atom processor C2000 QAT (rev 02)
00:0e.0 Host bridge: Intel Corporation Atom processor C2000 RAS (rev 02)
00:0f.0 IOMMU: Intel Corporation Atom processor C2000 RCEC (rev 02)
00:13.0 System peripheral: Intel Corporation Atom processor C2000 SMBus 2.0 (rev 02)
00:14.0 Ethernet controller: Intel Corporation Ethernet Connection I354 (rev 03)
00:14.1 Ethernet controller: Intel Corporation Ethernet Connection I354 (rev 03)
00:14.2 Ethernet controller: Intel Corporation Ethernet Connection I354 (rev 03)
00:14.3 Ethernet controller: Intel Corporation Ethernet Connection I354 (rev 03)
00:16.0 USB controller: Intel Corporation Atom processor C2000 USB Enhanced Host Controller (rev 02)
00:17.0 SATA controller: Intel Corporation Atom processor C2000 AHCI SATA2 Controller (rev 02)
00:18.0 SATA controller: Intel Corporation Atom processor C2000 AHCI SATA3 Controller (rev 02)
00:1f.0 ISA bridge: Intel Corporation Atom processor C2000 PCU (rev 02)
00:1f.3 SMBus: Intel Corporation Atom processor C2000 PCU SMBus (rev 02)
01:00.0 PCI bridge: ASPEED Technology, Inc. AST1150 PCI-to-PCI Bridge (rev 03)
02:00.0 VGA compatible controller: ASPEED Technology, Inc. ASPEED Graphics Family (rev 30)
03:00.0 USB controller: Renesas Technology Corp. uPD720201 USB 3.0 Host Controller (rev 03)

MAGNUS EN1080 10 Year Anniversary Edition (ZBOX-EN1080)

2026-02-19T18:06:35Z

Jeremy:

=Details=

[[File:Magnus en1080 image02.jpg|320px]]
 

THE 10 YEAR ANNIVERSARY EDITION MAGNUS EN1080 is ZOTAC‘s second generation of water cooling Mini PC. It ascends gaming to the Virtual Reality with an Intel 6th Generation Skylake Core i7 processor and NVIDIA GeForce® GTX 1080 graphics - the first Mini PC to equip NVIDIA‘s new generation flagship graphics. The unique SPECTRA lighting system gives the system a glow of its own, and users can customize the lighting with the SPECTRA utility.
* Resources
** [https://www.zotac.com/se/product/mini_pcs/magnus-en1080-10-year-anniversary-edition MAGNUS EN1080 10 Year Anniversary Edition (ZBOX-EN1080) -- Product Page]
** Windows Drivers: https://www.zotac.com/se/files/download/by_product?p_nid=607475&driver_type=All&os=All
** Linux Drivers: https://webclone.zotac.com/eu/files/download/by_product?p_nid=607474&driver_type=All&os=All
** [https://www.zotac.com/mu/files/download/graphics_cards Generic Driver Page] (find the section titled "ZOTAC GeForce GTX 1080 ArcticStorm Thermaltake 10 週年版" ) Windows version says: "FireStorm_V2.0.0.014TT for GTX 1080 ArcticStorm Thermaltake 10 Year Anniversary Edition"
** [https://www.reddit.com/r/htpc/comments/5yhvtm/how_i_finally_fixed_my_4k_video_stuttering/ How I finally fixed my 4k video stuttering problem, a warning to everyone trying or eventually going to try getting a 4k movie PC up and running]

* Chipsets:
** NCT5532 ???

* BIOS
** Latest version as of 2023-05-23 10:12:49 EDT (Tuesday): <tt>Version 2K180904</tt> ( 2018-09-04 ??? ) https://www.zotac.com/download/mediadrivers/mb/bios/pb336EN1080.zip
*** <tt>MD5...: 052342935d95a96c55551dbc33e0db6f</tt>
*** <tt>SHA1..: 33e9afdb98233abedfc09201dc4cc06db1a4780e</tt>
*** <tt>SHA256: e9042d0029b69692d628b94d139a7d02679b200c3e9ffd2f3c7694c85c201a81</tt>
** Files in archive:<pre>.
├── AfuEfix64.efi
├── B336P114.bin
├── EFI
│ └── BOOT
│ ├── BootIa32.efi
│ └── Bootx64.efi
├── flash.nsh
├── fparts.txt
├── Fpt.efi
├── Note.txt
├── pb336EN1080.zip
└── Readme.txt

2 directories, 10 files
</pre>
* PCI Devices:
** 00:00.0 Host bridge: Intel Corporation Xeon E3-1200 v6/7th Gen Core Processor Host Bridge/DRAM Registers (rev 05)
** 00:02.0 VGA compatible controller: Intel Corporation HD Graphics 630 (rev 04)
** 00:08.0 System peripheral: Intel Corporation Xeon E3-1200 v5/v6 / E3-1500 v5 / 6th/7th/8th Gen Core Processor Gaussian Mixture Model
** 00:14.0 USB controller: Intel Corporation 100 Series/C230 Series Chipset Family USB 3.0 xHCI Controller (rev 31)
** 00:14.2 Signal processing controller: Intel Corporation 100 Series/C230 Series Chipset Family Thermal Subsystem (rev 31)
** 00:16.0 Communication controller: Intel Corporation 100 Series/C230 Series Chipset Family MEI Controller #1 (rev 31)
** 00:17.0 SATA controller: Intel Corporation Q170/Q150/B150/H170/H110/Z170/CM236 Chipset SATA Controller [AHCI Mode] (rev 31)
** 00:1c.0 PCI bridge: Intel Corporation 100 Series/C230 Series Chipset Family PCI Express Root Port #5 (rev f1)
** 00:1c.5 PCI bridge: Intel Corporation 100 Series/C230 Series Chipset Family PCI Express Root Port #6 (rev f1)
** 00:1c.6 PCI bridge: Intel Corporation 100 Series/C230 Series Chipset Family PCI Express Root Port #7 (rev f1)
** 00:1c.7 PCI bridge: Intel Corporation 100 Series/C230 Series Chipset Family PCI Express Root Port #8 (rev f1)
** 00:1d.0 PCI bridge: Intel Corporation 100 Series/C230 Series Chipset Family PCI Express Root Port #9 (rev f1)
** 00:1f.0 ISA bridge: Intel Corporation B150 Chipset LPC/eSPI Controller (rev 31)
** 00:1f.2 Memory controller: Intel Corporation 100 Series/C230 Series Chipset Family Power Management Controller (rev 31)
** 00:1f.3 Audio device: Intel Corporation 100 Series/C230 Series Chipset Family HD Audio Controller (rev 31)
** 00:1f.4 SMBus: Intel Corporation 100 Series/C230 Series Chipset Family SMBus (rev 31)
** 01:00.0 Ethernet controller: Realtek Semiconductor Co., Ltd. RTL8111/8168/8411 PCI Express Gigabit Ethernet Controller (rev 07)
** 02:00.0 USB controller: ASMedia Technology Inc. ASM1142 USB 3.1 Host Controller
** 03:00.0 Network controller: Intel Corporation Wireless 3165 (rev 81)
** 04:00.0 Ethernet controller: Realtek Semiconductor Co., Ltd. RTL8111/8168/8411 PCI Express Gigabit Ethernet Controller (rev 07)
** 05:00.0 Non-Volatile memory controller: Samsung Electronics Co Ltd NVMe SSD Controller SM961/PM961

* USB Devices:
** Bus 004 Device 001: ID 1d6b:0003 Linux Foundation 3.0 root hub
** Bus 003 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
** Bus 002 Device 001: ID 1d6b:0003 Linux Foundation 3.0 root hub
** Bus 001 Device 004: ID 2047:0305 Texas Instruments Zotac
** Bus 001 Device 003: ID 0bda:0153 Realtek Semiconductor Corp. 3-in-1 (SD/SDHC/SDXC) Card Reader
** Bus 001 Device 002: ID 8087:0a2a Intel Corp.
** Bus 001 Device 005: ID 2047:0200 Texas Instruments MSP430 USB HID Bootstrap Loader
** Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub

* LM Sensors drivers known to work:
** coretemp
** nct6775<pre>coretemp-isa-0000
Adapter: ISA adapter
Package id 0: +37.0°C (high = +80.0°C, crit = +100.0°C)
Core 0: +36.0°C (high = +80.0°C, crit = +100.0°C)
Core 1: +36.0°C (high = +80.0°C, crit = +100.0°C)
Core 2: +38.0°C (high = +80.0°C, crit = +100.0°C)
Core 3: +35.0°C (high = +80.0°C, crit = +100.0°C)

acpitz-acpi-0
Adapter: ACPI interface
temp1: +27.8°C (crit = +119.0°C)
temp2: +29.8°C (crit = +119.0°C)

iwlwifi_1-virtual-0
Adapter: Virtual device
temp1: N/A 

pch_skylake-virtual-0
Adapter: Virtual device
temp1: +48.0°C</pre>

* Processor <pre>Architecture: x86_64
CPU op-mode(s): 32-bit, 64-bit
Byte Order: Little Endian
Address sizes: 39 bits physical, 48 bits virtual
CPU(s): 8
On-line CPU(s) list: 0-7
Thread(s) per core: 2
Core(s) per socket: 4
Socket(s): 1
NUMA node(s): 1
Vendor ID: GenuineIntel
CPU family: 6
Model: 158
Model name: Intel(R) Core(TM) i7-7700 CPU @ 3.60GHz
Stepping: 9
CPU MHz: 3641.124
CPU max MHz: 4200.0000
CPU min MHz: 800.0000
BogoMIPS: 7200.00
Virtualization: VT-x
L1d cache: 128 KiB
L1i cache: 128 KiB
L2 cache: 1 MiB
L3 cache: 8 MiB
NUMA node0 CPU(s): 0-7
Vulnerability Itlb multihit: KVM: Mitigation: Split huge pages
Vulnerability L1tf: Mitigation; PTE Inversion; VMX conditional cache flushes, SMT vulnerable
Vulnerability Mds: Mitigation; Clear CPU buffers; SMT vulnerable
Vulnerability Meltdown: Mitigation; PTI
Vulnerability Mmio stale data: Mitigation; Clear CPU buffers; SMT vulnerable
Vulnerability Retbleed: Mitigation; IBRS
Vulnerability Spec store bypass: Mitigation; Speculative Store Bypass disabled via prctl and seccomp
Vulnerability Spectre v1: Mitigation; usercopy/swapgs barriers and __user pointer sanitization
Vulnerability Spectre v2: Mitigation; IBRS, IBPB conditional, RSB filling, PBRSB-eIBRS Not affected
Vulnerability Srbds: Mitigation; Microcode
Vulnerability Tsx async abort: Mitigation; Clear CPU buffers; SMT vulnerable
Flags: fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush dts acpi mmx fxsr sse sse2 ss ht tm pbe syscall nx pdpe1gb rdtscp lm constant_tsc art arch_perfmon pebs bts rep_good nopl xtop
 ology nonstop_tsc cpuid aperfmperf pni pclmulqdq dtes64 monitor ds_cpl vmx smx est tm2 ssse3 sdbg fma cx16 xtpr pdcm pcid sse4_1 sse4_2 x2apic movbe popcnt tsc_deadline_timer aes xsave avx f16c rdrand lahf_
 lm abm 3dnowprefetch cpuid_fault epb invpcid_single pti ssbd ibrs ibpb stibp tpr_shadow vnmi flexpriority ept vpid ept_ad fsgsbase tsc_adjust bmi1 hle avx2 smep bmi2 erms invpcid rtm mpx rdseed adx smap clf
 lushopt intel_pt xsaveopt xsavec xgetbv1 xsaves dtherm ida arat pln pts hwp hwp_notify hwp_act_window hwp_epp md_clear flush_l1d arch_capabilities</pre>
** Intel Core i7-6700 (quad-core 3.4 GHz, up to 4.0 GHz)
* Memory
** Type: DDR4 260-pin SO-DIMM 1.2V Non-ECC Dual channel
** Supported Speed: DDR4-2400 MHz
** Maximum Capacity: Up to 32GB total
** Slots: 2 slots, max 16GB per slot
* Graphics
** Discrete: Intel Corporation HD Graphics 630 (rev 04)
** PCI: NVIDIA GeForce® GTX 1080 w/ 8GB GDDR5x
** Video Output:
*** 2 x DisplayPort 1.3
*** 3 x HDMI 2.0
** Max 4 displays at a time
* Storage
** 2.5“ SATA 6.0Gbps HDD/SSD bay
** M.2 PCIE x4 / SATA SSD slot (22/42,22/60,22/80)
** 3-in-1 SD/SDHC/SDXC SD Card Reader

For some reason, I had the following Linux kernel parameters set ( among others ) on this device for Ubuntu 16.04. I presume that some of this was necessary at one point:

<pre>...
splash fbcon=font:TER6x12 pcie_aspm=off i915.preliminary_hw_support=1 nouveau.modeset=0 snd_hda_intel.audio=1 vt.handoff=1
...
</pre>

==ChatGPT says...==

===Regarding <tt>i915.preliminary_hw_support=1</tt>:===

The Linux boot parameter i915.preliminary_hw_support=1 was used to enable early support for upcoming Intel graphics hardware in the i915 driver before the hardware was officially supported. This was often necessary for new graphics hardware that was not yet fully supported in the Linux kernel.

However, this boot parameter has been deprecated and removed in recent versions of the Linux kernel, and is no longer necessary or functional. As of kernel version 4.3, preliminary hardware support was enabled by default in the i915 driver, and as of kernel version 4.15, this boot parameter was completely removed.

This means that if you're using a modern version of the Linux kernel, you do not need to use this boot parameter, and it will have no effect if you do. Your Intel HD Graphics 630 should be fully supported by the i915 driver without needing any special boot parameters.

If you're having trouble with your graphics, you should ensure that your Linux kernel and your Mesa drivers are up-to-date, as these provide the most recent support for Intel graphics hardware.


===Regarding <tt>pcie_aspm=off</tt>:===

The Linux boot parameter pcie_aspm=off is used to disable Active State Power Management (ASPM) for PCI Express (PCIe) devices.

ASPM is a power management protocol that allows an operating system to save power by setting PCIe devices to low power states when they're not in use. There are two ASPM states: L0s, which reduces power when there's no data to transmit, and L1, which reduces power further when the device is idle.

However, ASPM can sometimes cause issues, including instability or reduced performance, especially on systems with older or non-compliant hardware. If you're experiencing such issues, you might use pcie_aspm=off to disable ASPM and see if that resolves the problem.

Keep in mind that disabling ASPM can potentially increase power consumption, so it's generally recommended to leave it enabled if you're not experiencing any issues.


===Regarding <tt>nouveau.modeset=0</tt>:===

The Linux boot parameter nouveau.modeset=0 is used to disable kernel mode-setting for the Nouveau driver, which is the open source graphics driver for Nvidia graphics cards.

Kernel mode-setting (KMS) is a method for setting resolution and depth in the framebuffer for graphics cards. It allows native resolution in the framebuffer and can provide a nice graphical boot sequence.

However, there can be occasions where you may want to disable KMS. For example, you might want to install proprietary Nvidia drivers instead of using the open-source Nouveau drivers. The proprietary drivers often offer better performance or compatibility, but cannot be used at the same time as Nouveau. In such cases, disabling Nouveau with nouveau.modeset=0 prevents it from loading at boot time, which allows the proprietary drivers to load instead.

After you have installed the proprietary drivers, you might want to blacklist the Nouveau drivers to prevent them from loading in the future. This is typically done by adding a line to a file in /etc/modprobe.d/ (e.g., /etc/modprobe.d/blacklist.conf) that reads blacklist nouveau.

Remember to be careful when modifying these settings, as they can affect the boot process and display of your system. Always make sure you have a way to undo your changes, such as by making a backup of any configuration files you modify.


===Regarding <tt>vt.handoff=1</tt>:===

The vt.handoff=1 boot parameter is specific to Ubuntu and its derivatives. It's related to the handoff between the bootloader and the kernel during the boot process, specifically concerning the virtual terminal (VT) settings.

When the system boots, the bootloader (GRUB, in the case of most Linux distributions) initializes the display to a particular mode. The vt.handoff parameter tells the kernel to continue using the same mode for the virtual console, creating a smooth transition without any flickering or mode changes.
 
Here's what the values of vt.handoff mean:
 
* vt.handoff=1 means the kernel should take over the current console settings from the bootloader.
* vt.handoff=7 is usually the default in Ubuntu, meaning the kernel should use tty7 (the seventh virtual console), which is where the X server usually displays the graphical user interface.
Please note that vt.handoff doesn't affect system performance or capabilities; it's primarily about aesthetics during booting.


=Troubleshooting=
==No Video==
If you are getting no video on any of the video output ports, here's what Zotac says: 
[https://www.zotac.com/ca/faq/video-card-will-not-show-anything Video Card will not show anything]


There may be a few reasons. This may be due to a compatibility issue. Check to make sure your motherboard BIOS is up to date. It can also be related to a power supply. Check your power supply to see if it meets the minimum power requirements. Check if the display cable is working correctly and also the monitor itself. You can also try reseating the graphics card onto the motherboard. If none of the above resolve the issue, please contact us.
 
In my case, one of the power supplies ( the LEFT power socket when the device is viewed from the rear ) was not properly connected and the machine worked completely normally with the exception of not seeing the NVIDIA card at all. When that happened, dmesg output only mentioned the single integrated/discrete video adapter:<pre>jeremy@mediawhore ~ $ dmesg | grep -i 'nvidia\|vga'

[ 0.299622] kernel: pci 0000:00:02.0: vgaarb: setting as boot VGA device
[ 0.299622] kernel: pci 0000:00:02.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[ 0.299622] kernel: pci 0000:00:02.0: vgaarb: bridge control possible
[ 0.299622] kernel: vgaarb: loaded
[ 0.530457] kernel: fb0: VESA VGA frame buffer device
[ 1.520599] kernel: fb0: switching to inteldrmfb from VESA VGA
[ 1.520688] kernel: i915 0000:00:02.0: vgaarb: deactivate vga console
[ 1.522163] kernel: i915 0000:00:02.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem</pre>

However, once the video card is properly seated and BOTH power supplies are properly connected AND the system is rebooted, you should see 2 distinct video devices mentioned in the dmesg output:<pre>jeremy@mediawhore ~ $ dmesg | grep -i 'nvidia\|vga'

[Tue May 23 11:07:42 2023] pci 0000:01:00.0: vgaarb: setting as boot VGA device
[Tue May 23 11:07:42 2023] pci 0000:01:00.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[Tue May 23 11:07:42 2023] pci 0000:01:00.0: vgaarb: bridge control possible
[Tue May 23 11:07:42 2023] vgaarb: loaded
[Tue May 23 11:07:42 2023] fb0: VESA VGA frame buffer device
[Tue May 23 11:08:20 2023] snd_hda_intel 0000:01:00.1: Handle vga_switcheroo audio client
[Tue May 23 11:08:20 2023] nvidia-nvlink: Nvlink Core is being initialized, major device number 235
[Tue May 23 11:08:20 2023] nvidia 0000:01:00.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem
[Tue May 23 11:08:20 2023] NVRM: loading NVIDIA UNIX x86_64 Kernel Module 440.82 Wed Apr 1 20:04:33 UTC 2020
[Tue May 23 11:08:20 2023] nvidia-modeset: Loading NVIDIA Kernel Mode Setting Driver for UNIX platforms 440.82 Wed Apr 1 19:41:29 UTC 2020
[Tue May 23 11:08:20 2023] [drm] [nvidia-drm] [GPU ID 0x00000100] Loading driver
[Tue May 23 11:08:20 2023] [drm] Initialized nvidia-drm 0.0.0 20160202 for 0000:01:00.0 on minor 0
[Tue May 23 11:08:21 2023] input: HDA NVidia HDMI/DP,pcm=3 as /devices/pci0000:00/0000:00:01.0/0000:01:00.1/sound/card1/input3
[Tue May 23 11:08:21 2023] input: HDA NVidia HDMI/DP,pcm=7 as /devices/pci0000:00/0000:00:01.0/0000:01:00.1/sound/card1/input4
[Tue May 23 11:08:21 2023] input: HDA NVidia HDMI/DP,pcm=8 as /devices/pci0000:00/0000:00:01.0/0000:01:00.1/sound/card1/input5
[Tue May 23 11:08:21 2023] input: HDA NVidia HDMI/DP,pcm=9 as /devices/pci0000:00/0000:00:01.0/0000:01:00.1/sound/card1/input6
[Tue May 23 11:08:21 2023] input: HDA NVidia HDMI/DP,pcm=10 as /devices/pci0000:00/0000:00:01.0/0000:01:00.1/sound/card1/input7
[Tue May 23 11:08:21 2023] input: HDA NVidia HDMI/DP,pcm=11 as /devices/pci0000:00/0000:00:01.0/0000:01:00.1/sound/card1/input8
[Tue May 23 11:08:21 2023] input: HDA NVidia HDMI/DP,pcm=12 as /devices/pci0000:00/0000:00:01.0/0000:01:00.1/sound/card1/input9
[Tue May 23 11:08:25 2023] audit: type=1400 audit(1684854506.625:2): apparmor="STATUS" operation="profile_load" profile="unconfined" name="nvidia_modprobe" pid=2071 comm="apparmor_parser"
[Tue May 23 11:08:25 2023] audit: type=1400 audit(1684854506.625:3): apparmor="STATUS" operation="profile_load" profile="unconfined" name="nvidia_modprobe//kmod" pid=2071 comm="apparmor_parser"</pre>

[[Category:Devices]]

Protectli FW6D

2026-01-30T00:57:05Z

Jeremy: /* Details */

=Details=
[[File:FW6DE_front_1600x1600-1-600x600.jpg|320px]]
[[File:FW6DE_front_1600x1600v2-1-600x600.jpg|320px]]

* [https://protectli.com/product/fw6d/ Manufacturer website]
* Power source: 12 Volts -- Nice!
* Fanless case -- Nice!
* CPU: Intel i5 8250U
* Network: 6 x built-in Intel Gigabit Ethernet ports
* RAM: 32 GB
* Storage
** 1TB Kingston mSATA module
** 1TB Samsung SSD 870 QVO
* BIOS: Coreboot -- Nice!

From manufacturer:
* Intel i5 8250U Quad Core with Hyperthreading (8 threads) at up to 3.4GHz (turbo boost)
* Dual DDR4 memory up to 64GB
* mSATA and/or 2.5″ solid state drive
* 6 Intel® Gigabit Ethernet NIC ports
* AES-NI
* Fanless and Silent
* Included 12v Power Supply, VESA mount kit, Serial Console Cable, Quick Start Guide, wire harness and bracket for internal 2.5″ SSD

<pre>
Model FW6D
Description 6X 1G Network Port Fanless Appliance
Processor Intel® Core™ i5-8250U (64 Bit, 1.6GHz base, 3.4GHz Turbo, 6MBSmart Cache)
Processor Cores 4
Processor Threads 8
Intel® AES-NI Supported
Virtualization Intel® Vt-x, Vt-d
Network 6x Intel® 1G Ethernet, RJ-45
Video / Graphics Intel® UHD Graphics 620, 1x HDMI 1.4
Audio Audio over HDMI (AMI Firmware only)
Memory 2x SO-DIMM DDR4-2400 1.2v, Dual Channel , Max 64GB
Storage 1x mSATA
Optional Storage 1x Internal 2.5” SATA 3.0 SSD
External I/O 6x RJ-45 Ethernet
4x USB 3.2 Gen 1 Type-A ports
1x HDMI
1x RJ-45 COM
2x WiFi/LTE Antenna Mounting Holes
1x 12V DC Power Jack
Internal I/O 1x Mini PCIe for mSATA
1x SATA Header, 1x SATA Power
1x Half Height mPCIe (PCIe 3.0x1) for WiFi
1x CMOS Reset (2 pin)
1x CPU Fan Header (4 pin)
1x USB 2.0 Header (8 pin)
1x Front Panel Header (9 pin)
Super I/O Chip IT8613E
BIOS AMI® or coreboot
Indicators 1x LED Power Button (Blue), 1x LED Power Indicator (Green), 1x LED Disk Activity Indicator (Red), 1x LED Disk Activity Indicator (Yellow)
Power Input 12V DC, 1x DC Power Jack
Power Usage Idle: 20W: Max: 80W
Chassis Fanless, Aluminum, Black
Chassis Dimensions 7.25 x 5 x 2.5 in, 184 x 127 x 63.5 mm
Mounting Options Desktop, VESA Bracket, Optional 1RU Rack Mount
Weight 3 lbs, 1.36 Kg
Shipping Weight 5 lbs 2 oz, 2.32 kg
Operating Temperature +14° - +122° F, -10° - +50° C
Operating Humidity 0 – 95% relative humidity, non-condensing
Approvals UL (Power Supply), FCC Part 15 Class B, CE, RoHS
Country of Origin Made in China, Assembled in USA, Canada, or Germany
Optional WiFi 1x Half Height mPCIe 802.11b/g/n (USB) or 802.11ac/a/b/g/n (PCIe)
NDAA Compliancy Compliant

</pre>

==Usage==

I have 2 of these devices, each running [https://www.proxmox.com/en/ Proxmox VE] (GNU/Linux/KVM-based hypervisor), under which each of them run instances of pfSense (among other things) to act as redundant firewalls.

Seiki Digital SE50UY04 50-Inch 4K UHD 120Hz LED HDTV

2026-01-15T05:47:42Z

Jeremy:

=Details=
[[File:01mN5HpeD2zLS5Ga6M2V8WF-3.fit scale.size 1028x578.v 1569482138.jpg|320px]]
 It runs Linux ;-)

=Notes=
* Stuck in burn mode? The remote will not function and a power cycle will not help. With the unit powered on, hold the power button down for about 20 seconds to exit this mode.

=Resources=
* [https://ubuntuforums.org/showthread.php?t=2164924 Seiki U39UY4 (4K resolution) and xrandr problems]
* [https://www.reddit.com/r/hardware/comments/2hunxi/everything_you_wanted_to_know_about_those_dirt/ Everything you wanted to know about those dirt cheap Seiki 4k TVs on reddit]
* [https://drive.google.com/open?id=109xQQ6P34LaAdx5ffXhknrwTvwS1if_m Firmware hack for 120Hz @ 1080p]
* [http://www.zeroepoch.com/blog/se39uy04 Hacking the Seiki SE39UY04]
* [https://www.overclock.net/forum/44-monitors-displays/1442986-playing-my-seiki-se39uy04-got-do-1440p-60hz-playing-other-custom-stuff-7.html Firmware hack post on Overclock forum]
* [https://www.avsforum.com/forum/145-htpc-gaming/1469063-seiki-se50uy04-50-4k-display.html Seiki SE50UY04 50" 4K display on AVS Forum]
* [https://www.monitortests.com/forum/Thread-Custom-Resolution-Utility-CRU Custom Resolution Utility (CRU)] Custom Resolution Utility (CRU) is an EDID editor with a focus on custom resolutions. CRU shows you how the monitor defines resolutions and other capabilities and gives you the power to change it. Add custom resolutions, remove unwanted resolutions, edit FreeSync ranges, and more.
* [https://www.96boards.org/documentation/consumer/dragonboard/dragonboard410c/guides/force-display-res.md.html How to force display resolution and bypass EDID] - For virtual-console level changes
* [https://www.dropbox.com/sh/vjoupvucumkjmeq/AABxVy4hp3kKC_hfZvoCukqGa?dl=0 Alternative Firmware]
* [https://wiki.archlinux.org/index.php/Xrandr#Adding_undetected_resolutions xrandr - Adding undetected resolutions] TL;DR:
<pre>xrandr --newmode "3840x2160_33.00" 375.50 3840 4096 4504 5168 2160 2163 2168 2203 -hsync +vsync</pre> <pre>xrandr --addmode HDMI-2 3840x2160_33.00</pre>Unfortunately, this is not working. I get:
X Error of failed request: BadMatch (invalid parameter attributes)
Major opcode of failed request: 140 (RANDR)
Minor opcode of failed request: 18 (RRAddOutputMode)
Serial number of failed request: 41
Current serial number in output stream: 42
* seiki_custom_edid_120_240hz.inf Pulled from The Wayback Machine <https://web.archive.org/web/20141019151719/http://box.houkouonchi.jp/seiki_custom_edid_120_240hz.inf>
; INF file generated by Monitor Asset Manager (2.59.0.934), 12/12/2013
; Copyright (c) EnTech Taiwan, 1995-2011.
; Internet: http://www.entechtaiwan.com

[Version]
Signature="$WINDOWS NT$"
Class=Monitor
ClassGUID={4d36e96e-e325-11ce-bfc1-08002be10318}
Provider=%MFG%
DriverVer=12/12/2013, 1.0.0.0
;CatalogFile=YourSignedCatalogFile.cat

[DestinationDirs]
DefaultDestDir=23

[SourceDisksNames]
1=%DISC%

[SourceDisksFiles]
;YourColorProfileFile.icm

[Manufacturer]
%VENDOR%=EDID_OVERRIDE,NTx86,NTamd64

[EDID_OVERRIDE.NTx86]
%PRODUCTID%=OVERRIDDEN-EDID.Install, MONITOR\SEK0000

[EDID_OVERRIDE.NTamd64]
%PRODUCTID%=OVERRIDDEN-EDID.Install.NTamd64, MONITOR\SEK0000

[OVERRIDDEN-EDID.Install.NTx86]
DelReg=DEL_CURRENT_REG
AddReg=OVERRIDDEN-EDID.AddReg, MODE1, DPMS
CopyFiles=OVERRIDDEN-EDID.CopyFiles

[OVERRIDDEN-EDID.Install.NTamd64]
DelReg=DEL_CURRENT_REG
AddReg=OVERRIDDEN-EDID.AddReg, MODE1, DPMS
CopyFiles=OVERRIDDEN-EDID.CopyFiles

[OVERRIDDEN-EDID.Install.NTx86.HW]
AddReg=OVERRIDDEN-EDID_AddReg

[OVERRIDDEN-EDID.Install.NTamd64.HW]
AddReg=OVERRIDDEN-EDID_AddReg

[OVERRIDDEN-EDID_AddReg]
;Base EDID
HKR,EDID_OVERRIDE,"0",0x01,0x00,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0x00,0x4C,0xAB,0x00,0x00,0x01,0x00,0x00,0x00,0x09,0x17,0x01,0x03,0x81,0x6E,0x3E,0x78,0x8A,0xA5,0x8E,0xA6,0x54,0x4A,0x9C,0x26,0x12,0x45,0x46,0x04,0x43,0x00,0x81,0x40,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x04,0x74,0x00,0x30,0xF2,0x70,0x5A,0x80,0xB0,0x58,0x8A,0x00,0xBA,0x89,0x21,0x00,0x00,0x1E,0x04,0x74,0x80,0x18,0x71,0x38,0x2D,0x40,0x58,0x2C,0x45,0x00,0xB9,0x88,0x21,0x00,0x00,0x1E,0x04,0x74,0x00,0x72,0x51,0xD0,0x1E,0x20,0x6E,0x28,0x55,0x00,0xB8,0x87,0x21,0x00,0x00,0x1E,0x00,0x00,0x00,0xFC,0x00,0x53,0x45,0x35,0x30,0x2D,0x33,0x39,0x55,0x59,0x30,0x34,0x0A,0x20,0x01,0xF5

[DEL_CURRENT_REG]
HKR,MODES
HKR,EDID_OVERRIDE
HKR,,MaxResolution
HKR,,DPMS
HKR,,ICMProfile

[DPMS]
HKR,,DPMS,,1

[MODE1]
HKR,,MaxResolution,,"3840,2160"

[OVERRIDDEN-EDID.AddReg]
HKR,"MODES\3840,2160",Mode1,,""

[OVERRIDDEN-EDID.CopyFiles]
;YourColorProfileFile.icm

[Strings]
MFG="EnTech Taiwan"
DISC="Monitor EDID Override Installation Disk"
PRODUCTID="SEK SE50UY04/SE39UY04 (Custom High Hz EDID)"
VENDOR="SEK"

[[Category:Devices]]

MAGNUS EN1080 10 Year Anniversary Edition (ZBOX-EN1080)

2026-01-15T04:50:47Z

Jeremy:

=Details=

[[File:Magnus en1080 image02.jpg|320px]]
 

THE 10 YEAR ANNIVERSARY EDITION MAGNUS EN1080 is ZOTAC‘s second generation of water cooling Mini PC. It ascends gaming to the Virtual Reality with an Intel 6th Generation Skylake Core i7 processor and NVIDIA GeForce® GTX 1080 graphics - the first Mini PC to equip NVIDIA‘s new generation flagship graphics. The unique SPECTRA lighting system gives the system a glow of its own, and users can customize the lighting with the SPECTRA utility.
* Resources
** [https://www.zotac.com/se/product/mini_pcs/magnus-en1080-10-year-anniversary-edition MAGNUS EN1080 10 Year Anniversary Edition (ZBOX-EN1080) -- Product Page]
** Windows Drivers: https://www.zotac.com/se/files/download/by_product?p_nid=607475&driver_type=All&os=All
** Linux Drivers: https://webclone.zotac.com/eu/files/download/by_product?p_nid=607474&driver_type=All&os=All
** [https://www.zotac.com/mu/files/download/graphics_cards Generic Driver Page] (find the section titled "ZOTAC GeForce GTX 1080 ArcticStorm Thermaltake 10 週年版" ) Windows version says: "FireStorm_V2.0.0.014TT for GTX 1080 ArcticStorm Thermaltake 10 Year Anniversary Edition"
** [https://www.reddit.com/r/htpc/comments/5yhvtm/how_i_finally_fixed_my_4k_video_stuttering/ How I finally fixed my 4k video stuttering problem, a warning to everyone trying or eventually going to try getting a 4k movie PC up and running]

* Chipsets:
** NCT5532 ???

* BIOS
** Latest version as of 2023-05-23 10:12:49 EDT (Tuesday): <tt>Version 2K180904</tt> ( 2018-09-04 ??? ) https://www.zotac.com/download/mediadrivers/mb/bios/pb336EN1080.zip
*** <tt>MD5...: 052342935d95a96c55551dbc33e0db6f</tt>
*** <tt>SHA1..: 33e9afdb98233abedfc09201dc4cc06db1a4780e</tt>
*** <tt>SHA256: e9042d0029b69692d628b94d139a7d02679b200c3e9ffd2f3c7694c85c201a81</tt>
** Files in archive:<pre>.
├── AfuEfix64.efi
├── B336P114.bin
├── EFI
│ └── BOOT
│ ├── BootIa32.efi
│ └── Bootx64.efi
├── flash.nsh
├── fparts.txt
├── Fpt.efi
├── Note.txt
├── pb336EN1080.zip
└── Readme.txt

2 directories, 10 files
</pre>
* PCI Devices:
** 00:00.0 Host bridge: Intel Corporation Xeon E3-1200 v6/7th Gen Core Processor Host Bridge/DRAM Registers (rev 05)
** 00:02.0 VGA compatible controller: Intel Corporation HD Graphics 630 (rev 04)
** 00:08.0 System peripheral: Intel Corporation Xeon E3-1200 v5/v6 / E3-1500 v5 / 6th/7th/8th Gen Core Processor Gaussian Mixture Model
** 00:14.0 USB controller: Intel Corporation 100 Series/C230 Series Chipset Family USB 3.0 xHCI Controller (rev 31)
** 00:14.2 Signal processing controller: Intel Corporation 100 Series/C230 Series Chipset Family Thermal Subsystem (rev 31)
** 00:16.0 Communication controller: Intel Corporation 100 Series/C230 Series Chipset Family MEI Controller #1 (rev 31)
** 00:17.0 SATA controller: Intel Corporation Q170/Q150/B150/H170/H110/Z170/CM236 Chipset SATA Controller [AHCI Mode] (rev 31)
** 00:1c.0 PCI bridge: Intel Corporation 100 Series/C230 Series Chipset Family PCI Express Root Port #5 (rev f1)
** 00:1c.5 PCI bridge: Intel Corporation 100 Series/C230 Series Chipset Family PCI Express Root Port #6 (rev f1)
** 00:1c.6 PCI bridge: Intel Corporation 100 Series/C230 Series Chipset Family PCI Express Root Port #7 (rev f1)
** 00:1c.7 PCI bridge: Intel Corporation 100 Series/C230 Series Chipset Family PCI Express Root Port #8 (rev f1)
** 00:1d.0 PCI bridge: Intel Corporation 100 Series/C230 Series Chipset Family PCI Express Root Port #9 (rev f1)
** 00:1f.0 ISA bridge: Intel Corporation B150 Chipset LPC/eSPI Controller (rev 31)
** 00:1f.2 Memory controller: Intel Corporation 100 Series/C230 Series Chipset Family Power Management Controller (rev 31)
** 00:1f.3 Audio device: Intel Corporation 100 Series/C230 Series Chipset Family HD Audio Controller (rev 31)
** 00:1f.4 SMBus: Intel Corporation 100 Series/C230 Series Chipset Family SMBus (rev 31)
** 01:00.0 Ethernet controller: Realtek Semiconductor Co., Ltd. RTL8111/8168/8411 PCI Express Gigabit Ethernet Controller (rev 07)
** 02:00.0 USB controller: ASMedia Technology Inc. ASM1142 USB 3.1 Host Controller
** 03:00.0 Network controller: Intel Corporation Wireless 3165 (rev 81)
** 04:00.0 Ethernet controller: Realtek Semiconductor Co., Ltd. RTL8111/8168/8411 PCI Express Gigabit Ethernet Controller (rev 07)
** 05:00.0 Non-Volatile memory controller: Samsung Electronics Co Ltd NVMe SSD Controller SM961/PM961

* USB Devices:
** Bus 004 Device 001: ID 1d6b:0003 Linux Foundation 3.0 root hub
** Bus 003 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
** Bus 002 Device 001: ID 1d6b:0003 Linux Foundation 3.0 root hub
** Bus 001 Device 004: ID 2047:0305 Texas Instruments Zotac
** Bus 001 Device 003: ID 0bda:0153 Realtek Semiconductor Corp. 3-in-1 (SD/SDHC/SDXC) Card Reader
** Bus 001 Device 002: ID 8087:0a2a Intel Corp.
** Bus 001 Device 005: ID 2047:0200 Texas Instruments MSP430 USB HID Bootstrap Loader
** Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub

* LM Sensors drivers known to work:
** coretemp
** nct6775<pre>coretemp-isa-0000
Adapter: ISA adapter
Package id 0: +37.0°C (high = +80.0°C, crit = +100.0°C)
Core 0: +36.0°C (high = +80.0°C, crit = +100.0°C)
Core 1: +36.0°C (high = +80.0°C, crit = +100.0°C)
Core 2: +38.0°C (high = +80.0°C, crit = +100.0°C)
Core 3: +35.0°C (high = +80.0°C, crit = +100.0°C)

acpitz-acpi-0
Adapter: ACPI interface
temp1: +27.8°C (crit = +119.0°C)
temp2: +29.8°C (crit = +119.0°C)

iwlwifi_1-virtual-0
Adapter: Virtual device
temp1: N/A 

pch_skylake-virtual-0
Adapter: Virtual device
temp1: +48.0°C</pre>

* Processor <pre>Architecture: x86_64
CPU op-mode(s): 32-bit, 64-bit
Byte Order: Little Endian
Address sizes: 39 bits physical, 48 bits virtual
CPU(s): 8
On-line CPU(s) list: 0-7
Thread(s) per core: 2
Core(s) per socket: 4
Socket(s): 1
NUMA node(s): 1
Vendor ID: GenuineIntel
CPU family: 6
Model: 158
Model name: Intel(R) Core(TM) i7-7700 CPU @ 3.60GHz
Stepping: 9
CPU MHz: 3641.124
CPU max MHz: 4200.0000
CPU min MHz: 800.0000
BogoMIPS: 7200.00
Virtualization: VT-x
L1d cache: 128 KiB
L1i cache: 128 KiB
L2 cache: 1 MiB
L3 cache: 8 MiB
NUMA node0 CPU(s): 0-7
Vulnerability Itlb multihit: KVM: Mitigation: Split huge pages
Vulnerability L1tf: Mitigation; PTE Inversion; VMX conditional cache flushes, SMT vulnerable
Vulnerability Mds: Mitigation; Clear CPU buffers; SMT vulnerable
Vulnerability Meltdown: Mitigation; PTI
Vulnerability Mmio stale data: Mitigation; Clear CPU buffers; SMT vulnerable
Vulnerability Retbleed: Mitigation; IBRS
Vulnerability Spec store bypass: Mitigation; Speculative Store Bypass disabled via prctl and seccomp
Vulnerability Spectre v1: Mitigation; usercopy/swapgs barriers and __user pointer sanitization
Vulnerability Spectre v2: Mitigation; IBRS, IBPB conditional, RSB filling, PBRSB-eIBRS Not affected
Vulnerability Srbds: Mitigation; Microcode
Vulnerability Tsx async abort: Mitigation; Clear CPU buffers; SMT vulnerable
Flags: fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush dts acpi mmx fxsr sse sse2 ss ht tm pbe syscall nx pdpe1gb rdtscp lm constant_tsc art arch_perfmon pebs bts rep_good nopl xtop
 ology nonstop_tsc cpuid aperfmperf pni pclmulqdq dtes64 monitor ds_cpl vmx smx est tm2 ssse3 sdbg fma cx16 xtpr pdcm pcid sse4_1 sse4_2 x2apic movbe popcnt tsc_deadline_timer aes xsave avx f16c rdrand lahf_
 lm abm 3dnowprefetch cpuid_fault epb invpcid_single pti ssbd ibrs ibpb stibp tpr_shadow vnmi flexpriority ept vpid ept_ad fsgsbase tsc_adjust bmi1 hle avx2 smep bmi2 erms invpcid rtm mpx rdseed adx smap clf
 lushopt intel_pt xsaveopt xsavec xgetbv1 xsaves dtherm ida arat pln pts hwp hwp_notify hwp_act_window hwp_epp md_clear flush_l1d arch_capabilities</pre>
** Intel Core i7-6700 (quad-core 3.4 GHz, up to 4.0 GHz)
* Graphics
** Discrete: Intel Corporation HD Graphics 630 (rev 04)
** PCI: NVIDIA GeForce® GTX 1080 w/ 8GB GDDR5x
** Video Output:
*** 2 x DisplayPort 1.3
*** 3 x HDMI 2.0
** Max 4 displays at a time
* Storage
** 2.5“ SATA 6.0Gbps HDD/SSD bay
** M.2 PCIE x4 / SATA SSD slot (22/42,22/60,22/80)
** 3-in-1 SD/SDHC/SDXC SD Card Reader

For some reason, I had the following Linux kernel parameters set ( among others ) on this device for Ubuntu 16.04. I presume that some of this was necessary at one point:

<pre>...
splash fbcon=font:TER6x12 pcie_aspm=off i915.preliminary_hw_support=1 nouveau.modeset=0 snd_hda_intel.audio=1 vt.handoff=1
...
</pre>

==ChatGPT says...==

===Regarding <tt>i915.preliminary_hw_support=1</tt>:===

The Linux boot parameter i915.preliminary_hw_support=1 was used to enable early support for upcoming Intel graphics hardware in the i915 driver before the hardware was officially supported. This was often necessary for new graphics hardware that was not yet fully supported in the Linux kernel.

However, this boot parameter has been deprecated and removed in recent versions of the Linux kernel, and is no longer necessary or functional. As of kernel version 4.3, preliminary hardware support was enabled by default in the i915 driver, and as of kernel version 4.15, this boot parameter was completely removed.

This means that if you're using a modern version of the Linux kernel, you do not need to use this boot parameter, and it will have no effect if you do. Your Intel HD Graphics 630 should be fully supported by the i915 driver without needing any special boot parameters.

If you're having trouble with your graphics, you should ensure that your Linux kernel and your Mesa drivers are up-to-date, as these provide the most recent support for Intel graphics hardware.


===Regarding <tt>pcie_aspm=off</tt>:===

The Linux boot parameter pcie_aspm=off is used to disable Active State Power Management (ASPM) for PCI Express (PCIe) devices.

ASPM is a power management protocol that allows an operating system to save power by setting PCIe devices to low power states when they're not in use. There are two ASPM states: L0s, which reduces power when there's no data to transmit, and L1, which reduces power further when the device is idle.

However, ASPM can sometimes cause issues, including instability or reduced performance, especially on systems with older or non-compliant hardware. If you're experiencing such issues, you might use pcie_aspm=off to disable ASPM and see if that resolves the problem.

Keep in mind that disabling ASPM can potentially increase power consumption, so it's generally recommended to leave it enabled if you're not experiencing any issues.


===Regarding <tt>nouveau.modeset=0</tt>:===

The Linux boot parameter nouveau.modeset=0 is used to disable kernel mode-setting for the Nouveau driver, which is the open source graphics driver for Nvidia graphics cards.

Kernel mode-setting (KMS) is a method for setting resolution and depth in the framebuffer for graphics cards. It allows native resolution in the framebuffer and can provide a nice graphical boot sequence.

However, there can be occasions where you may want to disable KMS. For example, you might want to install proprietary Nvidia drivers instead of using the open-source Nouveau drivers. The proprietary drivers often offer better performance or compatibility, but cannot be used at the same time as Nouveau. In such cases, disabling Nouveau with nouveau.modeset=0 prevents it from loading at boot time, which allows the proprietary drivers to load instead.

After you have installed the proprietary drivers, you might want to blacklist the Nouveau drivers to prevent them from loading in the future. This is typically done by adding a line to a file in /etc/modprobe.d/ (e.g., /etc/modprobe.d/blacklist.conf) that reads blacklist nouveau.

Remember to be careful when modifying these settings, as they can affect the boot process and display of your system. Always make sure you have a way to undo your changes, such as by making a backup of any configuration files you modify.


===Regarding <tt>vt.handoff=1</tt>:===

The vt.handoff=1 boot parameter is specific to Ubuntu and its derivatives. It's related to the handoff between the bootloader and the kernel during the boot process, specifically concerning the virtual terminal (VT) settings.

When the system boots, the bootloader (GRUB, in the case of most Linux distributions) initializes the display to a particular mode. The vt.handoff parameter tells the kernel to continue using the same mode for the virtual console, creating a smooth transition without any flickering or mode changes.
 
Here's what the values of vt.handoff mean:
 
* vt.handoff=1 means the kernel should take over the current console settings from the bootloader.
* vt.handoff=7 is usually the default in Ubuntu, meaning the kernel should use tty7 (the seventh virtual console), which is where the X server usually displays the graphical user interface.
Please note that vt.handoff doesn't affect system performance or capabilities; it's primarily about aesthetics during booting.


=Troubleshooting=
==No Video==
If you are getting no video on any of the video output ports, here's what Zotac says: 
[https://www.zotac.com/ca/faq/video-card-will-not-show-anything Video Card will not show anything]


There may be a few reasons. This may be due to a compatibility issue. Check to make sure your motherboard BIOS is up to date. It can also be related to a power supply. Check your power supply to see if it meets the minimum power requirements. Check if the display cable is working correctly and also the monitor itself. You can also try reseating the graphics card onto the motherboard. If none of the above resolve the issue, please contact us.
 
In my case, one of the power supplies ( the LEFT power socket when the device is viewed from the rear ) was not properly connected and the machine worked completely normally with the exception of not seeing the NVIDIA card at all. When that happened, dmesg output only mentioned the single integrated/discrete video adapter:<pre>jeremy@mediawhore ~ $ dmesg | grep -i 'nvidia\|vga'

[ 0.299622] kernel: pci 0000:00:02.0: vgaarb: setting as boot VGA device
[ 0.299622] kernel: pci 0000:00:02.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[ 0.299622] kernel: pci 0000:00:02.0: vgaarb: bridge control possible
[ 0.299622] kernel: vgaarb: loaded
[ 0.530457] kernel: fb0: VESA VGA frame buffer device
[ 1.520599] kernel: fb0: switching to inteldrmfb from VESA VGA
[ 1.520688] kernel: i915 0000:00:02.0: vgaarb: deactivate vga console
[ 1.522163] kernel: i915 0000:00:02.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem</pre>

However, once the video card is properly seated and BOTH power supplies are properly connected AND the system is rebooted, you should see 2 distinct video devices mentioned in the dmesg output:<pre>jeremy@mediawhore ~ $ dmesg | grep -i 'nvidia\|vga'

[Tue May 23 11:07:42 2023] pci 0000:01:00.0: vgaarb: setting as boot VGA device
[Tue May 23 11:07:42 2023] pci 0000:01:00.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[Tue May 23 11:07:42 2023] pci 0000:01:00.0: vgaarb: bridge control possible
[Tue May 23 11:07:42 2023] vgaarb: loaded
[Tue May 23 11:07:42 2023] fb0: VESA VGA frame buffer device
[Tue May 23 11:08:20 2023] snd_hda_intel 0000:01:00.1: Handle vga_switcheroo audio client
[Tue May 23 11:08:20 2023] nvidia-nvlink: Nvlink Core is being initialized, major device number 235
[Tue May 23 11:08:20 2023] nvidia 0000:01:00.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem
[Tue May 23 11:08:20 2023] NVRM: loading NVIDIA UNIX x86_64 Kernel Module 440.82 Wed Apr 1 20:04:33 UTC 2020
[Tue May 23 11:08:20 2023] nvidia-modeset: Loading NVIDIA Kernel Mode Setting Driver for UNIX platforms 440.82 Wed Apr 1 19:41:29 UTC 2020
[Tue May 23 11:08:20 2023] [drm] [nvidia-drm] [GPU ID 0x00000100] Loading driver
[Tue May 23 11:08:20 2023] [drm] Initialized nvidia-drm 0.0.0 20160202 for 0000:01:00.0 on minor 0
[Tue May 23 11:08:21 2023] input: HDA NVidia HDMI/DP,pcm=3 as /devices/pci0000:00/0000:00:01.0/0000:01:00.1/sound/card1/input3
[Tue May 23 11:08:21 2023] input: HDA NVidia HDMI/DP,pcm=7 as /devices/pci0000:00/0000:00:01.0/0000:01:00.1/sound/card1/input4
[Tue May 23 11:08:21 2023] input: HDA NVidia HDMI/DP,pcm=8 as /devices/pci0000:00/0000:00:01.0/0000:01:00.1/sound/card1/input5
[Tue May 23 11:08:21 2023] input: HDA NVidia HDMI/DP,pcm=9 as /devices/pci0000:00/0000:00:01.0/0000:01:00.1/sound/card1/input6
[Tue May 23 11:08:21 2023] input: HDA NVidia HDMI/DP,pcm=10 as /devices/pci0000:00/0000:00:01.0/0000:01:00.1/sound/card1/input7
[Tue May 23 11:08:21 2023] input: HDA NVidia HDMI/DP,pcm=11 as /devices/pci0000:00/0000:00:01.0/0000:01:00.1/sound/card1/input8
[Tue May 23 11:08:21 2023] input: HDA NVidia HDMI/DP,pcm=12 as /devices/pci0000:00/0000:00:01.0/0000:01:00.1/sound/card1/input9
[Tue May 23 11:08:25 2023] audit: type=1400 audit(1684854506.625:2): apparmor="STATUS" operation="profile_load" profile="unconfined" name="nvidia_modprobe" pid=2071 comm="apparmor_parser"
[Tue May 23 11:08:25 2023] audit: type=1400 audit(1684854506.625:3): apparmor="STATUS" operation="profile_load" profile="unconfined" name="nvidia_modprobe//kmod" pid=2071 comm="apparmor_parser"</pre>

[[Category:Devices]]

Seiki Digital SE50UY04 50-Inch 4K UHD 120Hz LED HDTV

2026-01-15T04:50:13Z

Jeremy:

HPE Proliant MicroServer Gen10

2025-11-21T18:05:59Z

Jeremy: /* My Model */

=HPE Proliant MicroServer Gen10=
[[File:873830-421 1 Supersize.jpg|128px]] 

==Overview==
* CPU
** AMD Opteron 4-core X3421 3.4 GHz ( or similar depending on model configuration )
* RAM
** Type: DDR4 Unbuffered (UDIMM)
** DIMM Slots: 2
** Max RAM: 32GB (2 x 16GB) PC4-2400T DDR4 UDIMM ( DDr4-2400 )
* Display / Graphics
** GPU: Integrated AMD/ATI Wani (Radeon R5/R6/R7)
** 1 x VGA port
** 2 x Display Ports 1.2
* Network
** Embedded Broadcom BCM5720 Dual Port Gbe LOM
* Expansion bays
** 1 x media bay (Optional (1) DVD-RW or (1) SATA SSD)
* Drive bays
** 4 x 3.5" SATA 6Gb/s via caddy-less drive bays (behind front cover) -- advertised as Non-hot plug SATA
** 1 x on-board SATA port (for device in media bay)
* USB
** Font: 2 x USB 3.0 ports (not blue for whatever reason)
** Rear: 2 x USB 3.0 ports (not blue for whatever reason), 2 x USB 2.0 ports
** 1 x on-board USB 2.0 port
* Expansion Slots
** 1 x PCIe3 x4 (1) (low-profile only in this chassis)
** 1 x PCIe3 x8 (8, 4, 1) (low-profile only in this chassis)
* Fans
** One (1) non-redundant system fan shipped standard -- not software controllable
* Misc
** ACPI V5.0 Compliant
** Slot for TPM (not included) -- HPE Trusted Platform Module (TPM) 2.0 kit 745823-B21
** PCIe 3.0 Compliant
** PXE Support
** WOL Support
** EMC Class B
** LFF/SFF SATA connector on motherboard connects to backplane for 4 x HDDs
** Hard drive screws: 4 x per drive = 16
** Front bezel lock/unlock indicators
** Power on/Standby button and system power LED
** Health LED
** NIC status LED
** Drive activity LED ( single, not per-drive )
* Management
** BMC / IPMI / iLO: NO

==Resources==
* [https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=emr_na-a00028524en_us Manufacturer page]
* [https://support.hpe.com/hpesc/public/km/product/1009955119/HPE-ProLiant-MicroServer-Gen10-Server?ismnp=0&l5oid=1009955118#t=All&sort=relevancy&numberOfResults=25 Downloads]
* Marketing: https://buy.hpe.com/us/en/servers/proliant-microserver/proliant-microserver/proliant-microserver/hpe-proliant-microserver-gen10/p/1009955118
* Support: https://support.hpe.com/hpesc/public/km/product/1009955119/Product#t=DriversandSoftware&sort=relevancy&layout=table&numberOfResults=25
* Misc: https://forum.openmediavault.org/index.php/Thread/19388-HP-microserver-Gen10/?pageNo=2
* User Manual: https://content.etilize.com/User-Manual/1046044075.pdf
* Specifications: https://h20195.www2.hpe.com/v2/GetDocument.aspx?docname=a00008701enw
* Storage Controller Specifications: https://h20195.www2.hpe.com/v2/Getdocument.aspx?docname=a00017196ENW

==POST==
<pre>
Version 2.18.1263. Copyright (C) 2020 American Megatrends, Inc.
BIOS Date: 02/19/2020 11:03:31 Ver: ZA10A380
Press <F2> or <DEL> to enter setup.
Press <F11> to enter Boot Menu.
</pre>
==Keyboard Bindings at POST==
* F2 or DEL : Enter BIOS Setup (aka "Aptio Setup")
* F11 : Enter Boot Menu
* Ctrl + S : Broadcom NetXtreme Boot Agent configuration menu
* Ctrl + M : Marvell BIOS Utility

===Updating Storage Controller Firmware===
* Go here and find the latest version for the "Firmware | Storage Controller" download: https://support.hpe.com/hpsc/swd/public/detail?swItemId=MTX_8374214d9a3a4392878c9bba59#tab2 (e.g. [https://downloads.hpe.com/pub/softlib2/software1/sc-linux-fw-array/p164515310/v177536/rpm/RPMS/x86_64/firmware-smartarray-f7c07bdbbd-3.21-1.1.x86_64.rpm firmware-smartarray-f7c07bdbbd-3.21-1.1.x86_64.rpm]
* Generic method without installing a package:<pre>root@daytapod1 ~/firmware $ rpm2cpio firmware-smartarray-f7c07bdbbd-3.21-1.1.x86_64.rpm | cpio -idmv
root@daytapod1 ~/firmware $ cd usr/lib/x86_64-linux-gnu/firmware-smartarray-f7c07bdbbd-3.21-1.1
root@daytapod1 ~/firmware/usr/lib/x86_64-linux-gnu/firmware-smartarray-f7c07bdbbd-3.21-1.1 $ ./setup

Supplemental Update / Online ROM Flash Component for Linux (x64) - HPE Smart Array P408i-p, P408e-p, P408i-a, P408i-c, E208i-p, E208e-p, E208i-c, E208i-a, P408i-sb, P408e-m, P204i-c, P204i-b, P816i and P416ie-m SR Gen10 (3.21), searching...
============ Summary ============
Smart Component Finished
Exit Status: 3
Update not attempted. All selected devices are either up-to-date or have newer versions installed.</pre>
* For rpm-based distros:<pre>rpm -ivh firmware-smartarray-f7c07bdbbd-3.21-1.1.x86_64.rpm</pre>
* For apt-based distros:<pre>apt-get install alien
alien firmware-smartarray-f7c07bdbbd-3.21-1.1.x86_64.rpm
dpkg -i firmware-smartarray-f7c07bdbbd_3.21-2.1_amd64.deb</pre>
* Reboot

===Accessing Marvell BIOS Utility===

The Marvell BIOS Utility is built into the embedded Marvell storage controller ROM. Use this utility to create and manage RAID virtual disks and arrays using the drives connected to the embedded storage controller. Accessing the Marvell BIOS Utility under legacy boot mode

Procedure:
# Reboot the server.
# On the POST drive information screen, press Ctrl+M.

===Updating BIOS===
* Latest BIOS version (as of 2021-02-06 09:28:10 EST): ZA10A380 (13 Mar 2020) 

Damn HP requires that you create an account to download BIOS firmware. WTF? Anyway...
* Go here: https://support.hpe.com/hpsc/swd/public/detail?swItemId=MTX_8374214d9a3a4392878c9bba59#tab2
* Download the tar file (e.g. [https://support.hpe.com/hpsc/swd/public/download/downloads.hpe.com/pub/softlib2/software1/pubsw-linux/p1122136033/v179389/System_BIOS_v_ZA10A380_for_MicroServer_Gen10_Linux.tgz System_BIOS_v_ZA10A380_for_MicroServer_Gen10_Linux.tgz])
* Please note that: When updating the System BIOS from version ZA10A320 (or earlier) to version ZA10A330 (or later), the following system BIOS configuration settings will revert to their factory default values:
** System time and date
** Hard drive configuration
** Boot device sequence
** System passwords
** Security setup

* Extract it and apply the update
root@daytapod1 ~/firmware $ tar xzvf System_BIOS_v_ZA10A380_for_MicroServer_Gen10_Linux.tgz
root@daytapod1 ~/firmware $ cd System_BIOS_v_ZA10A380_for_MicroServer_Gen10_Linux/Lnx/
root@daytapod1 ~/firmware/System_BIOS_v_ZA10A380_for_MicroServer_Gen10_Linux/Lnx $ ./flashbios.sh
+---------------------------------------------------------------------------+
| AMI Firmware Update Utility v5.08.02.1189 |
| Copyright (C)2016 American Megatrends Inc. All Rights Reserved. |
+---------------------------------------------------------------------------+
Reading flash ............... done
- FFS checksums ......... ok
Erasing Boot Block .......... done
Updating Boot Block ......... done
Verifying Boot Block ........ done
Erasing Main Block .......... done
Updating Main Block ......... done
Verifying Main Block ........ done
Erasing NVRAM Block ......... done
Updating NVRAM Block ........ done
Verifying NVRAM Block ....... done
Erasing NCB Block ........... done
Updating NCB Block .......... done
* Reboot

==To Research==
* There is a 6th SATA port traced on the motherboard (without the SATA plug) but only 5 show in the BIOS (4 front bay and 1 on the motherboard with SATA plug). Can the BIOS be hacked to enable the 6th SATA port?

==Devices==
00:00.0 Host bridge: Advanced Micro Devices, Inc. [AMD] Family 15h (Models 60h-6fh) Processor Root Complex
00:00.2 IOMMU: Advanced Micro Devices, Inc. [AMD] Family 15h (Models 60h-6fh) I/O Memory Management Unit
00:01.0 VGA compatible controller: Advanced Micro Devices, Inc. [AMD/ATI] Wani [Radeon R5/R6/R7 Graphics] (rev 84)
00:01.1 Audio device: Advanced Micro Devices, Inc. [AMD/ATI] Kabini HDMI/DP Audio
00:02.0 Host bridge: Advanced Micro Devices, Inc. [AMD] Family 15h (Models 60h-6fh) Host Bridge
00:02.2 PCI bridge: Advanced Micro Devices, Inc. [AMD] Family 15h (Models 60h-6fh) Processor Root Port
00:02.5 PCI bridge: Advanced Micro Devices, Inc. [AMD] Family 15h (Models 60h-6fh) Processor Root Port
00:03.0 Host bridge: Advanced Micro Devices, Inc. [AMD] Family 15h (Models 60h-6fh) Host Bridge
00:08.0 Encryption controller: Advanced Micro Devices, Inc. [AMD] Carrizo Platform Security Processor
00:09.0 Host bridge: Advanced Micro Devices, Inc. [AMD] Carrizo Audio Dummy Host Bridge
00:10.0 USB controller: Advanced Micro Devices, Inc. [AMD] FCH USB XHCI Controller (rev 20)
00:11.0 SATA controller: Advanced Micro Devices, Inc. [AMD] FCH SATA Controller [AHCI mode] (rev 49)
00:12.0 USB controller: Advanced Micro Devices, Inc. [AMD] FCH USB EHCI Controller (rev 49)
00:14.0 SMBus: Advanced Micro Devices, Inc. [AMD] FCH SMBus Controller (rev 4a)
00:14.3 ISA bridge: Advanced Micro Devices, Inc. [AMD] FCH LPC Bridge (rev 11)
00:18.0 Host bridge: Advanced Micro Devices, Inc. [AMD] Family 15h (Models 60h-6fh) Processor Function 0
00:18.1 Host bridge: Advanced Micro Devices, Inc. [AMD] Family 15h (Models 60h-6fh) Processor Function 1
00:18.2 Host bridge: Advanced Micro Devices, Inc. [AMD] Family 15h (Models 60h-6fh) Processor Function 2
00:18.3 Host bridge: Advanced Micro Devices, Inc. [AMD] Family 15h (Models 60h-6fh) Processor Function 3
00:18.4 Host bridge: Advanced Micro Devices, Inc. [AMD] Family 15h (Models 60h-6fh) Processor Function 4
00:18.5 Host bridge: Advanced Micro Devices, Inc. [AMD] Family 15h (Models 60h-6fh) Processor Function 5
01:00.0 SATA controller: Marvell Technology Group Ltd. 88SE9230 PCIe SATA 6Gb/s Controller (rev 11)
02:00.0 Ethernet controller: Broadcom Inc. and subsidiaries NetXtreme BCM5720 2-port Gigabit Ethernet PCIe
02:00.1 Ethernet controller: Broadcom Inc. and subsidiaries NetXtreme BCM5720 2-port Gigabit Ethernet PCIe

==Drivers==
* ahci AHCI SATA low-level driver
* amdgpu AMD GPU
* ehci-pci
* fam15h_power AMD Family 15h CPU processor power monitor
* k10temp AMD Family 10h+ CPU core temperature monitor
* pcieport
* piix4_smbus
* snd_hda_intel Intel HDA driver
* tg3 Broadcom Tigon3 ethernet driver
* xhci_hcd

lm_sensors found the following:
k10temp-pci-00c3
Adapter: PCI adapter
temp1: +23.0°C (high = +70.0°C)
(crit = +100.0°C, hyst = +99.0°C)

amdgpu-pci-0008
Adapter: PCI adapter
vddgfx: 750.00 mV
vddnb: 875.00 mV
edge: +23.0°C (crit = +1.0°C, hyst = -273.1°C)

fam15h_power-pci-00c4
Adapter: PCI adapter
power1: 21.27 mW (avg = 2.27 mW, interval = 0.01 s)
(crit = 15.00 W)

Not that impressive, but not bad.

==Potential Upgrade Parts List==
* HPE 8 GB (1x8GB) Single Rank x8 DDR4-2400 CAS-17-17-17 Unbuffered Standard Memory Kit 862974-B21
* HPE 16 GB (1x16GB) Dual Rank x8 DDR4-2400 CAS-17-17-17 Unbuffered Standard Memory Kit 862976-B21
* HPE Ethernet 10Gb 2-port 521T Adapter 867707-B21
* HPE Trusted Platform Module 2.0 Kit 745823-B21
* LSI 9200-8E - for connecting to external storage enclosures
* [https://www.icydock.com/goods.php?id=251 ICY Dock MB411SPO-1B] - HDD Hot-Swap SATA Mobile Rack for 12.7mm Slim CD/DVD-ROM Optical Bay (Fits 12.7mm height ODD Slot)
** Uses SATA port
* 1 x [https://www.icydock.com/goods.php?id=317 ICY Dock ToughArmor MB852M2PO-B] - Dual hot swap NVME in slim ODD bay
** Needs PCI Express card with 2 x Oculink (SFF-8612)
* 2 x [https://www.icydock.com/goods.php?id=309 ICY Dock ToughArmor MB840M2P-B] - M.2 NVMe SSD to PCIe 3.0 x4 Drive Bay Adapter

==My Model==
My system has:
* CPU: AMD Opteron™ X3421 Processor (2.1-3.4GHz/4 compute cores/8 graphic cores/2MB/12-35W) -- See on [http://www.cpu-world.com/CPUs/Bulldozer/AMD-Opteron%20X3000%20series%20X3421.html cpu-world] or the [https://www.amd.com/en/opteron useless marketing page] The AMD Opteron X3421 APU runs at a base clock of 2.1 GHz and can boost up to 3.4 GHz.
** CPU Core Count - 4
** CPU Core Frequency (Base – Max Boost) - 2.1 – 3.4 GHz
** GPU CU Count - 8
** GPU Frequency (Max) - 800 MHz
** cTDP Range - 12-35W
** Max DDR4 Speed - 2400 MHz
** L2 Cache - 2MB
** MMX instructions
** Extensions to MMX
** SSE / Streaming SIMD Extensions
** SSE2 / Streaming SIMD Extensions 2
** SSE3 / Streaming SIMD Extensions 3
** SSSE3 / Supplemental Streaming SIMD Extensions 3
** SSE4 / SSE4.1 + SSE4.2 / Streaming SIMD Extensions 4 ?
** SSE4a ?
** AES / Advanced Encryption Standard instructions
** AVX / Advanced Vector Extensions
** AVX2 / Advanced Vector Extensions 2.0
** BMI / BMI1 + BMI2 / Bit Manipulation instructions
** F16C / 16-bit Floating-Point conversion instructions
** FMA3 / 3-operand Fused Multiply-Add instructions
** FMA4 / 4-operand Fused Multiply-Add instructions
** XOP / eXtended Operations instructions
** AMD64 / AMD 64-bit technology ?
** AMD-V / AMD Virtualization technology
** Supports IOMMU (via AMD-Vi [amd_iommu])
** The processor supports configurable TDP in the 12 Watt - 35 Watt range
** The CPU is compatible with DirectX 12 API.
** Turbo Core 3.0 technology
* RAM: 8 GB

==Issues==
* Does not properly handle brownouts - Gets stuck with flashing amber power LED and won't boot properly until manually power cycled
* Possibly not enough power to run 5 HDDs -- seems very unstable
* Doesn't handle hot swapping drives ???
* No IPMI for out of band management
* No serial port for console access
* No per-drive power / activity LEDs
* No door for the drive bays, need to remove the front bezel to get to the drives
* I/O errors on SATA drives and/or they drop off the bus / become inaccessible, apparently due to buggy Marvell 88SE9230 SATA controller
** Workaround: Add 'iommu=pt' to the Linux kernel parameters
** See: https://forum.proxmox.com/threads/proxmox-cant-recognize-hdd-on-sata.60259/
** See: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1810239
** Example dmesg output:<pre> [Sat Feb 6 15:00:15 2021] perf: interrupt took too long (4082 > 3936), lowering kernel.perf_event_max_sample_rate to 49000
 [Sat Feb 6 15:53:26 2021] ata2.00: exception Emask 0x10 SAct 0x0 SErr 0x4000000 action 0xe frozen
 [Sat Feb 6 15:53:26 2021] ata2.00: irq_stat 0x80000040, connection status changed
 [Sat Feb 6 15:53:26 2021] ata2: SError: { DevExch }
 [Sat Feb 6 15:53:26 2021] ata2.00: failed command: FLUSH CACHE EXT
 [Sat Feb 6 15:53:26 2021] ata2.00: cmd ea/00:00:00:00:00/00:00:00:00:00/a0 tag 29
 res 50/00:ff:00:00:00/00:00:00:00:00/00 Emask 0x10 (ATA bus error)
 [Sat Feb 6 15:53:26 2021] ata2.00: status: { DRDY }
 [Sat Feb 6 15:53:26 2021] ata2: hard resetting link
 [Sat Feb 6 15:53:27 2021] ata2: SATA link up 6.0 Gbps (SStatus 133 SControl 300)
 [Sat Feb 6 15:53:27 2021] ata2.00: configured for UDMA/133
 [Sat Feb 6 15:53:27 2021] ata2.00: retrying FLUSH 0xea Emask 0x10
 [Sat Feb 6 15:53:27 2021] ata2.00: device reported invalid CHS sector 0
 [Sat Feb 6 15:53:27 2021] ata2: EH complete
 [Sat Feb 6 15:54:46 2021] ata4.00: exception Emask 0x10 SAct 0x0 SErr 0x4000000 action 0xe frozen
 [Sat Feb 6 15:54:46 2021] ata4.00: irq_stat 0x80000040, connection status changed
 [Sat Feb 6 15:54:46 2021] ata4: SError: { DevExch }
 [Sat Feb 6 15:54:46 2021] ata4.00: failed command: FLUSH CACHE EXT
 [Sat Feb 6 15:54:46 2021] ata4.00: cmd ea/00:00:00:00:00/00:00:00:00:00/a0 tag 28
 res 50/00:ff:00:00:00/00:00:00:00:00/00 Emask 0x10 (ATA bus error)
 [Sat Feb 6 15:54:46 2021] ata4.00: status: { DRDY }
 [Sat Feb 6 15:54:46 2021] ata4: hard resetting link
 [Sat Feb 6 15:54:47 2021] ata4: SATA link up 6.0 Gbps (SStatus 133 SControl 300)
 [Sat Feb 6 15:54:47 2021] ata4.00: configured for UDMA/133
 [Sat Feb 6 15:54:47 2021] ata4.00: retrying FLUSH 0xea Emask 0x10
 [Sat Feb 6 15:54:47 2021] ata4.00: device reported invalid CHS sector 0
 [Sat Feb 6 15:54:47 2021] ata4: EH complete
 [Sat Feb 6 15:58:41 2021] ata2.00: exception Emask 0x10 SAct 0x0 SErr 0x4000000 action 0xe frozen
 [Sat Feb 6 15:58:41 2021] ata2.00: irq_stat 0x80000040, connection status changed
 [Sat Feb 6 15:58:41 2021] ata2: SError: { DevExch }
 [Sat Feb 6 15:58:41 2021] ata2.00: failed command: FLUSH CACHE EXT
 [Sat Feb 6 15:58:41 2021] ata2.00: cmd ea/00:00:00:00:00/00:00:00:00:00/a0 tag 9
 res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x10 (ATA bus error)
 [Sat Feb 6 15:58:41 2021] ata2.00: status: { DRDY }
 [Sat Feb 6 15:58:41 2021] ata2: hard resetting link
 [Sat Feb 6 15:58:42 2021] ata2: SATA link up 6.0 Gbps (SStatus 133 SControl 300)
 [Sat Feb 6 15:58:42 2021] ata2.00: configured for UDMA/133
 [Sat Feb 6 15:58:42 2021] ata2.00: retrying FLUSH 0xea Emask 0x10
 [Sat Feb 6 15:58:42 2021] ata2.00: device reported invalid CHS sector 0
 [Sat Feb 6 15:58:42 2021] ata2: EH complete
 [Sat Feb 6 16:03:34 2021] ata3.00: exception Emask 0x10 SAct 0x0 SErr 0x4000000 action 0xe frozen
 [Sat Feb 6 16:03:34 2021] ata3.00: irq_stat 0x80000040, connection status changed
 [Sat Feb 6 16:03:34 2021] ata3: SError: { DevExch }
 [Sat Feb 6 16:03:34 2021] ata3.00: failed command: FLUSH CACHE EXT
 [Sat Feb 6 16:03:34 2021] ata3.00: cmd ea/00:00:00:00:00/00:00:00:00:00/a0 tag 9
 res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x10 (ATA bus error)
 [Sat Feb 6 16:03:34 2021] ata3.00: status: { DRDY }
 [Sat Feb 6 16:03:34 2021] ata3: hard resetting link
 [Sat Feb 6 16:03:34 2021] ata3: SATA link up 6.0 Gbps (SStatus 133 SControl 300)
 [Sat Feb 6 16:03:34 2021] ata3.00: configured for UDMA/133
 [Sat Feb 6 16:03:34 2021] ata3.00: retrying FLUSH 0xea Emask 0x10
 [Sat Feb 6 16:03:34 2021] ata3.00: device reported invalid CHS sector 0
 [Sat Feb 6 16:03:34 2021] ata3: EH complete
 [Sat Feb 6 16:05:28 2021] ata2.00: exception Emask 0x10 SAct 0x0 SErr 0x4000000 action 0xe frozen
 [Sat Feb 6 16:05:28 2021] ata2.00: irq_stat 0x80000040, connection status changed
 [Sat Feb 6 16:05:28 2021] ata2: SError: { DevExch }
 [Sat Feb 6 16:05:28 2021] ata2.00: failed command: FLUSH CACHE EXT
 [Sat Feb 6 16:05:28 2021] ata2.00: cmd ea/00:00:00:00:00/00:00:00:00:00/a0 tag 20
 res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x10 (ATA bus error)
 [Sat Feb 6 16:05:28 2021] ata2.00: status: { DRDY }
 [Sat Feb 6 16:05:28 2021] ata2: hard resetting link
 [Sat Feb 6 16:05:29 2021] ata2: SATA link up 6.0 Gbps (SStatus 133 SControl 300)
 [Sat Feb 6 16:05:29 2021] ata2.00: configured for UDMA/133
 [Sat Feb 6 16:05:29 2021] ata2.00: retrying FLUSH 0xea Emask 0x10
 [Sat Feb 6 16:05:29 2021] ata2.00: device reported invalid CHS sector 0
 [Sat Feb 6 16:05:29 2021] ata2: EH complete
 
</pre>

HPE Proliant MicroServer Gen10

2025-09-18T19:11:46Z

Jeremy:

=HPE Proliant MicroServer Gen10=
[[File:873830-421 1 Supersize.jpg|128px]] 

==Overview==
* CPU
** AMD Opteron 4-core X3421 3.4 GHz ( or similar depending on model configuration )
* RAM
** Type: DDR4 Unbuffered (UDIMM)
** DIMM Slots: 2
** Max RAM: 32GB (2 x 16GB) PC4-2400T DDR4 UDIMM ( DDr4-2400 )
* Display / Graphics
** GPU: Integrated AMD/ATI Wani (Radeon R5/R6/R7)
** 1 x VGA port
** 2 x Display Ports 1.2
* Network
** Embedded Broadcom BCM5720 Dual Port Gbe LOM
* Expansion bays
** 1 x media bay (Optional (1) DVD-RW or (1) SATA SSD)
* Drive bays
** 4 x 3.5" SATA 6Gb/s via caddy-less drive bays (behind front cover) -- advertised as Non-hot plug SATA
** 1 x on-board SATA port (for device in media bay)
* USB
** Font: 2 x USB 3.0 ports (not blue for whatever reason)
** Rear: 2 x USB 3.0 ports (not blue for whatever reason), 2 x USB 2.0 ports
** 1 x on-board USB 2.0 port
* Expansion Slots
** 1 x PCIe3 x4 (1) (low-profile only in this chassis)
** 1 x PCIe3 x8 (8, 4, 1) (low-profile only in this chassis)
* Fans
** One (1) non-redundant system fan shipped standard -- not software controllable
* Misc
** ACPI V5.0 Compliant
** Slot for TPM (not included) -- HPE Trusted Platform Module (TPM) 2.0 kit 745823-B21
** PCIe 3.0 Compliant
** PXE Support
** WOL Support
** EMC Class B
** LFF/SFF SATA connector on motherboard connects to backplane for 4 x HDDs
** Hard drive screws: 4 x per drive = 16
** Front bezel lock/unlock indicators
** Power on/Standby button and system power LED
** Health LED
** NIC status LED
** Drive activity LED ( single, not per-drive )
* Management
** BMC / IPMI / iLO: NO

==Resources==
* [https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=emr_na-a00028524en_us Manufacturer page]
* [https://support.hpe.com/hpesc/public/km/product/1009955119/HPE-ProLiant-MicroServer-Gen10-Server?ismnp=0&l5oid=1009955118#t=All&sort=relevancy&numberOfResults=25 Downloads]
* Marketing: https://buy.hpe.com/us/en/servers/proliant-microserver/proliant-microserver/proliant-microserver/hpe-proliant-microserver-gen10/p/1009955118
* Support: https://support.hpe.com/hpesc/public/km/product/1009955119/Product#t=DriversandSoftware&sort=relevancy&layout=table&numberOfResults=25
* Misc: https://forum.openmediavault.org/index.php/Thread/19388-HP-microserver-Gen10/?pageNo=2
* User Manual: https://content.etilize.com/User-Manual/1046044075.pdf
* Specifications: https://h20195.www2.hpe.com/v2/GetDocument.aspx?docname=a00008701enw
* Storage Controller Specifications: https://h20195.www2.hpe.com/v2/Getdocument.aspx?docname=a00017196ENW

==POST==
<pre>
Version 2.18.1263. Copyright (C) 2020 American Megatrends, Inc.
BIOS Date: 02/19/2020 11:03:31 Ver: ZA10A380
Press <F2> or <DEL> to enter setup.
Press <F11> to enter Boot Menu.
</pre>
==Keyboard Bindings at POST==
* F2 or DEL : Enter BIOS Setup (aka "Aptio Setup")
* F11 : Enter Boot Menu
* Ctrl + S : Broadcom NetXtreme Boot Agent configuration menu
* Ctrl + M : Marvell BIOS Utility

===Updating Storage Controller Firmware===
* Go here and find the latest version for the "Firmware | Storage Controller" download: https://support.hpe.com/hpsc/swd/public/detail?swItemId=MTX_8374214d9a3a4392878c9bba59#tab2 (e.g. [https://downloads.hpe.com/pub/softlib2/software1/sc-linux-fw-array/p164515310/v177536/rpm/RPMS/x86_64/firmware-smartarray-f7c07bdbbd-3.21-1.1.x86_64.rpm firmware-smartarray-f7c07bdbbd-3.21-1.1.x86_64.rpm]
* Generic method without installing a package:<pre>root@daytapod1 ~/firmware $ rpm2cpio firmware-smartarray-f7c07bdbbd-3.21-1.1.x86_64.rpm | cpio -idmv
root@daytapod1 ~/firmware $ cd usr/lib/x86_64-linux-gnu/firmware-smartarray-f7c07bdbbd-3.21-1.1
root@daytapod1 ~/firmware/usr/lib/x86_64-linux-gnu/firmware-smartarray-f7c07bdbbd-3.21-1.1 $ ./setup

Supplemental Update / Online ROM Flash Component for Linux (x64) - HPE Smart Array P408i-p, P408e-p, P408i-a, P408i-c, E208i-p, E208e-p, E208i-c, E208i-a, P408i-sb, P408e-m, P204i-c, P204i-b, P816i and P416ie-m SR Gen10 (3.21), searching...
============ Summary ============
Smart Component Finished
Exit Status: 3
Update not attempted. All selected devices are either up-to-date or have newer versions installed.</pre>
* For rpm-based distros:<pre>rpm -ivh firmware-smartarray-f7c07bdbbd-3.21-1.1.x86_64.rpm</pre>
* For apt-based distros:<pre>apt-get install alien
alien firmware-smartarray-f7c07bdbbd-3.21-1.1.x86_64.rpm
dpkg -i firmware-smartarray-f7c07bdbbd_3.21-2.1_amd64.deb</pre>
* Reboot

===Accessing Marvell BIOS Utility===

The Marvell BIOS Utility is built into the embedded Marvell storage controller ROM. Use this utility to create and manage RAID virtual disks and arrays using the drives connected to the embedded storage controller. Accessing the Marvell BIOS Utility under legacy boot mode

Procedure:
# Reboot the server.
# On the POST drive information screen, press Ctrl+M.

===Updating BIOS===
* Latest BIOS version (as of 2021-02-06 09:28:10 EST): ZA10A380 (13 Mar 2020) 

Damn HP requires that you create an account to download BIOS firmware. WTF? Anyway...
* Go here: https://support.hpe.com/hpsc/swd/public/detail?swItemId=MTX_8374214d9a3a4392878c9bba59#tab2
* Download the tar file (e.g. [https://support.hpe.com/hpsc/swd/public/download/downloads.hpe.com/pub/softlib2/software1/pubsw-linux/p1122136033/v179389/System_BIOS_v_ZA10A380_for_MicroServer_Gen10_Linux.tgz System_BIOS_v_ZA10A380_for_MicroServer_Gen10_Linux.tgz])
* Please note that: When updating the System BIOS from version ZA10A320 (or earlier) to version ZA10A330 (or later), the following system BIOS configuration settings will revert to their factory default values:
** System time and date
** Hard drive configuration
** Boot device sequence
** System passwords
** Security setup

* Extract it and apply the update
root@daytapod1 ~/firmware $ tar xzvf System_BIOS_v_ZA10A380_for_MicroServer_Gen10_Linux.tgz
root@daytapod1 ~/firmware $ cd System_BIOS_v_ZA10A380_for_MicroServer_Gen10_Linux/Lnx/
root@daytapod1 ~/firmware/System_BIOS_v_ZA10A380_for_MicroServer_Gen10_Linux/Lnx $ ./flashbios.sh
+---------------------------------------------------------------------------+
| AMI Firmware Update Utility v5.08.02.1189 |
| Copyright (C)2016 American Megatrends Inc. All Rights Reserved. |
+---------------------------------------------------------------------------+
Reading flash ............... done
- FFS checksums ......... ok
Erasing Boot Block .......... done
Updating Boot Block ......... done
Verifying Boot Block ........ done
Erasing Main Block .......... done
Updating Main Block ......... done
Verifying Main Block ........ done
Erasing NVRAM Block ......... done
Updating NVRAM Block ........ done
Verifying NVRAM Block ....... done
Erasing NCB Block ........... done
Updating NCB Block .......... done
* Reboot

==To Research==
* There is a 6th SATA port traced on the motherboard (without the SATA plug) but only 5 show in the BIOS (4 front bay and 1 on the motherboard with SATA plug). Can the BIOS be hacked to enable the 6th SATA port?

==Devices==
00:00.0 Host bridge: Advanced Micro Devices, Inc. [AMD] Family 15h (Models 60h-6fh) Processor Root Complex
00:00.2 IOMMU: Advanced Micro Devices, Inc. [AMD] Family 15h (Models 60h-6fh) I/O Memory Management Unit
00:01.0 VGA compatible controller: Advanced Micro Devices, Inc. [AMD/ATI] Wani [Radeon R5/R6/R7 Graphics] (rev 84)
00:01.1 Audio device: Advanced Micro Devices, Inc. [AMD/ATI] Kabini HDMI/DP Audio
00:02.0 Host bridge: Advanced Micro Devices, Inc. [AMD] Family 15h (Models 60h-6fh) Host Bridge
00:02.2 PCI bridge: Advanced Micro Devices, Inc. [AMD] Family 15h (Models 60h-6fh) Processor Root Port
00:02.5 PCI bridge: Advanced Micro Devices, Inc. [AMD] Family 15h (Models 60h-6fh) Processor Root Port
00:03.0 Host bridge: Advanced Micro Devices, Inc. [AMD] Family 15h (Models 60h-6fh) Host Bridge
00:08.0 Encryption controller: Advanced Micro Devices, Inc. [AMD] Carrizo Platform Security Processor
00:09.0 Host bridge: Advanced Micro Devices, Inc. [AMD] Carrizo Audio Dummy Host Bridge
00:10.0 USB controller: Advanced Micro Devices, Inc. [AMD] FCH USB XHCI Controller (rev 20)
00:11.0 SATA controller: Advanced Micro Devices, Inc. [AMD] FCH SATA Controller [AHCI mode] (rev 49)
00:12.0 USB controller: Advanced Micro Devices, Inc. [AMD] FCH USB EHCI Controller (rev 49)
00:14.0 SMBus: Advanced Micro Devices, Inc. [AMD] FCH SMBus Controller (rev 4a)
00:14.3 ISA bridge: Advanced Micro Devices, Inc. [AMD] FCH LPC Bridge (rev 11)
00:18.0 Host bridge: Advanced Micro Devices, Inc. [AMD] Family 15h (Models 60h-6fh) Processor Function 0
00:18.1 Host bridge: Advanced Micro Devices, Inc. [AMD] Family 15h (Models 60h-6fh) Processor Function 1
00:18.2 Host bridge: Advanced Micro Devices, Inc. [AMD] Family 15h (Models 60h-6fh) Processor Function 2
00:18.3 Host bridge: Advanced Micro Devices, Inc. [AMD] Family 15h (Models 60h-6fh) Processor Function 3
00:18.4 Host bridge: Advanced Micro Devices, Inc. [AMD] Family 15h (Models 60h-6fh) Processor Function 4
00:18.5 Host bridge: Advanced Micro Devices, Inc. [AMD] Family 15h (Models 60h-6fh) Processor Function 5
01:00.0 SATA controller: Marvell Technology Group Ltd. 88SE9230 PCIe SATA 6Gb/s Controller (rev 11)
02:00.0 Ethernet controller: Broadcom Inc. and subsidiaries NetXtreme BCM5720 2-port Gigabit Ethernet PCIe
02:00.1 Ethernet controller: Broadcom Inc. and subsidiaries NetXtreme BCM5720 2-port Gigabit Ethernet PCIe

==Drivers==
* ahci AHCI SATA low-level driver
* amdgpu AMD GPU
* ehci-pci
* fam15h_power AMD Family 15h CPU processor power monitor
* k10temp AMD Family 10h+ CPU core temperature monitor
* pcieport
* piix4_smbus
* snd_hda_intel Intel HDA driver
* tg3 Broadcom Tigon3 ethernet driver
* xhci_hcd

lm_sensors found the following:
k10temp-pci-00c3
Adapter: PCI adapter
temp1: +23.0°C (high = +70.0°C)
(crit = +100.0°C, hyst = +99.0°C)

amdgpu-pci-0008
Adapter: PCI adapter
vddgfx: 750.00 mV
vddnb: 875.00 mV
edge: +23.0°C (crit = +1.0°C, hyst = -273.1°C)

fam15h_power-pci-00c4
Adapter: PCI adapter
power1: 21.27 mW (avg = 2.27 mW, interval = 0.01 s)
(crit = 15.00 W)

Not that impressive, but not bad.

==Potential Upgrade Parts List==
* HPE 8 GB (1x8GB) Single Rank x8 DDR4-2400 CAS-17-17-17 Unbuffered Standard Memory Kit 862974-B21
* HPE 16 GB (1x16GB) Dual Rank x8 DDR4-2400 CAS-17-17-17 Unbuffered Standard Memory Kit 862976-B21
* HPE Ethernet 10Gb 2-port 521T Adapter 867707-B21
* HPE Trusted Platform Module 2.0 Kit 745823-B21
* LSI 9200-8E - for connecting to external storage enclosures
* [https://www.icydock.com/goods.php?id=251 ICY Dock MB411SPO-1B] - HDD Hot-Swap SATA Mobile Rack for 12.7mm Slim CD/DVD-ROM Optical Bay (Fits 12.7mm height ODD Slot)
** Uses SATA port
* 1 x [https://www.icydock.com/goods.php?id=317 ICY Dock ToughArmor MB852M2PO-B] - Dual hot swap NVME in slim ODD bay
** Needs PCI Express card with 2 x Oculink (SFF-8612)
* 2 x [https://www.icydock.com/goods.php?id=309 ICY Dock ToughArmor MB840M2P-B] - M.2 NVMe SSD to PCIe 3.0 x4 Drive Bay Adapter

==My Model==
My system has:
* CPU: AMD Opteron™ X3421 Processor (2.1-3.4GHz/4 compute cores/8 graphic cores/2MB/12-35W) -- See on [http://www.cpu-world.com/CPUs/Bulldozer/AMD-Opteron%20X3000%20series%20X3421.html cpu-world] or the [https://www.amd.com/en/opteron useless marketing page]
** CPU Core Count - 4
** CPU Core Frequency (Base – Max Boost) - 2.1 – 3.4 GHz
** GPU CU Count - 8
** GPU Frequency (Max) - 800 MHz
** cTDP Range - 12-35W
** Max DDR4 Speed - 2400 MHz
** L2 Cache - 2MB
** MMX instructions
** Extensions to MMX
** SSE / Streaming SIMD Extensions
** SSE2 / Streaming SIMD Extensions 2
** SSE3 / Streaming SIMD Extensions 3
** SSSE3 / Supplemental Streaming SIMD Extensions 3
** SSE4 / SSE4.1 + SSE4.2 / Streaming SIMD Extensions 4 ?
** SSE4a ?
** AES / Advanced Encryption Standard instructions
** AVX / Advanced Vector Extensions
** AVX2 / Advanced Vector Extensions 2.0
** BMI / BMI1 + BMI2 / Bit Manipulation instructions
** F16C / 16-bit Floating-Point conversion instructions
** FMA3 / 3-operand Fused Multiply-Add instructions
** FMA4 / 4-operand Fused Multiply-Add instructions
** XOP / eXtended Operations instructions
** AMD64 / AMD 64-bit technology ?
** AMD-V / AMD Virtualization technology
** Supports IOMMU (via AMD-Vi [amd_iommu])
** The processor supports configurable TDP in the 12 Watt - 35 Watt range
** The CPU is compatible with DirectX 12 API.
** Turbo Core 3.0 technology
* RAM: 8 GB

==Issues==
* Does not properly handle brownouts - Gets stuck with flashing amber power LED and won't boot properly until manually power cycled
* Possibly not enough power to run 5 HDDs -- seems very unstable
* Doesn't handle hot swapping drives ???
* No IPMI for out of band management
* No serial port for console access
* No per-drive power / activity LEDs
* No door for the drive bays, need to remove the front bezel to get to the drives
* I/O errors on SATA drives and/or they drop off the bus / become inaccessible, apparently due to buggy Marvell 88SE9230 SATA controller
** Workaround: Add 'iommu=pt' to the Linux kernel parameters
** See: https://forum.proxmox.com/threads/proxmox-cant-recognize-hdd-on-sata.60259/
** See: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1810239
** Example dmesg output:<pre> [Sat Feb 6 15:00:15 2021] perf: interrupt took too long (4082 > 3936), lowering kernel.perf_event_max_sample_rate to 49000
 [Sat Feb 6 15:53:26 2021] ata2.00: exception Emask 0x10 SAct 0x0 SErr 0x4000000 action 0xe frozen
 [Sat Feb 6 15:53:26 2021] ata2.00: irq_stat 0x80000040, connection status changed
 [Sat Feb 6 15:53:26 2021] ata2: SError: { DevExch }
 [Sat Feb 6 15:53:26 2021] ata2.00: failed command: FLUSH CACHE EXT
 [Sat Feb 6 15:53:26 2021] ata2.00: cmd ea/00:00:00:00:00/00:00:00:00:00/a0 tag 29
 res 50/00:ff:00:00:00/00:00:00:00:00/00 Emask 0x10 (ATA bus error)
 [Sat Feb 6 15:53:26 2021] ata2.00: status: { DRDY }
 [Sat Feb 6 15:53:26 2021] ata2: hard resetting link
 [Sat Feb 6 15:53:27 2021] ata2: SATA link up 6.0 Gbps (SStatus 133 SControl 300)
 [Sat Feb 6 15:53:27 2021] ata2.00: configured for UDMA/133
 [Sat Feb 6 15:53:27 2021] ata2.00: retrying FLUSH 0xea Emask 0x10
 [Sat Feb 6 15:53:27 2021] ata2.00: device reported invalid CHS sector 0
 [Sat Feb 6 15:53:27 2021] ata2: EH complete
 [Sat Feb 6 15:54:46 2021] ata4.00: exception Emask 0x10 SAct 0x0 SErr 0x4000000 action 0xe frozen
 [Sat Feb 6 15:54:46 2021] ata4.00: irq_stat 0x80000040, connection status changed
 [Sat Feb 6 15:54:46 2021] ata4: SError: { DevExch }
 [Sat Feb 6 15:54:46 2021] ata4.00: failed command: FLUSH CACHE EXT
 [Sat Feb 6 15:54:46 2021] ata4.00: cmd ea/00:00:00:00:00/00:00:00:00:00/a0 tag 28
 res 50/00:ff:00:00:00/00:00:00:00:00/00 Emask 0x10 (ATA bus error)
 [Sat Feb 6 15:54:46 2021] ata4.00: status: { DRDY }
 [Sat Feb 6 15:54:46 2021] ata4: hard resetting link
 [Sat Feb 6 15:54:47 2021] ata4: SATA link up 6.0 Gbps (SStatus 133 SControl 300)
 [Sat Feb 6 15:54:47 2021] ata4.00: configured for UDMA/133
 [Sat Feb 6 15:54:47 2021] ata4.00: retrying FLUSH 0xea Emask 0x10
 [Sat Feb 6 15:54:47 2021] ata4.00: device reported invalid CHS sector 0
 [Sat Feb 6 15:54:47 2021] ata4: EH complete
 [Sat Feb 6 15:58:41 2021] ata2.00: exception Emask 0x10 SAct 0x0 SErr 0x4000000 action 0xe frozen
 [Sat Feb 6 15:58:41 2021] ata2.00: irq_stat 0x80000040, connection status changed
 [Sat Feb 6 15:58:41 2021] ata2: SError: { DevExch }
 [Sat Feb 6 15:58:41 2021] ata2.00: failed command: FLUSH CACHE EXT
 [Sat Feb 6 15:58:41 2021] ata2.00: cmd ea/00:00:00:00:00/00:00:00:00:00/a0 tag 9
 res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x10 (ATA bus error)
 [Sat Feb 6 15:58:41 2021] ata2.00: status: { DRDY }
 [Sat Feb 6 15:58:41 2021] ata2: hard resetting link
 [Sat Feb 6 15:58:42 2021] ata2: SATA link up 6.0 Gbps (SStatus 133 SControl 300)
 [Sat Feb 6 15:58:42 2021] ata2.00: configured for UDMA/133
 [Sat Feb 6 15:58:42 2021] ata2.00: retrying FLUSH 0xea Emask 0x10
 [Sat Feb 6 15:58:42 2021] ata2.00: device reported invalid CHS sector 0
 [Sat Feb 6 15:58:42 2021] ata2: EH complete
 [Sat Feb 6 16:03:34 2021] ata3.00: exception Emask 0x10 SAct 0x0 SErr 0x4000000 action 0xe frozen
 [Sat Feb 6 16:03:34 2021] ata3.00: irq_stat 0x80000040, connection status changed
 [Sat Feb 6 16:03:34 2021] ata3: SError: { DevExch }
 [Sat Feb 6 16:03:34 2021] ata3.00: failed command: FLUSH CACHE EXT
 [Sat Feb 6 16:03:34 2021] ata3.00: cmd ea/00:00:00:00:00/00:00:00:00:00/a0 tag 9
 res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x10 (ATA bus error)
 [Sat Feb 6 16:03:34 2021] ata3.00: status: { DRDY }
 [Sat Feb 6 16:03:34 2021] ata3: hard resetting link
 [Sat Feb 6 16:03:34 2021] ata3: SATA link up 6.0 Gbps (SStatus 133 SControl 300)
 [Sat Feb 6 16:03:34 2021] ata3.00: configured for UDMA/133
 [Sat Feb 6 16:03:34 2021] ata3.00: retrying FLUSH 0xea Emask 0x10
 [Sat Feb 6 16:03:34 2021] ata3.00: device reported invalid CHS sector 0
 [Sat Feb 6 16:03:34 2021] ata3: EH complete
 [Sat Feb 6 16:05:28 2021] ata2.00: exception Emask 0x10 SAct 0x0 SErr 0x4000000 action 0xe frozen
 [Sat Feb 6 16:05:28 2021] ata2.00: irq_stat 0x80000040, connection status changed
 [Sat Feb 6 16:05:28 2021] ata2: SError: { DevExch }
 [Sat Feb 6 16:05:28 2021] ata2.00: failed command: FLUSH CACHE EXT
 [Sat Feb 6 16:05:28 2021] ata2.00: cmd ea/00:00:00:00:00/00:00:00:00:00/a0 tag 20
 res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x10 (ATA bus error)
 [Sat Feb 6 16:05:28 2021] ata2.00: status: { DRDY }
 [Sat Feb 6 16:05:28 2021] ata2: hard resetting link
 [Sat Feb 6 16:05:29 2021] ata2: SATA link up 6.0 Gbps (SStatus 133 SControl 300)
 [Sat Feb 6 16:05:29 2021] ata2.00: configured for UDMA/133
 [Sat Feb 6 16:05:29 2021] ata2.00: retrying FLUSH 0xea Emask 0x10
 [Sat Feb 6 16:05:29 2021] ata2.00: device reported invalid CHS sector 0
 [Sat Feb 6 16:05:29 2021] ata2: EH complete
 
</pre>

HPE Proliant MicroServer Gen10

2025-09-18T19:09:06Z

Jeremy:

=HPE Proliant MicroServer Gen10=
[[File:873830-421 1 Supersize.jpg|128px]] 

==Overview==

* Expansion bays
** 1 x media bay (Optional (1) DVD-RW or (1) SATA SSD)
* Drive bays
** 4 x 3.5" SATA 6Gb/s via caddy-less drive bays (behind front cover) -- advertised as Non-hot plug SATA
** 1 x on-board SATA port (for device in media bay)
* USB
** Font: 2 x USB 3.0 ports (not blue for whatever reason)
** Rear: 2 x USB 3.0 ports (not blue for whatever reason), 2 x USB 2.0 ports
** 1 x on-board USB 2.0 port
* Network
** Embedded Broadcom BCM5720 Dual Port Gbe LOM
* RAM
** Type: DDR4 Unbuffered (UDIMM)
** DIMM Slots: 2
** Max RAM: 32GB (2 x 16GB) PC4-2400T DDR4 UDIMM ( DDr4-2400 )
* Display
** 1 x VGA port
** 2 x Display Ports 1.2
* Expansion Slots
** 1 x PCIe3 x4 (1) (low-profile only in this chassis)
** 1 x PCIe3 x8 (8, 4, 1) (low-profile only in this chassis)
* Fans
** One (1) non-redundant system fan shipped standard -- not software controllable
* Misc
** ACPI V5.0 Compliant
** Slot for TPM (not included) -- HPE Trusted Platform Module (TPM) 2.0 kit 745823-B21
** PCIe 3.0 Compliant
** PXE Support
** WOL Support
** EMC Class B
** LFF/SFF SATA connector on motherboard connects to backplane for 4 x HDDs
** Hard drive screws: 4 x per drive = 16
** Front bezel lock/unlock indicators
** Power on/Standby button and system power LED
** Health LED
** NIC status LED
** Drive activity LED ( single, not per-drive )
* Management
** BMC / IPMI / iLO: NO

==Resources==
* [https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=emr_na-a00028524en_us Manufacturer page]
* [https://support.hpe.com/hpesc/public/km/product/1009955119/HPE-ProLiant-MicroServer-Gen10-Server?ismnp=0&l5oid=1009955118#t=All&sort=relevancy&numberOfResults=25 Downloads]
* Marketing: https://buy.hpe.com/us/en/servers/proliant-microserver/proliant-microserver/proliant-microserver/hpe-proliant-microserver-gen10/p/1009955118
* Support: https://support.hpe.com/hpesc/public/km/product/1009955119/Product#t=DriversandSoftware&sort=relevancy&layout=table&numberOfResults=25
* Misc: https://forum.openmediavault.org/index.php/Thread/19388-HP-microserver-Gen10/?pageNo=2
* User Manual: https://content.etilize.com/User-Manual/1046044075.pdf
* Specifications: https://h20195.www2.hpe.com/v2/GetDocument.aspx?docname=a00008701enw
* Storage Controller Specifications: https://h20195.www2.hpe.com/v2/Getdocument.aspx?docname=a00017196ENW

==POST==
<pre>
Version 2.18.1263. Copyright (C) 2020 American Megatrends, Inc.
BIOS Date: 02/19/2020 11:03:31 Ver: ZA10A380
Press <F2> or <DEL> to enter setup.
Press <F11> to enter Boot Menu.
</pre>
==Keyboard Bindings at POST==
* F2 or DEL : Enter BIOS Setup (aka "Aptio Setup")
* F11 : Enter Boot Menu
* Ctrl + S : Broadcom NetXtreme Boot Agent configuration menu
* Ctrl + M : Marvell BIOS Utility

===Updating Storage Controller Firmware===
* Go here and find the latest version for the "Firmware | Storage Controller" download: https://support.hpe.com/hpsc/swd/public/detail?swItemId=MTX_8374214d9a3a4392878c9bba59#tab2 (e.g. [https://downloads.hpe.com/pub/softlib2/software1/sc-linux-fw-array/p164515310/v177536/rpm/RPMS/x86_64/firmware-smartarray-f7c07bdbbd-3.21-1.1.x86_64.rpm firmware-smartarray-f7c07bdbbd-3.21-1.1.x86_64.rpm]
* Generic method without installing a package:<pre>root@daytapod1 ~/firmware $ rpm2cpio firmware-smartarray-f7c07bdbbd-3.21-1.1.x86_64.rpm | cpio -idmv
root@daytapod1 ~/firmware $ cd usr/lib/x86_64-linux-gnu/firmware-smartarray-f7c07bdbbd-3.21-1.1
root@daytapod1 ~/firmware/usr/lib/x86_64-linux-gnu/firmware-smartarray-f7c07bdbbd-3.21-1.1 $ ./setup

Supplemental Update / Online ROM Flash Component for Linux (x64) - HPE Smart Array P408i-p, P408e-p, P408i-a, P408i-c, E208i-p, E208e-p, E208i-c, E208i-a, P408i-sb, P408e-m, P204i-c, P204i-b, P816i and P416ie-m SR Gen10 (3.21), searching...
============ Summary ============
Smart Component Finished
Exit Status: 3
Update not attempted. All selected devices are either up-to-date or have newer versions installed.</pre>
* For rpm-based distros:<pre>rpm -ivh firmware-smartarray-f7c07bdbbd-3.21-1.1.x86_64.rpm</pre>
* For apt-based distros:<pre>apt-get install alien
alien firmware-smartarray-f7c07bdbbd-3.21-1.1.x86_64.rpm
dpkg -i firmware-smartarray-f7c07bdbbd_3.21-2.1_amd64.deb</pre>
* Reboot

===Accessing Marvell BIOS Utility===

The Marvell BIOS Utility is built into the embedded Marvell storage controller ROM. Use this utility to create and manage RAID virtual disks and arrays using the drives connected to the embedded storage controller. Accessing the Marvell BIOS Utility under legacy boot mode

Procedure:
# Reboot the server.
# On the POST drive information screen, press Ctrl+M.

===Updating BIOS===
* Latest BIOS version (as of 2021-02-06 09:28:10 EST): ZA10A380 (13 Mar 2020) 

Damn HP requires that you create an account to download BIOS firmware. WTF? Anyway...
* Go here: https://support.hpe.com/hpsc/swd/public/detail?swItemId=MTX_8374214d9a3a4392878c9bba59#tab2
* Download the tar file (e.g. [https://support.hpe.com/hpsc/swd/public/download/downloads.hpe.com/pub/softlib2/software1/pubsw-linux/p1122136033/v179389/System_BIOS_v_ZA10A380_for_MicroServer_Gen10_Linux.tgz System_BIOS_v_ZA10A380_for_MicroServer_Gen10_Linux.tgz])
* Please note that: When updating the System BIOS from version ZA10A320 (or earlier) to version ZA10A330 (or later), the following system BIOS configuration settings will revert to their factory default values:
** System time and date
** Hard drive configuration
** Boot device sequence
** System passwords
** Security setup

* Extract it and apply the update
root@daytapod1 ~/firmware $ tar xzvf System_BIOS_v_ZA10A380_for_MicroServer_Gen10_Linux.tgz
root@daytapod1 ~/firmware $ cd System_BIOS_v_ZA10A380_for_MicroServer_Gen10_Linux/Lnx/
root@daytapod1 ~/firmware/System_BIOS_v_ZA10A380_for_MicroServer_Gen10_Linux/Lnx $ ./flashbios.sh
+---------------------------------------------------------------------------+
| AMI Firmware Update Utility v5.08.02.1189 |
| Copyright (C)2016 American Megatrends Inc. All Rights Reserved. |
+---------------------------------------------------------------------------+
Reading flash ............... done
- FFS checksums ......... ok
Erasing Boot Block .......... done
Updating Boot Block ......... done
Verifying Boot Block ........ done
Erasing Main Block .......... done
Updating Main Block ......... done
Verifying Main Block ........ done
Erasing NVRAM Block ......... done
Updating NVRAM Block ........ done
Verifying NVRAM Block ....... done
Erasing NCB Block ........... done
Updating NCB Block .......... done
* Reboot

==To Research==
* There is a 6th SATA port traced on the motherboard (without the SATA plug) but only 5 show in the BIOS (4 front bay and 1 on the motherboard with SATA plug). Can the BIOS be hacked to enable the 6th SATA port?

==Devices==
00:00.0 Host bridge: Advanced Micro Devices, Inc. [AMD] Family 15h (Models 60h-6fh) Processor Root Complex
00:00.2 IOMMU: Advanced Micro Devices, Inc. [AMD] Family 15h (Models 60h-6fh) I/O Memory Management Unit
00:01.0 VGA compatible controller: Advanced Micro Devices, Inc. [AMD/ATI] Wani [Radeon R5/R6/R7 Graphics] (rev 84)
00:01.1 Audio device: Advanced Micro Devices, Inc. [AMD/ATI] Kabini HDMI/DP Audio
00:02.0 Host bridge: Advanced Micro Devices, Inc. [AMD] Family 15h (Models 60h-6fh) Host Bridge
00:02.2 PCI bridge: Advanced Micro Devices, Inc. [AMD] Family 15h (Models 60h-6fh) Processor Root Port
00:02.5 PCI bridge: Advanced Micro Devices, Inc. [AMD] Family 15h (Models 60h-6fh) Processor Root Port
00:03.0 Host bridge: Advanced Micro Devices, Inc. [AMD] Family 15h (Models 60h-6fh) Host Bridge
00:08.0 Encryption controller: Advanced Micro Devices, Inc. [AMD] Carrizo Platform Security Processor
00:09.0 Host bridge: Advanced Micro Devices, Inc. [AMD] Carrizo Audio Dummy Host Bridge
00:10.0 USB controller: Advanced Micro Devices, Inc. [AMD] FCH USB XHCI Controller (rev 20)
00:11.0 SATA controller: Advanced Micro Devices, Inc. [AMD] FCH SATA Controller [AHCI mode] (rev 49)
00:12.0 USB controller: Advanced Micro Devices, Inc. [AMD] FCH USB EHCI Controller (rev 49)
00:14.0 SMBus: Advanced Micro Devices, Inc. [AMD] FCH SMBus Controller (rev 4a)
00:14.3 ISA bridge: Advanced Micro Devices, Inc. [AMD] FCH LPC Bridge (rev 11)
00:18.0 Host bridge: Advanced Micro Devices, Inc. [AMD] Family 15h (Models 60h-6fh) Processor Function 0
00:18.1 Host bridge: Advanced Micro Devices, Inc. [AMD] Family 15h (Models 60h-6fh) Processor Function 1
00:18.2 Host bridge: Advanced Micro Devices, Inc. [AMD] Family 15h (Models 60h-6fh) Processor Function 2
00:18.3 Host bridge: Advanced Micro Devices, Inc. [AMD] Family 15h (Models 60h-6fh) Processor Function 3
00:18.4 Host bridge: Advanced Micro Devices, Inc. [AMD] Family 15h (Models 60h-6fh) Processor Function 4
00:18.5 Host bridge: Advanced Micro Devices, Inc. [AMD] Family 15h (Models 60h-6fh) Processor Function 5
01:00.0 SATA controller: Marvell Technology Group Ltd. 88SE9230 PCIe SATA 6Gb/s Controller (rev 11)
02:00.0 Ethernet controller: Broadcom Inc. and subsidiaries NetXtreme BCM5720 2-port Gigabit Ethernet PCIe
02:00.1 Ethernet controller: Broadcom Inc. and subsidiaries NetXtreme BCM5720 2-port Gigabit Ethernet PCIe

==Drivers==
* ahci AHCI SATA low-level driver
* amdgpu AMD GPU
* ehci-pci
* fam15h_power AMD Family 15h CPU processor power monitor
* k10temp AMD Family 10h+ CPU core temperature monitor
* pcieport
* piix4_smbus
* snd_hda_intel Intel HDA driver
* tg3 Broadcom Tigon3 ethernet driver
* xhci_hcd

lm_sensors found the following:
k10temp-pci-00c3
Adapter: PCI adapter
temp1: +23.0°C (high = +70.0°C)
(crit = +100.0°C, hyst = +99.0°C)

amdgpu-pci-0008
Adapter: PCI adapter
vddgfx: 750.00 mV
vddnb: 875.00 mV
edge: +23.0°C (crit = +1.0°C, hyst = -273.1°C)

fam15h_power-pci-00c4
Adapter: PCI adapter
power1: 21.27 mW (avg = 2.27 mW, interval = 0.01 s)
(crit = 15.00 W)

Not that impressive, but not bad.

==Potential Upgrade Parts List==
* HPE 8 GB (1x8GB) Single Rank x8 DDR4-2400 CAS-17-17-17 Unbuffered Standard Memory Kit 862974-B21
* HPE 16 GB (1x16GB) Dual Rank x8 DDR4-2400 CAS-17-17-17 Unbuffered Standard Memory Kit 862976-B21
* HPE Ethernet 10Gb 2-port 521T Adapter 867707-B21
* HPE Trusted Platform Module 2.0 Kit 745823-B21
* LSI 9200-8E - for connecting to external storage enclosures
* [https://www.icydock.com/goods.php?id=251 ICY Dock MB411SPO-1B] - HDD Hot-Swap SATA Mobile Rack for 12.7mm Slim CD/DVD-ROM Optical Bay (Fits 12.7mm height ODD Slot)
** Uses SATA port
* 1 x [https://www.icydock.com/goods.php?id=317 ICY Dock ToughArmor MB852M2PO-B] - Dual hot swap NVME in slim ODD bay
** Needs PCI Express card with 2 x Oculink (SFF-8612)
* 2 x [https://www.icydock.com/goods.php?id=309 ICY Dock ToughArmor MB840M2P-B] - M.2 NVMe SSD to PCIe 3.0 x4 Drive Bay Adapter

==My Model==
My system has:
* CPU: AMD Opteron™ X3421 Processor (2.1-3.4GHz/4 compute cores/8 graphic cores/2MB/12-35W) -- See on [http://www.cpu-world.com/CPUs/Bulldozer/AMD-Opteron%20X3000%20series%20X3421.html cpu-world] or the [https://www.amd.com/en/opteron useless marketing page]
** CPU Core Count - 4
** CPU Core Frequency (Base – Max Boost) - 2.1 – 3.4 GHz
** GPU CU Count - 8
** GPU Frequency (Max) - 800 MHz
** cTDP Range - 12-35W
** Max DDR4 Speed - 2400 MHz
** L2 Cache - 2MB
** MMX instructions
** Extensions to MMX
** SSE / Streaming SIMD Extensions
** SSE2 / Streaming SIMD Extensions 2
** SSE3 / Streaming SIMD Extensions 3
** SSSE3 / Supplemental Streaming SIMD Extensions 3
** SSE4 / SSE4.1 + SSE4.2 / Streaming SIMD Extensions 4 ?
** SSE4a ?
** AES / Advanced Encryption Standard instructions
** AVX / Advanced Vector Extensions
** AVX2 / Advanced Vector Extensions 2.0
** BMI / BMI1 + BMI2 / Bit Manipulation instructions
** F16C / 16-bit Floating-Point conversion instructions
** FMA3 / 3-operand Fused Multiply-Add instructions
** FMA4 / 4-operand Fused Multiply-Add instructions
** XOP / eXtended Operations instructions
** AMD64 / AMD 64-bit technology ?
** AMD-V / AMD Virtualization technology
** Supports IOMMU (via AMD-Vi [amd_iommu])
** The processor supports configurable TDP in the 12 Watt - 35 Watt range
** The CPU is compatible with DirectX 12 API.
** Turbo Core 3.0 technology
* RAM: 8 GB

==Issues==
* Does not properly handle brownouts - Gets stuck with flashing amber power LED and won't boot properly until manually power cycled
* Possibly not enough power to run 5 HDDs -- seems very unstable
* Doesn't handle hot swapping drives ???
* No IPMI for out of band management
* No serial port for console access
* No per-drive power / activity LEDs
* No door for the drive bays, need to remove the front bezel to get to the drives
* I/O errors on SATA drives and/or they drop off the bus / become inaccessible, apparently due to buggy Marvell 88SE9230 SATA controller
** Workaround: Add 'iommu=pt' to the Linux kernel parameters
** See: https://forum.proxmox.com/threads/proxmox-cant-recognize-hdd-on-sata.60259/
** See: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1810239
** Example dmesg output:<pre> [Sat Feb 6 15:00:15 2021] perf: interrupt took too long (4082 > 3936), lowering kernel.perf_event_max_sample_rate to 49000
 [Sat Feb 6 15:53:26 2021] ata2.00: exception Emask 0x10 SAct 0x0 SErr 0x4000000 action 0xe frozen
 [Sat Feb 6 15:53:26 2021] ata2.00: irq_stat 0x80000040, connection status changed
 [Sat Feb 6 15:53:26 2021] ata2: SError: { DevExch }
 [Sat Feb 6 15:53:26 2021] ata2.00: failed command: FLUSH CACHE EXT
 [Sat Feb 6 15:53:26 2021] ata2.00: cmd ea/00:00:00:00:00/00:00:00:00:00/a0 tag 29
 res 50/00:ff:00:00:00/00:00:00:00:00/00 Emask 0x10 (ATA bus error)
 [Sat Feb 6 15:53:26 2021] ata2.00: status: { DRDY }
 [Sat Feb 6 15:53:26 2021] ata2: hard resetting link
 [Sat Feb 6 15:53:27 2021] ata2: SATA link up 6.0 Gbps (SStatus 133 SControl 300)
 [Sat Feb 6 15:53:27 2021] ata2.00: configured for UDMA/133
 [Sat Feb 6 15:53:27 2021] ata2.00: retrying FLUSH 0xea Emask 0x10
 [Sat Feb 6 15:53:27 2021] ata2.00: device reported invalid CHS sector 0
 [Sat Feb 6 15:53:27 2021] ata2: EH complete
 [Sat Feb 6 15:54:46 2021] ata4.00: exception Emask 0x10 SAct 0x0 SErr 0x4000000 action 0xe frozen
 [Sat Feb 6 15:54:46 2021] ata4.00: irq_stat 0x80000040, connection status changed
 [Sat Feb 6 15:54:46 2021] ata4: SError: { DevExch }
 [Sat Feb 6 15:54:46 2021] ata4.00: failed command: FLUSH CACHE EXT
 [Sat Feb 6 15:54:46 2021] ata4.00: cmd ea/00:00:00:00:00/00:00:00:00:00/a0 tag 28
 res 50/00:ff:00:00:00/00:00:00:00:00/00 Emask 0x10 (ATA bus error)
 [Sat Feb 6 15:54:46 2021] ata4.00: status: { DRDY }
 [Sat Feb 6 15:54:46 2021] ata4: hard resetting link
 [Sat Feb 6 15:54:47 2021] ata4: SATA link up 6.0 Gbps (SStatus 133 SControl 300)
 [Sat Feb 6 15:54:47 2021] ata4.00: configured for UDMA/133
 [Sat Feb 6 15:54:47 2021] ata4.00: retrying FLUSH 0xea Emask 0x10
 [Sat Feb 6 15:54:47 2021] ata4.00: device reported invalid CHS sector 0
 [Sat Feb 6 15:54:47 2021] ata4: EH complete
 [Sat Feb 6 15:58:41 2021] ata2.00: exception Emask 0x10 SAct 0x0 SErr 0x4000000 action 0xe frozen
 [Sat Feb 6 15:58:41 2021] ata2.00: irq_stat 0x80000040, connection status changed
 [Sat Feb 6 15:58:41 2021] ata2: SError: { DevExch }
 [Sat Feb 6 15:58:41 2021] ata2.00: failed command: FLUSH CACHE EXT
 [Sat Feb 6 15:58:41 2021] ata2.00: cmd ea/00:00:00:00:00/00:00:00:00:00/a0 tag 9
 res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x10 (ATA bus error)
 [Sat Feb 6 15:58:41 2021] ata2.00: status: { DRDY }
 [Sat Feb 6 15:58:41 2021] ata2: hard resetting link
 [Sat Feb 6 15:58:42 2021] ata2: SATA link up 6.0 Gbps (SStatus 133 SControl 300)
 [Sat Feb 6 15:58:42 2021] ata2.00: configured for UDMA/133
 [Sat Feb 6 15:58:42 2021] ata2.00: retrying FLUSH 0xea Emask 0x10
 [Sat Feb 6 15:58:42 2021] ata2.00: device reported invalid CHS sector 0
 [Sat Feb 6 15:58:42 2021] ata2: EH complete
 [Sat Feb 6 16:03:34 2021] ata3.00: exception Emask 0x10 SAct 0x0 SErr 0x4000000 action 0xe frozen
 [Sat Feb 6 16:03:34 2021] ata3.00: irq_stat 0x80000040, connection status changed
 [Sat Feb 6 16:03:34 2021] ata3: SError: { DevExch }
 [Sat Feb 6 16:03:34 2021] ata3.00: failed command: FLUSH CACHE EXT
 [Sat Feb 6 16:03:34 2021] ata3.00: cmd ea/00:00:00:00:00/00:00:00:00:00/a0 tag 9
 res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x10 (ATA bus error)
 [Sat Feb 6 16:03:34 2021] ata3.00: status: { DRDY }
 [Sat Feb 6 16:03:34 2021] ata3: hard resetting link
 [Sat Feb 6 16:03:34 2021] ata3: SATA link up 6.0 Gbps (SStatus 133 SControl 300)
 [Sat Feb 6 16:03:34 2021] ata3.00: configured for UDMA/133
 [Sat Feb 6 16:03:34 2021] ata3.00: retrying FLUSH 0xea Emask 0x10
 [Sat Feb 6 16:03:34 2021] ata3.00: device reported invalid CHS sector 0
 [Sat Feb 6 16:03:34 2021] ata3: EH complete
 [Sat Feb 6 16:05:28 2021] ata2.00: exception Emask 0x10 SAct 0x0 SErr 0x4000000 action 0xe frozen
 [Sat Feb 6 16:05:28 2021] ata2.00: irq_stat 0x80000040, connection status changed
 [Sat Feb 6 16:05:28 2021] ata2: SError: { DevExch }
 [Sat Feb 6 16:05:28 2021] ata2.00: failed command: FLUSH CACHE EXT
 [Sat Feb 6 16:05:28 2021] ata2.00: cmd ea/00:00:00:00:00/00:00:00:00:00/a0 tag 20
 res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x10 (ATA bus error)
 [Sat Feb 6 16:05:28 2021] ata2.00: status: { DRDY }
 [Sat Feb 6 16:05:28 2021] ata2: hard resetting link
 [Sat Feb 6 16:05:29 2021] ata2: SATA link up 6.0 Gbps (SStatus 133 SControl 300)
 [Sat Feb 6 16:05:29 2021] ata2.00: configured for UDMA/133
 [Sat Feb 6 16:05:29 2021] ata2.00: retrying FLUSH 0xea Emask 0x10
 [Sat Feb 6 16:05:29 2021] ata2.00: device reported invalid CHS sector 0
 [Sat Feb 6 16:05:29 2021] ata2: EH complete
 
</pre>

HPE Proliant MicroServer Gen10

2025-09-18T19:05:11Z

Jeremy: /* Keyboard Bindings at POST */

=HPE Proliant MicroServer Gen10=
[[File:873830-421 1 Supersize.jpg|128px]] 

==POST==
<pre>
Version 2.18.1263. Copyright (C) 2020 American Megatrends, Inc.
BIOS Date: 02/19/2020 11:03:31 Ver: ZA10A380
Press <F2> or <DEL> to enter setup.
Press <F11> to enter Boot Menu.
</pre>
==Keyboard Bindings at POST==
* F2 or DEL : Enter BIOS Setup (aka "Aptio Setup")
* F11 : Enter Boot Menu
* Ctrl + S : Broadcom NetXtreme Boot Agent configuration menu
* Ctrl + M : Marvell BIOS Utility

==Issues==
* Does not properly handle brownouts - Gets stuck with flashing amber power LED and won't boot properly until manually power cycled
* Possibly not enough power to run 5 HDDs -- seems very unstable
* Doesn't handle hot swapping drives ???
* No IPMI for out of band management
* No serial port for console access
* No per-drive power / activity LEDs
* No door for the drive bays, need to remove the front bezel to get to the drives
* I/O errors on SATA drives and/or they drop off the bus / become inaccessible, apparently due to buggy Marvell 88SE9230 SATA controller
** Workaround: Add 'iommu=pt' to the Linux kernel parameters
** See: https://forum.proxmox.com/threads/proxmox-cant-recognize-hdd-on-sata.60259/
** See: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1810239
** Example dmesg output:<pre> [Sat Feb 6 15:00:15 2021] perf: interrupt took too long (4082 > 3936), lowering kernel.perf_event_max_sample_rate to 49000
 [Sat Feb 6 15:53:26 2021] ata2.00: exception Emask 0x10 SAct 0x0 SErr 0x4000000 action 0xe frozen
 [Sat Feb 6 15:53:26 2021] ata2.00: irq_stat 0x80000040, connection status changed
 [Sat Feb 6 15:53:26 2021] ata2: SError: { DevExch }
 [Sat Feb 6 15:53:26 2021] ata2.00: failed command: FLUSH CACHE EXT
 [Sat Feb 6 15:53:26 2021] ata2.00: cmd ea/00:00:00:00:00/00:00:00:00:00/a0 tag 29
 res 50/00:ff:00:00:00/00:00:00:00:00/00 Emask 0x10 (ATA bus error)
 [Sat Feb 6 15:53:26 2021] ata2.00: status: { DRDY }
 [Sat Feb 6 15:53:26 2021] ata2: hard resetting link
 [Sat Feb 6 15:53:27 2021] ata2: SATA link up 6.0 Gbps (SStatus 133 SControl 300)
 [Sat Feb 6 15:53:27 2021] ata2.00: configured for UDMA/133
 [Sat Feb 6 15:53:27 2021] ata2.00: retrying FLUSH 0xea Emask 0x10
 [Sat Feb 6 15:53:27 2021] ata2.00: device reported invalid CHS sector 0
 [Sat Feb 6 15:53:27 2021] ata2: EH complete
 [Sat Feb 6 15:54:46 2021] ata4.00: exception Emask 0x10 SAct 0x0 SErr 0x4000000 action 0xe frozen
 [Sat Feb 6 15:54:46 2021] ata4.00: irq_stat 0x80000040, connection status changed
 [Sat Feb 6 15:54:46 2021] ata4: SError: { DevExch }
 [Sat Feb 6 15:54:46 2021] ata4.00: failed command: FLUSH CACHE EXT
 [Sat Feb 6 15:54:46 2021] ata4.00: cmd ea/00:00:00:00:00/00:00:00:00:00/a0 tag 28
 res 50/00:ff:00:00:00/00:00:00:00:00/00 Emask 0x10 (ATA bus error)
 [Sat Feb 6 15:54:46 2021] ata4.00: status: { DRDY }
 [Sat Feb 6 15:54:46 2021] ata4: hard resetting link
 [Sat Feb 6 15:54:47 2021] ata4: SATA link up 6.0 Gbps (SStatus 133 SControl 300)
 [Sat Feb 6 15:54:47 2021] ata4.00: configured for UDMA/133
 [Sat Feb 6 15:54:47 2021] ata4.00: retrying FLUSH 0xea Emask 0x10
 [Sat Feb 6 15:54:47 2021] ata4.00: device reported invalid CHS sector 0
 [Sat Feb 6 15:54:47 2021] ata4: EH complete
 [Sat Feb 6 15:58:41 2021] ata2.00: exception Emask 0x10 SAct 0x0 SErr 0x4000000 action 0xe frozen
 [Sat Feb 6 15:58:41 2021] ata2.00: irq_stat 0x80000040, connection status changed
 [Sat Feb 6 15:58:41 2021] ata2: SError: { DevExch }
 [Sat Feb 6 15:58:41 2021] ata2.00: failed command: FLUSH CACHE EXT
 [Sat Feb 6 15:58:41 2021] ata2.00: cmd ea/00:00:00:00:00/00:00:00:00:00/a0 tag 9
 res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x10 (ATA bus error)
 [Sat Feb 6 15:58:41 2021] ata2.00: status: { DRDY }
 [Sat Feb 6 15:58:41 2021] ata2: hard resetting link
 [Sat Feb 6 15:58:42 2021] ata2: SATA link up 6.0 Gbps (SStatus 133 SControl 300)
 [Sat Feb 6 15:58:42 2021] ata2.00: configured for UDMA/133
 [Sat Feb 6 15:58:42 2021] ata2.00: retrying FLUSH 0xea Emask 0x10
 [Sat Feb 6 15:58:42 2021] ata2.00: device reported invalid CHS sector 0
 [Sat Feb 6 15:58:42 2021] ata2: EH complete
 [Sat Feb 6 16:03:34 2021] ata3.00: exception Emask 0x10 SAct 0x0 SErr 0x4000000 action 0xe frozen
 [Sat Feb 6 16:03:34 2021] ata3.00: irq_stat 0x80000040, connection status changed
 [Sat Feb 6 16:03:34 2021] ata3: SError: { DevExch }
 [Sat Feb 6 16:03:34 2021] ata3.00: failed command: FLUSH CACHE EXT
 [Sat Feb 6 16:03:34 2021] ata3.00: cmd ea/00:00:00:00:00/00:00:00:00:00/a0 tag 9
 res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x10 (ATA bus error)
 [Sat Feb 6 16:03:34 2021] ata3.00: status: { DRDY }
 [Sat Feb 6 16:03:34 2021] ata3: hard resetting link
 [Sat Feb 6 16:03:34 2021] ata3: SATA link up 6.0 Gbps (SStatus 133 SControl 300)
 [Sat Feb 6 16:03:34 2021] ata3.00: configured for UDMA/133
 [Sat Feb 6 16:03:34 2021] ata3.00: retrying FLUSH 0xea Emask 0x10
 [Sat Feb 6 16:03:34 2021] ata3.00: device reported invalid CHS sector 0
 [Sat Feb 6 16:03:34 2021] ata3: EH complete
 [Sat Feb 6 16:05:28 2021] ata2.00: exception Emask 0x10 SAct 0x0 SErr 0x4000000 action 0xe frozen
 [Sat Feb 6 16:05:28 2021] ata2.00: irq_stat 0x80000040, connection status changed
 [Sat Feb 6 16:05:28 2021] ata2: SError: { DevExch }
 [Sat Feb 6 16:05:28 2021] ata2.00: failed command: FLUSH CACHE EXT
 [Sat Feb 6 16:05:28 2021] ata2.00: cmd ea/00:00:00:00:00/00:00:00:00:00/a0 tag 20
 res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x10 (ATA bus error)
 [Sat Feb 6 16:05:28 2021] ata2.00: status: { DRDY }
 [Sat Feb 6 16:05:28 2021] ata2: hard resetting link
 [Sat Feb 6 16:05:29 2021] ata2: SATA link up 6.0 Gbps (SStatus 133 SControl 300)
 [Sat Feb 6 16:05:29 2021] ata2.00: configured for UDMA/133
 [Sat Feb 6 16:05:29 2021] ata2.00: retrying FLUSH 0xea Emask 0x10
 [Sat Feb 6 16:05:29 2021] ata2.00: device reported invalid CHS sector 0
 [Sat Feb 6 16:05:29 2021] ata2: EH complete
 
</pre>

==Status==
* Latest BIOS version (as of 2021-02-06 09:28:10 EST): ZA10A380 (13 Mar 2020)

==Resources==
* [https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=emr_na-a00028524en_us Manufacturer page]
* [https://support.hpe.com/hpesc/public/km/product/1009955119/HPE-ProLiant-MicroServer-Gen10-Server?ismnp=0&l5oid=1009955118#t=All&sort=relevancy&numberOfResults=25 Downloads]

===Updating Storage Controller Firmware===
* Go here and find the latest version for the "Firmware | Storage Controller" download: https://support.hpe.com/hpsc/swd/public/detail?swItemId=MTX_8374214d9a3a4392878c9bba59#tab2 (e.g. [https://downloads.hpe.com/pub/softlib2/software1/sc-linux-fw-array/p164515310/v177536/rpm/RPMS/x86_64/firmware-smartarray-f7c07bdbbd-3.21-1.1.x86_64.rpm firmware-smartarray-f7c07bdbbd-3.21-1.1.x86_64.rpm]
* Generic method without installing a package:<pre>root@daytapod1 ~/firmware $ rpm2cpio firmware-smartarray-f7c07bdbbd-3.21-1.1.x86_64.rpm | cpio -idmv
root@daytapod1 ~/firmware $ cd usr/lib/x86_64-linux-gnu/firmware-smartarray-f7c07bdbbd-3.21-1.1
root@daytapod1 ~/firmware/usr/lib/x86_64-linux-gnu/firmware-smartarray-f7c07bdbbd-3.21-1.1 $ ./setup

Supplemental Update / Online ROM Flash Component for Linux (x64) - HPE Smart Array P408i-p, P408e-p, P408i-a, P408i-c, E208i-p, E208e-p, E208i-c, E208i-a, P408i-sb, P408e-m, P204i-c, P204i-b, P816i and P416ie-m SR Gen10 (3.21), searching...
============ Summary ============
Smart Component Finished
Exit Status: 3
Update not attempted. All selected devices are either up-to-date or have newer versions installed.</pre>
* For rpm-based distros:<pre>rpm -ivh firmware-smartarray-f7c07bdbbd-3.21-1.1.x86_64.rpm</pre>
* For apt-based distros:<pre>apt-get install alien
alien firmware-smartarray-f7c07bdbbd-3.21-1.1.x86_64.rpm
dpkg -i firmware-smartarray-f7c07bdbbd_3.21-2.1_amd64.deb</pre>
* Reboot

===Accessing Marvell BIOS Utility===

The Marvell BIOS Utility is built into the embedded Marvell storage controller ROM. Use this utility to create and manage RAID virtual disks and arrays using the drives connected to the embedded storage controller. Accessing the Marvell BIOS Utility under legacy boot mode

Procedure:
# Reboot the server.
# On the POST drive information screen, press Ctrl+M.

===Updating BIOS===
Damn HP requires that you create an account to download BIOS firmware. WTF? Anyway...
* Go here: https://support.hpe.com/hpsc/swd/public/detail?swItemId=MTX_8374214d9a3a4392878c9bba59#tab2
* Download the tar file (e.g. [https://support.hpe.com/hpsc/swd/public/download/downloads.hpe.com/pub/softlib2/software1/pubsw-linux/p1122136033/v179389/System_BIOS_v_ZA10A380_for_MicroServer_Gen10_Linux.tgz System_BIOS_v_ZA10A380_for_MicroServer_Gen10_Linux.tgz])
* Please note that: When updating the System BIOS from version ZA10A320 (or earlier) to version ZA10A330 (or later), the following system BIOS configuration settings will revert to their factory default values:
** System time and date
** Hard drive configuration
** Boot device sequence
** System passwords
** Security setup

* Extract it and apply the update
root@daytapod1 ~/firmware $ tar xzvf System_BIOS_v_ZA10A380_for_MicroServer_Gen10_Linux.tgz
root@daytapod1 ~/firmware $ cd System_BIOS_v_ZA10A380_for_MicroServer_Gen10_Linux/Lnx/
root@daytapod1 ~/firmware/System_BIOS_v_ZA10A380_for_MicroServer_Gen10_Linux/Lnx $ ./flashbios.sh
+---------------------------------------------------------------------------+
| AMI Firmware Update Utility v5.08.02.1189 |
| Copyright (C)2016 American Megatrends Inc. All Rights Reserved. |
+---------------------------------------------------------------------------+
Reading flash ............... done
- FFS checksums ......... ok
Erasing Boot Block .......... done
Updating Boot Block ......... done
Verifying Boot Block ........ done
Erasing Main Block .......... done
Updating Main Block ......... done
Verifying Main Block ........ done
Erasing NVRAM Block ......... done
Updating NVRAM Block ........ done
Verifying NVRAM Block ....... done
Erasing NCB Block ........... done
Updating NCB Block .......... done
* Reboot

==To Research==
* There is a 6th SATA port traced on the motherboard (without the SATA plug) but only 5 show in the BIOS (4 front bay and 1 on the motherboard with SATA plug). Can the BIOS be hacked to enable the 6th SATA port?

==Overview==

* Expansion bays
** 1 x media bay (Optional (1) DVD-RW or (1) SATA SSD)
* Drive bays
** 4 x 3.5" SATA 6Gb/s via caddy-less drive bays (behind front cover) -- advertised as Non-hot plug SATA
** 1 x on-board SATA port (for device in media bay)
* USB
** Font: 2 x USB 3.0 ports (not blue for whatever reason)
** Rear: 2 x USB 3.0 ports (not blue for whatever reason), 2 x USB 2.0 ports
** 1 x on-board USB 2.0 port
* Network
** Embedded Broadcom BCM5720 Dual Port Gbe LOM
* RAM
** Type: DDR4 Unbuffered (UDIMM)
** DIMM Slots: 2
** Max RAM: 32GB (2 x 16GB) PC4-2400T DDR4 UDIMM ( DDr4-2400 )
* Display
** 1 x VGA port
** 2 x Display Ports 1.2
* Expansion Slots
** 1 x PCIe3 x4 (1) (low-profile only in this chassis)
** 1 x PCIe3 x8 (8, 4, 1) (low-profile only in this chassis)
* Fans
** One (1) non-redundant system fan shipped standard -- not software controllable
* Misc
** ACPI V5.0 Compliant
** Slot for TPM (not included) -- HPE Trusted Platform Module (TPM) 2.0 kit 745823-B21
** PCIe 3.0 Compliant
** PXE Support
** WOL Support
** EMC Class B
** LFF/SFF SATA connector on motherboard connects to backplane for 4 x HDDs
** Hard drive screws: 4 x per drive = 16
** Front bezel lock/unlock indicators
** Power on/Standby button and system power LED
** Health LED
** NIC status LED
** Drive activity LED ( single, not per-drive )
* Management
** BMC / IPMI / iLO: NO

==Devices==
00:00.0 Host bridge: Advanced Micro Devices, Inc. [AMD] Family 15h (Models 60h-6fh) Processor Root Complex
00:00.2 IOMMU: Advanced Micro Devices, Inc. [AMD] Family 15h (Models 60h-6fh) I/O Memory Management Unit
00:01.0 VGA compatible controller: Advanced Micro Devices, Inc. [AMD/ATI] Wani [Radeon R5/R6/R7 Graphics] (rev 84)
00:01.1 Audio device: Advanced Micro Devices, Inc. [AMD/ATI] Kabini HDMI/DP Audio
00:02.0 Host bridge: Advanced Micro Devices, Inc. [AMD] Family 15h (Models 60h-6fh) Host Bridge
00:02.2 PCI bridge: Advanced Micro Devices, Inc. [AMD] Family 15h (Models 60h-6fh) Processor Root Port
00:02.5 PCI bridge: Advanced Micro Devices, Inc. [AMD] Family 15h (Models 60h-6fh) Processor Root Port
00:03.0 Host bridge: Advanced Micro Devices, Inc. [AMD] Family 15h (Models 60h-6fh) Host Bridge
00:08.0 Encryption controller: Advanced Micro Devices, Inc. [AMD] Carrizo Platform Security Processor
00:09.0 Host bridge: Advanced Micro Devices, Inc. [AMD] Carrizo Audio Dummy Host Bridge
00:10.0 USB controller: Advanced Micro Devices, Inc. [AMD] FCH USB XHCI Controller (rev 20)
00:11.0 SATA controller: Advanced Micro Devices, Inc. [AMD] FCH SATA Controller [AHCI mode] (rev 49)
00:12.0 USB controller: Advanced Micro Devices, Inc. [AMD] FCH USB EHCI Controller (rev 49)
00:14.0 SMBus: Advanced Micro Devices, Inc. [AMD] FCH SMBus Controller (rev 4a)
00:14.3 ISA bridge: Advanced Micro Devices, Inc. [AMD] FCH LPC Bridge (rev 11)
00:18.0 Host bridge: Advanced Micro Devices, Inc. [AMD] Family 15h (Models 60h-6fh) Processor Function 0
00:18.1 Host bridge: Advanced Micro Devices, Inc. [AMD] Family 15h (Models 60h-6fh) Processor Function 1
00:18.2 Host bridge: Advanced Micro Devices, Inc. [AMD] Family 15h (Models 60h-6fh) Processor Function 2
00:18.3 Host bridge: Advanced Micro Devices, Inc. [AMD] Family 15h (Models 60h-6fh) Processor Function 3
00:18.4 Host bridge: Advanced Micro Devices, Inc. [AMD] Family 15h (Models 60h-6fh) Processor Function 4
00:18.5 Host bridge: Advanced Micro Devices, Inc. [AMD] Family 15h (Models 60h-6fh) Processor Function 5
01:00.0 SATA controller: Marvell Technology Group Ltd. 88SE9230 PCIe SATA 6Gb/s Controller (rev 11)
02:00.0 Ethernet controller: Broadcom Inc. and subsidiaries NetXtreme BCM5720 2-port Gigabit Ethernet PCIe
02:00.1 Ethernet controller: Broadcom Inc. and subsidiaries NetXtreme BCM5720 2-port Gigabit Ethernet PCIe

==Drivers==
* ahci AHCI SATA low-level driver
* amdgpu AMD GPU
* ehci-pci
* fam15h_power AMD Family 15h CPU processor power monitor
* k10temp AMD Family 10h+ CPU core temperature monitor
* pcieport
* piix4_smbus
* snd_hda_intel Intel HDA driver
* tg3 Broadcom Tigon3 ethernet driver
* xhci_hcd

lm_sensors found the following:
k10temp-pci-00c3
Adapter: PCI adapter
temp1: +23.0°C (high = +70.0°C)
(crit = +100.0°C, hyst = +99.0°C)

amdgpu-pci-0008
Adapter: PCI adapter
vddgfx: 750.00 mV
vddnb: 875.00 mV
edge: +23.0°C (crit = +1.0°C, hyst = -273.1°C)

fam15h_power-pci-00c4
Adapter: PCI adapter
power1: 21.27 mW (avg = 2.27 mW, interval = 0.01 s)
(crit = 15.00 W)

Not that impressive, but not bad.

==Potential Upgrade Parts List==
* HPE 8 GB (1x8GB) Single Rank x8 DDR4-2400 CAS-17-17-17 Unbuffered Standard Memory Kit 862974-B21
* HPE 16 GB (1x16GB) Dual Rank x8 DDR4-2400 CAS-17-17-17 Unbuffered Standard Memory Kit 862976-B21
* HPE Ethernet 10Gb 2-port 521T Adapter 867707-B21
* HPE Trusted Platform Module 2.0 Kit 745823-B21
* LSI 9200-8E - for connecting to external storage enclosures
* [https://www.icydock.com/goods.php?id=251 ICY Dock MB411SPO-1B] - HDD Hot-Swap SATA Mobile Rack for 12.7mm Slim CD/DVD-ROM Optical Bay (Fits 12.7mm height ODD Slot)
** Uses SATA port
* 1 x [https://www.icydock.com/goods.php?id=317 ICY Dock ToughArmor MB852M2PO-B] - Dual hot swap NVME in slim ODD bay
** Needs PCI Express card with 2 x Oculink (SFF-8612)
* 2 x [https://www.icydock.com/goods.php?id=309 ICY Dock ToughArmor MB840M2P-B] - M.2 NVMe SSD to PCIe 3.0 x4 Drive Bay Adapter

==My Model==
My system has:
* CPU: AMD Opteron™ X3421 Processor (2.1-3.4GHz/4 compute cores/8 graphic cores/2MB/12-35W) -- See on [http://www.cpu-world.com/CPUs/Bulldozer/AMD-Opteron%20X3000%20series%20X3421.html cpu-world] or the [https://www.amd.com/en/opteron useless marketing page]
** CPU Core Count - 4
** CPU Core Frequency (Base – Max Boost) - 2.1 – 3.4 GHz
** GPU CU Count - 8
** GPU Frequency (Max) - 800 MHz
** cTDP Range - 12-35W
** Max DDR4 Speed - 2400 MHz
** L2 Cache - 2MB
** MMX instructions
** Extensions to MMX
** SSE / Streaming SIMD Extensions
** SSE2 / Streaming SIMD Extensions 2
** SSE3 / Streaming SIMD Extensions 3
** SSSE3 / Supplemental Streaming SIMD Extensions 3
** SSE4 / SSE4.1 + SSE4.2 / Streaming SIMD Extensions 4 ?
** SSE4a ?
** AES / Advanced Encryption Standard instructions
** AVX / Advanced Vector Extensions
** AVX2 / Advanced Vector Extensions 2.0
** BMI / BMI1 + BMI2 / Bit Manipulation instructions
** F16C / 16-bit Floating-Point conversion instructions
** FMA3 / 3-operand Fused Multiply-Add instructions
** FMA4 / 4-operand Fused Multiply-Add instructions
** XOP / eXtended Operations instructions
** AMD64 / AMD 64-bit technology ?
** AMD-V / AMD Virtualization technology
** Supports IOMMU (via AMD-Vi [amd_iommu])
** The processor supports configurable TDP in the 12 Watt - 35 Watt range
** The CPU is compatible with DirectX 12 API.
** Turbo Core 3.0 technology
* RAM: 8 GB

==Resources==
* Marketing: https://buy.hpe.com/us/en/servers/proliant-microserver/proliant-microserver/proliant-microserver/hpe-proliant-microserver-gen10/p/1009955118
* Support: https://support.hpe.com/hpesc/public/km/product/1009955119/Product#t=DriversandSoftware&sort=relevancy&layout=table&numberOfResults=25
* Misc: https://forum.openmediavault.org/index.php/Thread/19388-HP-microserver-Gen10/?pageNo=2
* User Manual: https://content.etilize.com/User-Manual/1046044075.pdf
* Specifications: https://h20195.www2.hpe.com/v2/GetDocument.aspx?docname=a00008701enw
* Storage Controller Specifications: https://h20195.www2.hpe.com/v2/Getdocument.aspx?docname=a00017196ENW

HPE Proliant MicroServer Gen10

2025-09-18T19:02:58Z

Jeremy: /* Resources */

=HPE Proliant MicroServer Gen10=
[[File:873830-421 1 Supersize.jpg|128px]] 

==POST==
<pre>
Version 2.18.1263. Copyright (C) 2020 American Megatrends, Inc.
BIOS Date: 02/19/2020 11:03:31 Ver: ZA10A380
Press <F2> or <DEL> to enter setup.
Press <F11> to enter Boot Menu.
</pre>
==Keyboard Bindings at POST==
Broadcom NetXtreme Boot Agent
CTRL+S for configuration menu

F2 or DEL : Enter Setup

F11 : Enter Boot Menu

==Issues==
* Does not properly handle brownouts - Gets stuck with flashing amber power LED and won't boot properly until manually power cycled
* Possibly not enough power to run 5 HDDs -- seems very unstable
* Doesn't handle hot swapping drives ???
* No IPMI for out of band management
* No serial port for console access
* No per-drive power / activity LEDs
* No door for the drive bays, need to remove the front bezel to get to the drives
* I/O errors on SATA drives and/or they drop off the bus / become inaccessible, apparently due to buggy Marvell 88SE9230 SATA controller
** Workaround: Add 'iommu=pt' to the Linux kernel parameters
** See: https://forum.proxmox.com/threads/proxmox-cant-recognize-hdd-on-sata.60259/
** See: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1810239
** Example dmesg output:<pre> [Sat Feb 6 15:00:15 2021] perf: interrupt took too long (4082 > 3936), lowering kernel.perf_event_max_sample_rate to 49000
 [Sat Feb 6 15:53:26 2021] ata2.00: exception Emask 0x10 SAct 0x0 SErr 0x4000000 action 0xe frozen
 [Sat Feb 6 15:53:26 2021] ata2.00: irq_stat 0x80000040, connection status changed
 [Sat Feb 6 15:53:26 2021] ata2: SError: { DevExch }
 [Sat Feb 6 15:53:26 2021] ata2.00: failed command: FLUSH CACHE EXT
 [Sat Feb 6 15:53:26 2021] ata2.00: cmd ea/00:00:00:00:00/00:00:00:00:00/a0 tag 29
 res 50/00:ff:00:00:00/00:00:00:00:00/00 Emask 0x10 (ATA bus error)
 [Sat Feb 6 15:53:26 2021] ata2.00: status: { DRDY }
 [Sat Feb 6 15:53:26 2021] ata2: hard resetting link
 [Sat Feb 6 15:53:27 2021] ata2: SATA link up 6.0 Gbps (SStatus 133 SControl 300)
 [Sat Feb 6 15:53:27 2021] ata2.00: configured for UDMA/133
 [Sat Feb 6 15:53:27 2021] ata2.00: retrying FLUSH 0xea Emask 0x10
 [Sat Feb 6 15:53:27 2021] ata2.00: device reported invalid CHS sector 0
 [Sat Feb 6 15:53:27 2021] ata2: EH complete
 [Sat Feb 6 15:54:46 2021] ata4.00: exception Emask 0x10 SAct 0x0 SErr 0x4000000 action 0xe frozen
 [Sat Feb 6 15:54:46 2021] ata4.00: irq_stat 0x80000040, connection status changed
 [Sat Feb 6 15:54:46 2021] ata4: SError: { DevExch }
 [Sat Feb 6 15:54:46 2021] ata4.00: failed command: FLUSH CACHE EXT
 [Sat Feb 6 15:54:46 2021] ata4.00: cmd ea/00:00:00:00:00/00:00:00:00:00/a0 tag 28
 res 50/00:ff:00:00:00/00:00:00:00:00/00 Emask 0x10 (ATA bus error)
 [Sat Feb 6 15:54:46 2021] ata4.00: status: { DRDY }
 [Sat Feb 6 15:54:46 2021] ata4: hard resetting link
 [Sat Feb 6 15:54:47 2021] ata4: SATA link up 6.0 Gbps (SStatus 133 SControl 300)
 [Sat Feb 6 15:54:47 2021] ata4.00: configured for UDMA/133
 [Sat Feb 6 15:54:47 2021] ata4.00: retrying FLUSH 0xea Emask 0x10
 [Sat Feb 6 15:54:47 2021] ata4.00: device reported invalid CHS sector 0
 [Sat Feb 6 15:54:47 2021] ata4: EH complete
 [Sat Feb 6 15:58:41 2021] ata2.00: exception Emask 0x10 SAct 0x0 SErr 0x4000000 action 0xe frozen
 [Sat Feb 6 15:58:41 2021] ata2.00: irq_stat 0x80000040, connection status changed
 [Sat Feb 6 15:58:41 2021] ata2: SError: { DevExch }
 [Sat Feb 6 15:58:41 2021] ata2.00: failed command: FLUSH CACHE EXT
 [Sat Feb 6 15:58:41 2021] ata2.00: cmd ea/00:00:00:00:00/00:00:00:00:00/a0 tag 9
 res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x10 (ATA bus error)
 [Sat Feb 6 15:58:41 2021] ata2.00: status: { DRDY }
 [Sat Feb 6 15:58:41 2021] ata2: hard resetting link
 [Sat Feb 6 15:58:42 2021] ata2: SATA link up 6.0 Gbps (SStatus 133 SControl 300)
 [Sat Feb 6 15:58:42 2021] ata2.00: configured for UDMA/133
 [Sat Feb 6 15:58:42 2021] ata2.00: retrying FLUSH 0xea Emask 0x10
 [Sat Feb 6 15:58:42 2021] ata2.00: device reported invalid CHS sector 0
 [Sat Feb 6 15:58:42 2021] ata2: EH complete
 [Sat Feb 6 16:03:34 2021] ata3.00: exception Emask 0x10 SAct 0x0 SErr 0x4000000 action 0xe frozen
 [Sat Feb 6 16:03:34 2021] ata3.00: irq_stat 0x80000040, connection status changed
 [Sat Feb 6 16:03:34 2021] ata3: SError: { DevExch }
 [Sat Feb 6 16:03:34 2021] ata3.00: failed command: FLUSH CACHE EXT
 [Sat Feb 6 16:03:34 2021] ata3.00: cmd ea/00:00:00:00:00/00:00:00:00:00/a0 tag 9
 res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x10 (ATA bus error)
 [Sat Feb 6 16:03:34 2021] ata3.00: status: { DRDY }
 [Sat Feb 6 16:03:34 2021] ata3: hard resetting link
 [Sat Feb 6 16:03:34 2021] ata3: SATA link up 6.0 Gbps (SStatus 133 SControl 300)
 [Sat Feb 6 16:03:34 2021] ata3.00: configured for UDMA/133
 [Sat Feb 6 16:03:34 2021] ata3.00: retrying FLUSH 0xea Emask 0x10
 [Sat Feb 6 16:03:34 2021] ata3.00: device reported invalid CHS sector 0
 [Sat Feb 6 16:03:34 2021] ata3: EH complete
 [Sat Feb 6 16:05:28 2021] ata2.00: exception Emask 0x10 SAct 0x0 SErr 0x4000000 action 0xe frozen
 [Sat Feb 6 16:05:28 2021] ata2.00: irq_stat 0x80000040, connection status changed
 [Sat Feb 6 16:05:28 2021] ata2: SError: { DevExch }
 [Sat Feb 6 16:05:28 2021] ata2.00: failed command: FLUSH CACHE EXT
 [Sat Feb 6 16:05:28 2021] ata2.00: cmd ea/00:00:00:00:00/00:00:00:00:00/a0 tag 20
 res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x10 (ATA bus error)
 [Sat Feb 6 16:05:28 2021] ata2.00: status: { DRDY }
 [Sat Feb 6 16:05:28 2021] ata2: hard resetting link
 [Sat Feb 6 16:05:29 2021] ata2: SATA link up 6.0 Gbps (SStatus 133 SControl 300)
 [Sat Feb 6 16:05:29 2021] ata2.00: configured for UDMA/133
 [Sat Feb 6 16:05:29 2021] ata2.00: retrying FLUSH 0xea Emask 0x10
 [Sat Feb 6 16:05:29 2021] ata2.00: device reported invalid CHS sector 0
 [Sat Feb 6 16:05:29 2021] ata2: EH complete
 
</pre>

==Status==
* Latest BIOS version (as of 2021-02-06 09:28:10 EST): ZA10A380 (13 Mar 2020)

==Resources==
* [https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=emr_na-a00028524en_us Manufacturer page]
* [https://support.hpe.com/hpesc/public/km/product/1009955119/HPE-ProLiant-MicroServer-Gen10-Server?ismnp=0&l5oid=1009955118#t=All&sort=relevancy&numberOfResults=25 Downloads]

===Updating Storage Controller Firmware===
* Go here and find the latest version for the "Firmware | Storage Controller" download: https://support.hpe.com/hpsc/swd/public/detail?swItemId=MTX_8374214d9a3a4392878c9bba59#tab2 (e.g. [https://downloads.hpe.com/pub/softlib2/software1/sc-linux-fw-array/p164515310/v177536/rpm/RPMS/x86_64/firmware-smartarray-f7c07bdbbd-3.21-1.1.x86_64.rpm firmware-smartarray-f7c07bdbbd-3.21-1.1.x86_64.rpm]
* Generic method without installing a package:<pre>root@daytapod1 ~/firmware $ rpm2cpio firmware-smartarray-f7c07bdbbd-3.21-1.1.x86_64.rpm | cpio -idmv
root@daytapod1 ~/firmware $ cd usr/lib/x86_64-linux-gnu/firmware-smartarray-f7c07bdbbd-3.21-1.1
root@daytapod1 ~/firmware/usr/lib/x86_64-linux-gnu/firmware-smartarray-f7c07bdbbd-3.21-1.1 $ ./setup

Supplemental Update / Online ROM Flash Component for Linux (x64) - HPE Smart Array P408i-p, P408e-p, P408i-a, P408i-c, E208i-p, E208e-p, E208i-c, E208i-a, P408i-sb, P408e-m, P204i-c, P204i-b, P816i and P416ie-m SR Gen10 (3.21), searching...
============ Summary ============
Smart Component Finished
Exit Status: 3
Update not attempted. All selected devices are either up-to-date or have newer versions installed.</pre>
* For rpm-based distros:<pre>rpm -ivh firmware-smartarray-f7c07bdbbd-3.21-1.1.x86_64.rpm</pre>
* For apt-based distros:<pre>apt-get install alien
alien firmware-smartarray-f7c07bdbbd-3.21-1.1.x86_64.rpm
dpkg -i firmware-smartarray-f7c07bdbbd_3.21-2.1_amd64.deb</pre>
* Reboot

===Accessing Marvell BIOS Utility===

The Marvell BIOS Utility is built into the embedded Marvell storage controller ROM. Use this utility to create and manage RAID virtual disks and arrays using the drives connected to the embedded storage controller. Accessing the Marvell BIOS Utility under legacy boot mode

Procedure:
# Reboot the server.
# On the POST drive information screen, press Ctrl+M.

===Updating BIOS===
Damn HP requires that you create an account to download BIOS firmware. WTF? Anyway...
* Go here: https://support.hpe.com/hpsc/swd/public/detail?swItemId=MTX_8374214d9a3a4392878c9bba59#tab2
* Download the tar file (e.g. [https://support.hpe.com/hpsc/swd/public/download/downloads.hpe.com/pub/softlib2/software1/pubsw-linux/p1122136033/v179389/System_BIOS_v_ZA10A380_for_MicroServer_Gen10_Linux.tgz System_BIOS_v_ZA10A380_for_MicroServer_Gen10_Linux.tgz])
* Please note that: When updating the System BIOS from version ZA10A320 (or earlier) to version ZA10A330 (or later), the following system BIOS configuration settings will revert to their factory default values:
** System time and date
** Hard drive configuration
** Boot device sequence
** System passwords
** Security setup

* Extract it and apply the update
root@daytapod1 ~/firmware $ tar xzvf System_BIOS_v_ZA10A380_for_MicroServer_Gen10_Linux.tgz
root@daytapod1 ~/firmware $ cd System_BIOS_v_ZA10A380_for_MicroServer_Gen10_Linux/Lnx/
root@daytapod1 ~/firmware/System_BIOS_v_ZA10A380_for_MicroServer_Gen10_Linux/Lnx $ ./flashbios.sh
+---------------------------------------------------------------------------+
| AMI Firmware Update Utility v5.08.02.1189 |
| Copyright (C)2016 American Megatrends Inc. All Rights Reserved. |
+---------------------------------------------------------------------------+
Reading flash ............... done
- FFS checksums ......... ok
Erasing Boot Block .......... done
Updating Boot Block ......... done
Verifying Boot Block ........ done
Erasing Main Block .......... done
Updating Main Block ......... done
Verifying Main Block ........ done
Erasing NVRAM Block ......... done
Updating NVRAM Block ........ done
Verifying NVRAM Block ....... done
Erasing NCB Block ........... done
Updating NCB Block .......... done
* Reboot

==To Research==
* There is a 6th SATA port traced on the motherboard (without the SATA plug) but only 5 show in the BIOS (4 front bay and 1 on the motherboard with SATA plug). Can the BIOS be hacked to enable the 6th SATA port?

==Overview==

* Expansion bays
** 1 x media bay (Optional (1) DVD-RW or (1) SATA SSD)
* Drive bays
** 4 x 3.5" SATA 6Gb/s via caddy-less drive bays (behind front cover) -- advertised as Non-hot plug SATA
** 1 x on-board SATA port (for device in media bay)
* USB
** Font: 2 x USB 3.0 ports (not blue for whatever reason)
** Rear: 2 x USB 3.0 ports (not blue for whatever reason), 2 x USB 2.0 ports
** 1 x on-board USB 2.0 port
* Network
** Embedded Broadcom BCM5720 Dual Port Gbe LOM
* RAM
** Type: DDR4 Unbuffered (UDIMM)
** DIMM Slots: 2
** Max RAM: 32GB (2 x 16GB) PC4-2400T DDR4 UDIMM ( DDr4-2400 )
* Display
** 1 x VGA port
** 2 x Display Ports 1.2
* Expansion Slots
** 1 x PCIe3 x4 (1) (low-profile only in this chassis)
** 1 x PCIe3 x8 (8, 4, 1) (low-profile only in this chassis)
* Fans
** One (1) non-redundant system fan shipped standard -- not software controllable
* Misc
** ACPI V5.0 Compliant
** Slot for TPM (not included) -- HPE Trusted Platform Module (TPM) 2.0 kit 745823-B21
** PCIe 3.0 Compliant
** PXE Support
** WOL Support
** EMC Class B
** LFF/SFF SATA connector on motherboard connects to backplane for 4 x HDDs
** Hard drive screws: 4 x per drive = 16
** Front bezel lock/unlock indicators
** Power on/Standby button and system power LED
** Health LED
** NIC status LED
** Drive activity LED ( single, not per-drive )
* Management
** BMC / IPMI / iLO: NO

==Devices==
00:00.0 Host bridge: Advanced Micro Devices, Inc. [AMD] Family 15h (Models 60h-6fh) Processor Root Complex
00:00.2 IOMMU: Advanced Micro Devices, Inc. [AMD] Family 15h (Models 60h-6fh) I/O Memory Management Unit
00:01.0 VGA compatible controller: Advanced Micro Devices, Inc. [AMD/ATI] Wani [Radeon R5/R6/R7 Graphics] (rev 84)
00:01.1 Audio device: Advanced Micro Devices, Inc. [AMD/ATI] Kabini HDMI/DP Audio
00:02.0 Host bridge: Advanced Micro Devices, Inc. [AMD] Family 15h (Models 60h-6fh) Host Bridge
00:02.2 PCI bridge: Advanced Micro Devices, Inc. [AMD] Family 15h (Models 60h-6fh) Processor Root Port
00:02.5 PCI bridge: Advanced Micro Devices, Inc. [AMD] Family 15h (Models 60h-6fh) Processor Root Port
00:03.0 Host bridge: Advanced Micro Devices, Inc. [AMD] Family 15h (Models 60h-6fh) Host Bridge
00:08.0 Encryption controller: Advanced Micro Devices, Inc. [AMD] Carrizo Platform Security Processor
00:09.0 Host bridge: Advanced Micro Devices, Inc. [AMD] Carrizo Audio Dummy Host Bridge
00:10.0 USB controller: Advanced Micro Devices, Inc. [AMD] FCH USB XHCI Controller (rev 20)
00:11.0 SATA controller: Advanced Micro Devices, Inc. [AMD] FCH SATA Controller [AHCI mode] (rev 49)
00:12.0 USB controller: Advanced Micro Devices, Inc. [AMD] FCH USB EHCI Controller (rev 49)
00:14.0 SMBus: Advanced Micro Devices, Inc. [AMD] FCH SMBus Controller (rev 4a)
00:14.3 ISA bridge: Advanced Micro Devices, Inc. [AMD] FCH LPC Bridge (rev 11)
00:18.0 Host bridge: Advanced Micro Devices, Inc. [AMD] Family 15h (Models 60h-6fh) Processor Function 0
00:18.1 Host bridge: Advanced Micro Devices, Inc. [AMD] Family 15h (Models 60h-6fh) Processor Function 1
00:18.2 Host bridge: Advanced Micro Devices, Inc. [AMD] Family 15h (Models 60h-6fh) Processor Function 2
00:18.3 Host bridge: Advanced Micro Devices, Inc. [AMD] Family 15h (Models 60h-6fh) Processor Function 3
00:18.4 Host bridge: Advanced Micro Devices, Inc. [AMD] Family 15h (Models 60h-6fh) Processor Function 4
00:18.5 Host bridge: Advanced Micro Devices, Inc. [AMD] Family 15h (Models 60h-6fh) Processor Function 5
01:00.0 SATA controller: Marvell Technology Group Ltd. 88SE9230 PCIe SATA 6Gb/s Controller (rev 11)
02:00.0 Ethernet controller: Broadcom Inc. and subsidiaries NetXtreme BCM5720 2-port Gigabit Ethernet PCIe
02:00.1 Ethernet controller: Broadcom Inc. and subsidiaries NetXtreme BCM5720 2-port Gigabit Ethernet PCIe

==Drivers==
* ahci AHCI SATA low-level driver
* amdgpu AMD GPU
* ehci-pci
* fam15h_power AMD Family 15h CPU processor power monitor
* k10temp AMD Family 10h+ CPU core temperature monitor
* pcieport
* piix4_smbus
* snd_hda_intel Intel HDA driver
* tg3 Broadcom Tigon3 ethernet driver
* xhci_hcd

lm_sensors found the following:
k10temp-pci-00c3
Adapter: PCI adapter
temp1: +23.0°C (high = +70.0°C)
(crit = +100.0°C, hyst = +99.0°C)

amdgpu-pci-0008
Adapter: PCI adapter
vddgfx: 750.00 mV
vddnb: 875.00 mV
edge: +23.0°C (crit = +1.0°C, hyst = -273.1°C)

fam15h_power-pci-00c4
Adapter: PCI adapter
power1: 21.27 mW (avg = 2.27 mW, interval = 0.01 s)
(crit = 15.00 W)

Not that impressive, but not bad.

==Potential Upgrade Parts List==
* HPE 8 GB (1x8GB) Single Rank x8 DDR4-2400 CAS-17-17-17 Unbuffered Standard Memory Kit 862974-B21
* HPE 16 GB (1x16GB) Dual Rank x8 DDR4-2400 CAS-17-17-17 Unbuffered Standard Memory Kit 862976-B21
* HPE Ethernet 10Gb 2-port 521T Adapter 867707-B21
* HPE Trusted Platform Module 2.0 Kit 745823-B21
* LSI 9200-8E - for connecting to external storage enclosures
* [https://www.icydock.com/goods.php?id=251 ICY Dock MB411SPO-1B] - HDD Hot-Swap SATA Mobile Rack for 12.7mm Slim CD/DVD-ROM Optical Bay (Fits 12.7mm height ODD Slot)
** Uses SATA port
* 1 x [https://www.icydock.com/goods.php?id=317 ICY Dock ToughArmor MB852M2PO-B] - Dual hot swap NVME in slim ODD bay
** Needs PCI Express card with 2 x Oculink (SFF-8612)
* 2 x [https://www.icydock.com/goods.php?id=309 ICY Dock ToughArmor MB840M2P-B] - M.2 NVMe SSD to PCIe 3.0 x4 Drive Bay Adapter

==My Model==
My system has:
* CPU: AMD Opteron™ X3421 Processor (2.1-3.4GHz/4 compute cores/8 graphic cores/2MB/12-35W) -- See on [http://www.cpu-world.com/CPUs/Bulldozer/AMD-Opteron%20X3000%20series%20X3421.html cpu-world] or the [https://www.amd.com/en/opteron useless marketing page]
** CPU Core Count - 4
** CPU Core Frequency (Base – Max Boost) - 2.1 – 3.4 GHz
** GPU CU Count - 8
** GPU Frequency (Max) - 800 MHz
** cTDP Range - 12-35W
** Max DDR4 Speed - 2400 MHz
** L2 Cache - 2MB
** MMX instructions
** Extensions to MMX
** SSE / Streaming SIMD Extensions
** SSE2 / Streaming SIMD Extensions 2
** SSE3 / Streaming SIMD Extensions 3
** SSSE3 / Supplemental Streaming SIMD Extensions 3
** SSE4 / SSE4.1 + SSE4.2 / Streaming SIMD Extensions 4 ?
** SSE4a ?
** AES / Advanced Encryption Standard instructions
** AVX / Advanced Vector Extensions
** AVX2 / Advanced Vector Extensions 2.0
** BMI / BMI1 + BMI2 / Bit Manipulation instructions
** F16C / 16-bit Floating-Point conversion instructions
** FMA3 / 3-operand Fused Multiply-Add instructions
** FMA4 / 4-operand Fused Multiply-Add instructions
** XOP / eXtended Operations instructions
** AMD64 / AMD 64-bit technology ?
** AMD-V / AMD Virtualization technology
** Supports IOMMU (via AMD-Vi [amd_iommu])
** The processor supports configurable TDP in the 12 Watt - 35 Watt range
** The CPU is compatible with DirectX 12 API.
** Turbo Core 3.0 technology
* RAM: 8 GB

==Resources==
* Marketing: https://buy.hpe.com/us/en/servers/proliant-microserver/proliant-microserver/proliant-microserver/hpe-proliant-microserver-gen10/p/1009955118
* Support: https://support.hpe.com/hpesc/public/km/product/1009955119/Product#t=DriversandSoftware&sort=relevancy&layout=table&numberOfResults=25
* Misc: https://forum.openmediavault.org/index.php/Thread/19388-HP-microserver-Gen10/?pageNo=2
* User Manual: https://content.etilize.com/User-Manual/1046044075.pdf
* Specifications: https://h20195.www2.hpe.com/v2/GetDocument.aspx?docname=a00008701enw
* Storage Controller Specifications: https://h20195.www2.hpe.com/v2/Getdocument.aspx?docname=a00017196ENW

HPE Proliant MicroServer Gen10

2025-09-17T01:58:29Z

Jeremy: /* Issues */

=HPE Proliant MicroServer Gen10=
[[File:873830-421 1 Supersize.jpg|128px]] 

==POST==
<pre>
Version 2.18.1263. Copyright (C) 2020 American Megatrends, Inc.
BIOS Date: 02/19/2020 11:03:31 Ver: ZA10A380
Press <F2> or <DEL> to enter setup.
Press <F11> to enter Boot Menu.
</pre>
==Keyboard Bindings at POST==
Broadcom NetXtreme Boot Agent
CTRL+S for configuration menu

F2 or DEL : Enter Setup

F11 : Enter Boot Menu

==Issues==
* Does not properly handle brownouts - Gets stuck with flashing amber power LED and won't boot properly until manually power cycled
* Possibly not enough power to run 5 HDDs -- seems very unstable
* Doesn't handle hot swapping drives ???
* No IPMI for out of band management
* No serial port for console access
* No per-drive power / activity LEDs
* No door for the drive bays, need to remove the front bezel to get to the drives
* I/O errors on SATA drives and/or they drop off the bus / become inaccessible, apparently due to buggy Marvell 88SE9230 SATA controller
** Workaround: Add 'iommu=pt' to the Linux kernel parameters
** See: https://forum.proxmox.com/threads/proxmox-cant-recognize-hdd-on-sata.60259/
** See: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1810239
** Example dmesg output:<pre> [Sat Feb 6 15:00:15 2021] perf: interrupt took too long (4082 > 3936), lowering kernel.perf_event_max_sample_rate to 49000
 [Sat Feb 6 15:53:26 2021] ata2.00: exception Emask 0x10 SAct 0x0 SErr 0x4000000 action 0xe frozen
 [Sat Feb 6 15:53:26 2021] ata2.00: irq_stat 0x80000040, connection status changed
 [Sat Feb 6 15:53:26 2021] ata2: SError: { DevExch }
 [Sat Feb 6 15:53:26 2021] ata2.00: failed command: FLUSH CACHE EXT
 [Sat Feb 6 15:53:26 2021] ata2.00: cmd ea/00:00:00:00:00/00:00:00:00:00/a0 tag 29
 res 50/00:ff:00:00:00/00:00:00:00:00/00 Emask 0x10 (ATA bus error)
 [Sat Feb 6 15:53:26 2021] ata2.00: status: { DRDY }
 [Sat Feb 6 15:53:26 2021] ata2: hard resetting link
 [Sat Feb 6 15:53:27 2021] ata2: SATA link up 6.0 Gbps (SStatus 133 SControl 300)
 [Sat Feb 6 15:53:27 2021] ata2.00: configured for UDMA/133
 [Sat Feb 6 15:53:27 2021] ata2.00: retrying FLUSH 0xea Emask 0x10
 [Sat Feb 6 15:53:27 2021] ata2.00: device reported invalid CHS sector 0
 [Sat Feb 6 15:53:27 2021] ata2: EH complete
 [Sat Feb 6 15:54:46 2021] ata4.00: exception Emask 0x10 SAct 0x0 SErr 0x4000000 action 0xe frozen
 [Sat Feb 6 15:54:46 2021] ata4.00: irq_stat 0x80000040, connection status changed
 [Sat Feb 6 15:54:46 2021] ata4: SError: { DevExch }
 [Sat Feb 6 15:54:46 2021] ata4.00: failed command: FLUSH CACHE EXT
 [Sat Feb 6 15:54:46 2021] ata4.00: cmd ea/00:00:00:00:00/00:00:00:00:00/a0 tag 28
 res 50/00:ff:00:00:00/00:00:00:00:00/00 Emask 0x10 (ATA bus error)
 [Sat Feb 6 15:54:46 2021] ata4.00: status: { DRDY }
 [Sat Feb 6 15:54:46 2021] ata4: hard resetting link
 [Sat Feb 6 15:54:47 2021] ata4: SATA link up 6.0 Gbps (SStatus 133 SControl 300)
 [Sat Feb 6 15:54:47 2021] ata4.00: configured for UDMA/133
 [Sat Feb 6 15:54:47 2021] ata4.00: retrying FLUSH 0xea Emask 0x10
 [Sat Feb 6 15:54:47 2021] ata4.00: device reported invalid CHS sector 0
 [Sat Feb 6 15:54:47 2021] ata4: EH complete
 [Sat Feb 6 15:58:41 2021] ata2.00: exception Emask 0x10 SAct 0x0 SErr 0x4000000 action 0xe frozen
 [Sat Feb 6 15:58:41 2021] ata2.00: irq_stat 0x80000040, connection status changed
 [Sat Feb 6 15:58:41 2021] ata2: SError: { DevExch }
 [Sat Feb 6 15:58:41 2021] ata2.00: failed command: FLUSH CACHE EXT
 [Sat Feb 6 15:58:41 2021] ata2.00: cmd ea/00:00:00:00:00/00:00:00:00:00/a0 tag 9
 res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x10 (ATA bus error)
 [Sat Feb 6 15:58:41 2021] ata2.00: status: { DRDY }
 [Sat Feb 6 15:58:41 2021] ata2: hard resetting link
 [Sat Feb 6 15:58:42 2021] ata2: SATA link up 6.0 Gbps (SStatus 133 SControl 300)
 [Sat Feb 6 15:58:42 2021] ata2.00: configured for UDMA/133
 [Sat Feb 6 15:58:42 2021] ata2.00: retrying FLUSH 0xea Emask 0x10
 [Sat Feb 6 15:58:42 2021] ata2.00: device reported invalid CHS sector 0
 [Sat Feb 6 15:58:42 2021] ata2: EH complete
 [Sat Feb 6 16:03:34 2021] ata3.00: exception Emask 0x10 SAct 0x0 SErr 0x4000000 action 0xe frozen
 [Sat Feb 6 16:03:34 2021] ata3.00: irq_stat 0x80000040, connection status changed
 [Sat Feb 6 16:03:34 2021] ata3: SError: { DevExch }
 [Sat Feb 6 16:03:34 2021] ata3.00: failed command: FLUSH CACHE EXT
 [Sat Feb 6 16:03:34 2021] ata3.00: cmd ea/00:00:00:00:00/00:00:00:00:00/a0 tag 9
 res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x10 (ATA bus error)
 [Sat Feb 6 16:03:34 2021] ata3.00: status: { DRDY }
 [Sat Feb 6 16:03:34 2021] ata3: hard resetting link
 [Sat Feb 6 16:03:34 2021] ata3: SATA link up 6.0 Gbps (SStatus 133 SControl 300)
 [Sat Feb 6 16:03:34 2021] ata3.00: configured for UDMA/133
 [Sat Feb 6 16:03:34 2021] ata3.00: retrying FLUSH 0xea Emask 0x10
 [Sat Feb 6 16:03:34 2021] ata3.00: device reported invalid CHS sector 0
 [Sat Feb 6 16:03:34 2021] ata3: EH complete
 [Sat Feb 6 16:05:28 2021] ata2.00: exception Emask 0x10 SAct 0x0 SErr 0x4000000 action 0xe frozen
 [Sat Feb 6 16:05:28 2021] ata2.00: irq_stat 0x80000040, connection status changed
 [Sat Feb 6 16:05:28 2021] ata2: SError: { DevExch }
 [Sat Feb 6 16:05:28 2021] ata2.00: failed command: FLUSH CACHE EXT
 [Sat Feb 6 16:05:28 2021] ata2.00: cmd ea/00:00:00:00:00/00:00:00:00:00/a0 tag 20
 res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x10 (ATA bus error)
 [Sat Feb 6 16:05:28 2021] ata2.00: status: { DRDY }
 [Sat Feb 6 16:05:28 2021] ata2: hard resetting link
 [Sat Feb 6 16:05:29 2021] ata2: SATA link up 6.0 Gbps (SStatus 133 SControl 300)
 [Sat Feb 6 16:05:29 2021] ata2.00: configured for UDMA/133
 [Sat Feb 6 16:05:29 2021] ata2.00: retrying FLUSH 0xea Emask 0x10
 [Sat Feb 6 16:05:29 2021] ata2.00: device reported invalid CHS sector 0
 [Sat Feb 6 16:05:29 2021] ata2: EH complete
 
</pre>

==Status==
* Latest BIOS version (as of 2021-02-06 09:28:10 EST): ZA10A380 (13 Mar 2020)

==Resources==
* [https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=emr_na-a00028524en_us Manufacturer page]
* [https://support.hpe.com/hpesc/public/km/product/1009955119/HPE-ProLiant-MicroServer-Gen10-Server?ismnp=0&l5oid=1009955118#t=All&sort=relevancy&numberOfResults=25 Downloads]

===Updating Storage Controller Firmware===
* Go here and find the latest version for the "Firmware | Storage Controller" download: https://support.hpe.com/hpsc/swd/public/detail?swItemId=MTX_8374214d9a3a4392878c9bba59#tab2 (e.g. [https://downloads.hpe.com/pub/softlib2/software1/sc-linux-fw-array/p164515310/v177536/rpm/RPMS/x86_64/firmware-smartarray-f7c07bdbbd-3.21-1.1.x86_64.rpm firmware-smartarray-f7c07bdbbd-3.21-1.1.x86_64.rpm]
* Generic method without installing a package:<pre>root@daytapod1 ~/firmware $ rpm2cpio firmware-smartarray-f7c07bdbbd-3.21-1.1.x86_64.rpm | cpio -idmv
root@daytapod1 ~/firmware $ cd usr/lib/x86_64-linux-gnu/firmware-smartarray-f7c07bdbbd-3.21-1.1
root@daytapod1 ~/firmware/usr/lib/x86_64-linux-gnu/firmware-smartarray-f7c07bdbbd-3.21-1.1 $ ./setup

Supplemental Update / Online ROM Flash Component for Linux (x64) - HPE Smart Array P408i-p, P408e-p, P408i-a, P408i-c, E208i-p, E208e-p, E208i-c, E208i-a, P408i-sb, P408e-m, P204i-c, P204i-b, P816i and P416ie-m SR Gen10 (3.21), searching...
============ Summary ============
Smart Component Finished
Exit Status: 3
Update not attempted. All selected devices are either up-to-date or have newer versions installed.</pre>
* For rpm-based distros:<pre>rpm -ivh firmware-smartarray-f7c07bdbbd-3.21-1.1.x86_64.rpm</pre>
* For apt-based distros:<pre>apt-get install alien
alien firmware-smartarray-f7c07bdbbd-3.21-1.1.x86_64.rpm
dpkg -i firmware-smartarray-f7c07bdbbd_3.21-2.1_amd64.deb</pre>
* Reboot

===Updating BIOS===
Damn HP requires that you create an account to download BIOS firmware. WTF? Anyway...
* Go here: https://support.hpe.com/hpsc/swd/public/detail?swItemId=MTX_8374214d9a3a4392878c9bba59#tab2
* Download the tar file (e.g. [https://support.hpe.com/hpsc/swd/public/download/downloads.hpe.com/pub/softlib2/software1/pubsw-linux/p1122136033/v179389/System_BIOS_v_ZA10A380_for_MicroServer_Gen10_Linux.tgz System_BIOS_v_ZA10A380_for_MicroServer_Gen10_Linux.tgz])
* Please note that: When updating the System BIOS from version ZA10A320 (or earlier) to version ZA10A330 (or later), the following system BIOS configuration settings will revert to their factory default values:
** System time and date
** Hard drive configuration
** Boot device sequence
** System passwords
** Security setup

* Extract it and apply the update
root@daytapod1 ~/firmware $ tar xzvf System_BIOS_v_ZA10A380_for_MicroServer_Gen10_Linux.tgz
root@daytapod1 ~/firmware $ cd System_BIOS_v_ZA10A380_for_MicroServer_Gen10_Linux/Lnx/
root@daytapod1 ~/firmware/System_BIOS_v_ZA10A380_for_MicroServer_Gen10_Linux/Lnx $ ./flashbios.sh
+---------------------------------------------------------------------------+
| AMI Firmware Update Utility v5.08.02.1189 |
| Copyright (C)2016 American Megatrends Inc. All Rights Reserved. |
+---------------------------------------------------------------------------+
Reading flash ............... done
- FFS checksums ......... ok
Erasing Boot Block .......... done
Updating Boot Block ......... done
Verifying Boot Block ........ done
Erasing Main Block .......... done
Updating Main Block ......... done
Verifying Main Block ........ done
Erasing NVRAM Block ......... done
Updating NVRAM Block ........ done
Verifying NVRAM Block ....... done
Erasing NCB Block ........... done
Updating NCB Block .......... done
* Reboot

==To Research==
* There is a 6th SATA port traced on the motherboard (without the SATA plug) but only 5 show in the BIOS (4 front bay and 1 on the motherboard with SATA plug). Can the BIOS be hacked to enable the 6th SATA port?

==Overview==

* Expansion bays
** 1 x media bay (Optional (1) DVD-RW or (1) SATA SSD)
* Drive bays
** 4 x 3.5" SATA 6Gb/s via caddy-less drive bays (behind front cover) -- advertised as Non-hot plug SATA
** 1 x on-board SATA port (for device in media bay)
* USB
** Font: 2 x USB 3.0 ports (not blue for whatever reason)
** Rear: 2 x USB 3.0 ports (not blue for whatever reason), 2 x USB 2.0 ports
** 1 x on-board USB 2.0 port
* Network
** Embedded Broadcom BCM5720 Dual Port Gbe LOM
* RAM
** Type: DDR4 Unbuffered (UDIMM)
** DIMM Slots: 2
** Max RAM: 32GB (2 x 16GB) PC4-2400T DDR4 UDIMM ( DDr4-2400 )
* Display
** 1 x VGA port
** 2 x Display Ports 1.2
* Expansion Slots
** 1 x PCIe3 x4 (1) (low-profile only in this chassis)
** 1 x PCIe3 x8 (8, 4, 1) (low-profile only in this chassis)
* Fans
** One (1) non-redundant system fan shipped standard -- not software controllable
* Misc
** ACPI V5.0 Compliant
** Slot for TPM (not included) -- HPE Trusted Platform Module (TPM) 2.0 kit 745823-B21
** PCIe 3.0 Compliant
** PXE Support
** WOL Support
** EMC Class B
** LFF/SFF SATA connector on motherboard connects to backplane for 4 x HDDs
** Hard drive screws: 4 x per drive = 16
** Front bezel lock/unlock indicators
** Power on/Standby button and system power LED
** Health LED
** NIC status LED
** Drive activity LED ( single, not per-drive )
* Management
** BMC / IPMI / iLO: NO

==Devices==
00:00.0 Host bridge: Advanced Micro Devices, Inc. [AMD] Family 15h (Models 60h-6fh) Processor Root Complex
00:00.2 IOMMU: Advanced Micro Devices, Inc. [AMD] Family 15h (Models 60h-6fh) I/O Memory Management Unit
00:01.0 VGA compatible controller: Advanced Micro Devices, Inc. [AMD/ATI] Wani [Radeon R5/R6/R7 Graphics] (rev 84)
00:01.1 Audio device: Advanced Micro Devices, Inc. [AMD/ATI] Kabini HDMI/DP Audio
00:02.0 Host bridge: Advanced Micro Devices, Inc. [AMD] Family 15h (Models 60h-6fh) Host Bridge
00:02.2 PCI bridge: Advanced Micro Devices, Inc. [AMD] Family 15h (Models 60h-6fh) Processor Root Port
00:02.5 PCI bridge: Advanced Micro Devices, Inc. [AMD] Family 15h (Models 60h-6fh) Processor Root Port
00:03.0 Host bridge: Advanced Micro Devices, Inc. [AMD] Family 15h (Models 60h-6fh) Host Bridge
00:08.0 Encryption controller: Advanced Micro Devices, Inc. [AMD] Carrizo Platform Security Processor
00:09.0 Host bridge: Advanced Micro Devices, Inc. [AMD] Carrizo Audio Dummy Host Bridge
00:10.0 USB controller: Advanced Micro Devices, Inc. [AMD] FCH USB XHCI Controller (rev 20)
00:11.0 SATA controller: Advanced Micro Devices, Inc. [AMD] FCH SATA Controller [AHCI mode] (rev 49)
00:12.0 USB controller: Advanced Micro Devices, Inc. [AMD] FCH USB EHCI Controller (rev 49)
00:14.0 SMBus: Advanced Micro Devices, Inc. [AMD] FCH SMBus Controller (rev 4a)
00:14.3 ISA bridge: Advanced Micro Devices, Inc. [AMD] FCH LPC Bridge (rev 11)
00:18.0 Host bridge: Advanced Micro Devices, Inc. [AMD] Family 15h (Models 60h-6fh) Processor Function 0
00:18.1 Host bridge: Advanced Micro Devices, Inc. [AMD] Family 15h (Models 60h-6fh) Processor Function 1
00:18.2 Host bridge: Advanced Micro Devices, Inc. [AMD] Family 15h (Models 60h-6fh) Processor Function 2
00:18.3 Host bridge: Advanced Micro Devices, Inc. [AMD] Family 15h (Models 60h-6fh) Processor Function 3
00:18.4 Host bridge: Advanced Micro Devices, Inc. [AMD] Family 15h (Models 60h-6fh) Processor Function 4
00:18.5 Host bridge: Advanced Micro Devices, Inc. [AMD] Family 15h (Models 60h-6fh) Processor Function 5
01:00.0 SATA controller: Marvell Technology Group Ltd. 88SE9230 PCIe SATA 6Gb/s Controller (rev 11)
02:00.0 Ethernet controller: Broadcom Inc. and subsidiaries NetXtreme BCM5720 2-port Gigabit Ethernet PCIe
02:00.1 Ethernet controller: Broadcom Inc. and subsidiaries NetXtreme BCM5720 2-port Gigabit Ethernet PCIe

==Drivers==
* ahci AHCI SATA low-level driver
* amdgpu AMD GPU
* ehci-pci
* fam15h_power AMD Family 15h CPU processor power monitor
* k10temp AMD Family 10h+ CPU core temperature monitor
* pcieport
* piix4_smbus
* snd_hda_intel Intel HDA driver
* tg3 Broadcom Tigon3 ethernet driver
* xhci_hcd

lm_sensors found the following:
k10temp-pci-00c3
Adapter: PCI adapter
temp1: +23.0°C (high = +70.0°C)
(crit = +100.0°C, hyst = +99.0°C)

amdgpu-pci-0008
Adapter: PCI adapter
vddgfx: 750.00 mV
vddnb: 875.00 mV
edge: +23.0°C (crit = +1.0°C, hyst = -273.1°C)

fam15h_power-pci-00c4
Adapter: PCI adapter
power1: 21.27 mW (avg = 2.27 mW, interval = 0.01 s)
(crit = 15.00 W)

Not that impressive, but not bad.

==Potential Upgrade Parts List==
* HPE 8 GB (1x8GB) Single Rank x8 DDR4-2400 CAS-17-17-17 Unbuffered Standard Memory Kit 862974-B21
* HPE 16 GB (1x16GB) Dual Rank x8 DDR4-2400 CAS-17-17-17 Unbuffered Standard Memory Kit 862976-B21
* HPE Ethernet 10Gb 2-port 521T Adapter 867707-B21
* HPE Trusted Platform Module 2.0 Kit 745823-B21
* LSI 9200-8E - for connecting to external storage enclosures
* [https://www.icydock.com/goods.php?id=251 ICY Dock MB411SPO-1B] - HDD Hot-Swap SATA Mobile Rack for 12.7mm Slim CD/DVD-ROM Optical Bay (Fits 12.7mm height ODD Slot)
** Uses SATA port
* 1 x [https://www.icydock.com/goods.php?id=317 ICY Dock ToughArmor MB852M2PO-B] - Dual hot swap NVME in slim ODD bay
** Needs PCI Express card with 2 x Oculink (SFF-8612)
* 2 x [https://www.icydock.com/goods.php?id=309 ICY Dock ToughArmor MB840M2P-B] - M.2 NVMe SSD to PCIe 3.0 x4 Drive Bay Adapter

==My Model==
My system has:
* CPU: AMD Opteron™ X3421 Processor (2.1-3.4GHz/4 compute cores/8 graphic cores/2MB/12-35W) -- See on [http://www.cpu-world.com/CPUs/Bulldozer/AMD-Opteron%20X3000%20series%20X3421.html cpu-world] or the [https://www.amd.com/en/opteron useless marketing page]
** CPU Core Count - 4
** CPU Core Frequency (Base – Max Boost) - 2.1 – 3.4 GHz
** GPU CU Count - 8
** GPU Frequency (Max) - 800 MHz
** cTDP Range - 12-35W
** Max DDR4 Speed - 2400 MHz
** L2 Cache - 2MB
** MMX instructions
** Extensions to MMX
** SSE / Streaming SIMD Extensions
** SSE2 / Streaming SIMD Extensions 2
** SSE3 / Streaming SIMD Extensions 3
** SSSE3 / Supplemental Streaming SIMD Extensions 3
** SSE4 / SSE4.1 + SSE4.2 / Streaming SIMD Extensions 4 ?
** SSE4a ?
** AES / Advanced Encryption Standard instructions
** AVX / Advanced Vector Extensions
** AVX2 / Advanced Vector Extensions 2.0
** BMI / BMI1 + BMI2 / Bit Manipulation instructions
** F16C / 16-bit Floating-Point conversion instructions
** FMA3 / 3-operand Fused Multiply-Add instructions
** FMA4 / 4-operand Fused Multiply-Add instructions
** XOP / eXtended Operations instructions
** AMD64 / AMD 64-bit technology ?
** AMD-V / AMD Virtualization technology
** Supports IOMMU (via AMD-Vi [amd_iommu])
** The processor supports configurable TDP in the 12 Watt - 35 Watt range
** The CPU is compatible with DirectX 12 API.
** Turbo Core 3.0 technology
* RAM: 8 GB

==Resources==
* Marketing: https://buy.hpe.com/us/en/servers/proliant-microserver/proliant-microserver/proliant-microserver/hpe-proliant-microserver-gen10/p/1009955118
* Support: https://support.hpe.com/hpesc/public/km/product/1009955119/Product#t=DriversandSoftware&sort=relevancy&layout=table&numberOfResults=25
* Misc: https://forum.openmediavault.org/index.php/Thread/19388-HP-microserver-Gen10/?pageNo=2
* User Manual: https://content.etilize.com/User-Manual/1046044075.pdf
* Specifications: https://h20195.www2.hpe.com/v2/GetDocument.aspx?docname=a00008701enw
* Storage Controller Specifications: https://h20195.www2.hpe.com/v2/Getdocument.aspx?docname=a00017196ENW

HPE Proliant MicroServer Gen10

2025-09-17T00:49:50Z

Jeremy: /* HPE Proliant MicroServer Gen10 */

=HPE Proliant MicroServer Gen10=
[[File:873830-421 1 Supersize.jpg|128px]] 

==POST==
<pre>
Version 2.18.1263. Copyright (C) 2020 American Megatrends, Inc.
BIOS Date: 02/19/2020 11:03:31 Ver: ZA10A380
Press <F2> or <DEL> to enter setup.
Press <F11> to enter Boot Menu.
</pre>
==Keyboard Bindings at POST==
Broadcom NetXtreme Boot Agent
CTRL+S for configuration menu

F2 or DEL : Enter Setup

F11 : Enter Boot Menu

==Issues==
* Does not properly handle brownouts - Gets stuck with flashing amber power LED and won't boot properly until manually power cycled
* Possibly not enough power to run 5 HDDs -- seems very unstable
* Doesn't handle hot swapping drives ???
* No IPMI for out of band management
* No serial port for console access
* No per-drive power / activity LEDs
* No door for the drive bays, need to remove the front bezel to get to the drives
* I/O errors on SATA drives and/or they drop off the bus / become inaccessible, apparently due to buggy Marvell 88SE9230 SATA controller
** Workaround: Add 'iommu=pt' to the Linux kernel parameters
** See: https://forum.proxmox.com/threads/proxmox-cant-recognize-hdd-on-sata.60259/
** See: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1810239
** Example dmesg output:<pre> [Sat Feb 6 15:00:15 2021] perf: interrupt took too long (4082 > 3936), lowering kernel.perf_event_max_sample_rate to 49000
 [Sat Feb 6 15:53:26 2021] ata2.00: exception Emask 0x10 SAct 0x0 SErr 0x4000000 action 0xe frozen
 [Sat Feb 6 15:53:26 2021] ata2.00: irq_stat 0x80000040, connection status changed
 [Sat Feb 6 15:53:26 2021] ata2: SError: { DevExch }
 [Sat Feb 6 15:53:26 2021] ata2.00: failed command: FLUSH CACHE EXT
 [Sat Feb 6 15:53:26 2021] ata2.00: cmd ea/00:00:00:00:00/00:00:00:00:00/a0 tag 29
 res 50/00:ff:00:00:00/00:00:00:00:00/00 Emask 0x10 (ATA bus error)
 [Sat Feb 6 15:53:26 2021] ata2.00: status: { DRDY }
 [Sat Feb 6 15:53:26 2021] ata2: hard resetting link
 [Sat Feb 6 15:53:27 2021] ata2: SATA link up 6.0 Gbps (SStatus 133 SControl 300)
 [Sat Feb 6 15:53:27 2021] ata2.00: configured for UDMA/133
 [Sat Feb 6 15:53:27 2021] ata2.00: retrying FLUSH 0xea Emask 0x10
 [Sat Feb 6 15:53:27 2021] ata2.00: device reported invalid CHS sector 0
 [Sat Feb 6 15:53:27 2021] ata2: EH complete
 [Sat Feb 6 15:54:46 2021] ata4.00: exception Emask 0x10 SAct 0x0 SErr 0x4000000 action 0xe frozen
 [Sat Feb 6 15:54:46 2021] ata4.00: irq_stat 0x80000040, connection status changed
 [Sat Feb 6 15:54:46 2021] ata4: SError: { DevExch }
 [Sat Feb 6 15:54:46 2021] ata4.00: failed command: FLUSH CACHE EXT
 [Sat Feb 6 15:54:46 2021] ata4.00: cmd ea/00:00:00:00:00/00:00:00:00:00/a0 tag 28
 res 50/00:ff:00:00:00/00:00:00:00:00/00 Emask 0x10 (ATA bus error)
 [Sat Feb 6 15:54:46 2021] ata4.00: status: { DRDY }
 [Sat Feb 6 15:54:46 2021] ata4: hard resetting link
 [Sat Feb 6 15:54:47 2021] ata4: SATA link up 6.0 Gbps (SStatus 133 SControl 300)
 [Sat Feb 6 15:54:47 2021] ata4.00: configured for UDMA/133
 [Sat Feb 6 15:54:47 2021] ata4.00: retrying FLUSH 0xea Emask 0x10
 [Sat Feb 6 15:54:47 2021] ata4.00: device reported invalid CHS sector 0
 [Sat Feb 6 15:54:47 2021] ata4: EH complete
 [Sat Feb 6 15:58:41 2021] ata2.00: exception Emask 0x10 SAct 0x0 SErr 0x4000000 action 0xe frozen
 [Sat Feb 6 15:58:41 2021] ata2.00: irq_stat 0x80000040, connection status changed
 [Sat Feb 6 15:58:41 2021] ata2: SError: { DevExch }
 [Sat Feb 6 15:58:41 2021] ata2.00: failed command: FLUSH CACHE EXT
 [Sat Feb 6 15:58:41 2021] ata2.00: cmd ea/00:00:00:00:00/00:00:00:00:00/a0 tag 9
 res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x10 (ATA bus error)
 [Sat Feb 6 15:58:41 2021] ata2.00: status: { DRDY }
 [Sat Feb 6 15:58:41 2021] ata2: hard resetting link
 [Sat Feb 6 15:58:42 2021] ata2: SATA link up 6.0 Gbps (SStatus 133 SControl 300)
 [Sat Feb 6 15:58:42 2021] ata2.00: configured for UDMA/133
 [Sat Feb 6 15:58:42 2021] ata2.00: retrying FLUSH 0xea Emask 0x10
 [Sat Feb 6 15:58:42 2021] ata2.00: device reported invalid CHS sector 0
 [Sat Feb 6 15:58:42 2021] ata2: EH complete
 [Sat Feb 6 16:03:34 2021] ata3.00: exception Emask 0x10 SAct 0x0 SErr 0x4000000 action 0xe frozen
 [Sat Feb 6 16:03:34 2021] ata3.00: irq_stat 0x80000040, connection status changed
 [Sat Feb 6 16:03:34 2021] ata3: SError: { DevExch }
 [Sat Feb 6 16:03:34 2021] ata3.00: failed command: FLUSH CACHE EXT
 [Sat Feb 6 16:03:34 2021] ata3.00: cmd ea/00:00:00:00:00/00:00:00:00:00/a0 tag 9
 res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x10 (ATA bus error)
 [Sat Feb 6 16:03:34 2021] ata3.00: status: { DRDY }
 [Sat Feb 6 16:03:34 2021] ata3: hard resetting link
 [Sat Feb 6 16:03:34 2021] ata3: SATA link up 6.0 Gbps (SStatus 133 SControl 300)
 [Sat Feb 6 16:03:34 2021] ata3.00: configured for UDMA/133
 [Sat Feb 6 16:03:34 2021] ata3.00: retrying FLUSH 0xea Emask 0x10
 [Sat Feb 6 16:03:34 2021] ata3.00: device reported invalid CHS sector 0
 [Sat Feb 6 16:03:34 2021] ata3: EH complete
 [Sat Feb 6 16:05:28 2021] ata2.00: exception Emask 0x10 SAct 0x0 SErr 0x4000000 action 0xe frozen
 [Sat Feb 6 16:05:28 2021] ata2.00: irq_stat 0x80000040, connection status changed
 [Sat Feb 6 16:05:28 2021] ata2: SError: { DevExch }
 [Sat Feb 6 16:05:28 2021] ata2.00: failed command: FLUSH CACHE EXT
 [Sat Feb 6 16:05:28 2021] ata2.00: cmd ea/00:00:00:00:00/00:00:00:00:00/a0 tag 20
 res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x10 (ATA bus error)
 [Sat Feb 6 16:05:28 2021] ata2.00: status: { DRDY }
 [Sat Feb 6 16:05:28 2021] ata2: hard resetting link
 [Sat Feb 6 16:05:29 2021] ata2: SATA link up 6.0 Gbps (SStatus 133 SControl 300)
 [Sat Feb 6 16:05:29 2021] ata2.00: configured for UDMA/133
 [Sat Feb 6 16:05:29 2021] ata2.00: retrying FLUSH 0xea Emask 0x10
 [Sat Feb 6 16:05:29 2021] ata2.00: device reported invalid CHS sector 0
 [Sat Feb 6 16:05:29 2021] ata2: EH complete
 
</pre>

==Status==
* Latest BIOS version (as of 2021-02-06 09:28:10 EST): ZA10A380 (13 Mar 2020)

==Resources==
* [https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=emr_na-a00028524en_us Manufacturer page]
* [https://support.hpe.com/hpesc/public/km/product/1009955119/HPE-ProLiant-MicroServer-Gen10-Server?ismnp=0&l5oid=1009955118#t=All&sort=relevancy&numberOfResults=25 Downloads]

===Updating Storage Controller Firmware===
* Go here and find the latest version for the "Firmware | Storage Controller" download: https://support.hpe.com/hpsc/swd/public/detail?swItemId=MTX_8374214d9a3a4392878c9bba59#tab2 (e.g. [https://downloads.hpe.com/pub/softlib2/software1/sc-linux-fw-array/p164515310/v177536/rpm/RPMS/x86_64/firmware-smartarray-f7c07bdbbd-3.21-1.1.x86_64.rpm firmware-smartarray-f7c07bdbbd-3.21-1.1.x86_64.rpm]
* Generic method without installing a package:<pre>root@daytapod1 ~/firmware $ rpm2cpio firmware-smartarray-f7c07bdbbd-3.21-1.1.x86_64.rpm | cpio -idmv
root@daytapod1 ~/firmware $ cd usr/lib/x86_64-linux-gnu/firmware-smartarray-f7c07bdbbd-3.21-1.1
root@daytapod1 ~/firmware/usr/lib/x86_64-linux-gnu/firmware-smartarray-f7c07bdbbd-3.21-1.1 $ ./setup

Supplemental Update / Online ROM Flash Component for Linux (x64) - HPE Smart Array P408i-p, P408e-p, P408i-a, P408i-c, E208i-p, E208e-p, E208i-c, E208i-a, P408i-sb, P408e-m, P204i-c, P204i-b, P816i and P416ie-m SR Gen10 (3.21), searching...
============ Summary ============
Smart Component Finished
Exit Status: 3
Update not attempted. All selected devices are either up-to-date or have newer versions installed.</pre>
* For rpm-based distros:<pre>rpm -ivh firmware-smartarray-f7c07bdbbd-3.21-1.1.x86_64.rpm</pre>
* For apt-based distros:<pre>apt-get install alien
alien firmware-smartarray-f7c07bdbbd-3.21-1.1.x86_64.rpm
dpkg -i firmware-smartarray-f7c07bdbbd_3.21-2.1_amd64.deb</pre>
* Reboot

===Updating BIOS===
Damn HP requires that you create an account to download BIOS firmware. WTF? Anyway...
* Go here: https://support.hpe.com/hpsc/swd/public/detail?swItemId=MTX_8374214d9a3a4392878c9bba59#tab2
* Download the tar file (e.g. [https://support.hpe.com/hpsc/swd/public/download/downloads.hpe.com/pub/softlib2/software1/pubsw-linux/p1122136033/v179389/System_BIOS_v_ZA10A380_for_MicroServer_Gen10_Linux.tgz System_BIOS_v_ZA10A380_for_MicroServer_Gen10_Linux.tgz])
* Please note that: When updating the System BIOS from version ZA10A320 (or earlier) to version ZA10A330 (or later), the following system BIOS configuration settings will revert to their factory default values:
** System time and date
** Hard drive configuration
** Boot device sequence
** System passwords
** Security setup

* Extract it and apply the update
root@daytapod1 ~/firmware $ tar xzvf System_BIOS_v_ZA10A380_for_MicroServer_Gen10_Linux.tgz
root@daytapod1 ~/firmware $ cd System_BIOS_v_ZA10A380_for_MicroServer_Gen10_Linux/Lnx/
root@daytapod1 ~/firmware/System_BIOS_v_ZA10A380_for_MicroServer_Gen10_Linux/Lnx $ ./flashbios.sh
+---------------------------------------------------------------------------+
| AMI Firmware Update Utility v5.08.02.1189 |
| Copyright (C)2016 American Megatrends Inc. All Rights Reserved. |
+---------------------------------------------------------------------------+
Reading flash ............... done
- FFS checksums ......... ok
Erasing Boot Block .......... done
Updating Boot Block ......... done
Verifying Boot Block ........ done
Erasing Main Block .......... done
Updating Main Block ......... done
Verifying Main Block ........ done
Erasing NVRAM Block ......... done
Updating NVRAM Block ........ done
Verifying NVRAM Block ....... done
Erasing NCB Block ........... done
Updating NCB Block .......... done
* Reboot

==To Research==
* There is a 6th SATA port traced on the motherboard (without the SATA plug) but only 5 show in the BIOS (4 front bay and 1 on the motherboard with SATA plug). Can the BIOS be hacked to enable the 6th SATA port?

==Overview==

* Expansion bays
** 1 x media bay (Optional (1) DVD-RW or (1) SATA SSD)
* Drive bays
** 4 x 3.5" SATA 6Gb/s via caddy-less drive bays (behind front cover) -- advertised as Non-hot plug SATA
** 1 x on-board SATA port (for device in media bay)
* USB
** Font: 2 x USB 3.0 ports (not blue for whatever reason)
** Rear: 2 x USB 3.0 ports (not blue for whatever reason), 2 x USB 2.0 ports
** 1 x on-board USB 2.0 port
* Network
** Embedded Broadcom BCM5720 Dual Port Gbe LOM
* RAM
** Type: DDR4 Unbuffered (UDIMM)
** DIMM Slots: 2
** Max RAM: 32GB (2 x 16GB) PC4-2400T DDR4 UDIMM ( DDr4-2400 )
* Display
** 1 x VGA port
** 2 x Display Ports 1.2
* Expansion Slots
** 1 x PCIe3 x4 (1) (low-profile only in this chassis)
** 1 x PCIe3 x8 (8, 4, 1) (low-profile only in this chassis)
* Fans
** One (1) non-redundant system fan shipped standard -- not software controllable
* Misc
** ACPI V5.0 Compliant
** Slot for TPM (not included) -- HPE Trusted Platform Module (TPM) 2.0 kit 745823-B21
** PCIe 3.0 Compliant
** PXE Support
** WOL Support
** EMC Class B
** LFF/SFF SATA connector on motherboard connects to backplane for 4 x HDDs
** Hard drive screws: 4 x per drive = 16
** Front bezel lock/unlock indicators
** Power on/Standby button and system power LED
** Health LED
** NIC status LED
** Drive activity LED ( single, not per-drive )
* Management
** BMC / IPMI / iLO: NO

==Devices==
00:00.0 Host bridge: Advanced Micro Devices, Inc. [AMD] Family 15h (Models 60h-6fh) Processor Root Complex
00:00.2 IOMMU: Advanced Micro Devices, Inc. [AMD] Family 15h (Models 60h-6fh) I/O Memory Management Unit
00:01.0 VGA compatible controller: Advanced Micro Devices, Inc. [AMD/ATI] Wani [Radeon R5/R6/R7 Graphics] (rev 84)
00:01.1 Audio device: Advanced Micro Devices, Inc. [AMD/ATI] Kabini HDMI/DP Audio
00:02.0 Host bridge: Advanced Micro Devices, Inc. [AMD] Family 15h (Models 60h-6fh) Host Bridge
00:02.2 PCI bridge: Advanced Micro Devices, Inc. [AMD] Family 15h (Models 60h-6fh) Processor Root Port
00:02.5 PCI bridge: Advanced Micro Devices, Inc. [AMD] Family 15h (Models 60h-6fh) Processor Root Port
00:03.0 Host bridge: Advanced Micro Devices, Inc. [AMD] Family 15h (Models 60h-6fh) Host Bridge
00:08.0 Encryption controller: Advanced Micro Devices, Inc. [AMD] Carrizo Platform Security Processor
00:09.0 Host bridge: Advanced Micro Devices, Inc. [AMD] Carrizo Audio Dummy Host Bridge
00:10.0 USB controller: Advanced Micro Devices, Inc. [AMD] FCH USB XHCI Controller (rev 20)
00:11.0 SATA controller: Advanced Micro Devices, Inc. [AMD] FCH SATA Controller [AHCI mode] (rev 49)
00:12.0 USB controller: Advanced Micro Devices, Inc. [AMD] FCH USB EHCI Controller (rev 49)
00:14.0 SMBus: Advanced Micro Devices, Inc. [AMD] FCH SMBus Controller (rev 4a)
00:14.3 ISA bridge: Advanced Micro Devices, Inc. [AMD] FCH LPC Bridge (rev 11)
00:18.0 Host bridge: Advanced Micro Devices, Inc. [AMD] Family 15h (Models 60h-6fh) Processor Function 0
00:18.1 Host bridge: Advanced Micro Devices, Inc. [AMD] Family 15h (Models 60h-6fh) Processor Function 1
00:18.2 Host bridge: Advanced Micro Devices, Inc. [AMD] Family 15h (Models 60h-6fh) Processor Function 2
00:18.3 Host bridge: Advanced Micro Devices, Inc. [AMD] Family 15h (Models 60h-6fh) Processor Function 3
00:18.4 Host bridge: Advanced Micro Devices, Inc. [AMD] Family 15h (Models 60h-6fh) Processor Function 4
00:18.5 Host bridge: Advanced Micro Devices, Inc. [AMD] Family 15h (Models 60h-6fh) Processor Function 5
01:00.0 SATA controller: Marvell Technology Group Ltd. 88SE9230 PCIe SATA 6Gb/s Controller (rev 11)
02:00.0 Ethernet controller: Broadcom Inc. and subsidiaries NetXtreme BCM5720 2-port Gigabit Ethernet PCIe
02:00.1 Ethernet controller: Broadcom Inc. and subsidiaries NetXtreme BCM5720 2-port Gigabit Ethernet PCIe

==Drivers==
* ahci AHCI SATA low-level driver
* amdgpu AMD GPU
* ehci-pci
* fam15h_power AMD Family 15h CPU processor power monitor
* k10temp AMD Family 10h+ CPU core temperature monitor
* pcieport
* piix4_smbus
* snd_hda_intel Intel HDA driver
* tg3 Broadcom Tigon3 ethernet driver
* xhci_hcd

lm_sensors found the following:
k10temp-pci-00c3
Adapter: PCI adapter
temp1: +23.0°C (high = +70.0°C)
(crit = +100.0°C, hyst = +99.0°C)

amdgpu-pci-0008
Adapter: PCI adapter
vddgfx: 750.00 mV
vddnb: 875.00 mV
edge: +23.0°C (crit = +1.0°C, hyst = -273.1°C)

fam15h_power-pci-00c4
Adapter: PCI adapter
power1: 21.27 mW (avg = 2.27 mW, interval = 0.01 s)
(crit = 15.00 W)

Not that impressive, but not bad.

==Potential Upgrade Parts List==
* HPE 8 GB (1x8GB) Single Rank x8 DDR4-2400 CAS-17-17-17 Unbuffered Standard Memory Kit 862974-B21
* HPE 16 GB (1x16GB) Dual Rank x8 DDR4-2400 CAS-17-17-17 Unbuffered Standard Memory Kit 862976-B21
* HPE Ethernet 10Gb 2-port 521T Adapter 867707-B21
* HPE Trusted Platform Module 2.0 Kit 745823-B21
* LSI 9200-8E - for connecting to external storage enclosures
* [https://www.icydock.com/goods.php?id=251 ICY Dock MB411SPO-1B] - HDD Hot-Swap SATA Mobile Rack for 12.7mm Slim CD/DVD-ROM Optical Bay (Fits 12.7mm height ODD Slot)
** Uses SATA port
* 1 x [https://www.icydock.com/goods.php?id=317 ICY Dock ToughArmor MB852M2PO-B] - Dual hot swap NVME in slim ODD bay
** Needs PCI Express card with 2 x Oculink (SFF-8612)
* 2 x [https://www.icydock.com/goods.php?id=309 ICY Dock ToughArmor MB840M2P-B] - M.2 NVMe SSD to PCIe 3.0 x4 Drive Bay Adapter

==My Model==
My system has:
* CPU: AMD Opteron™ X3421 Processor (2.1-3.4GHz/4 compute cores/8 graphic cores/2MB/12-35W) -- See on [http://www.cpu-world.com/CPUs/Bulldozer/AMD-Opteron%20X3000%20series%20X3421.html cpu-world] or the [https://www.amd.com/en/opteron useless marketing page]
** CPU Core Count - 4
** CPU Core Frequency (Base – Max Boost) - 2.1 – 3.4 GHz
** GPU CU Count - 8
** GPU Frequency (Max) - 800 MHz
** cTDP Range - 12-35W
** Max DDR4 Speed - 2400 MHz
** L2 Cache - 2MB
** MMX instructions
** Extensions to MMX
** SSE / Streaming SIMD Extensions
** SSE2 / Streaming SIMD Extensions 2
** SSE3 / Streaming SIMD Extensions 3
** SSSE3 / Supplemental Streaming SIMD Extensions 3
** SSE4 / SSE4.1 + SSE4.2 / Streaming SIMD Extensions 4 ?
** SSE4a ?
** AES / Advanced Encryption Standard instructions
** AVX / Advanced Vector Extensions
** AVX2 / Advanced Vector Extensions 2.0
** BMI / BMI1 + BMI2 / Bit Manipulation instructions
** F16C / 16-bit Floating-Point conversion instructions
** FMA3 / 3-operand Fused Multiply-Add instructions
** FMA4 / 4-operand Fused Multiply-Add instructions
** XOP / eXtended Operations instructions
** AMD64 / AMD 64-bit technology ?
** AMD-V / AMD Virtualization technology
** Supports IOMMU (via AMD-Vi [amd_iommu])
** The processor supports configurable TDP in the 12 Watt - 35 Watt range
** The CPU is compatible with DirectX 12 API.
** Turbo Core 3.0 technology
* RAM: 8 GB

==Resources==
* Marketing: https://buy.hpe.com/us/en/servers/proliant-microserver/proliant-microserver/proliant-microserver/hpe-proliant-microserver-gen10/p/1009955118
* Support: https://support.hpe.com/hpesc/public/km/product/1009955119/Product#t=DriversandSoftware&sort=relevancy&layout=table&numberOfResults=25
* Misc: https://forum.openmediavault.org/index.php/Thread/19388-HP-microserver-Gen10/?pageNo=2
* User Manual: https://content.etilize.com/User-Manual/1046044075.pdf
* Specifications: https://h20195.www2.hpe.com/v2/GetDocument.aspx?docname=a00008701enw
* Storage Controller Specifications: https://h20195.www2.hpe.com/v2/Getdocument.aspx?docname=a00017196ENW

HPE Proliant MicroServer Gen10

2025-09-16T19:30:20Z

Jeremy:

=HPE Proliant MicroServer Gen10=
[[File:873830-421 1 Supersize.jpg|128px]] 
==Keyboard Bindings at POST==
Broadcom NetXtreme Boot Agent
CTRL+S for configuration menu

F2 or DEL : Enter Setup

F11 : Enter Boot Menu

==Issues==
* Does not properly handle brownouts - Gets stuck with flashing amber power LED and won't boot properly until manually power cycled
* Possibly not enough power to run 5 HDDs -- seems very unstable
* Doesn't handle hot swapping drives ???
* No IPMI for out of band management
* No serial port for console access
* No per-drive power / activity LEDs
* No door for the drive bays, need to remove the front bezel to get to the drives
* I/O errors on SATA drives and/or they drop off the bus / become inaccessible, apparently due to buggy Marvell 88SE9230 SATA controller
** Workaround: Add 'iommu=pt' to the Linux kernel parameters
** See: https://forum.proxmox.com/threads/proxmox-cant-recognize-hdd-on-sata.60259/
** See: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1810239
** Example dmesg output:<pre> [Sat Feb 6 15:00:15 2021] perf: interrupt took too long (4082 > 3936), lowering kernel.perf_event_max_sample_rate to 49000
 [Sat Feb 6 15:53:26 2021] ata2.00: exception Emask 0x10 SAct 0x0 SErr 0x4000000 action 0xe frozen
 [Sat Feb 6 15:53:26 2021] ata2.00: irq_stat 0x80000040, connection status changed
 [Sat Feb 6 15:53:26 2021] ata2: SError: { DevExch }
 [Sat Feb 6 15:53:26 2021] ata2.00: failed command: FLUSH CACHE EXT
 [Sat Feb 6 15:53:26 2021] ata2.00: cmd ea/00:00:00:00:00/00:00:00:00:00/a0 tag 29
 res 50/00:ff:00:00:00/00:00:00:00:00/00 Emask 0x10 (ATA bus error)
 [Sat Feb 6 15:53:26 2021] ata2.00: status: { DRDY }
 [Sat Feb 6 15:53:26 2021] ata2: hard resetting link
 [Sat Feb 6 15:53:27 2021] ata2: SATA link up 6.0 Gbps (SStatus 133 SControl 300)
 [Sat Feb 6 15:53:27 2021] ata2.00: configured for UDMA/133
 [Sat Feb 6 15:53:27 2021] ata2.00: retrying FLUSH 0xea Emask 0x10
 [Sat Feb 6 15:53:27 2021] ata2.00: device reported invalid CHS sector 0
 [Sat Feb 6 15:53:27 2021] ata2: EH complete
 [Sat Feb 6 15:54:46 2021] ata4.00: exception Emask 0x10 SAct 0x0 SErr 0x4000000 action 0xe frozen
 [Sat Feb 6 15:54:46 2021] ata4.00: irq_stat 0x80000040, connection status changed
 [Sat Feb 6 15:54:46 2021] ata4: SError: { DevExch }
 [Sat Feb 6 15:54:46 2021] ata4.00: failed command: FLUSH CACHE EXT
 [Sat Feb 6 15:54:46 2021] ata4.00: cmd ea/00:00:00:00:00/00:00:00:00:00/a0 tag 28
 res 50/00:ff:00:00:00/00:00:00:00:00/00 Emask 0x10 (ATA bus error)
 [Sat Feb 6 15:54:46 2021] ata4.00: status: { DRDY }
 [Sat Feb 6 15:54:46 2021] ata4: hard resetting link
 [Sat Feb 6 15:54:47 2021] ata4: SATA link up 6.0 Gbps (SStatus 133 SControl 300)
 [Sat Feb 6 15:54:47 2021] ata4.00: configured for UDMA/133
 [Sat Feb 6 15:54:47 2021] ata4.00: retrying FLUSH 0xea Emask 0x10
 [Sat Feb 6 15:54:47 2021] ata4.00: device reported invalid CHS sector 0
 [Sat Feb 6 15:54:47 2021] ata4: EH complete
 [Sat Feb 6 15:58:41 2021] ata2.00: exception Emask 0x10 SAct 0x0 SErr 0x4000000 action 0xe frozen
 [Sat Feb 6 15:58:41 2021] ata2.00: irq_stat 0x80000040, connection status changed
 [Sat Feb 6 15:58:41 2021] ata2: SError: { DevExch }
 [Sat Feb 6 15:58:41 2021] ata2.00: failed command: FLUSH CACHE EXT
 [Sat Feb 6 15:58:41 2021] ata2.00: cmd ea/00:00:00:00:00/00:00:00:00:00/a0 tag 9
 res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x10 (ATA bus error)
 [Sat Feb 6 15:58:41 2021] ata2.00: status: { DRDY }
 [Sat Feb 6 15:58:41 2021] ata2: hard resetting link
 [Sat Feb 6 15:58:42 2021] ata2: SATA link up 6.0 Gbps (SStatus 133 SControl 300)
 [Sat Feb 6 15:58:42 2021] ata2.00: configured for UDMA/133
 [Sat Feb 6 15:58:42 2021] ata2.00: retrying FLUSH 0xea Emask 0x10
 [Sat Feb 6 15:58:42 2021] ata2.00: device reported invalid CHS sector 0
 [Sat Feb 6 15:58:42 2021] ata2: EH complete
 [Sat Feb 6 16:03:34 2021] ata3.00: exception Emask 0x10 SAct 0x0 SErr 0x4000000 action 0xe frozen
 [Sat Feb 6 16:03:34 2021] ata3.00: irq_stat 0x80000040, connection status changed
 [Sat Feb 6 16:03:34 2021] ata3: SError: { DevExch }
 [Sat Feb 6 16:03:34 2021] ata3.00: failed command: FLUSH CACHE EXT
 [Sat Feb 6 16:03:34 2021] ata3.00: cmd ea/00:00:00:00:00/00:00:00:00:00/a0 tag 9
 res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x10 (ATA bus error)
 [Sat Feb 6 16:03:34 2021] ata3.00: status: { DRDY }
 [Sat Feb 6 16:03:34 2021] ata3: hard resetting link
 [Sat Feb 6 16:03:34 2021] ata3: SATA link up 6.0 Gbps (SStatus 133 SControl 300)
 [Sat Feb 6 16:03:34 2021] ata3.00: configured for UDMA/133
 [Sat Feb 6 16:03:34 2021] ata3.00: retrying FLUSH 0xea Emask 0x10
 [Sat Feb 6 16:03:34 2021] ata3.00: device reported invalid CHS sector 0
 [Sat Feb 6 16:03:34 2021] ata3: EH complete
 [Sat Feb 6 16:05:28 2021] ata2.00: exception Emask 0x10 SAct 0x0 SErr 0x4000000 action 0xe frozen
 [Sat Feb 6 16:05:28 2021] ata2.00: irq_stat 0x80000040, connection status changed
 [Sat Feb 6 16:05:28 2021] ata2: SError: { DevExch }
 [Sat Feb 6 16:05:28 2021] ata2.00: failed command: FLUSH CACHE EXT
 [Sat Feb 6 16:05:28 2021] ata2.00: cmd ea/00:00:00:00:00/00:00:00:00:00/a0 tag 20
 res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x10 (ATA bus error)
 [Sat Feb 6 16:05:28 2021] ata2.00: status: { DRDY }
 [Sat Feb 6 16:05:28 2021] ata2: hard resetting link
 [Sat Feb 6 16:05:29 2021] ata2: SATA link up 6.0 Gbps (SStatus 133 SControl 300)
 [Sat Feb 6 16:05:29 2021] ata2.00: configured for UDMA/133
 [Sat Feb 6 16:05:29 2021] ata2.00: retrying FLUSH 0xea Emask 0x10
 [Sat Feb 6 16:05:29 2021] ata2.00: device reported invalid CHS sector 0
 [Sat Feb 6 16:05:29 2021] ata2: EH complete
 
</pre>

==Status==
* Latest BIOS version (as of 2021-02-06 09:28:10 EST): ZA10A380 (13 Mar 2020)

==Resources==
* [https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=emr_na-a00028524en_us Manufacturer page]
* [https://support.hpe.com/hpesc/public/km/product/1009955119/HPE-ProLiant-MicroServer-Gen10-Server?ismnp=0&l5oid=1009955118#t=All&sort=relevancy&numberOfResults=25 Downloads]

===Updating Storage Controller Firmware===
* Go here and find the latest version for the "Firmware | Storage Controller" download: https://support.hpe.com/hpsc/swd/public/detail?swItemId=MTX_8374214d9a3a4392878c9bba59#tab2 (e.g. [https://downloads.hpe.com/pub/softlib2/software1/sc-linux-fw-array/p164515310/v177536/rpm/RPMS/x86_64/firmware-smartarray-f7c07bdbbd-3.21-1.1.x86_64.rpm firmware-smartarray-f7c07bdbbd-3.21-1.1.x86_64.rpm]
* Generic method without installing a package:<pre>root@daytapod1 ~/firmware $ rpm2cpio firmware-smartarray-f7c07bdbbd-3.21-1.1.x86_64.rpm | cpio -idmv
root@daytapod1 ~/firmware $ cd usr/lib/x86_64-linux-gnu/firmware-smartarray-f7c07bdbbd-3.21-1.1
root@daytapod1 ~/firmware/usr/lib/x86_64-linux-gnu/firmware-smartarray-f7c07bdbbd-3.21-1.1 $ ./setup

Supplemental Update / Online ROM Flash Component for Linux (x64) - HPE Smart Array P408i-p, P408e-p, P408i-a, P408i-c, E208i-p, E208e-p, E208i-c, E208i-a, P408i-sb, P408e-m, P204i-c, P204i-b, P816i and P416ie-m SR Gen10 (3.21), searching...
============ Summary ============
Smart Component Finished
Exit Status: 3
Update not attempted. All selected devices are either up-to-date or have newer versions installed.</pre>
* For rpm-based distros:<pre>rpm -ivh firmware-smartarray-f7c07bdbbd-3.21-1.1.x86_64.rpm</pre>
* For apt-based distros:<pre>apt-get install alien
alien firmware-smartarray-f7c07bdbbd-3.21-1.1.x86_64.rpm
dpkg -i firmware-smartarray-f7c07bdbbd_3.21-2.1_amd64.deb</pre>
* Reboot

===Updating BIOS===
Damn HP requires that you create an account to download BIOS firmware. WTF? Anyway...
* Go here: https://support.hpe.com/hpsc/swd/public/detail?swItemId=MTX_8374214d9a3a4392878c9bba59#tab2
* Download the tar file (e.g. [https://support.hpe.com/hpsc/swd/public/download/downloads.hpe.com/pub/softlib2/software1/pubsw-linux/p1122136033/v179389/System_BIOS_v_ZA10A380_for_MicroServer_Gen10_Linux.tgz System_BIOS_v_ZA10A380_for_MicroServer_Gen10_Linux.tgz])
* Please note that: When updating the System BIOS from version ZA10A320 (or earlier) to version ZA10A330 (or later), the following system BIOS configuration settings will revert to their factory default values:
** System time and date
** Hard drive configuration
** Boot device sequence
** System passwords
** Security setup

* Extract it and apply the update
root@daytapod1 ~/firmware $ tar xzvf System_BIOS_v_ZA10A380_for_MicroServer_Gen10_Linux.tgz
root@daytapod1 ~/firmware $ cd System_BIOS_v_ZA10A380_for_MicroServer_Gen10_Linux/Lnx/
root@daytapod1 ~/firmware/System_BIOS_v_ZA10A380_for_MicroServer_Gen10_Linux/Lnx $ ./flashbios.sh
+---------------------------------------------------------------------------+
| AMI Firmware Update Utility v5.08.02.1189 |
| Copyright (C)2016 American Megatrends Inc. All Rights Reserved. |
+---------------------------------------------------------------------------+
Reading flash ............... done
- FFS checksums ......... ok
Erasing Boot Block .......... done
Updating Boot Block ......... done
Verifying Boot Block ........ done
Erasing Main Block .......... done
Updating Main Block ......... done
Verifying Main Block ........ done
Erasing NVRAM Block ......... done
Updating NVRAM Block ........ done
Verifying NVRAM Block ....... done
Erasing NCB Block ........... done
Updating NCB Block .......... done
* Reboot

==To Research==
* There is a 6th SATA port traced on the motherboard (without the SATA plug) but only 5 show in the BIOS (4 front bay and 1 on the motherboard with SATA plug). Can the BIOS be hacked to enable the 6th SATA port?

==Overview==

* Expansion bays
** 1 x media bay (Optional (1) DVD-RW or (1) SATA SSD)
* Drive bays
** 4 x 3.5" SATA 6Gb/s via caddy-less drive bays (behind front cover) -- advertised as Non-hot plug SATA
** 1 x on-board SATA port (for device in media bay)
* USB
** Font: 2 x USB 3.0 ports (not blue for whatever reason)
** Rear: 2 x USB 3.0 ports (not blue for whatever reason), 2 x USB 2.0 ports
** 1 x on-board USB 2.0 port
* Network
** Embedded Broadcom BCM5720 Dual Port Gbe LOM
* RAM
** Type: DDR4 Unbuffered (UDIMM)
** DIMM Slots: 2
** Max RAM: 32GB (2 x 16GB) PC4-2400T DDR4 UDIMM ( DDr4-2400 )
* Display
** 1 x VGA port
** 2 x Display Ports 1.2
* Expansion Slots
** 1 x PCIe3 x4 (1) (low-profile only in this chassis)
** 1 x PCIe3 x8 (8, 4, 1) (low-profile only in this chassis)
* Fans
** One (1) non-redundant system fan shipped standard -- not software controllable
* Misc
** ACPI V5.0 Compliant
** Slot for TPM (not included) -- HPE Trusted Platform Module (TPM) 2.0 kit 745823-B21
** PCIe 3.0 Compliant
** PXE Support
** WOL Support
** EMC Class B
** LFF/SFF SATA connector on motherboard connects to backplane for 4 x HDDs
** Hard drive screws: 4 x per drive = 16
** Front bezel lock/unlock indicators
** Power on/Standby button and system power LED
** Health LED
** NIC status LED
** Drive activity LED ( single, not per-drive )
* Management
** BMC / IPMI / iLO: NO

==Devices==
00:00.0 Host bridge: Advanced Micro Devices, Inc. [AMD] Family 15h (Models 60h-6fh) Processor Root Complex
00:00.2 IOMMU: Advanced Micro Devices, Inc. [AMD] Family 15h (Models 60h-6fh) I/O Memory Management Unit
00:01.0 VGA compatible controller: Advanced Micro Devices, Inc. [AMD/ATI] Wani [Radeon R5/R6/R7 Graphics] (rev 84)
00:01.1 Audio device: Advanced Micro Devices, Inc. [AMD/ATI] Kabini HDMI/DP Audio
00:02.0 Host bridge: Advanced Micro Devices, Inc. [AMD] Family 15h (Models 60h-6fh) Host Bridge
00:02.2 PCI bridge: Advanced Micro Devices, Inc. [AMD] Family 15h (Models 60h-6fh) Processor Root Port
00:02.5 PCI bridge: Advanced Micro Devices, Inc. [AMD] Family 15h (Models 60h-6fh) Processor Root Port
00:03.0 Host bridge: Advanced Micro Devices, Inc. [AMD] Family 15h (Models 60h-6fh) Host Bridge
00:08.0 Encryption controller: Advanced Micro Devices, Inc. [AMD] Carrizo Platform Security Processor
00:09.0 Host bridge: Advanced Micro Devices, Inc. [AMD] Carrizo Audio Dummy Host Bridge
00:10.0 USB controller: Advanced Micro Devices, Inc. [AMD] FCH USB XHCI Controller (rev 20)
00:11.0 SATA controller: Advanced Micro Devices, Inc. [AMD] FCH SATA Controller [AHCI mode] (rev 49)
00:12.0 USB controller: Advanced Micro Devices, Inc. [AMD] FCH USB EHCI Controller (rev 49)
00:14.0 SMBus: Advanced Micro Devices, Inc. [AMD] FCH SMBus Controller (rev 4a)
00:14.3 ISA bridge: Advanced Micro Devices, Inc. [AMD] FCH LPC Bridge (rev 11)
00:18.0 Host bridge: Advanced Micro Devices, Inc. [AMD] Family 15h (Models 60h-6fh) Processor Function 0
00:18.1 Host bridge: Advanced Micro Devices, Inc. [AMD] Family 15h (Models 60h-6fh) Processor Function 1
00:18.2 Host bridge: Advanced Micro Devices, Inc. [AMD] Family 15h (Models 60h-6fh) Processor Function 2
00:18.3 Host bridge: Advanced Micro Devices, Inc. [AMD] Family 15h (Models 60h-6fh) Processor Function 3
00:18.4 Host bridge: Advanced Micro Devices, Inc. [AMD] Family 15h (Models 60h-6fh) Processor Function 4
00:18.5 Host bridge: Advanced Micro Devices, Inc. [AMD] Family 15h (Models 60h-6fh) Processor Function 5
01:00.0 SATA controller: Marvell Technology Group Ltd. 88SE9230 PCIe SATA 6Gb/s Controller (rev 11)
02:00.0 Ethernet controller: Broadcom Inc. and subsidiaries NetXtreme BCM5720 2-port Gigabit Ethernet PCIe
02:00.1 Ethernet controller: Broadcom Inc. and subsidiaries NetXtreme BCM5720 2-port Gigabit Ethernet PCIe

==Drivers==
* ahci AHCI SATA low-level driver
* amdgpu AMD GPU
* ehci-pci
* fam15h_power AMD Family 15h CPU processor power monitor
* k10temp AMD Family 10h+ CPU core temperature monitor
* pcieport
* piix4_smbus
* snd_hda_intel Intel HDA driver
* tg3 Broadcom Tigon3 ethernet driver
* xhci_hcd

lm_sensors found the following:
k10temp-pci-00c3
Adapter: PCI adapter
temp1: +23.0°C (high = +70.0°C)
(crit = +100.0°C, hyst = +99.0°C)

amdgpu-pci-0008
Adapter: PCI adapter
vddgfx: 750.00 mV
vddnb: 875.00 mV
edge: +23.0°C (crit = +1.0°C, hyst = -273.1°C)

fam15h_power-pci-00c4
Adapter: PCI adapter
power1: 21.27 mW (avg = 2.27 mW, interval = 0.01 s)
(crit = 15.00 W)

Not that impressive, but not bad.

==Potential Upgrade Parts List==
* HPE 8 GB (1x8GB) Single Rank x8 DDR4-2400 CAS-17-17-17 Unbuffered Standard Memory Kit 862974-B21
* HPE 16 GB (1x16GB) Dual Rank x8 DDR4-2400 CAS-17-17-17 Unbuffered Standard Memory Kit 862976-B21
* HPE Ethernet 10Gb 2-port 521T Adapter 867707-B21
* HPE Trusted Platform Module 2.0 Kit 745823-B21
* LSI 9200-8E - for connecting to external storage enclosures
* [https://www.icydock.com/goods.php?id=251 ICY Dock MB411SPO-1B] - HDD Hot-Swap SATA Mobile Rack for 12.7mm Slim CD/DVD-ROM Optical Bay (Fits 12.7mm height ODD Slot)
** Uses SATA port
* 1 x [https://www.icydock.com/goods.php?id=317 ICY Dock ToughArmor MB852M2PO-B] - Dual hot swap NVME in slim ODD bay
** Needs PCI Express card with 2 x Oculink (SFF-8612)
* 2 x [https://www.icydock.com/goods.php?id=309 ICY Dock ToughArmor MB840M2P-B] - M.2 NVMe SSD to PCIe 3.0 x4 Drive Bay Adapter

==My Model==
My system has:
* CPU: AMD Opteron™ X3421 Processor (2.1-3.4GHz/4 compute cores/8 graphic cores/2MB/12-35W) -- See on [http://www.cpu-world.com/CPUs/Bulldozer/AMD-Opteron%20X3000%20series%20X3421.html cpu-world] or the [https://www.amd.com/en/opteron useless marketing page]
** CPU Core Count - 4
** CPU Core Frequency (Base – Max Boost) - 2.1 – 3.4 GHz
** GPU CU Count - 8
** GPU Frequency (Max) - 800 MHz
** cTDP Range - 12-35W
** Max DDR4 Speed - 2400 MHz
** L2 Cache - 2MB
** MMX instructions
** Extensions to MMX
** SSE / Streaming SIMD Extensions
** SSE2 / Streaming SIMD Extensions 2
** SSE3 / Streaming SIMD Extensions 3
** SSSE3 / Supplemental Streaming SIMD Extensions 3
** SSE4 / SSE4.1 + SSE4.2 / Streaming SIMD Extensions 4 ?
** SSE4a ?
** AES / Advanced Encryption Standard instructions
** AVX / Advanced Vector Extensions
** AVX2 / Advanced Vector Extensions 2.0
** BMI / BMI1 + BMI2 / Bit Manipulation instructions
** F16C / 16-bit Floating-Point conversion instructions
** FMA3 / 3-operand Fused Multiply-Add instructions
** FMA4 / 4-operand Fused Multiply-Add instructions
** XOP / eXtended Operations instructions
** AMD64 / AMD 64-bit technology ?
** AMD-V / AMD Virtualization technology
** Supports IOMMU (via AMD-Vi [amd_iommu])
** The processor supports configurable TDP in the 12 Watt - 35 Watt range
** The CPU is compatible with DirectX 12 API.
** Turbo Core 3.0 technology
* RAM: 8 GB

==Resources==
* Marketing: https://buy.hpe.com/us/en/servers/proliant-microserver/proliant-microserver/proliant-microserver/hpe-proliant-microserver-gen10/p/1009955118
* Support: https://support.hpe.com/hpesc/public/km/product/1009955119/Product#t=DriversandSoftware&sort=relevancy&layout=table&numberOfResults=25
* Misc: https://forum.openmediavault.org/index.php/Thread/19388-HP-microserver-Gen10/?pageNo=2
* User Manual: https://content.etilize.com/User-Manual/1046044075.pdf
* Specifications: https://h20195.www2.hpe.com/v2/GetDocument.aspx?docname=a00008701enw
* Storage Controller Specifications: https://h20195.www2.hpe.com/v2/Getdocument.aspx?docname=a00017196ENW

Lantronix SpiderDuo

2025-09-12T16:45:00Z

Jeremy:

[[File:Lantronix_SpiderDuo.jpg|480px|thumb|right|Lantronix_SpiderDuo]]
=Details=
Nice KVM over IP with USB port for remotely connecting virtual media. The current price as of 2021-02-05 is $559 although I think I got it for less than that years ago. There are more and cheaper solutions out there today, but this still works.
* [https://www.lantronix.com/products/lantronix-spiderduo/ Manufacturer Page]
* [https://www.lantronix.com/wp-content/uploads/pdf/Spiders_UG.pdf Documentation]

=Modern Open Source Alternatives=
For a long time there were no alternatives to devices like this, but now finally there's a cheap DIY project that can accomplish the same thing for much cheaper: [https://github.com/pikvm Pi-KVM Project] (Open and cheap DIY IP-KVM based on Raspberry Pi). It only costs between $30 and $100 for parts!
 
Resources:
* [https://www.youtube.com/watch?v=dTchVKxx7Fo&feature=youtu.be Pi-KVM - DIY CHEAP Raspberry Pi KVM over IP Prototype Version 3 Review!] on YouTube
* [https://www.youtube.com/watch?v=xCL5AS0t5Is&t=310s Pi-KVM - Raspberry Pi Zero W Installation and Review] on YouTube

=Firmware=

On 2020-06-30, version: 4.2.0 (Build 38135) was released. I have confirmed that this version supports the HTML 5 KVM mode.
* See release notes here: [ftp://ftp.lantronix.com/pub/spider/4.2/spider-v4.2-38135_2020-06-30-release_notes.txt spider-v4.2-38135_2020-06-30-release_notes.txt]
* Download here: [ftp://ftp.lantronix.com/pub/spider/4.2/spider-v4.2-38135_2020-06-30.zip spider-v4.2-38135_2020-06-30.zip]

On 2020-02-26, version: 4.1.2 (Build 38134) was released. The release notes imply that this version supports the HTML 5 KVM mode but I have not tested it.
* See release notes here: [ftp://ftp.lantronix.com/pub/spider/4.1.2/spider-v4.1-38134_2020-02-26-release_notes.txt spider-v4.1-38134_2020-02-26-release_notes.txt]
* Download here: [ftp://ftp.lantronix.com/pub/spider/4.1.2/spider-v4.1-38134_2020-02-26.bin spider-v4.1-38134_2020-02-26.bin]

On 2019-05-15, version 3.00.31 (Build 38120) was released. This version did not support HTML 5 KVM mode.
* See release notes here: [ftp://ftp.lantronix.com/pub/spider/3.00.31/spider-v3.0-38120_2019-05-15-release_notes.txt spider-v3.0-38120_2019-05-15-release_notes.txt]
* Download here: [ftp://ftp.lantronix.com/pub/spider/3.00.31/spider-v3.0-38120_2019-05-15.bin spider-v3.0-38120_2019-05-15.bin]

On 2018-12-17, version 04.00.08 (Build 38118) was released. This was the first version to support HTML 5 KVM mode, but the download was taken down from the Lantronix website shortly afterwards. [https://www.reddit.com/r/homelab/comments/awyid6/lantronix_spider_ipkvm_now_supports_html5/ See this reddit thread for details]. Nobody really knows what, if anything, is wrong with this firmware. It has been made available by a third party for posterity. The links below are not directly provided by Lantronix.
* See release notes here: [https://mega.nz/folder/higjRCoJ#p2kDrKlPccw0ZtGBn8SDjg/file/Q6wzhaDD spider-v4.0.8-38118_2018-12-17_User_Release_Notes.txt]
* Download here: [https://mega.nz/folder/higjRCoJ#p2kDrKlPccw0ZtGBn8SDjg/file/p6gRDYCL spider-v4.0.8-38118_2018-12-17.bin]

=Installing an SSL certificate=
Unfortunately, this little appliance doesn't allow you to simply upload an SSL certificate. Rather, you need to create a certificate signing request (CSR) and send that to your SSL certificate provider / authority.
 
Step 1: Generate a certificate signing request on the Spider Duo portal. If your hostname for your lantronix spider duo is <tt>spider</tt>, you would go here: https://spider/cert.asp
 [[File:Spider duo cert page.png|800px|Lantronix_SpiderDuo]]
 
Fill out all fields and change the key length to the highest available (currently only 2048). Then click the "Create" button.
 
Step 2: Download the CSR file and save to <tt>csr.txt</tt>
 
Step 3: Use the [https://certbot.eff.org/ certbot] tool to create the certificate. This will require validation of the fact that you control the domain (common name) of the certificate. In this example, I use the webroot option and the common name of the certificate is <tt>certificate-example.mydomain.com</tt>:

jeremy@latitude /tmp/cert $ DIR_CONFIG=./config
jeremy@latitude /tmp/cert $ DIR_WORK=./work
jeremy@latitude /tmp/cert $ DIR_LOGS=./logs
jeremy@latitude /tmp/cert $ mkdir $DIR_CONFIG $DIR_WORK $DIR_LOGS
jeremy@latitude /tmp/cert $ certbot certonly --cert-path cert.pem --key-path key.pem --csr csr.txt --config-dir $DIR_CONFIG --work-dir $DIR_WORK --logs-dir $DIR_LOGS

Saving debug log to /tmp/cert/logs/letsencrypt.log

How would you like to authenticate with the ACME CA?
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
1: Spin up a temporary webserver (standalone)
2: Place files in webroot directory (webroot)
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Select the appropriate number [1-2] then [enter] (press 'c' to cancel): 2
Plugins selected: Authenticator webroot, Installer None
Enter email address (used for urgent renewal and security notices) (Enter 'c' to
cancel): youremail@mailprovider.com

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Please read the Terms of Service at
https://letsencrypt.org/documents/LE-SA-v1.2-November-15-2017.pdf. You must
agree in order to register with the ACME server at
https://acme-v02.api.letsencrypt.org/directory
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
(A)gree/(C)ancel: A

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Would you be willing to share your email address with the Electronic Frontier
Foundation, a founding partner of the Let's Encrypt project and the non-profit
organization that develops Certbot? We'd like to send you email about our work
encrypting the web, EFF news, campaigns, and ways to support digital freedom.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
(Y)es/(N)o: N
Performing the following challenges:
http-01 challenge for certificate-example.mydomain.com
Input the webroot for certificate-example.mydomain.com: (Enter 'c' to cancel): /var/www/html
Waiting for verification...
Cleaning up challenges
Server issued certificate; certificate written to /tmp/cert/cert.pem
Cert chain written to 8
Cert chain written to 9
 
Step 4: Upload the <tt>cert.pem</tt> file to the Spider Duo portal.
 
Step 5: Rest easy that there's no man in the middle.

=SSH Access=
<pre>
sysadmin@192.168.1.96's password:

Welcome to the Lantronix SLSLP
Firmware: version 040200, build 38135
Last login: Thu Jan 1 12:18:43 1970 from 192.168.1.109
Current time: Thu Jan 1 21:43:54 1970
For a list of commands, type 'help'
[sysadmin@192.168.1.96]> help
SLS Command Line Help
---------------------
For more information on a command, type 'help <command>'
For example, 'help show history'.
For general CLI help, type 'help command line'.

set datetime|device|group|history|network|oem|power|security|serial|
sshkey|user|vip
show datetime|device|group|history|network|oem|power|security|serial|
sshkey|sysconfig|user|vip
connect serial|wakeonlan
diag ping|ping6
usbhost disk
admin config|reboot|reset|version
logout terminates CLI session
[sysadmin@192.168.1.96]>
[sysadmin@192.168.1.96]>

[sysadmin@192.168.1.96]> set datetime ?
Date/Time Command Synopsis
--------------------------
Set the date/time or UTC offset:
set datetime <one parameter>
Parameters: date <MMDDYYhhmm[ss]>
utcoffset <offset string>
MMDDYYhhmm[ss]:
MM: 1-12 DD: 1-31 YY: 00-99
hh: 0-23 mm: 0-59 ss: 0-59
Offset string:
-11h, -10h, -9h, -8h, -7h, -6h, -5h, -4h, -3h, -2h, -1h,
+/-0h,
+1h, +2h, +3h, +4h, +5h, +6h, +7h, +8h, +9h, +10h, +11h, +12h.
(Note: Select only one offset as shown above)
Show the date/time and UTC offset:
show datetime

[sysadmin@192.168.1.96]> set device ?
Device Command Synopsis
---------------------
Display device information:
show device
show device all
show device name [name <Device Name>]
show device [index <Index Number>]
Configure device information:
set device add|edit <Device Name>
macaddress <MAC Address>
[<parameters>]
Parameters: ipaddress <IP Address>
password <Password>
MAC address must be in hex format: 'XX:XX:XX:XX:XX:XX'
set device delete <Device Name>

[sysadmin@192.168.1.96]> set group ?
User Group Command Synopsis
---------------------------
Configure user group for users who login to SLS.
set group add|edit <Group Name> [<parameters>]
set group delete <Group Name>
Parameters: permissions <Permission List>
Note: See 'help group permissions' for information on groups rights.
Display group information:
show group [name <Group Name>]
show group [index <Index Number>]
Note: [Group of 'None (username)'] indicates that user was created
without defining a group, and permissions will be assigned
specifically to the user. In order to specify a group of
this type "None", use '@username' as the name parameter.

[sysadmin@192.168.1.96]> set history ?
History Command Synopsis
------------------------
Clears the CLI command history:
set history clear
Displays the 100 most recent CLI commands:
show history

[sysadmin@192.168.1.96]> set network ?
Network Command Synopsis
------------------------
Configures network setting:
set network basic <parameters>
Parameters:
dns1 <IP Address>
dns2 <IP Address>
gateway <IP Address>
hostname <Host Name>
ipaddr <IP Address>
ipv6 <enable/disable>
ipv6addr <IPv6 Address/Prefix>
mask <Mask>
state <dhcp|bootp|static>
set network misc <parameters>
Parameters:
bwlimit <8-10000 kbit/s>
httpsports <TCP Port>
httpport <TCP Port>
proxy <enable/disable>
proxyhost <IP Address>
proxyport <TCP Port>
telnet <enable/disable>
telnetport <TCP Port>
setupprotocol<enable/disable>
ssh <enable/disable>
sshport <TCP Port>
set network interface <parameters>
Parameters:
mode <auto|10mbit-half|100mbit-half|10mbit-full|100mbit-full>
Display network parameter settings.
show network all
show network basic
show network misc
show network interface

To clear IPV4 address, set ipv4 address to '0.0.0.0'
To clear IPV6 address, set ipv6 address to '::' or '::/128'

[sysadmin@192.168.1.96]> set oem ?
OEM Customization Command Synopsis
----------------------------------
Configure OEM customization parameters.
Change product/company specific information on the web interface.
Set OEM parameters:
set oem <one or more parameters>
Parameters: [product <Product Name>]
[company <Company Name>]
[copyright <Copyright>]
[url <URL>]
[title <Title>]
[Examples]
set oem product MyKVM company MyCompany
Set product name 'MyKVM' and company name 'MyCompany'
Display OEM settings:
show oem

[sysadmin@192.168.1.96]> set power ?
Power Command Synopsis
----------------------
Configure Power Control Unit (PCU) parameters.
Set PCU parameters:
set power <parameters>
Parameters: [state <on/off>]
Display Power Control Unit status and settings:
show power

[sysadmin@192.168.1.96]> set security ?
Security Command Synopsis
-------------------------
Set security parameters:
set security <one or more parameters>
Parameters: [forcehttps <enable|disable>]
[singlelogin <enable|disable>]
[kvmencryption <off/try/force>]
[screenshot <enable|disable>]
[directkvm <enable|disable>]
Show security settings.
show security

[sysadmin@192.168.1.96]> set serial ?
Serial Port Command Synopsis
----------------------------
Set active serial mode:
set serial mode passthrough
set serial mode config
Set serial port parameters for each mode:
set serial mode passthrough|config [<parameters>]
Parameters: [baud <300-115200>]
[databits <7|8>]
[stopbits <1|2>]
[parity <none|odd|even>]
[flowcontrol <none|xon/xoff|rts/cts>]
Show serial port settings
show serial

[sysadmin@192.168.1.96]> set sshkey ?
SSH Key Command Synopsis
------------------------
Import SSH key (OpenSSH format):
set sshkey import <copypaste>
Note: RSA keys must be 1024 bits.
Import SSH key (OpenSSL format) :
set sshkey import <copypaste> format <openssl>
keyuser <SSH Key User>
keyhost <SSH Key Host>
[Examples]
set sshkey import copypaste
Import public key in OpenSSH format.
set sshkey import copypaste format openssl keyuser sysadmin keyhost slm-pipe
Import public key in OpenSSL format on host "slm-pipe" for
the user "sysadmin".
Delete imported SSH key:
set sshkey delete keyuser <SSH Key User> keyhost <SSH Key Host>
[Examples]
set sshkey delete keyuser sysadmin keyhost slm-pipe
Delete imported SSH public key on host "slm-pipe" for the user "sysadmin".
Display imported SSH keys:
show sshkey import <one or more parameters>
Parameters: [keyuser <SSH Key User>]
[keyhost <SSH Key IP Address or Name>]
[viewkey <enable|disable>]
[Examples]
show sshkey import
Display all imported SSH public keys.
show sshkey import viewkey enable
Display all imported SSH public keys with content of keys.
show sshkey import keyuser sysadmin keyhost slm-pipe
Display imported SSH public key on host "slm-pipe" for the user "sysadmin".

[sysadmin@192.168.1.96]> set user ?
User Command Synopsis
---------------------
Configure user information:
set user add|edit <User Login> [<parameters>]
Parameters: [email <Email Address>]
[fullname <Full Name>]
[group <Group Name|default|Admin|None>]
[mobile <Phone Number>]
set user delete <User Login>
set user password <User Login>
Note: The group 'default' (Unknown) and 'Admin' and are built-in groups.
The group 'None' indicates that user is created without
defining a group, and permissions will be assigned specifically
to the user. A user will be assigned 'default' group by
omitting group parameter when creating a new user.
Display user information:
show user name [user <User Login>]
show user [index <Index Number>]

# This is a PAID function that is not enabled on this device
[sysadmin@192.168.1.96]> set vip ?
Error: function 'cliHelpSetDna' not found.

</pre>

Toshiba Satellite L670

2025-09-06T00:51:27Z

Jeremy: Created page with "Toshiba Satellite L670 =General= <pre> Specifications Toshiba Satellite Pro L670-170 (Satellite Pro L670 Series) Processor Intel Core i3-350M 2 x 2.3 GHz, Arrandale Graphics adapter Intel Graphics Media Accelerator (GMA) HD Graphics Memory 2048 MB , PC3-8500 Display 17.30 inch 16:9, 1600 x 900 pixel, LP173WD1-TLD3, glossy: no Mainboard Intel HM55 Storage Toshiba MK3265GSX, 320 GB , 5400 rpm Soundcard Realtek ALC269 @ Intel Ibex Peak PCH Connections 3 USB 2.0, 1 VGA,..."

Toshiba Satellite L670

=General=
<pre>
Specifications
Toshiba Satellite Pro L670-170 (Satellite Pro L670 Series)
Processor
Intel Core i3-350M 2 x 2.3 GHz, Arrandale
Graphics adapter
Intel Graphics Media Accelerator (GMA) HD Graphics
Memory
2048 MB
, PC3-8500
Display
17.30 inch 16:9, 1600 x 900 pixel, LP173WD1-TLD3, glossy: no
Mainboard
Intel HM55
Storage
Toshiba MK3265GSX, 320 GB
, 5400 rpm
Soundcard
Realtek ALC269 @ Intel Ibex Peak PCH
Connections
3 USB 2.0, 1 VGA, 1 HDMI, 1 Kensington Lock, 1 eSata, Audio Connections: Line-Out, Mikrofon, Card Reader: SD/MMC/MS/MS Pro
Networking
Realtek PCIe FE Family Controller GigaBit (10/100/1000MBit/s), Broadcom 802.11n (a/b/g/n = Wi-Fi 4/), Bluetooth 2.1+EDR
Optical drive
TSSTcorp CDDVDW TS-L633C
Size
height x width x depth (in mm): 37.9 x 413.6 x 270 ( = 1.49 x 16.28 x 10.63 in)
Battery
48 Wh Lithium-Ion, 4200mAh 10.2V
Operating System
Microsoft Windows 7 Professional 64 Bit
Camera
Webcam: 0.3MP VGA
Additional features
Nero 9 Essentials, Nero BackItUp & Burn Autobackup Essentials, 12 Months Warranty
Weight
2.69 kg ( = 94.89 oz / 5.93 pounds), Power Supply: 248 g ( = 8.75 oz / 0.55 pounds)
</pre>

=Power supply=

Power:

19 V @ 3.42 A

Compatible AC Adapter model:

PA3917U-1ACA, PA5178U-1ACA, SADP-65KB B, PA3714U-1ACA, PA3822U-1ACA, PA5044U-1ACA, PA3822U-1AC3

Specification:

Type: AC to DC Standard
Input: AC 100V - 240V 50-60Hz
Input Connecter standard: 3 Pin US Plug
DC Output: DC 19V 3.42A 65W
Connector Size: 5.5*2.5

=Battery=

PA3818U-1BRS

Battery Capacity: 5200 mAh
Volts: 11.1 V

Main Page

2025-09-06T00:41:49Z

Jeremy: /* Devices */

Welcome to the Wiki of Jeremy Bryan Smith. Here I shall disseminate knowledge that I deem important enough that I may need to recall at a later point in time and/or that I believe may be useful for others out there. 
Feel free to poke around, make comments, suggestions, and ingest the bits of information I have to share. 
Regards, 
Jeremy Bryan Smith 
 

== Find Me On ==
* [https://noc.social/@helamonster Mastodon]
* [https://github.com/helamonster Github]
* [https://www.linkedin.com/in/helamonster/ Linked In]
* [https://www.reddit.com/user/mr_helamonster Reddit]
* [https://twitter.com/helamonster Twitter]
* [https://www.facebook.com/helamonster/notes Facebook]
* [https://www.instagram.com/mr_helamonster/ Instagram]
* [https://www.youtube.com/c/JeremySmithBryan YouTube] - See my playlists
* [https://open.spotify.com/user/1277771794 Spotify] - See my playlists

==[[Veganism]]==

==Green Living==

===Air===
TODO: Add air filtration stuff here...

===Water===
You can never trust your municipal water supply. Nor can you trust that any source of water (including bottled) has not been contaminated. Do not drink unfiltered tap water. Just don't.
 
 
I have used a reverse osmosis water filter system since 2014 and have never looked back. The one I happened to have purchased was the: [https://www.amazon.com/gp/product/B005A3WM6C/ref=ppx_yo_dt_b_search_asin_title?ie=UTF8&psc=1 Home Master TMAFC Artesian Full Contact Undersink Reverse Osmosis Water Filter System]
 
 
And the following replacement filters: 
* [https://www.amazon.com/gp/product/B07BPX8K5K/ref=ppx_yo_dt_b_search_asin_title?ie=UTF8&psc=1 Membrane Solutions 75 GPD Reverse Osmosis Membrane]
* [https://www.amazon.com/gp/product/B005A3WNWK/ref=ppx_yo_dt_b_search_asin_title?ie=UTF8&psc=1 Home Master ISetTMA8 Artesian And HydroGardener Replacement Water Filter Change Set]

Along with this UV sterilizer: 
[https://www.amazon.com/gp/product/B0110LTT1I/ref=ppx_yo_dt_b_search_asin_title?ie=UTF8&psc=1 Bluonics Ultraviolet Light Water Purifier UV Sterilizer]

Super easy to install and maintain. I removed the tank once the bladder was no longer holding water and instead attached it to an ice maker: 
[https://www.amazon.com/gp/product/B0B3DH6S9D/ref=ppx_yo_dt_b_search_asin_title?ie=UTF8&psc=1 Countertop Hot & Cold Water Dispenser and Ice Maker]

===Composting===
I use this: [https://www.amazon.com/gp/product/B0121G9ZJW/ref=as_li_tl?ie=UTF8&camp=1789&creative=9325&creativeASIN=B0121G9ZJW&linkCode=as2&tag=highandlowtec-20&linkId=a27cf44c5167bf80b590bf96a469739d Envirocycle USA-made, Food Safe, BPA and Rust Free Composting Tumbler and Compost Tea Maker]

{{Special:IframePage|AmazonAffiliate|path=widgets/q?ServiceVersion=20070822&OneJS=1&Operation=GetAdHtml&MarketPlace=US&source=ac&ref=tf_til&ad_type=product_link&tracking_id=highandlowtec-20&marketplace=amazon&region=US&placement=B0121G9ZJW&asins=B0121G9ZJW&linkId=4312303f6850d7bdc370558b69a34599&show_border=false&link_opens_in_new_window=false&price_color=333333&title_color=0066c0&bg_color=ffffff}}

== Technology ==

===Random===
At some point I will organize this stuff better.
* [[Booting via GRUB 2 prompt]]
* [[Simulating keystrokes from clipboard]]
* [[Making Block Devices Read Only]]

===Applications and Plug-ins===
Here I will provide my opinions, recommendations on usage and optimal configuration, links to related third-party tools, and my own related tools
* [[Web Browsers]] - The web browsers and related extensions / plug-ins, and tweaks for usability and security, etc. that I recommend
* [[vim]] - My text editor of choice

===Devices===
* Cars
** 2012 Toyota / Scion XB
* Televisions
** [[Seiki Digital SE50UY04 50-Inch 4K UHD 120Hz LED HDTV]]
** [https://www.lg.com/us/tvs/lg-oled55cxpua-oled-4k-tv LG OLED55CXPUA 55" Class HDR 4K UHD Smart OLED TV (2020 Model)]

* Security Keys
** [[YubiKey NEO]]

* Smart Phones
** [[Samsung Galaxy Note 3]]
** [[Samsung Galaxy Tab S 10.5]]
** [[Motorola Backflip (MB300)]]
** [[Google Pixel Phone]]
** [[Google Pixel 2 XL Phone]]
** [[Google Pixel 6 Pro]]

* Tablets
** [[Samsung Galaxy Tab S 10.5" (SM-T800)]]

* eReaders
** [[Kindle Paperwhite E-reader (7th Generation)]]

* HTPCs
** [[MAGNUS EN1080 10 Year Anniversary Edition (ZBOX-EN1080)]]

* Modems
** TP-LINK TC-7620 DOCSIS 3.0 cable modem
* Servers
** [[HPE Proliant MicroServer Gen10]]
** [[Dell PowerEdge R720]]
** [[iXsystems FreeNAS Mini]]
* SoCs
** [[Intel Compute Stick STK1AW32SC]]
** [[Raspberry Pi]]
** [[Minnowboard Max]]

* Notebooks
** [[Toshiba Qosmio G35-AV660]]
** [[Toshiba Satellite L670]]
** [[Dell Latitude E6430s]]
** [[Sony Vaio Something]]
** [[Lenovo ThinkPad X1 Carbon Gen 6]]
** [[Lenovo Thinkpad X1 Extreme Gen 2]]
** [[Google Pixelbook (eve)]]

* Fanless Systems
** [[Protectli FW6D]] x 2

* Monitors / Displays
** 2 x [[Asus DisplayLink 2 External USB 3 Monitor]]
** 2 x [[ACHIEVA Shimian QH270-Lite Quad HD 2560x1440 Monitor]]
** [https://epson.com/For-Home/Projectors/Home-Cinema/PowerLite-Home-Cinema-1080-UB-Projector/p/V11H262120 Epson EPPLHC1080UB PowerLite Home Cinema 1080 UB Projector]

* Power
** [[APC Smart UPS]]
** [[APC Smart-UPS SRT 2200VA 230V and APC Smart-UPS SRT 72V 2.2kVA Battery Pack]]

* Sound
** [[Logitech Z-5500 THX-Certified 5.1 Digital Surround Sound Speaker System]]

* Cameras
** [[Canon PowerShot G9]]
** Raspberry PI 5MP Camera Board Module
** Raspberry Pi HQ Camera Module
** Arducam Day and Night Vision IMX477 HQ Camera
** Logitech HD Pro Webcam C920 (960-000764)
** LOGITECH QUICKCAM PRO 9000 R Webcam
** [[Logitech Quickcam Express]]

* Home Appliances
** [[Tap Master TMAFC Artesian Full Contact Reverse Osmosis Under Counter Water Filtration System]]

* Network
** [[SG-4860 pfSense® Security Gateway Appliance]]
** [[Protectli FW6D]] x 2

* Printers
** [[Canon MP-160]] All-in-one scanner, copier, printer

* Misc
** [http://www.istarusa.com/en/istarusa/products.php?model=WNG-1810 iStarUSA WNG-1810 18U 1000mm Depth Rack-mount Server Cabinet]
** [[Sierra Wireless AirCard 313U]]
** [[LSI SAS HBA]]
** [[Lantronix SpiderDuo]] - Single port KVM over IP with USB mass storage
** [[Apple iPod Shuffle 1st Gen/White 512 MB, Model A1112]]
** [[Chicony Saitek Eclipse II Keyboard]]
** [[GeForce 9500 GT]]
** [[GeForce GTX 550 Ti]]
** [[Snapmaker 2.0 Modular 3-in-1 3D Printer]]

===Software===
* [[Web Browsers]]
* [[Configuration Management]]
* [[Boot-Related Tools]]

===Programming===
* [[BASH]]

===Android===
* [[Running Android Apps on Linux]]
* [[Must Have Android Apps]]

===Microsoft Windows===
* [[Managing Microsoft Windows]]

===E-mail===
* [[sendmail]]
* [[E-mail Blacklists]] - How to determine if your mail server is being blocked, how to resolve.
* [[Sending System E-mails with Gmail]]

===Storage===

====U3-Enabled USB Storage Devices====
[[U3-Enabled USB Storage Devices]] USB Storage thumb drives that can emulate CD-ROM devices

====RAID====

=====From Hardware to Software=====
If you've ever been forced to use hardware RAID and then need to migrate from hardware RAID to software RAID ...
 
I had 6 disks behind a Dell PERC 6/i hardware RAID controller and wanted to set up a ZFS pool. But for reasons beyond my control at the time, changing out the controller for a proper HBA was not an option. So, I did the unthinkable and configured 6 RAID-0 devices on the PERC controller, one for each physical disk, and then created a zpool from the virtual disks the controller exposed to the OS. It worked well enough for my purposes for years, but now I have the ability to swap in a real HBA. But the question is, do I have to copy all of the data off, swap the controller, then copy all data back? I was surprised to discover that the data on the disks, with the exception of a small section of metadata at the end of each disk, was in-tact just as if the disks were being used directly. In fact, the metadata was in Linux MDADM RAID format! So that must be what those PERC controllers are doing behind the scene. No surprise there, taking advantage of open source. I wonder if they are violating the GPL. I'll have to look at the firmware. Anyway, This may only work if you configured each disk as a RAID-0. I haven't tested other configurations yet.
 
Resources:
* [https://raid.wiki.kernel.org/index.php/Linux_Raid Linux RAID Wiki]
** [https://raid.wiki.kernel.org/index.php/DDF_Fake_RAID DDF Fake RAID]
** [https://raid.wiki.kernel.org/index.php/RAID_setup RAID Setup]
 
This is what I saw:
root@ubuntu-server:~# lsblk --nodeps -I 8 -o name,maj:min,rm,size,ro,type,pttype,ptuuid,fstype,uuid,label,model,vendor
NAME MAJ:MIN RM SIZE RO TYPE PTTYPE PTUUID FSTYPE UUID LABEL MODEL VENDOR
sda 8:0 0 232.9G 0 disk gpt 5ace5e66-37f2-4d44-b518-f2a22834c3ab Samsung_SSD_860 ATA
sdb 8:16 1 29.3G 0 disk dos e16cd6ae Cruzer_Glide SanDisk
sdc 8:32 0 465.8G 0 disk ddf_raid_member Dell \x10 ST9500530NS ATA
sdd 8:48 0 465.8G 0 disk ddf_raid_member Dell \x10 ST9500530NS ATA
sde 8:64 0 465.8G 0 disk ddf_raid_member Dell \x10 ST9500530NS ATA
sdf 8:80 0 465.8G 0 disk ddf_raid_member Dell \x10 ST9500530NS ATA
sdg 8:96 0 465.8G 0 disk ddf_raid_member Dell \x10 ST9500530NS ATA
sdh 8:112 0 465.8G 0 disk ddf_raid_member Dell \x10 ST9500530NS ATA
sdi 8:128 1 235.8G 0 disk dos be730627 Voyager_SliderX2 Corsair
sdj 8:144 0 3.7T 0 disk gpt b5dcd625-9112-4f29-9b67-64e935bf15b3 My_Passport_25E2 WD
sdk 8:160 0 3.7T 0 disk gpt 31d5cc46-33c7-4806-80a6-57aaba69b38e My_Passport_25E2 WD
sdl 8:176 1 58.9G 0 disk dos d02d781a zfs_member 17764476958699951102 upool Voyager_SliderX2 Corsair
sdm 8:192 1 58.9G 0 disk dos 642fafbd zfs_member 12354630986627173815 upool Voyager_SliderX2 Corsair
sdn 8:208 1 118G 0 disk dos 604144b7 Voyager_SliderX2 Corsair
sdo 8:224 1 118G 0 disk dos 8f6dbdcd Voyager_SliderX2 Corsair
sdp 8:240 1 116.5G 0 disk dos Cruzer_Glide SanDisk


You can see the 6 500GB disks as well as a few USB drives attached. We'll ignore those and list any Linux RAID devices...

root@ubuntu-server:~# mdadm --query /dev/sd{c,d,e,f,g,h}
/dev/sdc: is not an md array
/dev/sdc: device -1393767213 in 6 device undetected container /dev/md/ddf0. Use mdadm --examine for more detail.
/dev/sdd: is not an md array
/dev/sdd: device -1811426553 in 6 device undetected container /dev/md/ddf0. Use mdadm --examine for more detail.
/dev/sde: is not an md array
/dev/sde: device 764605963 in 6 device undetected container /dev/md/ddf0. Use mdadm --examine for more detail.
/dev/sdf: is not an md array
/dev/sdf: device 1584381922 in 6 device undetected container /dev/md/ddf0. Use mdadm --examine for more detail.
/dev/sdg: is not an md array
/dev/sdg: device 896654598 in 6 device undetected container /dev/md/ddf0. Use mdadm --examine for more detail.
/dev/sdh: is not an md array
/dev/sdh: device -2108342859 in 6 device undetected container /dev/md/ddf0. Use mdadm --examine for more detail.


Hmm, not quite right, let's try dmraid ...
root@ubuntu-server:~#root@ubuntu-server:~# dmraid -r
/dev/sdh: ddf1, ".ddf1_disks", GROUP, ok, 975699968 sectors, data@ 0
/dev/sdc: ddf1, ".ddf1_disks", GROUP, ok, 975699968 sectors, data@ 0
/dev/sde: ddf1, ".ddf1_disks", GROUP, ok, 975699968 sectors, data@ 0
/dev/sdg: ddf1, ".ddf1_disks", GROUP, ok, 975699968 sectors, data@ 0
/dev/sdd: ddf1, ".ddf1_disks", GROUP, ok, 975699968 sectors, data@ 0
/dev/sdf: ddf1, ".ddf1_disks", GROUP, ok, 975699968 sectors, data@ 0


We see that the Ok, now let's inspect one of those disks' partition table...
root@ubuntu-server:~# parted /dev/sdg unit b p
Warning: Not all of the space available to /dev/sdg appears to be used, you can fix the GPT to use all of the space (an extra 1073200 blocks) or continue with the current setting?
Fix/Ignore? Ignore
Model: ATA ST9500530NS (scsi)
Disk /dev/sdg: 500107862016B
Sector size (logical/physical): 512B/512B
Partition Table: gpt
Disk Flags:

Number Start End Size File system Name Flags
1 1048576B 9437183B 8388608B Reserved
2 10485760B 18874367B 8388608B GRUB bios_grub
3 20971520B 499558366719B 499537395200B zfs ZFS


Let's step back and take a look at how the disks, partitions, and RAID devices are related ...
 lsblk -I 8,9 -o name,maj:min,size,type /dev/sdg
 NAME MAJ:MIN SIZE TYPE
sdg 8:96 465.8G disk
|-sdg1 8:97 8M part
|-sdg2 8:98 8M part
|-sdg3 8:99 465.2G part
`-md125 9:125 465.3G raid0
|-md125p1 259:3 8M part
|-md125p2 259:4 8M part
`-md125p3 259:5 465.2G part


Inspecting the corresponding MDADM RAID(s):
root@ubuntu-server:~# grep sdg /proc/mdstat
md125 : active raid0 sdg[0]
md127 : inactive sdf[5](S) sdh[4](S) sde[3](S) sdd[2](S) sdg[1](S) sdc[0](S)

root@ubuntu-server:~# mdadm --detail /dev/md125
/dev/md125:
Container : /dev/md/ddf0, member 0
Raid Level : raid0
Array Size : 487849984 (465.25 GiB 499.56 GB)
Raid Devices : 1
Total Devices : 1

State : clean
Active Devices : 1
Working Devices : 1
Failed Devices : 0
Spare Devices : 0

Chunk Size : 128K

Consistency Policy : none

Container GUID : 44656C6C:20202020:10000079:10281F17:4B825EED:49CB41EA
(Dell 02/22/20 10:39:41)
Seq : 00000004
Virtual Disks : 6

Number Major Minor RaidDevice State
0 8 96 0 active sync /dev/sdg

root@ubuntu-server:~# mdadm --detail /dev/md127
/dev/md127:
Version : ddf
Raid Level : container
Total Devices : 6

Working Devices : 6

Container GUID : 44656C6C:20202020:10000079:10281F17:4B825EED:49CB41EA
(Dell 02/22/20 10:39:41)
Seq : 00000004
Virtual Disks : 6

Member Arrays : /dev/md/disk1_0 /dev/md/disk5_0 /dev/md/disk3_0 /dev/md/disk4_0 /dev/md/disk2_0 /dev/md122

Number Major Minor RaidDevice

- 8 64 - /dev/sde
- 8 32 - /dev/sdc
- 8 112 - /dev/sdh
- 8 80 - /dev/sdf
- 8 48 - /dev/sdd
- 8 96 - /dev/sdg

And the partitions on the RAID device itself:
root@ubuntu-server:~# parted /dev/md125 unit b p
Model: Linux Software RAID Array (md)
Disk /dev/md125: 499558383616B
Sector size (logical/physical): 512B/512B
Partition Table: gpt
Disk Flags:

Number Start End Size File system Name Flags
1 1048576B 9437183B 8388608B Reserved
2 10485760B 18874367B 8388608B GRUB bios_grub
3 20971520B 499558366719B 499537395200B zfs ZFS

So, capacity of the disk itself is 500,107,862,016 bytes and the capacity of the RAID-0 device presented is 499,558,383,616 bytes. 
So, there is 500,107,862,016 - 499,558,383,616 = 549,478,400 bytes / 1024 = 536,600 KiB / 1024 = 524.0234375 MiB used up by the MDADM RAID signature at the end of the disk. 
Cool! So, can we just zero out that mdadm signature and use the disks normally? Let's see...

====Controllers====
See Serve the Home's [https://www.servethehome.com/buyers-guides/top-hardware-components-freenas-nas-servers/top-picks-freenas-hbas/ Top Picks for FreeNAS HBAs] for a good overview. 
Basically:
* Stay away from hardware RAID
* There are a few RAID cards that can be flashed to IT mode to support proper HBA (passthrough/JBOD) mode.
* There are many re-branded / OEM versions that should also work fine (Dell, IBM)
* There are many being sold used

Check these out:
* Internal
** LSI SAS HBA 9201-8i: 8 port, SATA III, 6 Gbps, ~ $40 - $50 USD on ebay as of 2020-03-02 Good replacement for PERC 6/i
** IBM M1015 (LSI 9220-8i): 8 port, SATA III, 6 Gbps,
** Dell H200: 8 port, SATA III, 6 Gbps, $30 - $40 USD on ebay as of 2020-03-02 Good replacement for PERC 6/i
* External
** LSI SAS HBA 9200-8E: 8 port, SATA III, 6 Gbps, ~ $40 - $50 USD on ebay as of 2020-03-02 Good replacement for PERC 6/e
** LSI SAS HBA 9300-8e: 8 port, SATA III. 12 Gbps, ~ $90 - $100 USD on ebay as of 2020-03-02 https://www.broadcom.com/products/storage/host-bus-adapters/sas-9300-8e

====Filesystems====
* [[ZFS]]
==== Data Integrity ====
* [[Backups]]
* [[Data Recovery]]
==== Storage Analysis ====
* [[File System / Disk Usage Analysis]]

=== Misc ===
* [[Notable]]
* [[Common Application Configuration]]
* [[Updating Samsung SSD Firmware]]
* [[Forensics]]
* [[Maintaining Connectivity]]
* [[Moving Web Browser Cache]] Why and how you would want to have your web browser cache located in a non-default location
* [[Reducing Junk Mail]]
* [[VPNs]] - Virtual Private Networks
* [[TCP over DNS]] - Bypass Wifi logins to get internet access
* [[Terminals]] - Tips and tricks for shells

=== Security/Privacy ===

* [[Best Practices for Improved Security and Privacy]]
* [[Encryption]]
* [[Secure and Private Internet Access]]
* [[Credit Cards]]
* [[Malware]]
* [[Port Knocking]]
* [[Internet of Things]]
* [[Staying Anonymous Online]]
* [[Ad Blocking]]
* Hardware Tools
** [https://github.com/hak5darren/USB-Rubber-Ducky USB Rubber Ducky]

==[[Admirable People]]==

== Life Lessons ==
* [[Things to remember and to remind yourself of occasionally]]

== Lists ==
* [[Travel]] - Lists for things to do before and things to bring when travelling.
* [[Playlists]] - Playlists of music, movies, etc.

U3-Enabled USB Storage Devices

2025-09-05T17:40:02Z

Jeremy: /* Listing files inside the ISO image */

=U3 Devices: USB Storage thumb drives that can emulate CD-ROM devices=

A U3 flash drive presents itself to the host system as a USB hub with a CD drive and standard USB mass storage device attached. 
[https://en.wikipedia.org/wiki/U3_(software) https://en.wikipedia.org/wiki/U3_(software)]

==General==
Tool: u3-tool <https://sourceforge.net/projects/u3-tool/>

===u3-tool package info===

jeremy@desktop ~ $ aptitude show u3-tool

Package: u3-tool
Version: 0.3-3
State: installed
Automatically installed: no
Priority: optional
Section: universe/utils
Maintainer: Ubuntu Developers <ubuntu-devel-discuss@lists.ubuntu.com>
Architecture: amd64
Uncompressed Size: 54.3 k
Depends: libc6 (>= 2.4)
Description: tool for controlling the special features of a U3 USB flash disk
Tool for controlling USB flash devices that conform to the U3 specifications. You can do the following with your U3 flash:
* Replace the CD image
* Change the size of the virtual CD or completely remove it
* Enable and disable security
* Unlock and change the password of secured U3 device
* Obtain various device information
Homepage: https://sourceforge.net/projects/u3-tool/

==Getting device info (via lsblk)==

jeremy@desktop ~ $ lsblk -o name,path,pttype,fstype,label,vendor,model,serial,uuid /dev/sdb

NAME PATH PTTYPE FSTYPE LABEL VENDOR MODEL SERIAL UUID
sdb /dev/sdb dos SanDisk U3_Cruzer_Micro 0877630F3011E8CD
└─sdb1 /dev/sdb1 dos vfat MY-U3DEVICE F327-C68D

==Getting device info (via SMART)==

jeremy@desktop ~ $ sudo smartctl -d scsi -i /dev/sdb

smartctl 7.1 2019-12-30 r5022 [x86_64-linux-5.4.0-193-generic] (local build)
Copyright (C) 2002-19, Bruce Allen, Christian Franke, www.smartmontools.org

=== START OF INFORMATION SECTION ===
Vendor: SanDisk
Product: U3 Cruzer Micro
Revision: 8.02
User Capacity: 3,971,677,696 bytes [3.97 GB]
Logical block size: 512 bytes
>> Terminate command early due to bad response to IEC mode page
A mandatory SMART command failed: exiting. To continue, add one or more '-T permissive' options.

or:

jeremy@desktop ~ $ sudo smartctl -d sat,auto -i /dev/sdb

smartctl 7.1 2019-12-30 r5022 [x86_64-linux-5.4.0-193-generic] (local build)
Copyright (C) 2002-19, Bruce Allen, Christian Franke, www.smartmontools.org

=== START OF INFORMATION SECTION ===
Vendor: SanDisk
Product: U3 Cruzer Micro
Revision: 8.02
User Capacity: 3,971,677,696 bytes [3.97 GB]
Logical block size: 512 bytes
>> Terminate command early due to bad response to IEC mode page
A mandatory SMART command failed: exiting. To continue, add one or more '-T permissive' options.

==u3-tool program==

jeremy@desktop ~ $ u3-tool -h

u3-tool 0.3 - U3 USB stick manager

Usage: u3-tool [options] <device name>

Options:
-c Change password
-d Disable device security
-D Dump all raw info(for debug)
-e Enable device security
-h Print this help message
-i Display device info
-l <cd image> Load CD image into device
-p <cd size> Repartition device
-R Reset device security, destroying private data
-u Unlock device
-v Use verbose output
-V Print version information

For the device name use:
'/dev/sda0', '/dev/sg3'

==Getting u3 device info==

Basic:

jeremy@desktop ~ $ sudo u3-tool -i /dev/sdb

Total device size: 3.77 GB (4051697664 bytes)
CD size: 76.31 MB (80019456 bytes)
Data partition size: 3.70 GB (3971678208 bytes)

Detailed:

jeremy@desktop ~ $ u3-tool -D /dev/sdb

Partition info:
- Partition count: 0x02
- Data partition size: 3971678208 byte(0x00765d80)
- Unknown1: 0x00000002
- CD size: 80019456 byte(0x00026280)
- Unknown2: 0x00000103

Data partition info:
- Data partition size: 3971678208 byte(0x00765d80)
- Secured zone size: 0 byte(0x00000000)
- Unlocked: 0x00000000
- Password try: 0x00000000

Chip info:
- Manufacturer: SanDisk
- Revision: 80200010

Property page 0x03:
- Device size: 4051697664 byte(0x0078c000)
- Device serial: 0877630F3011E8CD
- Full record length: 0x00000077
- Unknown1: 0x0b
- Unknown2: 0x54060781
- Unknown3: 0x54060781

Property page 0x0C:
- Max. pass. try: 5

==Removing CD image - use all space for USB FLASH STORAGE==

jeremy@desktop ~ $ sudo u3-tool -p 0 /dev/sdb

WARNING: Loading a new cd image causes the whole device to be wiped. This INCLUDES
the data partition.
I repeat: ANY EXISTING DATA WILL BE LOST!

Are you sure you want to continue? [yn] y

jeremy@desktop ~ $ sudo u3-tool -i /dev/sdb
Total device size: 3.77 GB (4051697664 bytes)
CD size: 0.00 B (0 bytes)
Data partition size: 3.77 GB (4051697664 bytes)

==Adding a CD image==

Get the ISO size:

jeremy@desktop ~ $ stat ubcd539.iso

File: ubcd539.iso
Size: 842489856 Blocks: 1638402 IO Block: 131072 regular file
Device: 3bh/59d Inode: 1718238 Links: 1
Access: (0664/-rw-rw-r--) Uid: ( 1000/ jeremy) Gid: ( 1000/ jeremy)
Access: 2025-09-05 10:53:48.997794508 -0500
Modify: 2025-09-05 11:01:51.577078347 -0500
Change: 2025-09-05 11:01:52.333077223 -0500
Birth: -

Set the U3 ISO size:

jeremy@desktop ~ $ sudo u3-tool -p 842489856 /dev/sdb

WARNING: Loading a new cd image causes the whole device to be wiped. This INCLUDES
the data partition.
I repeat: ANY EXISTING DATA WILL BE LOST!

Are you sure you want to continue? [yn] y

Get info:

jeremy@desktop ~ $ sudo u3-tool -i /dev/sdb

Total device size: 3.77 GB (4051697664 bytes)
CD size: 803.50 MB (842530816 bytes)
Data partition size: 2.99 GB (3209166848 bytes)

Load the ISO (takes a loooong time):

jeremy@desktop ~ $ sudo u3-tool -l ubcd539.iso /dev/sdb

|**************************************************| 100%
OK

==Getting CD Information==

jeremy@desktop ~ $ blkid /dev/sr0

/dev/sr0: UUID="2020-08-18-04-59-21-00" LABEL="UBCD539" TYPE="iso9660"

And:

jeremy@desktop ~ $ cd-drive

cd-drive version 2.0.0 x86_64-pc-linux-gnu
Copyright (c) 2003-2005, 2007-2008, 2011-2015, 2017 R. Bernstein
This is free software; see the source for copying conditions.
There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A
PARTICULAR PURPOSE.
The driver selected is GNU/Linux
The default device for this driver is /dev/cdrom

Drivers available...
GNU/Linux ioctl and MMC driver
cdrdao (TOC) disk image driver
bin/cuesheet disk image driver
Nero NRG disk image driver

CD-ROM drive supports some nonstandard or degenerate set of MMC

Drive: /dev/cdrom
Vendor : SanDisk
Model : U3 Cruzer Micro
Revision : 8.02
Profile List Feature

Core Feature

Vendor-specific code 200 Feature

Removable Medium Feature
Tray type loading mechanism
can eject the medium or magazine via the normal START/STOP command
can be locked into the Logical Unit

Random Readable Feature

CD Read Feature
C2 Error pointers are not supported
CD-Text is not supported

Initiator- and Device-directed Power Management Feature

Ability to respond to all commands within a specific time Feature

Hardware : CD-ROM or DVD
Can eject : No
Can close tray : No
Can disable manual eject : No
Can select juke-box disc : No

Can set drive speed : No
Can read multiple sessions (e.g. PhotoCD) : No
Can hard reset device : No

Reading....
Can read Mode 2 Form 1 : No
Can read Mode 2 Form 2 : No
Can read (S)VCD (i.e. Mode 2 Form 1/2) : No
Can read C2 Errors : No
Can read IRSC : No
Can read Media Channel Number (or UPC) : No
Can play audio : No
Can read CD-DA : No
Can read CD-R : No
Can read CD-RW : No
Can read DVD-ROM : No

Writing....
Can write CD-RW : No
Can write DVD-R : No
Can write DVD-RAM : No
Can write DVD-RW : No
Can write DVD+RW : No

==Getting ISO Information==

jeremy@desktop ~ $ iso-info /dev/sr0

iso-info version 2.0.0 x86_64-pc-linux-gnu
Copyright (c) 2003-2005, 2007-2008, 2011-2015, 2017 R. Bernstein
This is free software; see the source for copying conditions.
There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A
PARTICULAR PURPOSE.
__________________________________
ISO 9660 image: /dev/sr0
Application : GENISOIMAGE ISO 9660_HFS FILESYSTEM CREATOR (C) 1993 E.YOUNGDALE
System : LINUX
Volume : UBCD539
Joliet Level: 3

==Listing files inside the ISO image==

jeremy@desktop ~ $ iso-info /dev/sr0 -l | head -n 40

iso-info version 2.0.0 x86_64-pc-linux-gnu
Copyright (c) 2003-2005, 2007-2008, 2011-2015, 2017 R. Bernstein
This is free software; see the source for copying conditions.
There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A
PARTICULAR PURPOSE.
__________________________________
ISO 9660 image: /dev/sr0
Application : GENISOIMAGE ISO 9660_HFS FILESYSTEM CREATOR (C) 1993 E.YOUNGDALE
System : LINUX
Volume : UBCD539
Joliet Level: 3
__________________________________
ISO-9660 Information
/:
d [LSN 94] 2048 Nov 11 2014 21:04:57 .
d [LSN 94] 2048 Aug 17 2020 23:59:21 ..
- [LSN 165] 76 Apr 27 2011 08:33:19 autorun.inf
d [LSN 95] 2048 Nov 11 2014 21:04:51 boot
- [LSN 166] 3158 Apr 18 2008 01:22:37 license.txt
d [LSN 140] 2048 Aug 16 2020 20:27:15 pmagic
d [LSN 98] 2048 Nov 11 2014 21:05:03 ubcd

...

==Test booting from the CD device==
You can use QEMU to create a VM that boots from the ISO (if it is a bootable image):

qemu-system-x86_64 -m 1G -cpu host --enable-kvm -boot d -cdrom /dev/sr0

U3-Enabled USB Storage Devices

2025-09-05T17:37:56Z

Jeremy: /* U3 Devices: USB Storage thumb drives that can emulate CD-ROM devices */

U3-Enabled USB Storage Devices

2025-09-05T17:36:41Z

Jeremy: /* Adding a CD image */

=U3 Devices: USB Storage thumb drives that can emulate CD-ROM devices=

==General==
Tool: u3-tool <https://sourceforge.net/projects/u3-tool/>

===u3-tool package info===

jeremy@desktop ~ $ aptitude show u3-tool

Package: u3-tool
Version: 0.3-3
State: installed
Automatically installed: no
Priority: optional
Section: universe/utils
Maintainer: Ubuntu Developers <ubuntu-devel-discuss@lists.ubuntu.com>
Architecture: amd64
Uncompressed Size: 54.3 k
Depends: libc6 (>= 2.4)
Description: tool for controlling the special features of a U3 USB flash disk
Tool for controlling USB flash devices that conform to the U3 specifications. You can do the following with your U3 flash:
* Replace the CD image
* Change the size of the virtual CD or completely remove it
* Enable and disable security
* Unlock and change the password of secured U3 device
* Obtain various device information
Homepage: https://sourceforge.net/projects/u3-tool/

==Getting device info (via lsblk)==

jeremy@desktop ~ $ lsblk -o name,path,pttype,fstype,label,vendor,model,serial,uuid /dev/sdb

NAME PATH PTTYPE FSTYPE LABEL VENDOR MODEL SERIAL UUID
sdb /dev/sdb dos SanDisk U3_Cruzer_Micro 0877630F3011E8CD
└─sdb1 /dev/sdb1 dos vfat MY-U3DEVICE F327-C68D

==Getting device info (via SMART)==

jeremy@desktop ~ $ sudo smartctl -d scsi -i /dev/sdb

smartctl 7.1 2019-12-30 r5022 [x86_64-linux-5.4.0-193-generic] (local build)
Copyright (C) 2002-19, Bruce Allen, Christian Franke, www.smartmontools.org

=== START OF INFORMATION SECTION ===
Vendor: SanDisk
Product: U3 Cruzer Micro
Revision: 8.02
User Capacity: 3,971,677,696 bytes [3.97 GB]
Logical block size: 512 bytes
>> Terminate command early due to bad response to IEC mode page
A mandatory SMART command failed: exiting. To continue, add one or more '-T permissive' options.

or:

jeremy@desktop ~ $ sudo smartctl -d sat,auto -i /dev/sdb

smartctl 7.1 2019-12-30 r5022 [x86_64-linux-5.4.0-193-generic] (local build)
Copyright (C) 2002-19, Bruce Allen, Christian Franke, www.smartmontools.org

=== START OF INFORMATION SECTION ===
Vendor: SanDisk
Product: U3 Cruzer Micro
Revision: 8.02
User Capacity: 3,971,677,696 bytes [3.97 GB]
Logical block size: 512 bytes
>> Terminate command early due to bad response to IEC mode page
A mandatory SMART command failed: exiting. To continue, add one or more '-T permissive' options.

==u3-tool program==

jeremy@desktop ~ $ u3-tool -h

u3-tool 0.3 - U3 USB stick manager

Usage: u3-tool [options] <device name>

Options:
-c Change password
-d Disable device security
-D Dump all raw info(for debug)
-e Enable device security
-h Print this help message
-i Display device info
-l <cd image> Load CD image into device
-p <cd size> Repartition device
-R Reset device security, destroying private data
-u Unlock device
-v Use verbose output
-V Print version information

For the device name use:
'/dev/sda0', '/dev/sg3'

==Getting u3 device info==

Basic:

jeremy@desktop ~ $ sudo u3-tool -i /dev/sdb

Total device size: 3.77 GB (4051697664 bytes)
CD size: 76.31 MB (80019456 bytes)
Data partition size: 3.70 GB (3971678208 bytes)

Detailed:

jeremy@desktop ~ $ u3-tool -D /dev/sdb

Partition info:
- Partition count: 0x02
- Data partition size: 3971678208 byte(0x00765d80)
- Unknown1: 0x00000002
- CD size: 80019456 byte(0x00026280)
- Unknown2: 0x00000103

Data partition info:
- Data partition size: 3971678208 byte(0x00765d80)
- Secured zone size: 0 byte(0x00000000)
- Unlocked: 0x00000000
- Password try: 0x00000000

Chip info:
- Manufacturer: SanDisk
- Revision: 80200010

Property page 0x03:
- Device size: 4051697664 byte(0x0078c000)
- Device serial: 0877630F3011E8CD
- Full record length: 0x00000077
- Unknown1: 0x0b
- Unknown2: 0x54060781
- Unknown3: 0x54060781

Property page 0x0C:
- Max. pass. try: 5

==Removing CD image - use all space for USB FLASH STORAGE==

jeremy@desktop ~ $ sudo u3-tool -p 0 /dev/sdb

WARNING: Loading a new cd image causes the whole device to be wiped. This INCLUDES
the data partition.
I repeat: ANY EXISTING DATA WILL BE LOST!

Are you sure you want to continue? [yn] y

jeremy@desktop ~ $ sudo u3-tool -i /dev/sdb
Total device size: 3.77 GB (4051697664 bytes)
CD size: 0.00 B (0 bytes)
Data partition size: 3.77 GB (4051697664 bytes)

==Adding a CD image==

Get the ISO size:

jeremy@desktop ~ $ stat ubcd539.iso

File: ubcd539.iso
Size: 842489856 Blocks: 1638402 IO Block: 131072 regular file
Device: 3bh/59d Inode: 1718238 Links: 1
Access: (0664/-rw-rw-r--) Uid: ( 1000/ jeremy) Gid: ( 1000/ jeremy)
Access: 2025-09-05 10:53:48.997794508 -0500
Modify: 2025-09-05 11:01:51.577078347 -0500
Change: 2025-09-05 11:01:52.333077223 -0500
Birth: -

Set the U3 ISO size:

jeremy@desktop ~ $ sudo u3-tool -p 842489856 /dev/sdb

WARNING: Loading a new cd image causes the whole device to be wiped. This INCLUDES
the data partition.
I repeat: ANY EXISTING DATA WILL BE LOST!

Are you sure you want to continue? [yn] y

Get info:

jeremy@desktop ~ $ sudo u3-tool -i /dev/sdb

Total device size: 3.77 GB (4051697664 bytes)
CD size: 803.50 MB (842530816 bytes)
Data partition size: 2.99 GB (3209166848 bytes)

Load the ISO (takes a loooong time):

jeremy@desktop ~ $ sudo u3-tool -l ubcd539.iso /dev/sdb

|**************************************************| 100%
OK

==Getting CD Information==

jeremy@desktop ~ $ blkid /dev/sr0

/dev/sr0: UUID="2020-08-18-04-59-21-00" LABEL="UBCD539" TYPE="iso9660"

And:

jeremy@desktop ~ $ cd-drive

cd-drive version 2.0.0 x86_64-pc-linux-gnu
Copyright (c) 2003-2005, 2007-2008, 2011-2015, 2017 R. Bernstein
This is free software; see the source for copying conditions.
There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A
PARTICULAR PURPOSE.
The driver selected is GNU/Linux
The default device for this driver is /dev/cdrom

Drivers available...
GNU/Linux ioctl and MMC driver
cdrdao (TOC) disk image driver
bin/cuesheet disk image driver
Nero NRG disk image driver

CD-ROM drive supports some nonstandard or degenerate set of MMC

Drive: /dev/cdrom
Vendor : SanDisk
Model : U3 Cruzer Micro
Revision : 8.02
Profile List Feature

Core Feature

Vendor-specific code 200 Feature

Removable Medium Feature
Tray type loading mechanism
can eject the medium or magazine via the normal START/STOP command
can be locked into the Logical Unit

Random Readable Feature

CD Read Feature
C2 Error pointers are not supported
CD-Text is not supported

Initiator- and Device-directed Power Management Feature

Ability to respond to all commands within a specific time Feature

Hardware : CD-ROM or DVD
Can eject : No
Can close tray : No
Can disable manual eject : No
Can select juke-box disc : No

Can set drive speed : No
Can read multiple sessions (e.g. PhotoCD) : No
Can hard reset device : No

Reading....
Can read Mode 2 Form 1 : No
Can read Mode 2 Form 2 : No
Can read (S)VCD (i.e. Mode 2 Form 1/2) : No
Can read C2 Errors : No
Can read IRSC : No
Can read Media Channel Number (or UPC) : No
Can play audio : No
Can read CD-DA : No
Can read CD-R : No
Can read CD-RW : No
Can read DVD-ROM : No

Writing....
Can write CD-RW : No
Can write DVD-R : No
Can write DVD-RAM : No
Can write DVD-RW : No
Can write DVD+RW : No

==Getting ISO Information==

jeremy@desktop ~ $ iso-info /dev/sr0

iso-info version 2.0.0 x86_64-pc-linux-gnu
Copyright (c) 2003-2005, 2007-2008, 2011-2015, 2017 R. Bernstein
This is free software; see the source for copying conditions.
There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A
PARTICULAR PURPOSE.
__________________________________
ISO 9660 image: /dev/sr0
Application : GENISOIMAGE ISO 9660_HFS FILESYSTEM CREATOR (C) 1993 E.YOUNGDALE
System : LINUX
Volume : UBCD539
Joliet Level: 3

==Listing files inside the ISO image==

jeremy@desktop ~ $ iso-info /dev/sr0 -l | head -n 40

iso-info version 2.0.0 x86_64-pc-linux-gnu
Copyright (c) 2003-2005, 2007-2008, 2011-2015, 2017 R. Bernstein
This is free software; see the source for copying conditions.
There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A
PARTICULAR PURPOSE.
__________________________________
ISO 9660 image: /dev/sr0
Application : GENISOIMAGE ISO 9660_HFS FILESYSTEM CREATOR (C) 1993 E.YOUNGDALE
System : LINUX
Volume : UBCD539
Joliet Level: 3
__________________________________
ISO-9660 Information
/:
d [LSN 94] 2048 Nov 11 2014 21:04:57 .
d [LSN 94] 2048 Aug 17 2020 23:59:21 ..
- [LSN 165] 76 Apr 27 2011 08:33:19 autorun.inf
d [LSN 95] 2048 Nov 11 2014 21:04:51 boot
- [LSN 166] 3158 Apr 18 2008 01:22:37 license.txt
d [LSN 140] 2048 Aug 16 2020 20:27:15 pmagic
d [LSN 98] 2048 Nov 11 2014 21:05:03 ubcd

...

U3-Enabled USB Storage Devices

2025-09-05T17:19:00Z

Jeremy: /* Getting device info (via SMART) */

U3-Enabled USB Storage Devices

2025-09-05T16:44:35Z

Jeremy:

U3-Enabled USB Storage Devices

2025-09-05T16:42:57Z

Jeremy: /* Adding a CD image */

U3-Enabled USB Storage Devices

2025-09-05T16:29:49Z

Jeremy:

U3-Enabled USB Storage Devices

2025-09-05T16:29:25Z

Jeremy: Created page with "=USB Storage thumb drives that can emulate CD-ROM devices= ==General== Tool: u3-tool <https://sourceforge.net/projects/u3-tool/> ===u3-tool package info=== jeremy@desktop ~ $ aptitude show u3-tool Package: u3-tool Version: 0.3-3 State: installed Automatically installed: no Priority: optional Section: universe/utils Maintainer: Ubuntu Developers <ubuntu-devel-discuss@lists.ubuntu.com> Architecture: amd64 Uncompressed Size: 54.3 k..."

=USB Storage thumb drives that can emulate CD-ROM devices=

==General==
Tool: u3-tool <https://sourceforge.net/projects/u3-tool/>

===u3-tool package info===

jeremy@desktop ~ $ aptitude show u3-tool

Package: u3-tool
Version: 0.3-3
State: installed
Automatically installed: no
Priority: optional
Section: universe/utils
Maintainer: Ubuntu Developers <ubuntu-devel-discuss@lists.ubuntu.com>
Architecture: amd64
Uncompressed Size: 54.3 k
Depends: libc6 (>= 2.4)
Description: tool for controlling the special features of a U3 USB flash disk
Tool for controlling USB flash devices that conform to the U3 specifications. You can do the following with your U3 flash:
* Replace the CD image
* Change the size of the virtual CD or completely remove it
* Enable and disable security
* Unlock and change the password of secured U3 device
* Obtain various device information
Homepage: https://sourceforge.net/projects/u3-tool/

==Getting device info (via SMART)==

jeremy@desktop ~ $ sudo smartctl -d scsi -i /dev/sdb

smartctl 7.1 2019-12-30 r5022 [x86_64-linux-5.4.0-193-generic] (local build)
Copyright (C) 2002-19, Bruce Allen, Christian Franke, www.smartmontools.org

=== START OF INFORMATION SECTION ===
Vendor: SanDisk
Product: U3 Cruzer Micro
Revision: 8.02
User Capacity: 3,971,677,696 bytes [3.97 GB]
Logical block size: 512 bytes
>> Terminate command early due to bad response to IEC mode page
A mandatory SMART command failed: exiting. To continue, add one or more '-T permissive' options.

or:

jeremy@desktop ~ $ sudo smartctl -d sat,auto -i /dev/sdb

smartctl 7.1 2019-12-30 r5022 [x86_64-linux-5.4.0-193-generic] (local build)
Copyright (C) 2002-19, Bruce Allen, Christian Franke, www.smartmontools.org

=== START OF INFORMATION SECTION ===
Vendor: SanDisk
Product: U3 Cruzer Micro
Revision: 8.02
User Capacity: 3,971,677,696 bytes [3.97 GB]
Logical block size: 512 bytes
>> Terminate command early due to bad response to IEC mode page
A mandatory SMART command failed: exiting. To continue, add one or more '-T permissive' options.

==u3-tool program==

jeremy@desktop ~ $ u3-tool -h

u3-tool 0.3 - U3 USB stick manager

Usage: u3-tool [options] <device name>

Options:
-c Change password
-d Disable device security
-D Dump all raw info(for debug)
-e Enable device security
-h Print this help message
-i Display device info
-l <cd image> Load CD image into device
-p <cd size> Repartition device
-R Reset device security, destroying private data
-u Unlock device
-v Use verbose output
-V Print version information

For the device name use:
'/dev/sda0', '/dev/sg3'

==Getting u3 device info==

Basic:

jeremy@desktop ~ $ sudo u3-tool -i /dev/sdb

Total device size: 3.77 GB (4051697664 bytes)
CD size: 76.31 MB (80019456 bytes)
Data partition size: 3.70 GB (3971678208 bytes)

Detailed:

jeremy@desktop $ u3-tool -D /dev/sdb

Partition info:
- Partition count: 0x02
- Data partition size: 3971678208 byte(0x00765d80)
- Unknown1: 0x00000002
- CD size: 80019456 byte(0x00026280)
- Unknown2: 0x00000103

Data partition info:
- Data partition size: 3971678208 byte(0x00765d80)
- Secured zone size: 0 byte(0x00000000)
- Unlocked: 0x00000000
- Password try: 0x00000000

Chip info:
- Manufacturer: SanDisk
- Revision: 80200010

Property page 0x03:
- Device size: 4051697664 byte(0x0078c000)
- Device serial: 0877630F3011E8CD
- Full record length: 0x00000077
- Unknown1: 0x0b
- Unknown2: 0x54060781
- Unknown3: 0x54060781

Property page 0x0C:
- Max. pass. try: 5

==Removing CD image - use all space for USB FLASH STORAGE==

jeremy@desktop $ sudo u3-tool -p 0 /dev/sdb

WARNING: Loading a new cd image causes the whole device to be wiped. This INCLUDES
the data partition.
I repeat: ANY EXISTING DATA WILL BE LOST!

Are you sure you want to continue? [yn] y

jeremy@desktop $ u3-tool -i /dev/sdb
Total device size: 3.77 GB (4051697664 bytes)
CD size: 0.00 B (0 bytes)
Data partition size: 3.77 GB (4051697664 bytes)

==Adding a CD image==

Get the ISO size:

jeremy@desktop $ stat ubcd539.iso

File: ubcd539.iso
Size: 842489856 Blocks: 1638402 IO Block: 131072 regular file
Device: 3bh/59d Inode: 1718238 Links: 1
Access: (0664/-rw-rw-r--) Uid: ( 1000/ jeremy) Gid: ( 1000/ jeremy)
Access: 2025-09-05 10:53:48.997794508 -0500
Modify: 2025-09-05 11:01:51.577078347 -0500
Change: 2025-09-05 11:01:52.333077223 -0500
Birth: -

Set the U3 ISO size:

jeremy@desktop $ sudo u3-tool -p 842489856 /dev/sdb

WARNING: Loading a new cd image causes the whole device to be wiped. This INCLUDES
the data partition.
I repeat: ANY EXISTING DATA WILL BE LOST!

Are you sure you want to continue? [yn] y

Get info:

jeremy@desktop $ u3-tool -i /dev/sdb

Total device size: 3.77 GB (4051697664 bytes)
CD size: 803.50 MB (842530816 bytes)
Data partition size: 2.99 GB (3209166848 bytes)

Load the ISO (takes a long time):

jeremy@desktop $ sudo u3-tool -l ubcd539.iso /dev/sdb

|************* | 26%

Main Page

2025-09-05T16:11:34Z

Jeremy: /* Storage */

Welcome to the Wiki of Jeremy Bryan Smith. Here I shall disseminate knowledge that I deem important enough that I may need to recall at a later point in time and/or that I believe may be useful for others out there. 
Feel free to poke around, make comments, suggestions, and ingest the bits of information I have to share. 
Regards, 
Jeremy Bryan Smith 
 

== Find Me On ==
* [https://noc.social/@helamonster Mastodon]
* [https://github.com/helamonster Github]
* [https://www.linkedin.com/in/helamonster/ Linked In]
* [https://www.reddit.com/user/mr_helamonster Reddit]
* [https://twitter.com/helamonster Twitter]
* [https://www.facebook.com/helamonster/notes Facebook]
* [https://www.instagram.com/mr_helamonster/ Instagram]
* [https://www.youtube.com/c/JeremySmithBryan YouTube] - See my playlists
* [https://open.spotify.com/user/1277771794 Spotify] - See my playlists

==[[Veganism]]==

==Green Living==

===Air===
TODO: Add air filtration stuff here...

===Water===
You can never trust your municipal water supply. Nor can you trust that any source of water (including bottled) has not been contaminated. Do not drink unfiltered tap water. Just don't.
 
 
I have used a reverse osmosis water filter system since 2014 and have never looked back. The one I happened to have purchased was the: [https://www.amazon.com/gp/product/B005A3WM6C/ref=ppx_yo_dt_b_search_asin_title?ie=UTF8&psc=1 Home Master TMAFC Artesian Full Contact Undersink Reverse Osmosis Water Filter System]
 
 
And the following replacement filters: 
* [https://www.amazon.com/gp/product/B07BPX8K5K/ref=ppx_yo_dt_b_search_asin_title?ie=UTF8&psc=1 Membrane Solutions 75 GPD Reverse Osmosis Membrane]
* [https://www.amazon.com/gp/product/B005A3WNWK/ref=ppx_yo_dt_b_search_asin_title?ie=UTF8&psc=1 Home Master ISetTMA8 Artesian And HydroGardener Replacement Water Filter Change Set]

Along with this UV sterilizer: 
[https://www.amazon.com/gp/product/B0110LTT1I/ref=ppx_yo_dt_b_search_asin_title?ie=UTF8&psc=1 Bluonics Ultraviolet Light Water Purifier UV Sterilizer]

Super easy to install and maintain. I removed the tank once the bladder was no longer holding water and instead attached it to an ice maker: 
[https://www.amazon.com/gp/product/B0B3DH6S9D/ref=ppx_yo_dt_b_search_asin_title?ie=UTF8&psc=1 Countertop Hot & Cold Water Dispenser and Ice Maker]

===Composting===
I use this: [https://www.amazon.com/gp/product/B0121G9ZJW/ref=as_li_tl?ie=UTF8&camp=1789&creative=9325&creativeASIN=B0121G9ZJW&linkCode=as2&tag=highandlowtec-20&linkId=a27cf44c5167bf80b590bf96a469739d Envirocycle USA-made, Food Safe, BPA and Rust Free Composting Tumbler and Compost Tea Maker]

{{Special:IframePage|AmazonAffiliate|path=widgets/q?ServiceVersion=20070822&OneJS=1&Operation=GetAdHtml&MarketPlace=US&source=ac&ref=tf_til&ad_type=product_link&tracking_id=highandlowtec-20&marketplace=amazon&region=US&placement=B0121G9ZJW&asins=B0121G9ZJW&linkId=4312303f6850d7bdc370558b69a34599&show_border=false&link_opens_in_new_window=false&price_color=333333&title_color=0066c0&bg_color=ffffff}}

== Technology ==

===Random===
At some point I will organize this stuff better.
* [[Booting via GRUB 2 prompt]]
* [[Simulating keystrokes from clipboard]]
* [[Making Block Devices Read Only]]

===Applications and Plug-ins===
Here I will provide my opinions, recommendations on usage and optimal configuration, links to related third-party tools, and my own related tools
* [[Web Browsers]] - The web browsers and related extensions / plug-ins, and tweaks for usability and security, etc. that I recommend
* [[vim]] - My text editor of choice

===Devices===
* Cars
** 2012 Toyota / Scion XB
* Televisions
** [[Seiki Digital SE50UY04 50-Inch 4K UHD 120Hz LED HDTV]]
** [https://www.lg.com/us/tvs/lg-oled55cxpua-oled-4k-tv LG OLED55CXPUA 55" Class HDR 4K UHD Smart OLED TV (2020 Model)]

* Security Keys
** [[YubiKey NEO]]

* Smart Phones
** [[Samsung Galaxy Note 3]]
** [[Samsung Galaxy Tab S 10.5]]
** [[Motorola Backflip (MB300)]]
** [[Google Pixel Phone]]
** [[Google Pixel 2 XL Phone]]
** [[Google Pixel 6 Pro]]

* Tablets
** [[Samsung Galaxy Tab S 10.5" (SM-T800)]]

* eReaders
** [[Kindle Paperwhite E-reader (7th Generation)]]

* HTPCs
** [[MAGNUS EN1080 10 Year Anniversary Edition (ZBOX-EN1080)]]

* Modems
** TP-LINK TC-7620 DOCSIS 3.0 cable modem
* Servers
** [[HPE Proliant MicroServer Gen10]]
** [[Dell PowerEdge R720]]
** [[iXsystems FreeNAS Mini]]
* SoCs
** [[Intel Compute Stick STK1AW32SC]]
** [[Raspberry Pi]]
** [[Minnowboard Max]]

* Notebooks
** [[Toshiba Qosmio G35-AV660]]
** [[Dell Latitude E6430s]]
** [[Sony Vaio Something]]
** [[Lenovo ThinkPad X1 Carbon Gen 6]]
** [[Lenovo Thinkpad X1 Extreme Gen 2]]
** [[Google Pixelbook (eve)]]

* Fanless Systems
** [[Protectli FW6D]] x 2

* Monitors / Displays
** 2 x [[Asus DisplayLink 2 External USB 3 Monitor]]
** 2 x [[ACHIEVA Shimian QH270-Lite Quad HD 2560x1440 Monitor]]
** [https://epson.com/For-Home/Projectors/Home-Cinema/PowerLite-Home-Cinema-1080-UB-Projector/p/V11H262120 Epson EPPLHC1080UB PowerLite Home Cinema 1080 UB Projector]

* Power
** [[APC Smart UPS]]
** [[APC Smart-UPS SRT 2200VA 230V and APC Smart-UPS SRT 72V 2.2kVA Battery Pack]]

* Sound
** [[Logitech Z-5500 THX-Certified 5.1 Digital Surround Sound Speaker System]]

* Cameras
** [[Canon PowerShot G9]]
** Raspberry PI 5MP Camera Board Module
** Raspberry Pi HQ Camera Module
** Arducam Day and Night Vision IMX477 HQ Camera
** Logitech HD Pro Webcam C920 (960-000764)
** LOGITECH QUICKCAM PRO 9000 R Webcam
** [[Logitech Quickcam Express]]

* Home Appliances
** [[Tap Master TMAFC Artesian Full Contact Reverse Osmosis Under Counter Water Filtration System]]

* Network
** [[SG-4860 pfSense® Security Gateway Appliance]]
** [[Protectli FW6D]] x 2

* Printers
** [[Canon MP-160]] All-in-one scanner, copier, printer

* Misc
** [http://www.istarusa.com/en/istarusa/products.php?model=WNG-1810 iStarUSA WNG-1810 18U 1000mm Depth Rack-mount Server Cabinet]
** [[Sierra Wireless AirCard 313U]]
** [[LSI SAS HBA]]
** [[Lantronix SpiderDuo]] - Single port KVM over IP with USB mass storage
** [[Apple iPod Shuffle 1st Gen/White 512 MB, Model A1112]]
** [[Chicony Saitek Eclipse II Keyboard]]
** [[GeForce 9500 GT]]
** [[GeForce GTX 550 Ti]]
** [[Snapmaker 2.0 Modular 3-in-1 3D Printer]]

===Software===
* [[Web Browsers]]
* [[Configuration Management]]
* [[Boot-Related Tools]]

===Programming===
* [[BASH]]

===Android===
* [[Running Android Apps on Linux]]
* [[Must Have Android Apps]]

===Microsoft Windows===
* [[Managing Microsoft Windows]]

===E-mail===
* [[sendmail]]
* [[E-mail Blacklists]] - How to determine if your mail server is being blocked, how to resolve.
* [[Sending System E-mails with Gmail]]

===Storage===

====U3-Enabled USB Storage Devices====
[[U3-Enabled USB Storage Devices]] USB Storage thumb drives that can emulate CD-ROM devices

====RAID====

=====From Hardware to Software=====
If you've ever been forced to use hardware RAID and then need to migrate from hardware RAID to software RAID ...
 
I had 6 disks behind a Dell PERC 6/i hardware RAID controller and wanted to set up a ZFS pool. But for reasons beyond my control at the time, changing out the controller for a proper HBA was not an option. So, I did the unthinkable and configured 6 RAID-0 devices on the PERC controller, one for each physical disk, and then created a zpool from the virtual disks the controller exposed to the OS. It worked well enough for my purposes for years, but now I have the ability to swap in a real HBA. But the question is, do I have to copy all of the data off, swap the controller, then copy all data back? I was surprised to discover that the data on the disks, with the exception of a small section of metadata at the end of each disk, was in-tact just as if the disks were being used directly. In fact, the metadata was in Linux MDADM RAID format! So that must be what those PERC controllers are doing behind the scene. No surprise there, taking advantage of open source. I wonder if they are violating the GPL. I'll have to look at the firmware. Anyway, This may only work if you configured each disk as a RAID-0. I haven't tested other configurations yet.
 
Resources:
* [https://raid.wiki.kernel.org/index.php/Linux_Raid Linux RAID Wiki]
** [https://raid.wiki.kernel.org/index.php/DDF_Fake_RAID DDF Fake RAID]
** [https://raid.wiki.kernel.org/index.php/RAID_setup RAID Setup]
 
This is what I saw:
root@ubuntu-server:~# lsblk --nodeps -I 8 -o name,maj:min,rm,size,ro,type,pttype,ptuuid,fstype,uuid,label,model,vendor
NAME MAJ:MIN RM SIZE RO TYPE PTTYPE PTUUID FSTYPE UUID LABEL MODEL VENDOR
sda 8:0 0 232.9G 0 disk gpt 5ace5e66-37f2-4d44-b518-f2a22834c3ab Samsung_SSD_860 ATA
sdb 8:16 1 29.3G 0 disk dos e16cd6ae Cruzer_Glide SanDisk
sdc 8:32 0 465.8G 0 disk ddf_raid_member Dell \x10 ST9500530NS ATA
sdd 8:48 0 465.8G 0 disk ddf_raid_member Dell \x10 ST9500530NS ATA
sde 8:64 0 465.8G 0 disk ddf_raid_member Dell \x10 ST9500530NS ATA
sdf 8:80 0 465.8G 0 disk ddf_raid_member Dell \x10 ST9500530NS ATA
sdg 8:96 0 465.8G 0 disk ddf_raid_member Dell \x10 ST9500530NS ATA
sdh 8:112 0 465.8G 0 disk ddf_raid_member Dell \x10 ST9500530NS ATA
sdi 8:128 1 235.8G 0 disk dos be730627 Voyager_SliderX2 Corsair
sdj 8:144 0 3.7T 0 disk gpt b5dcd625-9112-4f29-9b67-64e935bf15b3 My_Passport_25E2 WD
sdk 8:160 0 3.7T 0 disk gpt 31d5cc46-33c7-4806-80a6-57aaba69b38e My_Passport_25E2 WD
sdl 8:176 1 58.9G 0 disk dos d02d781a zfs_member 17764476958699951102 upool Voyager_SliderX2 Corsair
sdm 8:192 1 58.9G 0 disk dos 642fafbd zfs_member 12354630986627173815 upool Voyager_SliderX2 Corsair
sdn 8:208 1 118G 0 disk dos 604144b7 Voyager_SliderX2 Corsair
sdo 8:224 1 118G 0 disk dos 8f6dbdcd Voyager_SliderX2 Corsair
sdp 8:240 1 116.5G 0 disk dos Cruzer_Glide SanDisk


You can see the 6 500GB disks as well as a few USB drives attached. We'll ignore those and list any Linux RAID devices...

root@ubuntu-server:~# mdadm --query /dev/sd{c,d,e,f,g,h}
/dev/sdc: is not an md array
/dev/sdc: device -1393767213 in 6 device undetected container /dev/md/ddf0. Use mdadm --examine for more detail.
/dev/sdd: is not an md array
/dev/sdd: device -1811426553 in 6 device undetected container /dev/md/ddf0. Use mdadm --examine for more detail.
/dev/sde: is not an md array
/dev/sde: device 764605963 in 6 device undetected container /dev/md/ddf0. Use mdadm --examine for more detail.
/dev/sdf: is not an md array
/dev/sdf: device 1584381922 in 6 device undetected container /dev/md/ddf0. Use mdadm --examine for more detail.
/dev/sdg: is not an md array
/dev/sdg: device 896654598 in 6 device undetected container /dev/md/ddf0. Use mdadm --examine for more detail.
/dev/sdh: is not an md array
/dev/sdh: device -2108342859 in 6 device undetected container /dev/md/ddf0. Use mdadm --examine for more detail.


Hmm, not quite right, let's try dmraid ...
root@ubuntu-server:~#root@ubuntu-server:~# dmraid -r
/dev/sdh: ddf1, ".ddf1_disks", GROUP, ok, 975699968 sectors, data@ 0
/dev/sdc: ddf1, ".ddf1_disks", GROUP, ok, 975699968 sectors, data@ 0
/dev/sde: ddf1, ".ddf1_disks", GROUP, ok, 975699968 sectors, data@ 0
/dev/sdg: ddf1, ".ddf1_disks", GROUP, ok, 975699968 sectors, data@ 0
/dev/sdd: ddf1, ".ddf1_disks", GROUP, ok, 975699968 sectors, data@ 0
/dev/sdf: ddf1, ".ddf1_disks", GROUP, ok, 975699968 sectors, data@ 0


We see that the Ok, now let's inspect one of those disks' partition table...
root@ubuntu-server:~# parted /dev/sdg unit b p
Warning: Not all of the space available to /dev/sdg appears to be used, you can fix the GPT to use all of the space (an extra 1073200 blocks) or continue with the current setting?
Fix/Ignore? Ignore
Model: ATA ST9500530NS (scsi)
Disk /dev/sdg: 500107862016B
Sector size (logical/physical): 512B/512B
Partition Table: gpt
Disk Flags:

Number Start End Size File system Name Flags
1 1048576B 9437183B 8388608B Reserved
2 10485760B 18874367B 8388608B GRUB bios_grub
3 20971520B 499558366719B 499537395200B zfs ZFS


Let's step back and take a look at how the disks, partitions, and RAID devices are related ...
 lsblk -I 8,9 -o name,maj:min,size,type /dev/sdg
 NAME MAJ:MIN SIZE TYPE
sdg 8:96 465.8G disk
|-sdg1 8:97 8M part
|-sdg2 8:98 8M part
|-sdg3 8:99 465.2G part
`-md125 9:125 465.3G raid0
|-md125p1 259:3 8M part
|-md125p2 259:4 8M part
`-md125p3 259:5 465.2G part


Inspecting the corresponding MDADM RAID(s):
root@ubuntu-server:~# grep sdg /proc/mdstat
md125 : active raid0 sdg[0]
md127 : inactive sdf[5](S) sdh[4](S) sde[3](S) sdd[2](S) sdg[1](S) sdc[0](S)

root@ubuntu-server:~# mdadm --detail /dev/md125
/dev/md125:
Container : /dev/md/ddf0, member 0
Raid Level : raid0
Array Size : 487849984 (465.25 GiB 499.56 GB)
Raid Devices : 1
Total Devices : 1

State : clean
Active Devices : 1
Working Devices : 1
Failed Devices : 0
Spare Devices : 0

Chunk Size : 128K

Consistency Policy : none

Container GUID : 44656C6C:20202020:10000079:10281F17:4B825EED:49CB41EA
(Dell 02/22/20 10:39:41)
Seq : 00000004
Virtual Disks : 6

Number Major Minor RaidDevice State
0 8 96 0 active sync /dev/sdg

root@ubuntu-server:~# mdadm --detail /dev/md127
/dev/md127:
Version : ddf
Raid Level : container
Total Devices : 6

Working Devices : 6

Container GUID : 44656C6C:20202020:10000079:10281F17:4B825EED:49CB41EA
(Dell 02/22/20 10:39:41)
Seq : 00000004
Virtual Disks : 6

Member Arrays : /dev/md/disk1_0 /dev/md/disk5_0 /dev/md/disk3_0 /dev/md/disk4_0 /dev/md/disk2_0 /dev/md122

Number Major Minor RaidDevice

- 8 64 - /dev/sde
- 8 32 - /dev/sdc
- 8 112 - /dev/sdh
- 8 80 - /dev/sdf
- 8 48 - /dev/sdd
- 8 96 - /dev/sdg

And the partitions on the RAID device itself:
root@ubuntu-server:~# parted /dev/md125 unit b p
Model: Linux Software RAID Array (md)
Disk /dev/md125: 499558383616B
Sector size (logical/physical): 512B/512B
Partition Table: gpt
Disk Flags:

Number Start End Size File system Name Flags
1 1048576B 9437183B 8388608B Reserved
2 10485760B 18874367B 8388608B GRUB bios_grub
3 20971520B 499558366719B 499537395200B zfs ZFS

So, capacity of the disk itself is 500,107,862,016 bytes and the capacity of the RAID-0 device presented is 499,558,383,616 bytes. 
So, there is 500,107,862,016 - 499,558,383,616 = 549,478,400 bytes / 1024 = 536,600 KiB / 1024 = 524.0234375 MiB used up by the MDADM RAID signature at the end of the disk. 
Cool! So, can we just zero out that mdadm signature and use the disks normally? Let's see...

====Controllers====
See Serve the Home's [https://www.servethehome.com/buyers-guides/top-hardware-components-freenas-nas-servers/top-picks-freenas-hbas/ Top Picks for FreeNAS HBAs] for a good overview. 
Basically:
* Stay away from hardware RAID
* There are a few RAID cards that can be flashed to IT mode to support proper HBA (passthrough/JBOD) mode.
* There are many re-branded / OEM versions that should also work fine (Dell, IBM)
* There are many being sold used

Check these out:
* Internal
** LSI SAS HBA 9201-8i: 8 port, SATA III, 6 Gbps, ~ $40 - $50 USD on ebay as of 2020-03-02 Good replacement for PERC 6/i
** IBM M1015 (LSI 9220-8i): 8 port, SATA III, 6 Gbps,
** Dell H200: 8 port, SATA III, 6 Gbps, $30 - $40 USD on ebay as of 2020-03-02 Good replacement for PERC 6/i
* External
** LSI SAS HBA 9200-8E: 8 port, SATA III, 6 Gbps, ~ $40 - $50 USD on ebay as of 2020-03-02 Good replacement for PERC 6/e
** LSI SAS HBA 9300-8e: 8 port, SATA III. 12 Gbps, ~ $90 - $100 USD on ebay as of 2020-03-02 https://www.broadcom.com/products/storage/host-bus-adapters/sas-9300-8e

====Filesystems====
* [[ZFS]]
==== Data Integrity ====
* [[Backups]]
* [[Data Recovery]]
==== Storage Analysis ====
* [[File System / Disk Usage Analysis]]

=== Misc ===
* [[Notable]]
* [[Common Application Configuration]]
* [[Updating Samsung SSD Firmware]]
* [[Forensics]]
* [[Maintaining Connectivity]]
* [[Moving Web Browser Cache]] Why and how you would want to have your web browser cache located in a non-default location
* [[Reducing Junk Mail]]
* [[VPNs]] - Virtual Private Networks
* [[TCP over DNS]] - Bypass Wifi logins to get internet access
* [[Terminals]] - Tips and tricks for shells

=== Security/Privacy ===

* [[Best Practices for Improved Security and Privacy]]
* [[Encryption]]
* [[Secure and Private Internet Access]]
* [[Credit Cards]]
* [[Malware]]
* [[Port Knocking]]
* [[Internet of Things]]
* [[Staying Anonymous Online]]
* [[Ad Blocking]]
* Hardware Tools
** [https://github.com/hak5darren/USB-Rubber-Ducky USB Rubber Ducky]

==[[Admirable People]]==

== Life Lessons ==
* [[Things to remember and to remind yourself of occasionally]]

== Lists ==
* [[Travel]] - Lists for things to do before and things to bring when travelling.
* [[Playlists]] - Playlists of music, movies, etc.

Lenovo Thinkpad X1 Extreme Gen 2

2025-09-04T01:39:27Z

Jeremy: /* My Config */

=General=
[[File:Lenovo-laptop-thinkpad-x1-extreme-2nd-gen-gallery-1.jpg|320px]]
This is a beast, and everything's working in Linux :-)

* Product page: https://www.lenovo.com/us/en/laptops/thinkpad/thinkpad-x1/X1-Extreme-Gen-2/p/22TP2TXX1E2
* Support page: https://pcsupport.lenovo.com/us/en/products/laptops-and-netbooks/thinkpad-x-series-laptops/thinkpad-x1-extreme-gen-2
* [https://psref.lenovo.com/syspool/Sys/PDF/ThinkPad/ThinkPad_X1_Extreme_2nd_Gen/ThinkPad_X1_Extreme_2nd_Gen_Spec.PDF Product Specifications (PDF)]
* [https://download.lenovo.com/pccbbs/mobiles_pdf/p1gen2_x1extreme_ug_v2_en.pdf ThinkPad X1 Extreme (2nd Gen) Reference (PDF)]
* [https://psref.lenovo.com/syspool/Sys/PDF/datasheet/ThinkPad_X1_Extreme_2nd_Gen_datasheet_EN.pdf ThinkPad X1 Extreme Gen 2 (Marketing PDF)]

Battery Info
* Model Name (?): L18M4P71
* Integrated Li-Polymer 80Wh battery, supports Rapid Charge (charge up to 80% in 1hr)
* Mas battery life: MobileMark® 2014: 14 hr

Battery Replacement Part Options

* Lenovo BATTERY,15.36V,80Wh,4cell
** Part Number: 5B10W13953
** Manufacturer Part Number: SB10T83196
** Substitutes
*** Lenovo BATTERY, 15.36V, 80 Wh, 4cell
**** Model Name: L17C4P72
**** Part Number: 5B10V98091
* Internal,4c,80.4Wh,LiIon,SMP
** Part Number: 01YU911
** Manufacturer Part Number: SBB0U39964
** Substitutes
*** Lenovo BATTERY Internal, 4cell, 80.4 Wh
**** Model Name: L18M4P71
**** Part Number: 5B10W13900

Power Adapter:
* 135W slim tip (2-pin) AC adapter

=My Config=
* Product Name:<pre>20QVCTO1WW</pre>
* SKU Number:<pre>LENOVO_MT_20QV_BU_Think_FM_ThinkPad X1 Extreme 2nd</pre>
* Baseboard Version:<pre>SDK0R32862 WIN</pre>

* Black Paint (FHD Models) / Carbon-Fibre Weave (UHD Models)
* Windows 10 Home 64 (immediately replaced with Linux of course)

* 9th Generation Intel® Core™ i7-9750H Processor (2.60 GHz, up to 4.50 GHz with Turbo Boost, 6 Cores, 12 Threads, 12 MB Cache) - oh yeah!
* 64 GB (32 GB + 32 GB) DDR4 2666MHz - oh yeah!
* 512 GB PCIe SSD - (ordered with a 256 GB option, since upgraded to 512 GB version)
* 15.6" UHD (3840 x 2160) OLED, anti-reflective, anti-smudge, touchscreen with Dolby Vision™ HDR 500 with IR & 720p HD Camera, 400 nits - The most beautiful display you can get!
* Multitouch display - working
* NVIDIA® GeForce® GTX 1650 Max-Q 4GB GDDR5 - working
* Fingerprint Reader - working
* Backlit - US English - working
* IR & 720p HD - working
* Enabled Discrete TPM2.0 - not tested
* 4 cell Li-Polymer, 80Wh - working, but not tested
* 135watt AC - working
* Intel® AX200 Wi-Fi 6 802.11AX (2 x 2) - working
* Bluetooth® 5.0 - working (tested audio only)
* RJ45 Extension Connector - working

=Notes=
* There were some firmware updates available (see fwupdmgr) when I first received this machine that fixed Linux support for a few things. Everything I've tested so far is now working great.
* Full control of all LEDs is also working via the <tt>ec_sys</tt> module including modes: on, off, and blink for the following LEDs:
** Red LED on back of screen
** Power button LED
** Red Charge LED
** White Charge LED
** Fn button LED
** Microphone LED
** CAPS lock LED
* The one that is NOT working:
** Mute LED

* Screen backlight control is working via <tt>/sys/class/backlight/intel_backlight/brightness</tt> (min=0, max=2047)
* Keyboard LED backlight is configurable via <tt>/sys/class/leds/tpacpi::kbd_backlight/brightness</tt> (0=off, 1=medium, and 2=high)

=POST Keyboard Shortcuts=

You can access the boot options on your Lenovo ThinkPad X1 Extreme Gen 2 using these keyboard shortcuts:

* Boot Menu: Press F12 or Fn+F12 during bootup when the Lenovo logo appears.
* BIOS Settings: Press F1 or Fn+F1 during bootup when the Lenovo logo appears.
* Startup Interrupt Menu: Press Enter at the Lenovo logo to access a menu from which you can choose to enter BIOS.

In addition:

* Boot from USB: After pressing F12 to access the boot menu, use the arrow keys to select your bootable USB drive and press Enter. You may need to disable Secure Boot in the BIOS settings if you're experiencing issues booting from USB.
* Recovery Mode: If your system has Lenovo OneKey Recovery, you can access it by pressing the Novo button (usually a small button or pinhole with a backwards arrow icon). Then, select "System Recovery" from the Novo Button Menu.

Important Notes:

* Some models may require you to repeatedly tap the chosen key during the boot process.
* If your boot device is disabled in the BIOS, you cannot select it using the boot menu.
* Check your specific model's user guide for detailed instructions and additional options.

=Accessing with Broken Screen=

Yeah, this happened to me :-(

 

To access and boot a Lenovo Thinkpad X1 Extreme Gen 2 with a broken screen, you'll need to connect it to an external monitor and use the appropriate function keys to access the BIOS or boot menu to select the desired boot device.
Here's a step-by-step guide:

# Connect to an external monitor: Use an HDMI or DisplayPort cable to connect your Thinkpad X1 Extreme Gen 2 to an external monitor.
# Force boot to external display: When the computer starts booting, repeatedly press Fn+F7 (or just F7 if your keyboard doesn't have the function lock) to cycle through display options and force the output to the external monitor.
# Enter BIOS: Press the F1 key (or Fn+F1) repeatedly during startup to enter the BIOS settings. You may need to try a few times as the timing can be tricky.
# Access Boot Menu: If you need to select a specific boot device, press F12 or (Fn+F12) rapidly and repeatedly at the Lenovo logo during bootup to open the Windows Boot Manager, and choose your desired boot device from the list.
# Troubleshoot: If the external monitor doesn't show anything, try restarting and holding the power button for 15-20 seconds to clear any residual power, or try resetting the display mode in the BIOS.

Note: If you are unable to see anything on the external monitor, you can try booting into safe mode or using Lenovo diagnostics tools to help isolate the problem.

Web Browsers

2025-08-02T15:01:41Z

Jeremy: /* Extensions */

[[File:Meme_one_does_not_simply_change_ones_default_web_browser.jpg|frame|480px]]

'''Decisions, decisions...''' 
''The history of my web browser of choice is an interesting one. I'll leave it at the most recent change for now...''
 
''Although I had for some time been aware of the advantages Google's Chrome browser had over alternatives, It was only around 2015 (or so?) that I started putting much effort into switching from Firefox to Chrome, partly because for a long time there was no good extension for vertical tabs, but largely because I had a lot invested in the configuration of Firefox and the amazing ecosystem of extensions that already existed and wasn't looking forward to having to build up an equivalent level of extensions and configuration once again. Nevertheless, I played the dual browser game for a few years and once the vTabs extension was advanced enough and I got Chrome to look and behave the way I wanted (as much as possible, anyway), I finally made it my default browser... for the time being.''
 
''There are still many things I hate about Chrome. And there are still many things I love about Firefox. And I am always willing to re-evaluate things again in the future, but as a power user... one does not simply change one's default web browser (or any other software for that matter).''

=Google Chrome=
* Pros:
** Since Chrome started out more recently, they had the advantage of being able to write something from scratch. That is always a great advantage. They didn't have any users that would be annoyed by significant changes needing to be made. As with any software, backwards-compatibility (both with software and humans) is nice, but can be a hindrance on progression.
** Security in the design from the beginning -- lots of isolation between components
* Cons:
** RAM hungry -- since everything basically runs in a separate process, there's a lot more RAM usage
** Interface still looks like shit -- Seriously, I fucking hate the application menu. Whoever's idea that was needs to be punished severely! The "chrome" in Chrome is just damn fugly and bloated use of screen realestate. Why can't we customize it more --- like we can in Firefox???
** Even with the vTabs extension, I still can't remove the built-in horizontal tabs

==Information==
* View list of internal browser URLs (for configuring): [chrome://about/ chrome://about/]
* Flags: [chrome://flags/ chrome://flags/]

==Settings==
* Reader Mode chrome://flags/#enable-reader-mode Allows viewing of simplified web pages by selecting 'Customize and control Chrome'>'Distill page' – Mac, Windows, Linux, Chrome OS
* etc
* chrome://extensions/shortcuts - Configure Keyboard Shortcuts

==Apps==
To add to the confusion of naming things extensions, add-ons, and plug-ins, Google chose to add "apps" -- giving it two types of browser add-ons: extensions, and apps. Read about it here: [https://developer.chrome.com/webstore/apps_vs_extensions Extensions and Apps in the Chrome Web Store] if you are curious. You may not need to know the difference, but I'll put the Apps here just in case.
* [https://chrome.google.com/webstore/detail/secure-shell-app/pnhechapfaindjhompbnflcldabbghjo Secure Shell App] - Terminal emulator and SSH and SFTP client. ''Does the job, albeit leaving you pretty handicapped when it comes to limited keys that are able to pass through.''

==Extensions==
Extensions, Add-ons, Plug-ins, whatever you call them...
* Privacy
** [https://chrome.google.com/webstore/detail/ublock-origin/cjpalhdlnbpafiamejdnhcphjbkeiagm uBlock Origin] - Blocks privacy-invading web content
** [https://chrome.google.com/webstore/detail/adblock-plus-free-ad-bloc/cfhdojbkjhnklbpkdaibdccddilifddb Adblock Plus] - Blocker of privacy-invading web content and obnoxious advertisements ''Until the problem of obnoxious ads is solved, we must do this. I am not against content providers monetizing their work, but hijacking my web browser is not the way to do it. The solution is easy: We need a [https://en.wikipedia.org/wiki/Micropayment micropayment] system as ubiquitous as HTTP itself.''
* Security
** [https://chrome.google.com/webstore/detail/lastpass-free-password-ma/hdokiejnpimakedhajhdlcegeplioahd?hl=en-US LastPass] - Password Manager - a MUST HAVE!
* Usability
** [https://chrome.google.com/webstore/detail/chrome-regex-search/bpelaihoicobbkgmhcbikncnpacdbknn Chrome Regex Search] - Allows you to perform regular expression searches within web page contents - a MUST HAVE!
** [https://chrome.google.com/webstore/detail/toggle-tabs/amlniobkkcncmkejklnnhkbjkmhfjmla/related?hl=en Toggle Tabs] - Switch between the current and recent / last tabs - a MUST HAVE!
** [https://chrome.google.com/webstore/detail/vtabs/okpnlgbgcfchbicbhjmmhldhkbkfilce vTabs] - Vertical tabs on the left or right side of the browser window ''You may not see the power of vertical tabs until you use this extension. It allows you orient the web browser's tabs vertically, at the left or right side of the browser window (rather than horizontally at the top), for optimal visibility, functionality, and productivity -- A must have for any power user.''
** [https://chrome.google.com/webstore/detail/beeline-reader/ifjafammaookpiajfbedmacfldaiamgg BeeLine Reader] or [https://chrome.google.com/webstore/detail/mercury-reader/oknpjjbmpnndlpmnhmekjpocelpnlfdi Mercury Reader] - Reformat web pages to make them more readable ''A reader function like this is a must have if you read anything more than blurbs -- You are reading more than blurbs, aren't you? While Chrome does have a similar limited functionality built-in, it is very limited.''
** [https://chrome.google.com/webstore/detail/dark-reader/eimadpbcbfnmbkopoojfekhnkhdbieeh Dark Reader] - Changes the color scheme of websites to a dark mode ''Dark mode is superior to the obnoxious white backgrounds that are killing eyes everywhere. Better for your eyes and better for your device's battery in many cases (depending on the screen technology).''
** [https://chrome.google.com/webstore/detail/tampermonkey/dhdgffkkebhmkfjojejmpbldmpobfkfo Tampermonkey] - Modify any website as seen locally (Greasemonkey compatible) ''With this extension, you can write your own (or select from a public repository) scripts that enhance any web site's behavior and/or look and feel.''
* Development
** [https://chrome.google.com/webstore/detail/connection-forwarder/ahaijnonphgkgnkbklchdhclailflinn Connection Forwarder] - Open source Chromebook app for forwarding connections from/to different ports and interfaces (or to internal android IP)
* Other

=Firefox=
* View list of internal browser URLs (for configuring): [about:config about:config]

==Information==

==Settings==
* browser.sessionstore.interval See: https://www.servethehome.com/firefox-is-eating-your-ssd-here-is-how-to-fix-it/ Set to 150000 to store the session every 150000ms (150 seconds) to avoid writing to disk too often.

==Extensions==
Extensions, Add-ons, Plug-ins, whatever you call them...

* Privacy
** [https://addons.mozilla.org/en-US/firefox/addon/adblock-plus/ Adblock Plus] Block advertisements
** [https://addons.mozilla.org/en-US/firefox/addon/bugmenot/ BugMeNot] Login using shared accounts
** [https://addons.mozilla.org/en-us/firefox/addon/ublock-origin/ ublock origin] Block unwanted third-party scripts and cookies
** [https://addons.mozilla.org/en-us/firefox/addon/privacy-badger-firefox/ privacy badger] Protects your privacy
** [https://addons.mozilla.org/en-US/android/addon/ghostery/ Ghostery] Anti-tracking
** [https://addons.mozilla.org/En-us/firefox/addon/sharemenot/ ShareMeNot] Removes social sharing buttons and prevents their cookies
** [https://addons.mozilla.org/en-us/firefox/addon/https-everywhere/ HTTPS Everywhere] Enables HTTPS encryption automatically on sites that are known to support it, even when you type URLs or follow links that omit the https: prefix.

* Security
** [https://addons.mozilla.org/en-US/firefox/addon/lastpass/ LastPass Password Manager] Password Manager

* Usability
** Dark Reader
** [https://addons.mozilla.org/en-US/firefox/addon/switch-to-previous-active-tab/ Switch To Previous Active Tab & Reload All Tabs] Switch between current tab and previously active tab
** [https://addons.mozilla.org/en-US/firefox/addon/tree-style-tab/ Tree Style Tab] Tabs on the left
** [https://addons.mozilla.org/en-us/firefox/addon/fox-input/ fox input] Ctrl + i cycles focus through the page's text input boxes.
** [https://addons.mozilla.org/en-US/firefox/addon/classic-compact/ Classic Compact] Allows compact UI with advanced settings.
** [https://addons.mozilla.org/en-US/firefox/addon/classicthemerestorer/ Classic Theme Restorer] Squared tabs, appmenu, add-on bar, small button view and many more 'old' features for Firefox 29+ (Windows / MacOSX / Linux).
** [https://addons.mozilla.org/en-US/firefox/addon/switch-to-previous-active-tab/ Switch To Previous Active Tab & Reload All Tabs] Switch between current and last selected tab with key binding.
** [https://addons.mozilla.org/en-US/firefox/addon/smoothwheel/ SmoothWheel] Scroll smoothly
** [https://addons.mozilla.org/en-US/firefox/addon/show-profile/ Show Profile] Displays the name of the Firefox profile on window title or customized locations. Only useful if you have multiple Firefox profiles (I have many. [[Best_Practices_for_Improved_Security_and_Privacy#Using_Browser_Profiles|See why here]].).
** [https://addons.mozilla.org/en-us/firefox/addon/procon-latte/ ProCon Latte Content Filter] Simple whitelist / blacklist site filter. Not really secure, but can help prevent you from browsing sites you don't want to browse within a specific browser profile.
** [https://addons.mozilla.org/en-us/firefox/addon/stylish/ Stylish] Lets you easily install themes / CSS modifications for sites.
** [https://addons.mozilla.org/en-US/firefox/addon/restartless-restart/ Restartless Restart] Adds a quick method (File->Restart) to restart the browser.
** [https://addons.mozilla.org/en-US/firefox/addon/nuke-anything-enhanced/ Nuke Anything Enhanced] Allows you to hide almost anything via context menu 'Remove Object'. Great when you just want to print a portion of the page.
** [https://addons.palemoon.org/addon/lull-the-tabs/ Lull The Tabs] Keeps tabs from loading until you activate them.

* Development
** TotalValidator
** Firebug

* Other
** FoxyProxy
** Auto Tab Discard
** Bypass Paywalls Clean
** SponserBlock

** DownloadHelper
** FlashBlock
** GreaseMonkey / TamperMonkey
** RES
** Restartless Restart
** UAControl (requirement of pipelight)

=eLinks=
[http://elinks.or.cz/ eLinks] is an advanced and well-established feature-rich text mode web (HTTP/FTP/..) browser. ELinks can render both frames and tables, is highly customizable and can be extended via Lua or Guile scripts. It is quite portable and runs on a variety of platforms.
 ''This is a must-have for text-based access to the web.''

Admirable People

2025-07-31T18:16:40Z

Jeremy: /* Critical Thinkers */

=Admirable People=
I've become aware of many people that have, in some way or another, been a great source of knowledge, perspective, critical thinking, expert opinions, and support. In an effort to share with others what I have gained from having been aware of these people, I will document those details here. As always, feel free to contact me if you think you have any suggestions on who I should be following.
Generally, the people I admire and follow are intellectuals, critical thinkers, have knowledge and experience that IMHO should be shared.

These are the types of people I would trust to make important decisions in the best interest of the human race and planet Earth.

Many, many more to come...

==Spiritual Gurus==
* [https://www.eckharttolle.com/ Eckhart Tolle] Eckhart Tolle, German-born resident of Canada, is a spiritual teacher best known as the author of:
** [https://shop.eckharttolle.com/collections/books/products/the-power-of-now The Power of Now]
** [https://shop.eckharttolle.com/collections/books/products/a-new-earth-awakening-to-your-lifes-purpose A New Earth: Awakening to Your Life's Purpose]
** [https://www.youtube.com/user/EckhartTeachings Eckhart Tolle YouTube Channel]
* [https://tealswan.com/books/ Teal Swan] Teal Swan is an American spiritual teacher, speaker, and author described as a spiritual catalyst, who shares her gift of emotional intelligence with those of us less fortunate. IMHO She is one of the most genuine, honest, relatable, and straightforward communicators of such subjects.
** [https://tealswan.com/books/shadows-before-dawn-r3/ Shadows Before Dawn]
** [https://tealswan.com/books/anatomy-of-loneliness-r5/ Anatomy Of Loneliness]
** [https://www.youtube.com/user/TheSpiritualCatalyst Teal Swan YouTube Channel]
* [https://www.dalailama.com/ Dalai Lama] Dalai Lama is a title given by the Tibetan people for the foremost spiritual leader of the Gelug or "Yellow Hat" school of Tibetan Buddhism, the newest of the classical schools of Tibetan Buddhism. The 14th and current Dalai Lama is Tenzin Gyatso, who lives as a refugee in India.
** [https://www.dalailama.com/books Dalai Lama related Books]
** [https://www.youtube.com/user/gyalwarinpoche Dalai Lama YouTube Channel]
* [https://www.deepakchopra.com/ Deepak Chopra] Deepak Chopra is an Indian-American author, alternative-medicine advocate, and a prominent figure in the New Age movement.
** [https://www.deepakchopra.com/podcast Deepak Chopra's Daily Breath Podcast]
** [https://shop.chopra.com//books.html?acc=c4ca4238a0b923820dcc509a6f75849b Deepak Chopra Books]
* [https://mooji.org/mooji Mooji] Mooji is a Jamaican spiritual teacher based in the UK and Portugal. He gives talks (satsang) and retreats.
** [https://mooji.org/books Mooji Books]
** [https://www.youtube.com/user/Moojiji Moojiji YouTube Channel]

==Technologists==
* [https://en.wikipedia.org/wiki/Elon_Musk Elon Musk] Elon Musk is an engineer, industrial designer, and technology entrepreneur. He is the founder, CEO and chief engineer/designer of SpaceX, CEO and product architect of Tesla, Inc., founder of The Boring Company, co-founder of Neuralink, and co-founder and initial co-chairman of OpenAI.
** [https://twitter.com/elonmusk @elonmusk] on Twitter
* [https://www.schneier.com/ Bruce Schneier] Bruce Schneier is an American cryptographer, computer security professional, privacy specialist and writer. Schneier is a fellow at the Berkman Center for Internet & Society at Harvard Law School, and a program fellow at the New America Foundation's Open Technology Institute.
** [https://twitter.com/schneierblog @schneierblog] on Twitter
** [https://www.schneier.com/ Schneier on Security] (Blog)
** [https://amzn.to/3eOeJcF Books]
*** [https://amzn.to/2VwMGqD Data and Goliath: The Hidden Battles to Collect Your Data and Control Your World]
*** [https://amzn.to/2NJXZqY Click Here to Kill Everybody: Security and Survival in a Hyper-connected World]
* [https://edwardsnowden.com/ Edward Snowden] Edward Snowden, a technologist and journalist, is a former Central Intelligence Agency employee and subcontractor, is an American whistleblower who made public the various illegal mass surveillance operations of the US government in 2013.
** [https://twitter.com/Snowden @Snowden] on Twitter
* [https://en.wikipedia.org/wiki/William_Binney_(intelligence_official) Bill Binney] William Edward Binney is a former intelligence official with the United States National Security Agency and whistleblower.
* [https://github.com/torvalds Linus Torvalds] Linus Benedict Torvalds is a Finnish-American software engineer who is the creator and, historically, the principal developer of the Linux kernel, which is the kernel for Linux operating systems and other operating systems such as Android and Chrome OS.
** [https://github.com/torvalds Linus Torvalds Github Page]
** [https://www.linuxfoundation.org/ The Linux Foundation]
* [https://stallman.org/ Richard Stallman] RMS is THE go-to free software advocate. He is an American free software movement activist and programmer. He campaigns for software to be distributed in a manner such that its users receive the freedoms to use, study, distribute, and modify that software.
** [https://twitter.com/GNUplusLINUX @GNUplusLINUX] on Twitter

==Critical Thinkers==
* [https://robertreich.org/ Robert Reich]
* [https://www.rdwolff.com/ Richard D. Wolff] Richard David Wolff is an American economist, known for his work on economic methodology and class analysis. He is Professor Emeritus of Economics at the University of Massachusetts Amherst, and currently a Visiting Professor in the Graduate Program in International Affairs of the New School University in New York.
** [https://twitter.com/profwolff @profwolff] on Twitter
** [https://www.rdwolff.com/books Richard D. Wolff Books]
* [https://georgecarlin.com/ George Carlin] George Carlin was an American stand-up comedian, social critic, philosopher, actor, and author. Widely regarded as one of the most important and influential stand-up comics of all time, he was once dubbed "the dean of counterculture comedians."
* [http://www.billhicks.com/ Bill Hicks] - satirist, social critic, stand-up comedian Bill Hicks was an American stand-up comedian, social critic, satirist and musician. His material—encompassing a wide range of social issues including religion, politics, and philosophy—was controversial and often steeped in dark comedy.
* [https://michaelmoore.com/ Michael Moore] Michael Moore is an American documentary filmmaker, author and activist. His works frequently address the topics of globalization and capitalism.
* [https://www.lessig.org/ Lawrence Lessig] Lester Lawrence Lessig III is an American academic, attorney, and political activist. He is the Roy L. Furman Professor of Law at Harvard Law School and the former director of the Edmond J. Safra Center for Ethics at Harvard University.
** [https://www.lessig.org/books/ Lawrence Lessig Books]
** [https://equalcitizens.us/anotherway/ Another Way (Podcast) by Lawrence Lessig] 
* [https://www.russellbrand.com/ Russell Brand] Russell Edward Brand is an English comedian, actor, radio host, writer, and activist.
* [https://rickygervais.com/ Ricky Gervais] Ricky Gervais is an English comedian, actor, writer, producer, and director
* [https://chomsky.info/ Noam Chomsky] Avram Noam Chomsky is an American linguist, cognitive scientist, philosopher, historian, social critic, and political commentator. Sometimes called "the father of modern linguistics", Chomsky is also a major figure in analytic philosophy and one of the founders of the field of cognitive science.
* [https://wikileaks.org/ Julian Assange] Australian editor, publisher, and activist who founded WikiLeaks in 2006.
* [https://www.truthdig.com/author/chris_hedges/ Chris Hedges] Chris Hedges is a Truthdig columnist, a Pulitzer Prize-winning journalist, a New York Times best-selling author, a professor in the college degree program offered to New Jersey state prisoners by Rutgers University, and an ordained Presbyterian minister.
* <s>[https://www.jordanbpeterson.com/ Jordan B. Peterson] Canadian author, clinical psychologist, and scholar who is a professor of psychology at the University of Toronto. He is also an author, produces YouTube videos and podcasts, and has outspoken views on gender identity and masculinity.
** [https://www.youtube.com/channel/UCL_f53ZEJxp8TtlOkHwMV9Q Jordan B Peterson YouTube Channel]
** [https://www.jordanbpeterson.com/12-rules-for-life/ 12 Rules for Life: An Antidote to Chaos]
** [https://twitter.com/jordanbpeterson @jordanbpeterson] on Twitter
* [https://www.joerogan.com/ Joe Rogan] Joe is an American comedian and podcast host. He has also worked as a mixed martial arts color commentator, television host, and occasional actor. Rogan began a career in comedy in August 1988 in the Boston area.
** [https://twitter.com/joerogan @joerogan] on Twitter
** [https://www.youtube.com/user/PowerfulJRE Joe Rogan YouTube Channel] - Home of The Joe Rogan Experience Netcast</s>
* [https://www.howardbloom.net/ Howard Bloom] American author, radio show host, and intellectual
** [https://www.youtube.com/user/howbloom Howard Bloom YouTube Channel]
** [https://www.howardbloom.net/the-lucifer-principle/ The Lucifer Principle]
** [https://www.howardbloom.net/global-brain/ Global Brain: The Evolution of Mass Mind from the Big Bang to the 21st Century]
* [https://www.planetary.org/about/our-founders/ Carl Sagan] Carl Sagan was an American astronomer, cosmologist, astrophysicist, astrobiologist, author, science popularizer, and science communicator in astronomy and other natural sciences. He is best known as a science popularizer and communicator.
** [https://www.planetary.org/about/our-founders/ The Planetary Society]
* [https://www.haydenplanetarium.org/tyson/ Neil deGrasse Tyson] Neil deGrasse Tyson is an American astrophysicist, author, and science communicator. Since 1996, he has been the Frederick P. Rose Director of the Hayden Planetarium at the Rose Center for Earth and Space in New York City.
** [https://twitter.com/neiltyson @neiltyson] on Twitter

==Groups / NGOs / Nonprofits==
* [https://www.eff.org/ Electronic Frontier Foundation] The Electronic Frontier Foundation is an international non-profit digital rights group based in San Francisco, California. The foundation was formed in July 1990 by John Gilmore, John Perry Barlow and Mitch Kapor to promote Internet civil liberties.
** [https://twitter.com/EFF @EFF] on Twitter
* [https://www.fsf.org/ Free Software Foundation] The FSF is a 501(c)(3) non-profit organization founded by Richard Stallman on 4 October 1985 to support the free software movement, which promotes the universal freedom to study, distribute, create, and modify computer software.
** [https://twitter.com/fsf @fsf] on Twitter
** [https://www.planetary.org/ The Planetary Society] The Planetary Society is an American internationally active, non-governmental, nonprofit foundation. It is involved in research, public outreach, and political advocacy for engineering projects related to astronomy, planetary science, and space exploration.

Samsung Galaxy Tab S 10.5

2025-07-31T17:24:12Z

Jeremy:

[[File:Samsung Talaxy Tab S 10.5.jpg|480px]]

'''Ahhh, yes....''' 
''I'll add info here''
 
''This is a great tablet, still the best Super AMOLED screen of its size I've ever used.''
 

=Details=
The Galaxy Tab S is Samsung's 2014 Flagship Android tablet, taking direct aim at the high-range tablet market.

The Galaxy Tab S is available in two sizes, 8.4" and 10.5". I have the 10.5 " version.

They come in Wifi-only and Wifi + LTE versions. I have the Wifi-only version.

Internal storage comes in at either 16 GB or 32 GB options. I have the 16 GB version.

All come with 3 GB of RAM, a generous amount at the time.

The Galaxy Tab S was the first Samsung tablet to be fitted with the highly praised Super AMOLED display, which IMHO was and still is the defining characteristic of this device.

This can be expanded with a microSD card, up to 128GB.


Other features include:
* Circa: 2014
* My model: SM-T800 ( aka chagallwifi )
* Fingerprint reader
* Large capacity battery at 7900mAh battery.
* CPU: Samsung Exynos5420
** Octa-core:
** 4 x Cortex-A15 @ 1.9 GHz
** 4 x Cortex-A7 @ 1.3 GHz
* Cameras
** 8 MP front-facing and ??? rear-facing cameras
* RAM: 3 GB
* Internal Storage: 16 GiB
* Display
** Native Resolution: 2560 x 1600 pixels ( ~286 PPI pixel density -- Beautiful! )
** Default DPI: 320
** My favorite DPI: 220

=Controls=
* Recovery: With the device powered off, hold Home + Volume Up + Power.
* Download: With the device powered off, hold Home + Volume Down + Power.
=Operations=
==Reset Password==
Forgot your password? If you've got TWRP installed and your device is NOT encrypted, you can bypass the lock screen with the following:
Credit goes to [https://forum.xda-developers.com/member.php?u=6782742 adithyan25] at [https://forum.xda-developers.com/android/software-hacking/remove-lockscreen-recovery-t3530008 SSS XDA Developers' forum]
* Turn the device off
* Boot into recovery mode (XXX)
* Perform a TWRP Backup,just in case something goes wrong
* Use the TWRP terminal (or file manager if you must) to rename the following files:
** /data/system/password.key
** /data/system/pattern.key
** /data/system/locksettings.db
** /data/system/locksettings.db-shm
** /data/system/locksettings.db-wal I just appended .old and that worked for me.
* Reboot into the normal system
* The lock screen should now only require a swipe, no pattern or password

=Customizing=
* Root with: [http://forum.xda-developers.com/galaxy-tab-s/development/root-cf-autoroot-t800-t2802916 CF-AUTO Root]
* Flashing Tool: [https://github.com/Benjamin-Dobell/Heimdall Heimdall]
* Recovery Image / Tool [https://dl.twrp.me/chagalllte/ Team Win Recovery Project (TWRP) for chagalllte] - latest version 3.7.0 as of 2022-10-16 02:59:10 UTC
* ROMs
** [https://wiki.lineageos.org/devices/chagallwifi LineageOS] - The build for this device is no longer maintained; but it is still available for manual build.
** [https://lineageosroms.com/chagallwifi/ Download the last available / most recent build (2019-02-05): LineageOS 14.1 - Android 7.1.2 (Nougat) ]
* Source code (https://github.com/LineageOS/android_device_samsung_chagallwifi)
* Known builds -- somewhere out there
** lineage-14.1-20180722-UNOFFICIAL-chagallwifi.zip
** lineage-14.1-20201116-UNOFFICIAL-chagallwifi.zip
** lineage-14.1-20240220-UNOFFICIAL-chagallwifi.zip
* More recent unofficial builds (Android 10 [Lineage 17.1]) by [https://community.e.foundation/u/ronnz98 ronnz98] / [https://xdaforums.com/m/8224freak.8258181/ 8224freak]
** Forum post: https://community.e.foundation/t/unofficial-builds-samsung-galaxy-tab-s-10-5-lte-chagalllte-sm-t805-samsung-galaxy-tab-s-10-5-wifi-chagallwifi-sm-t800-for-eos-q/51779
** Sources and install instructions: https://forum.xda-developers.com/t/rom-unofficial-10-lineageos-17-1-for-samsung-galaxy-tab-s-sm-t700-sm-t705-sm-t800-sm-t800-sm-p600.4270943/
** Downloads: https://sourceforge.net/projects/eosbuildsronnz98/
* XDA Forums: https://xdaforums.com/f/galaxy-tab-s-android-development.3234/
** LineageOS 20 https://xdaforums.com/t/rom-unofficial-13-lineageos-20-for-samsung-galaxy-tab-s-10-5-sm-t805-sm-t800-chagalllte-chagallwifi-alpha.4577223/
** LineageOS 17 https://xdaforums.com/t/rom-unofficial-10-lineageos-17-1-for-samsung-galaxy-tab-s-sm-t700-sm-t705-sm-t800-sm-t800-sm-p600.4270943/
** LineageOS 14 https://xdaforums.com/t/rom-7-1-2-unofficial-lineageos-14-1-sm-t800.3545080/
** LineageOS 12 https://xdaforums.com/t/discontinued-rom-unofficial-ubertc-linaro-nvertigo-cm-12-1-for-sm-t800-16gb.3005540/

=Interacting=

* USB Vendor ID: 04E8
* USB Product ID: 685D
jeremy@latitude ~ $ dmesg -T | tail

[Sun Jun 4 07:40:14 2023] usb 1-1.4.4: USB disconnect, device number 35
[Sun Jun 4 07:40:17 2023] usb 1-1.4.4: new high-speed USB device number 36 using xhci_hcd
[Sun Jun 4 07:40:17 2023] usb 1-1.4.4: New USB device found, idVendor=04e8, idProduct=685d, bcdDevice= 2.1b
[Sun Jun 4 07:40:17 2023] usb 1-1.4.4: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[Sun Jun 4 07:40:17 2023] usb 1-1.4.4: Product: Gadget Serial
[Sun Jun 4 07:40:17 2023] usb 1-1.4.4: Manufacturer: SAMSUNG

jeremy@latitude ~ $ lsusb | grep -i 04E8:685D

Bus 001 Device 038: ID 04e8:685d Samsung Electronics Co., Ltd GT-I9100 Phone [Galaxy S II] (Download mode)

jeremy@latitude ~ $ lsusb -t
...
/: Bus 01.Port 1: Dev 1, Class=root_hub, Driver=xhci_hcd/16p, 480M
|__ Port 1: Dev 2, If 0, Class=Hub, Driver=hub/5p, 480M
|__ Port 5: Dev 7, If 0, Class=, Driver=, 480M
|__ Port 4: Dev 31, If 0, Class=Hub, Driver=hub/5p, 480M
|__ Port 4: Dev 38, If 1, Class=CDC Data, Driver=, 480M
|__ Port 4: Dev 38, If 0, Class=Communications, Driver=, 480M
...

Motorola Backflip (MB300)

2025-07-31T17:23:43Z

Jeremy:

[[File:Motorolla-backflip.jpg|480px]]

IMEI: 356693030519724

File:Motorolla-backflip.jpg

2025-07-31T17:18:11Z

Jeremy: Motorolla Backflip Mobile Phone

== Summary ==
Motorolla Backflip Mobile Phone

Samsung Galaxy Tab S 10.5" (SM-T800)

2025-07-22T21:01:48Z

Jeremy: /* Battery Details */

=Resources=
* [https://www.samsung.com/us/business/support/owners/product/galaxy-tab-s-10-5-wi-fi/ Official Samgsung Page for Samsung Galaxy Tab S 10.5"] - Good for them for still having this page available!
* [https://wiki.lineageos.org/devices/chagallwifi/ LineageOS page]
* [https://www.gsmarena.com/samsung_galaxy_tab_s_10_5-6438.php GSM Arena Page]
* [https://github.com/exynos5420/android_kernel_samsung_exynos5420 Linux Kernel Source Code for the Samsung Exynos 5420 Chipset]
* [https://xdaforums.com/t/rom-unofficial-10-lineageos-17-1-for-samsung-galaxy-tab-s-10-5-wifi-sm-t800-chagallwifi.4388165/ XDA Forums >> Unofficial LineageOS 17.1 ROM for Samsung Galaxy Tab S 10.5 WiFi (SM-T800 - chagallwifi)]
* [https://xdaforums.com/t/rom-unofficial-10-lineageos-17-1-for-samsung-galaxy-tab-s-sm-t700-sm-t705-sm-t800-sm-t800-sm-p600.4270943/ XDA Forums >> Unofficial LineageOS 17.1 ROM for Samsung Galaxy Tab S (SM-T700, SM-T705, SM-T800, SM-T800, SM-P600)]
* Latest Custom ROM Build ( as of 2025-06-14 ) : Samsung T700/5 T800/5 LineageOS-17.1-2-1-2025 ( [https://github.com/HazouPH/android_device_samsung_universal5420-common/releases/download/1.9/lineage-17.1-20250102-UNOFFICIAL-chagallwifi.zip lineage-17.1-20250102-UNOFFICIAL-chagallwifi.zip] )
** WARNING: !!! Lots of things broken on this ROM including camera, fingerprint reader, GApps, etc.!
** [https://github.com/HazouPH/android_device_samsung_universal5420-common Source code of this ROM (android_device_samsung_universal5420-common) by HazouPH]
* Latest Custom ROM Build ( as of 2025-06-21 ) : [https://xdaforums.com/t/rom-unofficial-13-lineageos-20-for-samsung-galaxy-tab-s-10-5-sm-t805-sm-t800-chagalllte-chagallwifi-alpha.4577223/ LineageOS 20 for Samsung Galaxy Tab S 10.5 (SM-T805/SM-T800 - chagalllte/chagallwifi )] - Alpha
** WARNING: !!! Lots of things broken on this ROM including camera, fingerprint reader, Infrared, and there is a memory leak with Chrome browsers!
** [https://github.com/retiredcrave/android_kernel_samsung_exynos5420/tree/lineage-21.0 Source code of this RPM ( android_kernel_samsung_exynos5420 ) by retiredtab
* [https://dl.twrp.me/chagalllte/ TWRP for chagalllte] -- Latest version as of 2025-06-21 is [https://dl.twrp.me/chagalllte/twrp-3.7.0_9-0-chagalllte.img.html twrp-3.7.0_9-0-chagalllte.img]

=Battery Details=
* Part Number: AA2G@08xS/7-B
* Battery Model #: EB-BT800FBU
* Watt Hours: 30.02 Wh
* Voltage: 3.8 V
* Milliamp Hours: 7900 mAh
* iFixit Part Number: IF252-015-1
* Battery for Sale
** iFixIt: [https://www.ifixit.com/products/galaxy-tab-s-10-5-battery Galaxy Tab S 10.5 Battery] ( $14.99 as of 2025-06-24 but OUT OF STOCK! )
** Amazon: [https://www.amazon.com/7900mAh-30-02Wh-Battery-EB-BT800FBU-Samsung/dp/B07CNZMNQS EB-BT800FBU EB-BT800FBC Tablet Battery Replacement for Samsung Galaxy Tab S 10.5 SM-T800 SM-T801 SM-T805 SM-T805C SM-T805W T805Y T805M SM-T807 SM-T807A SM-T807P SM-T807V T807T(3.8V 7900mAh)] ( $18 as of 2025-06-24 and IN STOCK )

=Filesystem Support=
This is for LineageOS with kernel <tt>Linux localhost 3.4.113+ #1 SMP PREEMPT Thu Jan 2 20:32:35 CET 2025 armv7l</tt> 

* rootfs
* bdev
* proc
* cgroup
* tmpfs
* binfmt_misc
* debugfs
* sockfs
* pipefs
* anon_inodefs
* configfs
* devpts
* ext2
* ext3
* ext4
* cramfs
* ramfs
* exfat
* sdfat
* vfat
* ecryptfs
* sdcardfs
* ntfs
* romfs
* fuseblk
* fuse
* fusectl
* f2fs
* selinuxfs
* functionfs
* oprofilefs

This kernel does not support the metadata__csum option for the ext4 filesystem. So, when making the filesystem on an SD card, you must explicitly disable that option like so:
sudo mkfs.ext4 -L "SM-T800 SD Card" -O ^metadata_csum /dev/sda1

=Battery Replacement=
Battery Replacement Guides for the Samsung SM-T800:
* [https://www.youtube.com/watch?v=s46NaOnx3iM How to Replace Your Samsung Galaxy Tab S 10.5 SM-T800 Battery] by [https://www.youtube.com/@NewLife2OldStuff NewLife2OldStuff]
* iFixIt [https://www.ifixit.com/Guide/Galaxy+Tab+S+10.5+Battery+Replacement/50302 Galaxy Tab S 10.5 Battery Replacement]

=Getting Model/Model Variant/Product Name/Bootloader Version/Android Release/Serial Number=
All of this information can be gotten from an adb shell. From your machine with the tablet connected via USB. 
Don't ask me why there are so many different identifiers, but here they are:

# Model
~ # getprop ro.product.model
SM-T800

# Model Variant
~ # getprop ro.product.device
chagallwifi

# Product Name
~ # getprop ro.product.name
chagallwifixx

# Bootloader version
~ # getprop ro.boot.bootloader
T800XXU1ANFB

# Android version/release
~ # getprop ro.build.version.release
6.0.1

# Serial number ( Not a real serial number below but this is the format )
~ # getprop ro.serialno
023418ad419c1751

And there's a lot more you can get just by running <tt>getprop</tt>
<pre>
~ # getprop | grep 'ro.boot\|ro.build\|ro.product'
[ro.boot.bootdevice]: [dw_mmc.0]
[ro.boot.bootloader]: [T800XXU1ANFB]
[ro.boot.console]: [ttySAC2]
[ro.boot.debug_level]: [0x4f4c]
[ro.boot.emmc_checksum]: [3]
[ro.boot.hardware]: [universal5420]
[ro.boot.odin_download]: [1]
[ro.boot.sec_atd.tty]: [/dev/ttySAC2]
[ro.boot.selinux]: [permissive]
[ro.boot.serialno]: [023418ad419c1751]
[ro.boot.warranty_bit]: [1]
[ro.bootimage.build.date.utc]: [1617650748]
[ro.bootimage.build.date]: [Mon Apr 5 19:25:48 UTC 2021]
[ro.bootimage.build.fingerprint]: [samsung/omni_chagallwifi/chagallwifi:6.0.1/MOB31K/26:eng/test-keys]
[ro.bootloader]: [T800XXU1ANFB]
[ro.bootmode]: [unknown]
[ro.build.characteristics]: [default]
[ro.build.date.utc]: [0]
[ro.build.date]: [Mon Apr 5 19:24:56 UTC 2021]
[ro.build.display.id]: [omni_chagallwifi-eng 6.0.1 MOB31K 26 test-keys]
[ro.build.flavor]: [omni_chagallwifi-eng]
[ro.build.host]: [93f70f4836da]
[ro.build.id]: [MOB31K]
[ro.build.tags]: [test-keys]
[ro.build.type]: [eng]
[ro.build.user]: [jenkins]
[ro.build.version.all_codenames]: [REL]
[ro.build.version.base_os]: []
[ro.build.version.codename]: [REL]
[ro.build.version.incremental]: [26]
[ro.build.version.preview_sdk]: []
[ro.build.version.release]: [6.0.1]
[ro.build.version.sdk]: [23]
[ro.build.version.security_patch]: [2016-11-05]
[ro.product.board]: [universal5420]
[ro.product.brand]: [samsung]
[ro.product.cpu.abi2]: [armeabi]
[ro.product.cpu.abi]: [armeabi-v7a]
[ro.product.cpu.abilist32]: [armeabi-v7a,armeabi]
[ro.product.cpu.abilist64]: []
[ro.product.cpu.abilist]: [armeabi-v7a,armeabi]
[ro.product.device]: [chagallwifi]
[ro.product.locale]: [en-US]
[ro.product.manufacturer]: [samsung]
[ro.product.model]: [SM-T800]
[ro.product.name]: [chagallwifixx]
</pre>

=Downloading Stock Firmware=
Stock firmware can be downloaded here: https://samfw.com/firmware/SM-T800 
Select the correct firmware with your bootloader variant ( T800XXU1ANFB from above )

=Extracting Stock Firmware=
<pre>

# ls -l

-rw-rw-r-- 1 jeremy jeremy 1,504,476,028 2025-06-24 11:56:43 SAMFW.COM_SM-T800_ITV_T800XXU1CPK1.zip

# unzip SAMFW.COM_SM-T800_ITV_T800XXU1CPK1.zip

# ls -l

-rw-rw-r-- 1 jeremy jeremy 1,504,476,028 2025-06-24 11:56:43 SAMFW.COM_SM-T800_ITV_T800XXU1CPK1.zip
-rw-rw-r-- 1 jeremy jeremy 2,452,910,149 2016-11-07 13:22:28 T800XXU1CPK1_T800ITV1CPI1_HOME.tar.md5

# tar xvf T800XXU1CPK1_T800ITV1CPI1_HOME.tar.md5
boot.img
cache.img
hidden.img
recovery.img
sboot.bin
system.img
tar: A lone zero block at 4790840

# ls -l
total 6,410,313,728
-rwx------ 1 jeremy jeremy 7,911,696 2016-11-04 00:53:42 boot.img
-rwx------ 1 jeremy jeremy 19,169,568 2016-11-04 00:53:42 cache.img
-rwx------ 1 jeremy jeremy 216,867,264 2016-11-04 00:53:42 hidden.img
-rwx------ 1 jeremy jeremy 8,397,072 2016-11-04 00:53:42 recovery.img
-rw-rw-r-- 1 jeremy jeremy 1,504,476,028 2025-06-24 11:56:43 SAMFW.COM_SM-T800_ITV_T800XXU1CPK1.zip
-rwx------ 1 jeremy jeremy 1,148,160 2016-11-04 00:53:43 sboot.bin
-rwx------ 1 jeremy jeremy 2,199,411,328 2016-11-04 00:53:43 system.img
-rw-rw-r-- 1 jeremy jeremy 2,452,910,149 2016-11-07 13:22:28 T800XXU1CPK1_T800ITV1CPI1_HOME.tar.md5

</pre>

=Get Partition Information Table=

<pre>
# heimdall download-pit --output sm-t800.pit
Heimdall v2.0.2

Copyright (c) 2010-2017 Benjamin Dobell, Glass Echidna
https://www.glassechidna.com.au/

This software is provided free of charge. Copying and redistribution is
encouraged.

If you appreciate this software and you would like to support future
development please consider donating:
https://www.glassechidna.com.au/donate/

Initialising connection...
Detecting device...
Claiming interface...
Initialising protocol...
Resetting device...
Protocol initialisation successful.

Beginning session...

Some devices may take up to 2 minutes to respond.
Please be patient!

Session begun.

Downloading device's PIT file...
PIT file download successful.

Ending session...
Rebooting device...
Releasing device interface...

# heimdall print-pit --file sm-t800.pit | tee sm-t800.pit.txt
Heimdall v2.0.2

Copyright (c) 2010-2017 Benjamin Dobell, Glass Echidna
https://www.glassechidna.com.au/

This software is provided free of charge. Copying and redistribution is
encouraged.

If you appreciate this software and you would like to support future
development please consider donating:
https://www.glassechidna.com.au/donate/

--- PIT Header ---
Entry Count: 24
Unknown string: COM_TAR2
CPU/bootloader tag: LSI5410
Logic unit count: 0

--- Entry #0 ---
Binary Type: 0 (AP)
Device Type: 2 (MMC)
Identifier: 80
Attributes: 2 (STL Read-Only)
Update Attributes: 1 (FOTA)
Partition Block Size/Offset: 0
Partition Block Count: 2046
File Offset (Obsolete): 0
File Size (Obsolete): 0
Partition Name: BOOTLOADER
Flash Filename: sboot.bin
FOTA Filename:

--- Entry #1 ---
Binary Type: 0 (AP)
Device Type: 2 (MMC)
Identifier: 70
Attributes: 5 (Read/Write)
Update Attributes: 1 (FOTA)
Partition Block Size/Offset: 34
Partition Block Count: 16
File Offset (Obsolete): 0
File Size (Obsolete): 0
Partition Name: PIT
Flash Filename: -
FOTA Filename:

--- Entry #2 ---
Binary Type: 0 (AP)
Device Type: 2 (MMC)
Identifier: 71
Attributes: 5 (Read/Write)
Update Attributes: 1 (FOTA)
Partition Block Size/Offset: 50
Partition Block Count: 2048
File Offset (Obsolete): 0
File Size (Obsolete): 0
Partition Name: MD5HDR
Flash Filename: md5.img
FOTA Filename:

--- Entry #3 ---
Binary Type: 0 (AP)
Device Type: 2 (MMC)
Identifier: 1
Attributes: 5 (Read/Write)
Update Attributes: 1 (FOTA)
Partition Block Size/Offset: 8192
Partition Block Count: 8192
File Offset (Obsolete): 0
File Size (Obsolete): 0
Partition Name: BOTA0
Flash Filename: -
FOTA Filename:

--- Entry #4 ---
Binary Type: 0 (AP)
Device Type: 2 (MMC)
Identifier: 2
Attributes: 5 (Read/Write)
Update Attributes: 1 (FOTA)
Partition Block Size/Offset: 16384
Partition Block Count: 8192
File Offset (Obsolete): 0
File Size (Obsolete): 0
Partition Name: BOTA1
Flash Filename: -
FOTA Filename:

--- Entry #5 ---
Binary Type: 0 (AP)
Device Type: 2 (MMC)
Identifier: 3
Attributes: 5 (Read/Write)
Update Attributes: 5 (FOTA)
Partition Block Size/Offset: 24576
Partition Block Count: 40960
File Offset (Obsolete): 0
File Size (Obsolete): 0
Partition Name: EFS
Flash Filename: efs.img
FOTA Filename:

--- Entry #6 ---
Binary Type: 0 (AP)
Device Type: 2 (MMC)
Identifier: 4
Attributes: 5 (Read/Write)
Update Attributes: 1 (FOTA)
Partition Block Size/Offset: 65536
Partition Block Count: 8192
File Offset (Obsolete): 0
File Size (Obsolete): 0
Partition Name: m9kefs1
Flash Filename: m9kefs1.bin
FOTA Filename:

--- Entry #7 ---
Binary Type: 0 (AP)
Device Type: 2 (MMC)
Identifier: 5
Attributes: 5 (Read/Write)
Update Attributes: 1 (FOTA)
Partition Block Size/Offset: 73728
Partition Block Count: 8192
File Offset (Obsolete): 0
File Size (Obsolete): 0
Partition Name: m9kefs2
Flash Filename: m9kefs2.bin
FOTA Filename:

--- Entry #8 ---
Binary Type: 0 (AP)
Device Type: 2 (MMC)
Identifier: 6
Attributes: 5 (Read/Write)
Update Attributes: 1 (FOTA)
Partition Block Size/Offset: 81920
Partition Block Count: 8192
File Offset (Obsolete): 0
File Size (Obsolete): 0
Partition Name: m9kefs3
Flash Filename: m9kefs3.bin
FOTA Filename:

--- Entry #9 ---
Binary Type: 0 (AP)
Device Type: 2 (MMC)
Identifier: 7
Attributes: 5 (Read/Write)
Update Attributes: 5 (FOTA)
Partition Block Size/Offset: 90112
Partition Block Count: 8192
File Offset (Obsolete): 0
File Size (Obsolete): 0
Partition Name: CARRIER
Flash Filename: carrier.img
FOTA Filename:

--- Entry #10 ---
Binary Type: 0 (AP)
Device Type: 2 (MMC)
Identifier: 8
Attributes: 5 (Read/Write)
Update Attributes: 1 (FOTA)
Partition Block Size/Offset: 98304
Partition Block Count: 16384
File Offset (Obsolete): 0
File Size (Obsolete): 0
Partition Name: PARAM
Flash Filename: param.bin
FOTA Filename:

--- Entry #11 ---
Binary Type: 0 (AP)
Device Type: 2 (MMC)
Identifier: 9
Attributes: 5 (Read/Write)
Update Attributes: 1 (FOTA)
Partition Block Size/Offset: 114688
Partition Block Count: 16384
File Offset (Obsolete): 0
File Size (Obsolete): 0
Partition Name: BOOT
Flash Filename: boot.img
FOTA Filename:

--- Entry #12 ---
Binary Type: 0 (AP)
Device Type: 2 (MMC)
Identifier: 10
Attributes: 5 (Read/Write)
Update Attributes: 1 (FOTA)
Partition Block Size/Offset: 131072
Partition Block Count: 20480
File Offset (Obsolete): 0
File Size (Obsolete): 0
Partition Name: RECOVERY
Flash Filename: recovery.img
FOTA Filename:

--- Entry #13 ---
Binary Type: 0 (AP)
Device Type: 2 (MMC)
Identifier: 11
Attributes: 5 (Read/Write)
Update Attributes: 1 (FOTA)
Partition Block Size/Offset: 151552
Partition Block Count: 20480
File Offset (Obsolete): 0
File Size (Obsolete): 0
Partition Name: OTA
Flash Filename: -
FOTA Filename:

--- Entry #14 ---
Binary Type: 0 (AP)
Device Type: 2 (MMC)
Identifier: 12
Attributes: 5 (Read/Write)
Update Attributes: 1 (FOTA)
Partition Block Size/Offset: 172032
Partition Block Count: 8192
File Offset (Obsolete): 0
File Size (Obsolete): 0
Partition Name: CDMA-RADIO
Flash Filename: modem_cdma.bin
FOTA Filename:

--- Entry #15 ---
Binary Type: 0 (AP)
Device Type: 2 (MMC)
Identifier: 13
Attributes: 5 (Read/Write)
Update Attributes: 1 (FOTA)
Partition Block Size/Offset: 180224
Partition Block Count: 40960
File Offset (Obsolete): 0
File Size (Obsolete): 0
Partition Name: RADIO
Flash Filename: modem.bin
FOTA Filename:

--- Entry #16 ---
Binary Type: 0 (AP)
Device Type: 2 (MMC)
Identifier: 14
Attributes: 5 (Read/Write)
Update Attributes: 5 (FOTA)
Partition Block Size/Offset: 221184
Partition Block Count: 8192
File Offset (Obsolete): 0
File Size (Obsolete): 0
Partition Name: TOMBSTONES
Flash Filename: tombstones.img
FOTA Filename:

--- Entry #17 ---
Binary Type: 0 (AP)
Device Type: 2 (MMC)
Identifier: 15
Attributes: 5 (Read/Write)
Update Attributes: 5 (FOTA)
Partition Block Size/Offset: 229376
Partition Block Count: 8192
File Offset (Obsolete): 0
File Size (Obsolete): 0
Partition Name: TDATA
Flash Filename: tdata.img
FOTA Filename:

--- Entry #18 ---
Binary Type: 0 (AP)
Device Type: 2 (MMC)
Identifier: 16
Attributes: 5 (Read/Write)
Update Attributes: 5 (FOTA)
Partition Block Size/Offset: 237568
Partition Block Count: 24576
File Offset (Obsolete): 0
File Size (Obsolete): 0
Partition Name: PERSDATA
Flash Filename: persdata.img
FOTA Filename:

--- Entry #19 ---
Binary Type: 0 (AP)
Device Type: 2 (MMC)
Identifier: 17
Attributes: 5 (Read/Write)
Update Attributes: 1 (FOTA)
Partition Block Size/Offset: 262144
Partition Block Count: 8192
File Offset (Obsolete): 0
File Size (Obsolete): 0
Partition Name: RESERVED2
Flash Filename: -
FOTA Filename:

--- Entry #20 ---
Binary Type: 0 (AP)
Device Type: 2 (MMC)
Identifier: 18
Attributes: 5 (Read/Write)
Update Attributes: 5 (FOTA)
Partition Block Size/Offset: 270336
Partition Block Count: 4935680
File Offset (Obsolete): 0
File Size (Obsolete): 0
Partition Name: SYSTEM
Flash Filename: system.img
FOTA Filename:

--- Entry #21 ---
Binary Type: 0 (AP)
Device Type: 2 (MMC)
Identifier: 19
Attributes: 5 (Read/Write)
Update Attributes: 5 (FOTA)
Partition Block Size/Offset: 5206016
Partition Block Count: 409600
File Offset (Obsolete): 0
File Size (Obsolete): 0
Partition Name: CACHE
Flash Filename: cache.img
FOTA Filename:

--- Entry #22 ---
Binary Type: 0 (AP)
Device Type: 2 (MMC)
Identifier: 20
Attributes: 5 (Read/Write)
Update Attributes: 5 (FOTA)
Partition Block Size/Offset: 5615616
Partition Block Count: 675840
File Offset (Obsolete): 0
File Size (Obsolete): 0
Partition Name: HIDDEN
Flash Filename: hidden.img
FOTA Filename:

--- Entry #23 ---
Binary Type: 0 (AP)
Device Type: 2 (MMC)
Identifier: 21
Attributes: 5 (Read/Write)
Update Attributes: 5 (FOTA)
Partition Block Size/Offset: 6291456
Partition Block Count: 0
File Offset (Obsolete): 0
File Size (Obsolete): 0
Partition Name: USERDATA
Flash Filename: userdata.img
FOTA Filename: remained

# Get partition names from the full PIT text file:
# grep -i 'boot\|system\|recovery\|tz' sm-t800.pit.txt
CPU/bootloader tag: LSI5410
Partition Name: BOOTLOADER
Flash Filename: sboot.bin
Partition Name: BOOT
Flash Filename: boot.img
Partition Name: RECOVERY
Flash Filename: recovery.img
Partition Name: SYSTEM
Flash Filename: system.img

</pre>

=Installing Stock Firmware=
Using the matching partition names from above and with the tablet in download mode, run heimdall to install them:

<pre>
# heimdall flash \
--BOOT boot.img \
--SYSTEM system.img \
--RECOVERY recovery.img \
--BOOTLOADER sboot.bin \
--CACHE cache.img \
--HIDDEN hidden.img

</pre>

If you get an error like this:
<pre>
ERROR: BOOTLOADER partition is too small for given file. Use --skip-size-check to flash anyways.
Ending session...
Rebooting device...
Releasing device interface...
</pre>

Then, if you are sure the file is the correct one and not corrupt, run again with the <tt>--skip-size-check</tt> argument:
<pre>
# heimdall flash \
--BOOT boot.img \
--SYSTEM system.img \
--RECOVERY recovery.img \
--BOOTLOADER sboot.bin \
--CACHE cache.img \
--HIDDEN hidden.img \
--skip-size-check

Heimdall v2.0.2

Copyright (c) 2010-2017 Benjamin Dobell, Glass Echidna
https://www.glassechidna.com.au/

This software is provided free of charge. Copying and redistribution is
encouraged.

If you appreciate this software and you would like to support future
development please consider donating:
https://www.glassechidna.com.au/donate/

Initialising connection...
Detecting device...
Claiming interface...
Initialising protocol...
Resetting device...
Protocol initialisation successful.
...

</pre>

* Reboot (it will take longer than usual the first time after flashing).
* Run a system update from within Android itself ( Settings-> General-> About Phone -> Manually Check for Updates ) and then reboot again.
* At this point, you should be in good shape to upgrade to a custom ROM ( LineageOS, etc ).

Terminals

2025-07-10T17:34:34Z

Jeremy: /* Enabling Key Bindings */

=Linux Virtual Console=

==Enabling Key Bindings==
One annoyance I have with the default configuration of the virtual console is that it doesn't enable the Ctrl+Left and Ctrl+Right key bindings to move to the previous/next word. Here is how you can do that: 
* Determine the escape sequences that are being generated when you press Ctrl+Left and Ctrl+Right. Within a virtual terminal, run the <tt>cat</tt> command and then: press Ctrl+Left, a few spaces, then Ctrl+Right. The escape sequences will be output. Make a note of those. Then press Ctrl+C to exit. For example:
<pre>
jeremy@thinkpadx1gen6 ~ $ cat
^[[D ^[[C
</pre>

* In your <tt>~/.inputrc</tt> file, add the following (replacing the escape sequences below with your own if they are different):
<pre>

# Allow ctrl+left and ctrl+right keys to move to previous/next word in virtual terminal
# The \e here represents the beginning escape sequence: ^[

# Ctrl + Left
"\e[D": backward-word

# Ctrl + Right
"\e[C": forward-word

</pre>
Note that the key sequences being sent by those key combinations are different within an X11 session. In my case the X11 bindings are already set up by default, but here they are for reference:
<pre>

# Allow ctrl+left and ctrl+right keys to move to previous/next word in X11

"\e[1;5D": backward-word

"\e[1;5C": forward-word

</pre>
The changes will take effect the next time you open a terminal. If you want the changes to take effect immediately, run this:
<pre>
bind -f ~/.inputrc
</pre>
To have this apply to all users (and to see the default configuration), take a look at and/or modify this file: <tt>/etc/inputrc
</tt>

==Framebuffer Scrollback Buffer==
To increase the size of the framebuffer scrollback buffer, use the fbcon kernel parameter:
fbcon=scrollback:Nk
Where N is a number. The default: N=32k

=Serial Terminals=
=Dealing with a serial TTY smaller than your terminal=

* Open tmux
* Press Ctrl+B q to see the tmux pane size (e.g. 190x41)
* Open the serial connection (e.g. with minicom or screen)
* Set TTY rows and cols:<pre>stty rows 41 cols 190</pre>

Alternatively, you can use a script to dynamically fix this. I have <tt>fixtty.sh</tt>:
<pre>
#!/bin/sh
#
# fixtty.sh
# Fixes the terminal size of a serial terminal

# Arguments:
# -v Enable verbose mode
if [ "$1" = "-v" ] ; then
VERBOSE=1
else
VERBOSE=0
fi

if [ "$TERM" = "vt220" ] ; then
echo Suggestion: set TERM to something more useful like linux, xterm, xterm-256color, etc
fi

old=$(stty -g)
if [ $VERBOSE -eq 1 ] ; then
echo "Old TTY settings: '$old'"
fi

stty raw -echo min 0 time 5

if [ -f /dev/tty ] ; then
exit 0
fi

printf '\0337\033[r\033[999;999H\033[6n\0338' > /dev/tty
IFS='[;R' read -r _ rows cols _ < /dev/tty

stty "$old"

if [ $VERBOSE -eq 1 ] ; then
echo "executing 'stty cols '$cols' rows '$rows'"
fi

stty cols "$cols" rows "$rows"
exit $?
</pre>

Terminals

2025-07-10T17:32:17Z

Jeremy: /* Dealing with a serial TTY smaller than your terminal */

=Linux Virtual Console=

==Enabling Key Bindings==
One annoyance I have with the default configuration of the virtual console is that it doesn't enable the Ctrl+Left and Ctrl+Right key bindings to move to the previous/next word. Here is how you can do that: 
* Determine the escape sequences that are being generated when you press Ctrl+Left and Ctrl+Right. Within a virtual terminal, run the <tt>cat</tt> command and then: press Ctrl+Left, a few spaces, then Ctrl+Right. The escape sequences will be output. Make a note of those. Then press Ctrl+C to exit. For example:
<pre>
jeremy@thinkpadx1gen6 ~ $ cat
^[[D ^[[C
</pre>

* In your <tt>~/.inputrc</tt> file, add the following (replacing the escape sequences below with your own if they are different):
<pre>

# Allow ctrl+left and ctrl+right keys to move to previous/next word in virtual terminal
# The \e here represents the beginning escape sequence: ^[

# Ctrl + Left
"\e[D": backward-word

# Ctrl + Right
"\e[C": forward-word

</pre>
Note that the key sequences being sent by those key combinations are different within an X11 session. In my case the X11 bindings are already set up by default, but here they are for reference:
<pre>

# Allow ctrl+left and ctrl+right keys to move to previous/next word in X11

"\e[1;5D": backward-word

"\e[1;5C": forward-word

</pre>
The changes will take effect the next time you open a terminal. If you want the changes to take effect immediately, run this:
<pre>
bind -f ~/.inputrc
</pre>

==Framebuffer Scrollback Buffer==
To increase the size of the framebuffer scrollback buffer, use the fbcon kernel parameter:
fbcon=scrollback:Nk
Where N is a number. The default: N=32k

=Serial Terminals=
=Dealing with a serial TTY smaller than your terminal=

* Open tmux
* Press Ctrl+B q to see the tmux pane size (e.g. 190x41)
* Open the serial connection (e.g. with minicom or screen)
* Set TTY rows and cols:<pre>stty rows 41 cols 190</pre>

Alternatively, you can use a script to dynamically fix this. I have <tt>fixtty.sh</tt>:
<pre>
#!/bin/sh
#
# fixtty.sh
# Fixes the terminal size of a serial terminal

# Arguments:
# -v Enable verbose mode
if [ "$1" = "-v" ] ; then
VERBOSE=1
else
VERBOSE=0
fi

if [ "$TERM" = "vt220" ] ; then
echo Suggestion: set TERM to something more useful like linux, xterm, xterm-256color, etc
fi

old=$(stty -g)
if [ $VERBOSE -eq 1 ] ; then
echo "Old TTY settings: '$old'"
fi

stty raw -echo min 0 time 5

if [ -f /dev/tty ] ; then
exit 0
fi

printf '\0337\033[r\033[999;999H\033[6n\0338' > /dev/tty
IFS='[;R' read -r _ rows cols _ < /dev/tty

stty "$old"

if [ $VERBOSE -eq 1 ] ; then
echo "executing 'stty cols '$cols' rows '$rows'"
fi

stty cols "$cols" rows "$rows"
exit $?
</pre>

Terminals

2025-07-10T17:30:13Z

Jeremy:

Lenovo ThinkPad X1 Carbon Gen 6

2025-07-10T15:34:59Z

Jeremy: /* Fingerprint Reader Setup */

[[File:Lenovo-thinkpad-x10-carbon-14-black-hero.png|480px]]

==Resources==
* [https://www.lenovo.com/us/en/p/laptops/thinkpad/thinkpadx1/thinkpad-x1-carbon-(6th-gen)/22tp2txx16g Manufacturer's Product Marketing Page]
* [https://pcsupport.lenovo.com/us/en/products/laptops-and-netbooks/thinkpad-x-series-laptops/thinkpad-x1-carbon-6th-gen-type-20kh-20kg/solutions/ht003029-lenovo-system-update-update-drivers-bios-and-applications Support and Firmware]
* [https://doc.coreboot.org/mainboard/lenovo/x1.html CoreBoot Installation Documentation]
* Current price point as of 2025-06-19 15:32:03 CDT (Thursday): $307 ([https://www.amazon.com/Lenovo-ThinkPad-Carbon-6th-Gen/dp/B08VNRMMTR As seen here])

==Linux Functionality==
Everything works out-of-the-box on modern Linux ( e.g. Ubuntu 24.04 ) with the exception of the fingerprint reader. See the details for getting that working below.

===Fingerprint Reader Setup===
This notebook has the following fingerprint reader:
<pre>06cb:009a Synaptics, Inc. Metallica MIS Touch Fingerprint Reader</pre>

This device is not supported by the standard <tt>fprintd</tt> package, but there is an alternative version that does provide support. You will need to install a third-party package repository and install a few packages from it in order to use this fingerprint reader.
Details and the source code can be found here:
https://github.com/uunicorn/python-validity

But essentially, you will need to do the following:
<pre>
sudo apt remove fprintd
sudo add-apt-repository ppa:uunicorn/open-fprintd
sudo apt-get update
sudo apt install open-fprintd fprintd-clients python3-validity
</pre>
After that, the setup will be the same as it is for any other fingerprint reader, using the fprintd package:
<pre>
jeremy@thinkpadx1gen6 ~ $ fprintd-enroll

Using device /net/reactivated/Fprint/Device/0
Enrolling right-index-finger finger.
Enroll result: enroll-stage-passed
Enroll result: enroll-stage-passed
Enroll result: enroll-stage-passed
Enroll result: enroll-stage-passed
Enroll result: enroll-stage-passed
Enroll result: enroll-completed
</pre>

NOTE: The service for this alternate version of fprintd is named <tt>open-fprintd.service</tt> rather than <tt>fprintd.service</tt>

==Hardware Info==

===LCPCI===
<pre>
00:00.0 Host bridge: Intel Corporation Xeon E3-1200 v6/7th Gen Core Processor Host Bridge/DRAM Registers (rev 08)
00:02.0 VGA compatible controller: Intel Corporation UHD Graphics 620 (rev 07)
00:04.0 Signal processing controller: Intel Corporation Xeon E3-1200 v5/E3-1500 v5/6th Gen Core Processor Thermal Subsystem (rev 08)
00:08.0 System peripheral: Intel Corporation Xeon E3-1200 v5/v6 / E3-1500 v5 / 6th/7th/8th Gen Core Processor Gaussian Mixture Model
00:14.0 USB controller: Intel Corporation Sunrise Point-LP USB 3.0 xHCI Controller (rev 21)
00:14.2 Signal processing controller: Intel Corporation Sunrise Point-LP Thermal subsystem (rev 21)
00:16.0 Communication controller: Intel Corporation Sunrise Point-LP CSME HECI #1 (rev 21)
00:1c.0 PCI bridge: Intel Corporation Sunrise Point-LP PCI Express Root Port #1 (rev f1)
00:1c.4 PCI bridge: Intel Corporation Sunrise Point-LP PCI Express Root Port #5 (rev f1)
00:1d.0 PCI bridge: Intel Corporation Sunrise Point-LP PCI Express Root Port #9 (rev f1)
00:1f.0 ISA bridge: Intel Corporation Sunrise Point LPC/eSPI Controller (rev 21)
00:1f.2 Memory controller: Intel Corporation Sunrise Point-LP PMC (rev 21)
00:1f.3 Audio device: Intel Corporation Sunrise Point-LP HD Audio (rev 21)
00:1f.4 SMBus: Intel Corporation Sunrise Point-LP SMBus (rev 21)
00:1f.6 Ethernet controller: Intel Corporation Ethernet Connection (4) I219-LM (rev 21)
02:00.0 Network controller: Intel Corporation Wireless 8265 / 8275 (rev 78)
04:00.0 Non-Volatile memory controller: Lenovo LENSE30512GMSP34MEAT3TA

</pre>

===LSUSB===
<pre>
Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
Bus 001 Device 002: ID 04f2:b615 Chicony Electronics Co., Ltd Integrated IR Camera
Bus 001 Device 003: ID 8087:0a2b Intel Corp. Bluetooth wireless interface
Bus 001 Device 004: ID 04f2:b614 Chicony Electronics Co., Ltd Integrated Camera
Bus 001 Device 005: ID 06cb:009a Synaptics, Inc. Metallica MIS Touch Fingerprint Reader
Bus 002 Device 001: ID 1d6b:0003 Linux Foundation 3.0 root hub
Bus 002 Device 002: ID 0bda:0328 Realtek Semiconductor Corp. USB3.0-CRW
</pre>

===System Information===
<pre>
Manufacturer: LENOVO
Product Name: 20KH002RUS
Version: ThinkPad X1 Carbon 6th
Serial Number: YOMAMA69
UUID: 9ece89cc-308a-11b2-a85c-aeebb0cb87f9
Wake-up Type: Power Switch
SKU Number: LENOVO_MT_20KH_BU_Think_FM_ThinkPad X1 Carbon 6th
Family: ThinkPad X1 Carbon 6th
</pre>

===Base Board Information===
<pre>
Manufacturer: LENOVO
Product Name: 20KH002RUS
Version: SDK0J40697 WIN
Serial Number: YOMAMA69690
Asset Tag: Not Available
Features:
Board is a hosting board
Board is replaceable
Location In Chassis: Not Available
Chassis Handle: 0x0000
Type: Motherboard
Contained Object Handles: 0
</pre>

===Chassis Information===
<pre>
Manufacturer: LENOVO
Type: Notebook
Lock: Not Present
Version: None
Serial Number: YOMAMA69
Asset Tag: No Asset Information
Boot-up State: Unknown
Power Supply State: Unknown
Thermal State: Unknown
Security Status: Unknown
OEM Information: 0x00000000
Height: Unspecified
Number Of Power Cords: Unspecified
Contained Elements: 0
SKU Number: Not Specified
</pre>

===Processor Information===
<pre>
Socket Designation: U3E1
Type: Central Processor
Family: Core i7
Manufacturer: Intel(R) Corporation
ID: EA 06 08 00 FF FB EB BF
Signature: Type 0, Family 6, Model 142, Stepping 10
Flags:
FPU (Floating-point unit on-chip)
VME (Virtual mode extension)
DE (Debugging extension)
PSE (Page size extension)
TSC (Time stamp counter)
MSR (Model specific registers)
PAE (Physical address extension)
MCE (Machine check exception)
CX8 (CMPXCHG8 instruction supported)
APIC (On-chip APIC hardware supported)
SEP (Fast system call)
MTRR (Memory type range registers)
PGE (Page global enable)
MCA (Machine check architecture)
CMOV (Conditional move instruction supported)
PAT (Page attribute table)
PSE-36 (36-bit page size extension)
CLFSH (CLFLUSH instruction supported)
DS (Debug store)
ACPI (ACPI supported)
MMX (MMX technology supported)
FXSR (FXSAVE and FXSTOR instructions supported)
SSE (Streaming SIMD extensions)
SSE2 (Streaming SIMD extensions 2)
SS (Self-snoop)
HTT (Multi-threading)
TM (Thermal monitor supported)
PBE (Pending break enabled)
Version: Intel(R) Core(TM) i7-8650U CPU @ 1.90GHz
Voltage: 1.2 V
External Clock: 100 MHz
Max Speed: 2100 MHz
Current Speed: 1900 MHz
Status: Populated, Enabled
Upgrade: Socket BGA1356
L1 Cache Handle: 0x0007
L2 Cache Handle: 0x0008
L3 Cache Handle: 0x0009
Serial Number: None
Asset Tag: None
Part Number: None
Core Count: 4
Core Enabled: 4
Thread Count: 8
Characteristics:
64-bit capable
Multi-Core
Hardware Thread
Execute Protection
Enhanced Virtualization
Power/Performance Control
</pre>

===BIOS Information===
<pre>
Vendor: LENOVO
Version: N23ET90W (1.65 )
Release Date: 11/07/2024
Address: 0xE0000
Runtime Size: 128 kB
ROM Size: 16 MB
Characteristics:
PCI is supported
PNP is supported
BIOS is upgradeable
BIOS shadowing is allowed
Boot from CD is supported
Selectable boot is supported
EDD is supported
3.5"/720 kB floppy services are supported (int 13h)
Print screen service is supported (int 5h)
8042 keyboard services are supported (int 9h)
Serial services are supported (int 14h)
Printer services are supported (int 17h)
CGA/mono video services are supported (int 10h)
ACPI is supported
USB legacy is supported
BIOS boot specification is supported
Targeted content distribution is supported
UEFI is supported
BIOS Revision: 1.65
Firmware Revision: 1.22
</pre>
===Physical Memory Array===
<pre>
Location: System Board Or Motherboard
Use: System Memory
Error Correction Type: None
Maximum Capacity: 16 GB
Error Information Handle: Not Provided
Number Of Devices: 2
</pre>

Lenovo ThinkPad X1 Carbon Gen 6

2025-07-10T15:31:07Z

Jeremy: /* Linux Functionality */

[[File:Lenovo-thinkpad-x10-carbon-14-black-hero.png|480px]]

==Resources==
* [https://www.lenovo.com/us/en/p/laptops/thinkpad/thinkpadx1/thinkpad-x1-carbon-(6th-gen)/22tp2txx16g Manufacturer's Product Marketing Page]
* [https://pcsupport.lenovo.com/us/en/products/laptops-and-netbooks/thinkpad-x-series-laptops/thinkpad-x1-carbon-6th-gen-type-20kh-20kg/solutions/ht003029-lenovo-system-update-update-drivers-bios-and-applications Support and Firmware]
* [https://doc.coreboot.org/mainboard/lenovo/x1.html CoreBoot Installation Documentation]
* Current price point as of 2025-06-19 15:32:03 CDT (Thursday): $307 ([https://www.amazon.com/Lenovo-ThinkPad-Carbon-6th-Gen/dp/B08VNRMMTR As seen here])

==Linux Functionality==
Everything works out-of-the-box on modern Linux ( e.g. Ubuntu 24.04 ) with the exception of the fingerprint reader. See the details for getting that working below.

===Fingerprint Reader Setup===
This notebook has the following fingerprint reader:
<pre>06cb:009a Synaptics, Inc. Metallica MIS Touch Fingerprint Reader</pre>

This device is not supported by the standard <tt>fprintd</tt> package, but there is an alternative version that does provide support. You will need to install a third-party package repository and install a few packages from it in order to use this fingerprint reader.
Details and the source code can be found here:
https://github.com/uunicorn/python-validity

But essentially, you will need to do the following:
<pre>
sudo apt remove fprintd
sudo add-apt-repository ppa:uunicorn/open-fprintd
sudo apt-get update
sudo apt install open-fprintd fprintd-clients python3-validity
</pre>
After that, the setup will be the same as it is for any other fingerprint reader, using the fprintd package:
<pre>
jeremy@thinkpadx1gen6 ~ $ fprintd-enroll

Using device /net/reactivated/Fprint/Device/0
Enrolling right-index-finger finger.
Enroll result: enroll-stage-passed
Enroll result: enroll-stage-passed
Enroll result: enroll-stage-passed
Enroll result: enroll-stage-passed
Enroll result: enroll-stage-passed
Enroll result: enroll-completed
</pre>

==Hardware Info==

===LCPCI===
<pre>
00:00.0 Host bridge: Intel Corporation Xeon E3-1200 v6/7th Gen Core Processor Host Bridge/DRAM Registers (rev 08)
00:02.0 VGA compatible controller: Intel Corporation UHD Graphics 620 (rev 07)
00:04.0 Signal processing controller: Intel Corporation Xeon E3-1200 v5/E3-1500 v5/6th Gen Core Processor Thermal Subsystem (rev 08)
00:08.0 System peripheral: Intel Corporation Xeon E3-1200 v5/v6 / E3-1500 v5 / 6th/7th/8th Gen Core Processor Gaussian Mixture Model
00:14.0 USB controller: Intel Corporation Sunrise Point-LP USB 3.0 xHCI Controller (rev 21)
00:14.2 Signal processing controller: Intel Corporation Sunrise Point-LP Thermal subsystem (rev 21)
00:16.0 Communication controller: Intel Corporation Sunrise Point-LP CSME HECI #1 (rev 21)
00:1c.0 PCI bridge: Intel Corporation Sunrise Point-LP PCI Express Root Port #1 (rev f1)
00:1c.4 PCI bridge: Intel Corporation Sunrise Point-LP PCI Express Root Port #5 (rev f1)
00:1d.0 PCI bridge: Intel Corporation Sunrise Point-LP PCI Express Root Port #9 (rev f1)
00:1f.0 ISA bridge: Intel Corporation Sunrise Point LPC/eSPI Controller (rev 21)
00:1f.2 Memory controller: Intel Corporation Sunrise Point-LP PMC (rev 21)
00:1f.3 Audio device: Intel Corporation Sunrise Point-LP HD Audio (rev 21)
00:1f.4 SMBus: Intel Corporation Sunrise Point-LP SMBus (rev 21)
00:1f.6 Ethernet controller: Intel Corporation Ethernet Connection (4) I219-LM (rev 21)
02:00.0 Network controller: Intel Corporation Wireless 8265 / 8275 (rev 78)
04:00.0 Non-Volatile memory controller: Lenovo LENSE30512GMSP34MEAT3TA

</pre>

===LSUSB===
<pre>
Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
Bus 001 Device 002: ID 04f2:b615 Chicony Electronics Co., Ltd Integrated IR Camera
Bus 001 Device 003: ID 8087:0a2b Intel Corp. Bluetooth wireless interface
Bus 001 Device 004: ID 04f2:b614 Chicony Electronics Co., Ltd Integrated Camera
Bus 001 Device 005: ID 06cb:009a Synaptics, Inc. Metallica MIS Touch Fingerprint Reader
Bus 002 Device 001: ID 1d6b:0003 Linux Foundation 3.0 root hub
Bus 002 Device 002: ID 0bda:0328 Realtek Semiconductor Corp. USB3.0-CRW
</pre>

===System Information===
<pre>
Manufacturer: LENOVO
Product Name: 20KH002RUS
Version: ThinkPad X1 Carbon 6th
Serial Number: YOMAMA69
UUID: 9ece89cc-308a-11b2-a85c-aeebb0cb87f9
Wake-up Type: Power Switch
SKU Number: LENOVO_MT_20KH_BU_Think_FM_ThinkPad X1 Carbon 6th
Family: ThinkPad X1 Carbon 6th
</pre>

===Base Board Information===
<pre>
Manufacturer: LENOVO
Product Name: 20KH002RUS
Version: SDK0J40697 WIN
Serial Number: YOMAMA69690
Asset Tag: Not Available
Features:
Board is a hosting board
Board is replaceable
Location In Chassis: Not Available
Chassis Handle: 0x0000
Type: Motherboard
Contained Object Handles: 0
</pre>

===Chassis Information===
<pre>
Manufacturer: LENOVO
Type: Notebook
Lock: Not Present
Version: None
Serial Number: YOMAMA69
Asset Tag: No Asset Information
Boot-up State: Unknown
Power Supply State: Unknown
Thermal State: Unknown
Security Status: Unknown
OEM Information: 0x00000000
Height: Unspecified
Number Of Power Cords: Unspecified
Contained Elements: 0
SKU Number: Not Specified
</pre>

===Processor Information===
<pre>
Socket Designation: U3E1
Type: Central Processor
Family: Core i7
Manufacturer: Intel(R) Corporation
ID: EA 06 08 00 FF FB EB BF
Signature: Type 0, Family 6, Model 142, Stepping 10
Flags:
FPU (Floating-point unit on-chip)
VME (Virtual mode extension)
DE (Debugging extension)
PSE (Page size extension)
TSC (Time stamp counter)
MSR (Model specific registers)
PAE (Physical address extension)
MCE (Machine check exception)
CX8 (CMPXCHG8 instruction supported)
APIC (On-chip APIC hardware supported)
SEP (Fast system call)
MTRR (Memory type range registers)
PGE (Page global enable)
MCA (Machine check architecture)
CMOV (Conditional move instruction supported)
PAT (Page attribute table)
PSE-36 (36-bit page size extension)
CLFSH (CLFLUSH instruction supported)
DS (Debug store)
ACPI (ACPI supported)
MMX (MMX technology supported)
FXSR (FXSAVE and FXSTOR instructions supported)
SSE (Streaming SIMD extensions)
SSE2 (Streaming SIMD extensions 2)
SS (Self-snoop)
HTT (Multi-threading)
TM (Thermal monitor supported)
PBE (Pending break enabled)
Version: Intel(R) Core(TM) i7-8650U CPU @ 1.90GHz
Voltage: 1.2 V
External Clock: 100 MHz
Max Speed: 2100 MHz
Current Speed: 1900 MHz
Status: Populated, Enabled
Upgrade: Socket BGA1356
L1 Cache Handle: 0x0007
L2 Cache Handle: 0x0008
L3 Cache Handle: 0x0009
Serial Number: None
Asset Tag: None
Part Number: None
Core Count: 4
Core Enabled: 4
Thread Count: 8
Characteristics:
64-bit capable
Multi-Core
Hardware Thread
Execute Protection
Enhanced Virtualization
Power/Performance Control
</pre>

===BIOS Information===
<pre>
Vendor: LENOVO
Version: N23ET90W (1.65 )
Release Date: 11/07/2024
Address: 0xE0000
Runtime Size: 128 kB
ROM Size: 16 MB
Characteristics:
PCI is supported
PNP is supported
BIOS is upgradeable
BIOS shadowing is allowed
Boot from CD is supported
Selectable boot is supported
EDD is supported
3.5"/720 kB floppy services are supported (int 13h)
Print screen service is supported (int 5h)
8042 keyboard services are supported (int 9h)
Serial services are supported (int 14h)
Printer services are supported (int 17h)
CGA/mono video services are supported (int 10h)
ACPI is supported
USB legacy is supported
BIOS boot specification is supported
Targeted content distribution is supported
UEFI is supported
BIOS Revision: 1.65
Firmware Revision: 1.22
</pre>
===Physical Memory Array===
<pre>
Location: System Board Or Motherboard
Use: System Memory
Error Correction Type: None
Maximum Capacity: 16 GB
Error Information Handle: Not Provided
Number Of Devices: 2
</pre>

Lenovo ThinkPad X1 Carbon Gen 6

2025-07-10T15:04:53Z

Jeremy:

[[File:Lenovo-thinkpad-x10-carbon-14-black-hero.png|480px]]

==Resources==
* [https://www.lenovo.com/us/en/p/laptops/thinkpad/thinkpadx1/thinkpad-x1-carbon-(6th-gen)/22tp2txx16g Manufacturer's Product Marketing Page]
* [https://pcsupport.lenovo.com/us/en/products/laptops-and-netbooks/thinkpad-x-series-laptops/thinkpad-x1-carbon-6th-gen-type-20kh-20kg/solutions/ht003029-lenovo-system-update-update-drivers-bios-and-applications Support and Firmware]
* [https://doc.coreboot.org/mainboard/lenovo/x1.html CoreBoot Installation Documentation]
* Current price point as of 2025-06-19 15:32:03 CDT (Thursday): $307 ([https://www.amazon.com/Lenovo-ThinkPad-Carbon-6th-Gen/dp/B08VNRMMTR As seen here])

==Linux Functionality==
Everything I have used works from Linux. The fingerprint scanner I have yet to test.

==Hardware Info==

===LCPCI===
<pre>
00:00.0 Host bridge: Intel Corporation Xeon E3-1200 v6/7th Gen Core Processor Host Bridge/DRAM Registers (rev 08)
00:02.0 VGA compatible controller: Intel Corporation UHD Graphics 620 (rev 07)
00:04.0 Signal processing controller: Intel Corporation Xeon E3-1200 v5/E3-1500 v5/6th Gen Core Processor Thermal Subsystem (rev 08)
00:08.0 System peripheral: Intel Corporation Xeon E3-1200 v5/v6 / E3-1500 v5 / 6th/7th/8th Gen Core Processor Gaussian Mixture Model
00:14.0 USB controller: Intel Corporation Sunrise Point-LP USB 3.0 xHCI Controller (rev 21)
00:14.2 Signal processing controller: Intel Corporation Sunrise Point-LP Thermal subsystem (rev 21)
00:16.0 Communication controller: Intel Corporation Sunrise Point-LP CSME HECI #1 (rev 21)
00:1c.0 PCI bridge: Intel Corporation Sunrise Point-LP PCI Express Root Port #1 (rev f1)
00:1c.4 PCI bridge: Intel Corporation Sunrise Point-LP PCI Express Root Port #5 (rev f1)
00:1d.0 PCI bridge: Intel Corporation Sunrise Point-LP PCI Express Root Port #9 (rev f1)
00:1f.0 ISA bridge: Intel Corporation Sunrise Point LPC/eSPI Controller (rev 21)
00:1f.2 Memory controller: Intel Corporation Sunrise Point-LP PMC (rev 21)
00:1f.3 Audio device: Intel Corporation Sunrise Point-LP HD Audio (rev 21)
00:1f.4 SMBus: Intel Corporation Sunrise Point-LP SMBus (rev 21)
00:1f.6 Ethernet controller: Intel Corporation Ethernet Connection (4) I219-LM (rev 21)
02:00.0 Network controller: Intel Corporation Wireless 8265 / 8275 (rev 78)
04:00.0 Non-Volatile memory controller: Lenovo LENSE30512GMSP34MEAT3TA

</pre>

===LSUSB===
<pre>
Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
Bus 001 Device 002: ID 04f2:b615 Chicony Electronics Co., Ltd Integrated IR Camera
Bus 001 Device 003: ID 8087:0a2b Intel Corp. Bluetooth wireless interface
Bus 001 Device 004: ID 04f2:b614 Chicony Electronics Co., Ltd Integrated Camera
Bus 001 Device 005: ID 06cb:009a Synaptics, Inc. Metallica MIS Touch Fingerprint Reader
Bus 002 Device 001: ID 1d6b:0003 Linux Foundation 3.0 root hub
Bus 002 Device 002: ID 0bda:0328 Realtek Semiconductor Corp. USB3.0-CRW
</pre>

===System Information===
<pre>
Manufacturer: LENOVO
Product Name: 20KH002RUS
Version: ThinkPad X1 Carbon 6th
Serial Number: YOMAMA69
UUID: 9ece89cc-308a-11b2-a85c-aeebb0cb87f9
Wake-up Type: Power Switch
SKU Number: LENOVO_MT_20KH_BU_Think_FM_ThinkPad X1 Carbon 6th
Family: ThinkPad X1 Carbon 6th
</pre>

===Base Board Information===
<pre>
Manufacturer: LENOVO
Product Name: 20KH002RUS
Version: SDK0J40697 WIN
Serial Number: YOMAMA69690
Asset Tag: Not Available
Features:
Board is a hosting board
Board is replaceable
Location In Chassis: Not Available
Chassis Handle: 0x0000
Type: Motherboard
Contained Object Handles: 0
</pre>

===Chassis Information===
<pre>
Manufacturer: LENOVO
Type: Notebook
Lock: Not Present
Version: None
Serial Number: YOMAMA69
Asset Tag: No Asset Information
Boot-up State: Unknown
Power Supply State: Unknown
Thermal State: Unknown
Security Status: Unknown
OEM Information: 0x00000000
Height: Unspecified
Number Of Power Cords: Unspecified
Contained Elements: 0
SKU Number: Not Specified
</pre>

===Processor Information===
<pre>
Socket Designation: U3E1
Type: Central Processor
Family: Core i7
Manufacturer: Intel(R) Corporation
ID: EA 06 08 00 FF FB EB BF
Signature: Type 0, Family 6, Model 142, Stepping 10
Flags:
FPU (Floating-point unit on-chip)
VME (Virtual mode extension)
DE (Debugging extension)
PSE (Page size extension)
TSC (Time stamp counter)
MSR (Model specific registers)
PAE (Physical address extension)
MCE (Machine check exception)
CX8 (CMPXCHG8 instruction supported)
APIC (On-chip APIC hardware supported)
SEP (Fast system call)
MTRR (Memory type range registers)
PGE (Page global enable)
MCA (Machine check architecture)
CMOV (Conditional move instruction supported)
PAT (Page attribute table)
PSE-36 (36-bit page size extension)
CLFSH (CLFLUSH instruction supported)
DS (Debug store)
ACPI (ACPI supported)
MMX (MMX technology supported)
FXSR (FXSAVE and FXSTOR instructions supported)
SSE (Streaming SIMD extensions)
SSE2 (Streaming SIMD extensions 2)
SS (Self-snoop)
HTT (Multi-threading)
TM (Thermal monitor supported)
PBE (Pending break enabled)
Version: Intel(R) Core(TM) i7-8650U CPU @ 1.90GHz
Voltage: 1.2 V
External Clock: 100 MHz
Max Speed: 2100 MHz
Current Speed: 1900 MHz
Status: Populated, Enabled
Upgrade: Socket BGA1356
L1 Cache Handle: 0x0007
L2 Cache Handle: 0x0008
L3 Cache Handle: 0x0009
Serial Number: None
Asset Tag: None
Part Number: None
Core Count: 4
Core Enabled: 4
Thread Count: 8
Characteristics:
64-bit capable
Multi-Core
Hardware Thread
Execute Protection
Enhanced Virtualization
Power/Performance Control
</pre>

===BIOS Information===
<pre>
Vendor: LENOVO
Version: N23ET90W (1.65 )
Release Date: 11/07/2024
Address: 0xE0000
Runtime Size: 128 kB
ROM Size: 16 MB
Characteristics:
PCI is supported
PNP is supported
BIOS is upgradeable
BIOS shadowing is allowed
Boot from CD is supported
Selectable boot is supported
EDD is supported
3.5"/720 kB floppy services are supported (int 13h)
Print screen service is supported (int 5h)
8042 keyboard services are supported (int 9h)
Serial services are supported (int 14h)
Printer services are supported (int 17h)
CGA/mono video services are supported (int 10h)
ACPI is supported
USB legacy is supported
BIOS boot specification is supported
Targeted content distribution is supported
UEFI is supported
BIOS Revision: 1.65
Firmware Revision: 1.22
</pre>
===Physical Memory Array===
<pre>
Location: System Board Or Motherboard
Use: System Memory
Error Correction Type: None
Maximum Capacity: 16 GB
Error Information Handle: Not Provided
Number Of Devices: 2
</pre>

Jeremy Bryan Smith:Privacy policy

2025-07-10T00:19:26Z

Jeremy: Created page with "Privacy is dead."

Privacy is dead.

Backups

2025-07-04T01:09:16Z

Jeremy:

= Periodic export of ZFS pool to external USB drive =

[root@freenas] ~# zpool list
NAME SIZE ALLOC FREE EXPANDSZ FRAG CAP DEDUP HEALTH ALTROOT
archive 7.25T 4.17T 3.08T - 14% 57% 1.00x ONLINE /mnt
freenas-boot 3.72G 2.27G 1.45G - - 60% 1.00x ONLINE -
usb-backups 1.81T 396K 1.81T - 0% 0% 1.00x ONLINE /mnt

# Initial

zfs snapshot -r archive/backups@2015-09-22
zfs send -R archive/backups@2015-09-22 | zfs receive -vF usb-backups

...

# Incremental after that

zfs snapshot -r archive/backups@2015-09-23

# For each intermediate snapshot...
zfs send -R -i archive/backups@2015-09-22 archive/backups@2015-09-23 | zfs receive -vF usb-backups

# export the backup pool
zpool export usb-backups

# decrypt device ...

# import the backup pool
zpool import usb-backups

Now that ZFS supports encryption, this can be done another way ...

Lenovo Thinkpad X1 Extreme Gen 2

2025-06-27T01:09:58Z

Jeremy:

=General=
[[File:Lenovo-laptop-thinkpad-x1-extreme-2nd-gen-gallery-1.jpg|320px]]
This is a beast, and everything's working in Linux :-)

* Product page: https://www.lenovo.com/us/en/laptops/thinkpad/thinkpad-x1/X1-Extreme-Gen-2/p/22TP2TXX1E2
* Support page: https://pcsupport.lenovo.com/us/en/products/laptops-and-netbooks/thinkpad-x-series-laptops/thinkpad-x1-extreme-gen-2
* [https://psref.lenovo.com/syspool/Sys/PDF/ThinkPad/ThinkPad_X1_Extreme_2nd_Gen/ThinkPad_X1_Extreme_2nd_Gen_Spec.PDF Product Specifications (PDF)]
* [https://download.lenovo.com/pccbbs/mobiles_pdf/p1gen2_x1extreme_ug_v2_en.pdf ThinkPad X1 Extreme (2nd Gen) Reference (PDF)]
* [https://psref.lenovo.com/syspool/Sys/PDF/datasheet/ThinkPad_X1_Extreme_2nd_Gen_datasheet_EN.pdf ThinkPad X1 Extreme Gen 2 (Marketing PDF)]

Battery Info
* Model Name (?): L18M4P71
* Integrated Li-Polymer 80Wh battery, supports Rapid Charge (charge up to 80% in 1hr)
* Mas battery life: MobileMark® 2014: 14 hr

Battery Replacement Part Options

* Lenovo BATTERY,15.36V,80Wh,4cell
** Part Number: 5B10W13953
** Manufacturer Part Number: SB10T83196
** Substitutes
*** Lenovo BATTERY, 15.36V, 80 Wh, 4cell
**** Model Name: L17C4P72
**** Part Number: 5B10V98091
* Internal,4c,80.4Wh,LiIon,SMP
** Part Number: 01YU911
** Manufacturer Part Number: SBB0U39964
** Substitutes
*** Lenovo BATTERY Internal, 4cell, 80.4 Wh
**** Model Name: L18M4P71
**** Part Number: 5B10W13900

Power Adapter:
* 135W slim tip (2-pin) AC adapter

=My Config=
* Product type:<pre>LENOVO_MT_20QV_BU_Think_FM_ThinkPad X1 Extreme 2nd</pre>

* Black Paint (FHD Models) / Carbon-Fibre Weave (UHD Models)
* Windows 10 Home 64 (immediately replaced with Linux of course)

* 9th Generation Intel® Core™ i7-9750H Processor (2.60 GHz, up to 4.50 GHz with Turbo Boost, 6 Cores, 12 Threads, 12 MB Cache) - oh yeah!
* 64 GB (32 GB + 32 GB) DDR4 2666MHz - oh yeah!
* 512 GB PCIe SSD - (ordered with a 256 GB option, since upgraded to 512 GB version)
* 15.6" UHD (3840 x 2160) OLED, anti-reflective, anti-smudge, touchscreen with Dolby Vision™ HDR 500 with IR & 720p HD Camera, 400 nits - The most beautiful display you can get!
* Multitouch display - working
* NVIDIA® GeForce® GTX 1650 Max-Q 4GB GDDR5 - working
* Fingerprint Reader - working
* Backlit - US English - working
* IR & 720p HD - working
* Enabled Discrete TPM2.0 - not tested
* 4 cell Li-Polymer, 80Wh - working, but not tested
* 135watt AC - working
* Intel® AX200 Wi-Fi 6 802.11AX (2 x 2) - working
* Bluetooth® 5.0 - working (tested audio only)
* RJ45 Extension Connector - working

=Notes=
* There were some firmware updates available (see fwupdmgr) when I first received this machine that fixed Linux support for a few things. Everything I've tested so far is now working great.
* Full control of all LEDs is also working via the <tt>ec_sys</tt> module including modes: on, off, and blink for the following LEDs:
** Red LED on back of screen
** Power button LED
** Red Charge LED
** White Charge LED
** Fn button LED
** Microphone LED
** CAPS lock LED
* The one that is NOT working:
** Mute LED

* Screen backlight control is working via <tt>/sys/class/backlight/intel_backlight/brightness</tt> (min=0, max=2047)
* Keyboard LED backlight is configurable via <tt>/sys/class/leds/tpacpi::kbd_backlight/brightness</tt> (0=off, 1=medium, and 2=high)

=POST Keyboard Shortcuts=

You can access the boot options on your Lenovo ThinkPad X1 Extreme Gen 2 using these keyboard shortcuts:

* Boot Menu: Press F12 or Fn+F12 during bootup when the Lenovo logo appears.
* BIOS Settings: Press F1 or Fn+F1 during bootup when the Lenovo logo appears.
* Startup Interrupt Menu: Press Enter at the Lenovo logo to access a menu from which you can choose to enter BIOS.

In addition:

* Boot from USB: After pressing F12 to access the boot menu, use the arrow keys to select your bootable USB drive and press Enter. You may need to disable Secure Boot in the BIOS settings if you're experiencing issues booting from USB.
* Recovery Mode: If your system has Lenovo OneKey Recovery, you can access it by pressing the Novo button (usually a small button or pinhole with a backwards arrow icon). Then, select "System Recovery" from the Novo Button Menu.

Important Notes:

* Some models may require you to repeatedly tap the chosen key during the boot process.
* If your boot device is disabled in the BIOS, you cannot select it using the boot menu.
* Check your specific model's user guide for detailed instructions and additional options.

=Accessing with Broken Screen=

Yeah, this happened to me :-(

 

To access and boot a Lenovo Thinkpad X1 Extreme Gen 2 with a broken screen, you'll need to connect it to an external monitor and use the appropriate function keys to access the BIOS or boot menu to select the desired boot device.
Here's a step-by-step guide:

# Connect to an external monitor: Use an HDMI or DisplayPort cable to connect your Thinkpad X1 Extreme Gen 2 to an external monitor.
# Force boot to external display: When the computer starts booting, repeatedly press Fn+F7 (or just F7 if your keyboard doesn't have the function lock) to cycle through display options and force the output to the external monitor.
# Enter BIOS: Press the F1 key (or Fn+F1) repeatedly during startup to enter the BIOS settings. You may need to try a few times as the timing can be tricky.
# Access Boot Menu: If you need to select a specific boot device, press F12 or (Fn+F12) rapidly and repeatedly at the Lenovo logo during bootup to open the Windows Boot Manager, and choose your desired boot device from the list.
# Troubleshoot: If the external monitor doesn't show anything, try restarting and holding the power button for 15-20 seconds to clear any residual power, or try resetting the display mode in the BIOS.

Note: If you are unable to see anything on the external monitor, you can try booting into safe mode or using Lenovo diagnostics tools to help isolate the problem.

Dell PowerEdge R720

2025-06-27T01:03:40Z

Jeremy:

=Support=
* [https://www.dell.com/support/home/ky/en/kybsdt1/product-support/product/poweredge-r720/overview Dell support page for the Dell PowerEdge R720]
* [https://www.dell.com/support/home/ky/en/kybsdt1/drivers/driversdetails?driverid=8p8wx&oscode=rhe70&productcode=poweredge-r720 BIOS v 2.9.0] as of 2020-01-09
* [https://www.dell.com/support/home/ky/en/kybsdt1/drivers/driversdetails?driverid=f5f8n&oscode=rhe70&productcode=poweredge-r720 DELL IDRAC7 1.40.40 A00 release] as of 2016-11-04

=Possible upgrades=
* [https://www.ebay.com/itm/143481830024?mkevt=1&mkcid=28&chn=ps U.2 NVMe SSD SFF8643 to SFF-8639 NVMe U.2 with Cable PCIe x8 Dual Port Adapter]

=POST Keyboard Shortcuts=

* F2: Enters System Setup (BIOS), where you can configure BIOS settings, including boot order.
* F10: Enters System Services and starts the Lifecycle Controller, which offers features like OS deployment, hardware diagnostics, and firmware updates.
* F11: Enters the Boot Manager, allowing you to choose a boot device for a single boot session. You'll press this after seeing the message " = UEFI Boot Manager".
* F12: Initiates a PXE Boot (Preboot Execution Environment), used for network booting.

Important Notes:

* Timing is key: Press the desired F key once every 2 seconds during the initial boot phase until you see confirmation on the screen that you're entering the correct mode.
* Dell Splash Screen: You should see the Dell splash screen when it's time to press the appropriate F key.
* Confirmation: Newer servers will typically show confirmation of the boot mode in the upper right-hand corner after you press the F key.
* BIOS vs. UEFI: The Boot Manager key (F11) can take you to either the BIOS Boot Manager or the UEFI Boot Manager, depending on your system's boot configuration.
* Boot Order: The system attempts to boot devices in the order specified in the BIOS settings. If a device fails, it proceeds to the next in the sequence.
* One-Time Boot: You can use the One-Time Boot menu (accessed via F11) to temporarily boot from a specific device without altering the main boot order.

By utilizing these function keys during the boot process, you can access and configure the boot options on your Dell PowerEdge R720 to suit your needs, whether you're performing system setup, deploying an OS, running diagnostics, or booting from a different device.

Samsung Galaxy Tab S 10.5" (SM-T800)

2025-06-24T21:01:47Z

Jeremy: /* Battery Replacement */

=Resources=
* [https://www.samsung.com/us/business/support/owners/product/galaxy-tab-s-10-5-wi-fi/ Official Samgsung Page for Samsung Galaxy Tab S 10.5"] - Good for them for still having this page available!
* [https://wiki.lineageos.org/devices/chagallwifi/ LineageOS page]
* [https://www.gsmarena.com/samsung_galaxy_tab_s_10_5-6438.php GSM Arena Page]
* [https://github.com/exynos5420/android_kernel_samsung_exynos5420 Linux Kernel Source Code for the Samsung Exynos 5420 Chipset]
* [https://xdaforums.com/t/rom-unofficial-10-lineageos-17-1-for-samsung-galaxy-tab-s-10-5-wifi-sm-t800-chagallwifi.4388165/ XDA Forums >> Unofficial LineageOS 17.1 ROM for Samsung Galaxy Tab S 10.5 WiFi (SM-T800 - chagallwifi)]
* [https://xdaforums.com/t/rom-unofficial-10-lineageos-17-1-for-samsung-galaxy-tab-s-sm-t700-sm-t705-sm-t800-sm-t800-sm-p600.4270943/ XDA Forums >> Unofficial LineageOS 17.1 ROM for Samsung Galaxy Tab S (SM-T700, SM-T705, SM-T800, SM-T800, SM-P600)]
* Latest Custom ROM Build ( as of 2025-06-14 ) : Samsung T700/5 T800/5 LineageOS-17.1-2-1-2025 ( [https://github.com/HazouPH/android_device_samsung_universal5420-common/releases/download/1.9/lineage-17.1-20250102-UNOFFICIAL-chagallwifi.zip lineage-17.1-20250102-UNOFFICIAL-chagallwifi.zip] )
** WARNING: !!! Lots of things broken on this ROM including camera, fingerprint reader, GApps, etc.!
** [https://github.com/HazouPH/android_device_samsung_universal5420-common Source code of this ROM (android_device_samsung_universal5420-common) by HazouPH]
* Latest Custom ROM Build ( as of 2025-06-21 ) : [https://xdaforums.com/t/rom-unofficial-13-lineageos-20-for-samsung-galaxy-tab-s-10-5-sm-t805-sm-t800-chagalllte-chagallwifi-alpha.4577223/ LineageOS 20 for Samsung Galaxy Tab S 10.5 (SM-T805/SM-T800 - chagalllte/chagallwifi )] - Alpha
** WARNING: !!! Lots of things broken on this ROM including camera, fingerprint reader, Infrared, and there is a memory leak with Chrome browsers!
** [https://github.com/retiredcrave/android_kernel_samsung_exynos5420/tree/lineage-21.0 Source code of this RPM ( android_kernel_samsung_exynos5420 ) by retiredtab
* [https://dl.twrp.me/chagalllte/ TWRP for chagalllte] -- Latest version as of 2025-06-21 is [https://dl.twrp.me/chagalllte/twrp-3.7.0_9-0-chagalllte.img.html twrp-3.7.0_9-0-chagalllte.img]

=Battery Details=
* Part Number: AA2G@08xS/7-B
* Battery Model #: EB-BT800FBU
* Watt Hours: 30.02 Wh
* Voltage: 3.8 V
* Milliamp Hours: 7900 mAh
* iFixit Part Number: IF252-015-1
* Battery for Sale
** iFixIt: [https://www.ifixit.com/products/galaxy-tab-s-10-5-battery Galaxy Tab S 10.5 Battery] ( $14.99 as of 2025-06-24 but OUT OF STOCK! )
** Amazon: [https://www.amazon.com/7900mAh-30-02Wh-Battery-EB-BT800FBU-Samsung/dp/B07CNZMNQS EB-BT800FBU EB-BT800FBC Tablet Battery Replacement for Samsung Galaxy Tab S 10.5 SM-T800 SM-T801 SM-T805 SM-T805C SM-T805W T805Y T805M SM-T807 SM-T807A SM-T807P SM-T807V T807T(3.8V 7900mAh)] ( $18 as of 2025-06-24 and IN STOCK )

=Battery Replacement=
Battery Replacement Guides for the Samsung SM-T800:
* [https://www.youtube.com/watch?v=s46NaOnx3iM How to Replace Your Samsung Galaxy Tab S 10.5 SM-T800 Battery] by [https://www.youtube.com/@NewLife2OldStuff NewLife2OldStuff]
* iFixIt [https://www.ifixit.com/Guide/Galaxy+Tab+S+10.5+Battery+Replacement/50302 Galaxy Tab S 10.5 Battery Replacement]

=Getting Model/Model Variant/Product Name/Bootloader Version/Android Release/Serial Number=
All of this information can be gotten from an adb shell. From your machine with the tablet connected via USB. 
Don't ask me why there are so many different identifiers, but here they are:

# Model
~ # getprop ro.product.model
SM-T800

# Model Variant
~ # getprop ro.product.device
chagallwifi

# Product Name
~ # getprop ro.product.name
chagallwifixx

# Bootloader version
~ # getprop ro.boot.bootloader
T800XXU1ANFB

# Android version/release
~ # getprop ro.build.version.release
6.0.1

# Serial number ( Not a real serial number below but this is the format )
~ # getprop ro.serialno
023418ad419c1751

And there's a lot more you can get just by running <tt>getprop</tt>
<pre>
~ # getprop | grep 'ro.boot\|ro.build\|ro.product'
[ro.boot.bootdevice]: [dw_mmc.0]
[ro.boot.bootloader]: [T800XXU1ANFB]
[ro.boot.console]: [ttySAC2]
[ro.boot.debug_level]: [0x4f4c]
[ro.boot.emmc_checksum]: [3]
[ro.boot.hardware]: [universal5420]
[ro.boot.odin_download]: [1]
[ro.boot.sec_atd.tty]: [/dev/ttySAC2]
[ro.boot.selinux]: [permissive]
[ro.boot.serialno]: [023418ad419c1751]
[ro.boot.warranty_bit]: [1]
[ro.bootimage.build.date.utc]: [1617650748]
[ro.bootimage.build.date]: [Mon Apr 5 19:25:48 UTC 2021]
[ro.bootimage.build.fingerprint]: [samsung/omni_chagallwifi/chagallwifi:6.0.1/MOB31K/26:eng/test-keys]
[ro.bootloader]: [T800XXU1ANFB]
[ro.bootmode]: [unknown]
[ro.build.characteristics]: [default]
[ro.build.date.utc]: [0]
[ro.build.date]: [Mon Apr 5 19:24:56 UTC 2021]
[ro.build.display.id]: [omni_chagallwifi-eng 6.0.1 MOB31K 26 test-keys]
[ro.build.flavor]: [omni_chagallwifi-eng]
[ro.build.host]: [93f70f4836da]
[ro.build.id]: [MOB31K]
[ro.build.tags]: [test-keys]
[ro.build.type]: [eng]
[ro.build.user]: [jenkins]
[ro.build.version.all_codenames]: [REL]
[ro.build.version.base_os]: []
[ro.build.version.codename]: [REL]
[ro.build.version.incremental]: [26]
[ro.build.version.preview_sdk]: []
[ro.build.version.release]: [6.0.1]
[ro.build.version.sdk]: [23]
[ro.build.version.security_patch]: [2016-11-05]
[ro.product.board]: [universal5420]
[ro.product.brand]: [samsung]
[ro.product.cpu.abi2]: [armeabi]
[ro.product.cpu.abi]: [armeabi-v7a]
[ro.product.cpu.abilist32]: [armeabi-v7a,armeabi]
[ro.product.cpu.abilist64]: []
[ro.product.cpu.abilist]: [armeabi-v7a,armeabi]
[ro.product.device]: [chagallwifi]
[ro.product.locale]: [en-US]
[ro.product.manufacturer]: [samsung]
[ro.product.model]: [SM-T800]
[ro.product.name]: [chagallwifixx]
</pre>

=Downloading Stock Firmware=
Stock firmware can be downloaded here: https://samfw.com/firmware/SM-T800 
Select the correct firmware with your bootloader variant ( T800XXU1ANFB from above )

=Extracting Stock Firmware=
<pre>

# ls -l

-rw-rw-r-- 1 jeremy jeremy 1,504,476,028 2025-06-24 11:56:43 SAMFW.COM_SM-T800_ITV_T800XXU1CPK1.zip

# unzip SAMFW.COM_SM-T800_ITV_T800XXU1CPK1.zip

# ls -l

-rw-rw-r-- 1 jeremy jeremy 1,504,476,028 2025-06-24 11:56:43 SAMFW.COM_SM-T800_ITV_T800XXU1CPK1.zip
-rw-rw-r-- 1 jeremy jeremy 2,452,910,149 2016-11-07 13:22:28 T800XXU1CPK1_T800ITV1CPI1_HOME.tar.md5

# tar xvf T800XXU1CPK1_T800ITV1CPI1_HOME.tar.md5
boot.img
cache.img
hidden.img
recovery.img
sboot.bin
system.img
tar: A lone zero block at 4790840

# ls -l
total 6,410,313,728
-rwx------ 1 jeremy jeremy 7,911,696 2016-11-04 00:53:42 boot.img
-rwx------ 1 jeremy jeremy 19,169,568 2016-11-04 00:53:42 cache.img
-rwx------ 1 jeremy jeremy 216,867,264 2016-11-04 00:53:42 hidden.img
-rwx------ 1 jeremy jeremy 8,397,072 2016-11-04 00:53:42 recovery.img
-rw-rw-r-- 1 jeremy jeremy 1,504,476,028 2025-06-24 11:56:43 SAMFW.COM_SM-T800_ITV_T800XXU1CPK1.zip
-rwx------ 1 jeremy jeremy 1,148,160 2016-11-04 00:53:43 sboot.bin
-rwx------ 1 jeremy jeremy 2,199,411,328 2016-11-04 00:53:43 system.img
-rw-rw-r-- 1 jeremy jeremy 2,452,910,149 2016-11-07 13:22:28 T800XXU1CPK1_T800ITV1CPI1_HOME.tar.md5

</pre>

=Get Partition Information Table=

<pre>
# heimdall download-pit --output sm-t800.pit
Heimdall v2.0.2

Copyright (c) 2010-2017 Benjamin Dobell, Glass Echidna
https://www.glassechidna.com.au/

This software is provided free of charge. Copying and redistribution is
encouraged.

If you appreciate this software and you would like to support future
development please consider donating:
https://www.glassechidna.com.au/donate/

Initialising connection...
Detecting device...
Claiming interface...
Initialising protocol...
Resetting device...
Protocol initialisation successful.

Beginning session...

Some devices may take up to 2 minutes to respond.
Please be patient!

Session begun.

Downloading device's PIT file...
PIT file download successful.

Ending session...
Rebooting device...
Releasing device interface...

# heimdall print-pit --file sm-t800.pit | tee sm-t800.pit.txt
Heimdall v2.0.2

Copyright (c) 2010-2017 Benjamin Dobell, Glass Echidna
https://www.glassechidna.com.au/

This software is provided free of charge. Copying and redistribution is
encouraged.

If you appreciate this software and you would like to support future
development please consider donating:
https://www.glassechidna.com.au/donate/

--- PIT Header ---
Entry Count: 24
Unknown string: COM_TAR2
CPU/bootloader tag: LSI5410
Logic unit count: 0

--- Entry #0 ---
Binary Type: 0 (AP)
Device Type: 2 (MMC)
Identifier: 80
Attributes: 2 (STL Read-Only)
Update Attributes: 1 (FOTA)
Partition Block Size/Offset: 0
Partition Block Count: 2046
File Offset (Obsolete): 0
File Size (Obsolete): 0
Partition Name: BOOTLOADER
Flash Filename: sboot.bin
FOTA Filename:

--- Entry #1 ---
Binary Type: 0 (AP)
Device Type: 2 (MMC)
Identifier: 70
Attributes: 5 (Read/Write)
Update Attributes: 1 (FOTA)
Partition Block Size/Offset: 34
Partition Block Count: 16
File Offset (Obsolete): 0
File Size (Obsolete): 0
Partition Name: PIT
Flash Filename: -
FOTA Filename:

--- Entry #2 ---
Binary Type: 0 (AP)
Device Type: 2 (MMC)
Identifier: 71
Attributes: 5 (Read/Write)
Update Attributes: 1 (FOTA)
Partition Block Size/Offset: 50
Partition Block Count: 2048
File Offset (Obsolete): 0
File Size (Obsolete): 0
Partition Name: MD5HDR
Flash Filename: md5.img
FOTA Filename:

--- Entry #3 ---
Binary Type: 0 (AP)
Device Type: 2 (MMC)
Identifier: 1
Attributes: 5 (Read/Write)
Update Attributes: 1 (FOTA)
Partition Block Size/Offset: 8192
Partition Block Count: 8192
File Offset (Obsolete): 0
File Size (Obsolete): 0
Partition Name: BOTA0
Flash Filename: -
FOTA Filename:

--- Entry #4 ---
Binary Type: 0 (AP)
Device Type: 2 (MMC)
Identifier: 2
Attributes: 5 (Read/Write)
Update Attributes: 1 (FOTA)
Partition Block Size/Offset: 16384
Partition Block Count: 8192
File Offset (Obsolete): 0
File Size (Obsolete): 0
Partition Name: BOTA1
Flash Filename: -
FOTA Filename:

--- Entry #5 ---
Binary Type: 0 (AP)
Device Type: 2 (MMC)
Identifier: 3
Attributes: 5 (Read/Write)
Update Attributes: 5 (FOTA)
Partition Block Size/Offset: 24576
Partition Block Count: 40960
File Offset (Obsolete): 0
File Size (Obsolete): 0
Partition Name: EFS
Flash Filename: efs.img
FOTA Filename:

--- Entry #6 ---
Binary Type: 0 (AP)
Device Type: 2 (MMC)
Identifier: 4
Attributes: 5 (Read/Write)
Update Attributes: 1 (FOTA)
Partition Block Size/Offset: 65536
Partition Block Count: 8192
File Offset (Obsolete): 0
File Size (Obsolete): 0
Partition Name: m9kefs1
Flash Filename: m9kefs1.bin
FOTA Filename:

--- Entry #7 ---
Binary Type: 0 (AP)
Device Type: 2 (MMC)
Identifier: 5
Attributes: 5 (Read/Write)
Update Attributes: 1 (FOTA)
Partition Block Size/Offset: 73728
Partition Block Count: 8192
File Offset (Obsolete): 0
File Size (Obsolete): 0
Partition Name: m9kefs2
Flash Filename: m9kefs2.bin
FOTA Filename:

--- Entry #8 ---
Binary Type: 0 (AP)
Device Type: 2 (MMC)
Identifier: 6
Attributes: 5 (Read/Write)
Update Attributes: 1 (FOTA)
Partition Block Size/Offset: 81920
Partition Block Count: 8192
File Offset (Obsolete): 0
File Size (Obsolete): 0
Partition Name: m9kefs3
Flash Filename: m9kefs3.bin
FOTA Filename:

--- Entry #9 ---
Binary Type: 0 (AP)
Device Type: 2 (MMC)
Identifier: 7
Attributes: 5 (Read/Write)
Update Attributes: 5 (FOTA)
Partition Block Size/Offset: 90112
Partition Block Count: 8192
File Offset (Obsolete): 0
File Size (Obsolete): 0
Partition Name: CARRIER
Flash Filename: carrier.img
FOTA Filename:

--- Entry #10 ---
Binary Type: 0 (AP)
Device Type: 2 (MMC)
Identifier: 8
Attributes: 5 (Read/Write)
Update Attributes: 1 (FOTA)
Partition Block Size/Offset: 98304
Partition Block Count: 16384
File Offset (Obsolete): 0
File Size (Obsolete): 0
Partition Name: PARAM
Flash Filename: param.bin
FOTA Filename:

--- Entry #11 ---
Binary Type: 0 (AP)
Device Type: 2 (MMC)
Identifier: 9
Attributes: 5 (Read/Write)
Update Attributes: 1 (FOTA)
Partition Block Size/Offset: 114688
Partition Block Count: 16384
File Offset (Obsolete): 0
File Size (Obsolete): 0
Partition Name: BOOT
Flash Filename: boot.img
FOTA Filename:

--- Entry #12 ---
Binary Type: 0 (AP)
Device Type: 2 (MMC)
Identifier: 10
Attributes: 5 (Read/Write)
Update Attributes: 1 (FOTA)
Partition Block Size/Offset: 131072
Partition Block Count: 20480
File Offset (Obsolete): 0
File Size (Obsolete): 0
Partition Name: RECOVERY
Flash Filename: recovery.img
FOTA Filename:

--- Entry #13 ---
Binary Type: 0 (AP)
Device Type: 2 (MMC)
Identifier: 11
Attributes: 5 (Read/Write)
Update Attributes: 1 (FOTA)
Partition Block Size/Offset: 151552
Partition Block Count: 20480
File Offset (Obsolete): 0
File Size (Obsolete): 0
Partition Name: OTA
Flash Filename: -
FOTA Filename:

--- Entry #14 ---
Binary Type: 0 (AP)
Device Type: 2 (MMC)
Identifier: 12
Attributes: 5 (Read/Write)
Update Attributes: 1 (FOTA)
Partition Block Size/Offset: 172032
Partition Block Count: 8192
File Offset (Obsolete): 0
File Size (Obsolete): 0
Partition Name: CDMA-RADIO
Flash Filename: modem_cdma.bin
FOTA Filename:

--- Entry #15 ---
Binary Type: 0 (AP)
Device Type: 2 (MMC)
Identifier: 13
Attributes: 5 (Read/Write)
Update Attributes: 1 (FOTA)
Partition Block Size/Offset: 180224
Partition Block Count: 40960
File Offset (Obsolete): 0
File Size (Obsolete): 0
Partition Name: RADIO
Flash Filename: modem.bin
FOTA Filename:

--- Entry #16 ---
Binary Type: 0 (AP)
Device Type: 2 (MMC)
Identifier: 14
Attributes: 5 (Read/Write)
Update Attributes: 5 (FOTA)
Partition Block Size/Offset: 221184
Partition Block Count: 8192
File Offset (Obsolete): 0
File Size (Obsolete): 0
Partition Name: TOMBSTONES
Flash Filename: tombstones.img
FOTA Filename:

--- Entry #17 ---
Binary Type: 0 (AP)
Device Type: 2 (MMC)
Identifier: 15
Attributes: 5 (Read/Write)
Update Attributes: 5 (FOTA)
Partition Block Size/Offset: 229376
Partition Block Count: 8192
File Offset (Obsolete): 0
File Size (Obsolete): 0
Partition Name: TDATA
Flash Filename: tdata.img
FOTA Filename:

--- Entry #18 ---
Binary Type: 0 (AP)
Device Type: 2 (MMC)
Identifier: 16
Attributes: 5 (Read/Write)
Update Attributes: 5 (FOTA)
Partition Block Size/Offset: 237568
Partition Block Count: 24576
File Offset (Obsolete): 0
File Size (Obsolete): 0
Partition Name: PERSDATA
Flash Filename: persdata.img
FOTA Filename:

--- Entry #19 ---
Binary Type: 0 (AP)
Device Type: 2 (MMC)
Identifier: 17
Attributes: 5 (Read/Write)
Update Attributes: 1 (FOTA)
Partition Block Size/Offset: 262144
Partition Block Count: 8192
File Offset (Obsolete): 0
File Size (Obsolete): 0
Partition Name: RESERVED2
Flash Filename: -
FOTA Filename:

--- Entry #20 ---
Binary Type: 0 (AP)
Device Type: 2 (MMC)
Identifier: 18
Attributes: 5 (Read/Write)
Update Attributes: 5 (FOTA)
Partition Block Size/Offset: 270336
Partition Block Count: 4935680
File Offset (Obsolete): 0
File Size (Obsolete): 0
Partition Name: SYSTEM
Flash Filename: system.img
FOTA Filename:

--- Entry #21 ---
Binary Type: 0 (AP)
Device Type: 2 (MMC)
Identifier: 19
Attributes: 5 (Read/Write)
Update Attributes: 5 (FOTA)
Partition Block Size/Offset: 5206016
Partition Block Count: 409600
File Offset (Obsolete): 0
File Size (Obsolete): 0
Partition Name: CACHE
Flash Filename: cache.img
FOTA Filename:

--- Entry #22 ---
Binary Type: 0 (AP)
Device Type: 2 (MMC)
Identifier: 20
Attributes: 5 (Read/Write)
Update Attributes: 5 (FOTA)
Partition Block Size/Offset: 5615616
Partition Block Count: 675840
File Offset (Obsolete): 0
File Size (Obsolete): 0
Partition Name: HIDDEN
Flash Filename: hidden.img
FOTA Filename:

--- Entry #23 ---
Binary Type: 0 (AP)
Device Type: 2 (MMC)
Identifier: 21
Attributes: 5 (Read/Write)
Update Attributes: 5 (FOTA)
Partition Block Size/Offset: 6291456
Partition Block Count: 0
File Offset (Obsolete): 0
File Size (Obsolete): 0
Partition Name: USERDATA
Flash Filename: userdata.img
FOTA Filename: remained

# Get partition names from the full PIT text file:
# grep -i 'boot\|system\|recovery\|tz' sm-t800.pit.txt
CPU/bootloader tag: LSI5410
Partition Name: BOOTLOADER
Flash Filename: sboot.bin
Partition Name: BOOT
Flash Filename: boot.img
Partition Name: RECOVERY
Flash Filename: recovery.img
Partition Name: SYSTEM
Flash Filename: system.img

</pre>

=Installing Stock Firmware=
Using the matching partition names from above and with the tablet in download mode, run heimdall to install them:

<pre>
# heimdall flash \
--BOOT boot.img \
--SYSTEM system.img \
--RECOVERY recovery.img \
--BOOTLOADER sboot.bin \
--CACHE cache.img \
--HIDDEN hidden.img

</pre>

If you get an error like this:
<pre>
ERROR: BOOTLOADER partition is too small for given file. Use --skip-size-check to flash anyways.
Ending session...
Rebooting device...
Releasing device interface...
</pre>

Then, if you are sure the file is the correct one and not corrupt, run again with the <tt>--skip-size-check</tt> argument:
<pre>
# heimdall flash \
--BOOT boot.img \
--SYSTEM system.img \
--RECOVERY recovery.img \
--BOOTLOADER sboot.bin \
--CACHE cache.img \
--HIDDEN hidden.img \
--skip-size-check

Heimdall v2.0.2

Copyright (c) 2010-2017 Benjamin Dobell, Glass Echidna
https://www.glassechidna.com.au/

This software is provided free of charge. Copying and redistribution is
encouraged.

If you appreciate this software and you would like to support future
development please consider donating:
https://www.glassechidna.com.au/donate/

Initialising connection...
Detecting device...
Claiming interface...
Initialising protocol...
Resetting device...
Protocol initialisation successful.
...

</pre>

* Reboot (it will take longer than usual the first time after flashing).
* Run a system update from within Android itself ( Settings-> General-> About Phone -> Manually Check for Updates ) and then reboot again.
* At this point, you should be in good shape to upgrade to a custom ROM ( LineageOS, etc ).

Samsung Galaxy Tab S 10.5" (SM-T800)

2025-06-24T21:00:47Z

Jeremy: /* Battery Replacement */

=Resources=
* [https://www.samsung.com/us/business/support/owners/product/galaxy-tab-s-10-5-wi-fi/ Official Samgsung Page for Samsung Galaxy Tab S 10.5"] - Good for them for still having this page available!
* [https://wiki.lineageos.org/devices/chagallwifi/ LineageOS page]
* [https://www.gsmarena.com/samsung_galaxy_tab_s_10_5-6438.php GSM Arena Page]
* [https://github.com/exynos5420/android_kernel_samsung_exynos5420 Linux Kernel Source Code for the Samsung Exynos 5420 Chipset]
* [https://xdaforums.com/t/rom-unofficial-10-lineageos-17-1-for-samsung-galaxy-tab-s-10-5-wifi-sm-t800-chagallwifi.4388165/ XDA Forums >> Unofficial LineageOS 17.1 ROM for Samsung Galaxy Tab S 10.5 WiFi (SM-T800 - chagallwifi)]
* [https://xdaforums.com/t/rom-unofficial-10-lineageos-17-1-for-samsung-galaxy-tab-s-sm-t700-sm-t705-sm-t800-sm-t800-sm-p600.4270943/ XDA Forums >> Unofficial LineageOS 17.1 ROM for Samsung Galaxy Tab S (SM-T700, SM-T705, SM-T800, SM-T800, SM-P600)]
* Latest Custom ROM Build ( as of 2025-06-14 ) : Samsung T700/5 T800/5 LineageOS-17.1-2-1-2025 ( [https://github.com/HazouPH/android_device_samsung_universal5420-common/releases/download/1.9/lineage-17.1-20250102-UNOFFICIAL-chagallwifi.zip lineage-17.1-20250102-UNOFFICIAL-chagallwifi.zip] )
** WARNING: !!! Lots of things broken on this ROM including camera, fingerprint reader, GApps, etc.!
** [https://github.com/HazouPH/android_device_samsung_universal5420-common Source code of this ROM (android_device_samsung_universal5420-common) by HazouPH]
* Latest Custom ROM Build ( as of 2025-06-21 ) : [https://xdaforums.com/t/rom-unofficial-13-lineageos-20-for-samsung-galaxy-tab-s-10-5-sm-t805-sm-t800-chagalllte-chagallwifi-alpha.4577223/ LineageOS 20 for Samsung Galaxy Tab S 10.5 (SM-T805/SM-T800 - chagalllte/chagallwifi )] - Alpha
** WARNING: !!! Lots of things broken on this ROM including camera, fingerprint reader, Infrared, and there is a memory leak with Chrome browsers!
** [https://github.com/retiredcrave/android_kernel_samsung_exynos5420/tree/lineage-21.0 Source code of this RPM ( android_kernel_samsung_exynos5420 ) by retiredtab
* [https://dl.twrp.me/chagalllte/ TWRP for chagalllte] -- Latest version as of 2025-06-21 is [https://dl.twrp.me/chagalllte/twrp-3.7.0_9-0-chagalllte.img.html twrp-3.7.0_9-0-chagalllte.img]

=Battery Details=
* Part Number: AA2G@08xS/7-B
* Battery Model #: EB-BT800FBU
* Watt Hours: 30.02 Wh
* Voltage: 3.8 V
* Milliamp Hours: 7900 mAh
* iFixit Part Number: IF252-015-1
* Battery for Sale
** iFixIt: [https://www.ifixit.com/products/galaxy-tab-s-10-5-battery Galaxy Tab S 10.5 Battery] ( $14.99 as of 2025-06-24 but OUT OF STOCK! )
** Amazon: [https://www.amazon.com/7900mAh-30-02Wh-Battery-EB-BT800FBU-Samsung/dp/B07CNZMNQS EB-BT800FBU EB-BT800FBC Tablet Battery Replacement for Samsung Galaxy Tab S 10.5 SM-T800 SM-T801 SM-T805 SM-T805C SM-T805W T805Y T805M SM-T807 SM-T807A SM-T807P SM-T807V T807T(3.8V 7900mAh)] ( $18 as of 2025-06-24 and IN STOCK )

=Battery Replacement=
Battery Replacement Guides for the Samsung SM-T800:
* Replacement Battery Model: L17C4P72
* [https://www.youtube.com/watch?v=s46NaOnx3iM How to Replace Your Samsung Galaxy Tab S 10.5 SM-T800 Battery] by [https://www.youtube.com/@NewLife2OldStuff NewLife2OldStuff]
* iFixIt [https://www.ifixit.com/Guide/Galaxy+Tab+S+10.5+Battery+Replacement/50302 Galaxy Tab S 10.5 Battery Replacement]

=Getting Model/Model Variant/Product Name/Bootloader Version/Android Release/Serial Number=
All of this information can be gotten from an adb shell. From your machine with the tablet connected via USB. 
Don't ask me why there are so many different identifiers, but here they are:

# Model
~ # getprop ro.product.model
SM-T800

# Model Variant
~ # getprop ro.product.device
chagallwifi

# Product Name
~ # getprop ro.product.name
chagallwifixx

# Bootloader version
~ # getprop ro.boot.bootloader
T800XXU1ANFB

# Android version/release
~ # getprop ro.build.version.release
6.0.1

# Serial number ( Not a real serial number below but this is the format )
~ # getprop ro.serialno
023418ad419c1751

And there's a lot more you can get just by running <tt>getprop</tt>
<pre>
~ # getprop | grep 'ro.boot\|ro.build\|ro.product'
[ro.boot.bootdevice]: [dw_mmc.0]
[ro.boot.bootloader]: [T800XXU1ANFB]
[ro.boot.console]: [ttySAC2]
[ro.boot.debug_level]: [0x4f4c]
[ro.boot.emmc_checksum]: [3]
[ro.boot.hardware]: [universal5420]
[ro.boot.odin_download]: [1]
[ro.boot.sec_atd.tty]: [/dev/ttySAC2]
[ro.boot.selinux]: [permissive]
[ro.boot.serialno]: [023418ad419c1751]
[ro.boot.warranty_bit]: [1]
[ro.bootimage.build.date.utc]: [1617650748]
[ro.bootimage.build.date]: [Mon Apr 5 19:25:48 UTC 2021]
[ro.bootimage.build.fingerprint]: [samsung/omni_chagallwifi/chagallwifi:6.0.1/MOB31K/26:eng/test-keys]
[ro.bootloader]: [T800XXU1ANFB]
[ro.bootmode]: [unknown]
[ro.build.characteristics]: [default]
[ro.build.date.utc]: [0]
[ro.build.date]: [Mon Apr 5 19:24:56 UTC 2021]
[ro.build.display.id]: [omni_chagallwifi-eng 6.0.1 MOB31K 26 test-keys]
[ro.build.flavor]: [omni_chagallwifi-eng]
[ro.build.host]: [93f70f4836da]
[ro.build.id]: [MOB31K]
[ro.build.tags]: [test-keys]
[ro.build.type]: [eng]
[ro.build.user]: [jenkins]
[ro.build.version.all_codenames]: [REL]
[ro.build.version.base_os]: []
[ro.build.version.codename]: [REL]
[ro.build.version.incremental]: [26]
[ro.build.version.preview_sdk]: []
[ro.build.version.release]: [6.0.1]
[ro.build.version.sdk]: [23]
[ro.build.version.security_patch]: [2016-11-05]
[ro.product.board]: [universal5420]
[ro.product.brand]: [samsung]
[ro.product.cpu.abi2]: [armeabi]
[ro.product.cpu.abi]: [armeabi-v7a]
[ro.product.cpu.abilist32]: [armeabi-v7a,armeabi]
[ro.product.cpu.abilist64]: []
[ro.product.cpu.abilist]: [armeabi-v7a,armeabi]
[ro.product.device]: [chagallwifi]
[ro.product.locale]: [en-US]
[ro.product.manufacturer]: [samsung]
[ro.product.model]: [SM-T800]
[ro.product.name]: [chagallwifixx]
</pre>

=Downloading Stock Firmware=
Stock firmware can be downloaded here: https://samfw.com/firmware/SM-T800 
Select the correct firmware with your bootloader variant ( T800XXU1ANFB from above )

=Extracting Stock Firmware=
<pre>

# ls -l

-rw-rw-r-- 1 jeremy jeremy 1,504,476,028 2025-06-24 11:56:43 SAMFW.COM_SM-T800_ITV_T800XXU1CPK1.zip

# unzip SAMFW.COM_SM-T800_ITV_T800XXU1CPK1.zip

# ls -l

-rw-rw-r-- 1 jeremy jeremy 1,504,476,028 2025-06-24 11:56:43 SAMFW.COM_SM-T800_ITV_T800XXU1CPK1.zip
-rw-rw-r-- 1 jeremy jeremy 2,452,910,149 2016-11-07 13:22:28 T800XXU1CPK1_T800ITV1CPI1_HOME.tar.md5

# tar xvf T800XXU1CPK1_T800ITV1CPI1_HOME.tar.md5
boot.img
cache.img
hidden.img
recovery.img
sboot.bin
system.img
tar: A lone zero block at 4790840

# ls -l
total 6,410,313,728
-rwx------ 1 jeremy jeremy 7,911,696 2016-11-04 00:53:42 boot.img
-rwx------ 1 jeremy jeremy 19,169,568 2016-11-04 00:53:42 cache.img
-rwx------ 1 jeremy jeremy 216,867,264 2016-11-04 00:53:42 hidden.img
-rwx------ 1 jeremy jeremy 8,397,072 2016-11-04 00:53:42 recovery.img
-rw-rw-r-- 1 jeremy jeremy 1,504,476,028 2025-06-24 11:56:43 SAMFW.COM_SM-T800_ITV_T800XXU1CPK1.zip
-rwx------ 1 jeremy jeremy 1,148,160 2016-11-04 00:53:43 sboot.bin
-rwx------ 1 jeremy jeremy 2,199,411,328 2016-11-04 00:53:43 system.img
-rw-rw-r-- 1 jeremy jeremy 2,452,910,149 2016-11-07 13:22:28 T800XXU1CPK1_T800ITV1CPI1_HOME.tar.md5

</pre>

=Get Partition Information Table=

<pre>
# heimdall download-pit --output sm-t800.pit
Heimdall v2.0.2

Copyright (c) 2010-2017 Benjamin Dobell, Glass Echidna
https://www.glassechidna.com.au/

This software is provided free of charge. Copying and redistribution is
encouraged.

If you appreciate this software and you would like to support future
development please consider donating:
https://www.glassechidna.com.au/donate/

Initialising connection...
Detecting device...
Claiming interface...
Initialising protocol...
Resetting device...
Protocol initialisation successful.

Beginning session...

Some devices may take up to 2 minutes to respond.
Please be patient!

Session begun.

Downloading device's PIT file...
PIT file download successful.

Ending session...
Rebooting device...
Releasing device interface...

# heimdall print-pit --file sm-t800.pit | tee sm-t800.pit.txt
Heimdall v2.0.2

Copyright (c) 2010-2017 Benjamin Dobell, Glass Echidna
https://www.glassechidna.com.au/

This software is provided free of charge. Copying and redistribution is
encouraged.

If you appreciate this software and you would like to support future
development please consider donating:
https://www.glassechidna.com.au/donate/

--- PIT Header ---
Entry Count: 24
Unknown string: COM_TAR2
CPU/bootloader tag: LSI5410
Logic unit count: 0

--- Entry #0 ---
Binary Type: 0 (AP)
Device Type: 2 (MMC)
Identifier: 80
Attributes: 2 (STL Read-Only)
Update Attributes: 1 (FOTA)
Partition Block Size/Offset: 0
Partition Block Count: 2046
File Offset (Obsolete): 0
File Size (Obsolete): 0
Partition Name: BOOTLOADER
Flash Filename: sboot.bin
FOTA Filename:

--- Entry #1 ---
Binary Type: 0 (AP)
Device Type: 2 (MMC)
Identifier: 70
Attributes: 5 (Read/Write)
Update Attributes: 1 (FOTA)
Partition Block Size/Offset: 34
Partition Block Count: 16
File Offset (Obsolete): 0
File Size (Obsolete): 0
Partition Name: PIT
Flash Filename: -
FOTA Filename:

--- Entry #2 ---
Binary Type: 0 (AP)
Device Type: 2 (MMC)
Identifier: 71
Attributes: 5 (Read/Write)
Update Attributes: 1 (FOTA)
Partition Block Size/Offset: 50
Partition Block Count: 2048
File Offset (Obsolete): 0
File Size (Obsolete): 0
Partition Name: MD5HDR
Flash Filename: md5.img
FOTA Filename:

--- Entry #3 ---
Binary Type: 0 (AP)
Device Type: 2 (MMC)
Identifier: 1
Attributes: 5 (Read/Write)
Update Attributes: 1 (FOTA)
Partition Block Size/Offset: 8192
Partition Block Count: 8192
File Offset (Obsolete): 0
File Size (Obsolete): 0
Partition Name: BOTA0
Flash Filename: -
FOTA Filename:

--- Entry #4 ---
Binary Type: 0 (AP)
Device Type: 2 (MMC)
Identifier: 2
Attributes: 5 (Read/Write)
Update Attributes: 1 (FOTA)
Partition Block Size/Offset: 16384
Partition Block Count: 8192
File Offset (Obsolete): 0
File Size (Obsolete): 0
Partition Name: BOTA1
Flash Filename: -
FOTA Filename:

--- Entry #5 ---
Binary Type: 0 (AP)
Device Type: 2 (MMC)
Identifier: 3
Attributes: 5 (Read/Write)
Update Attributes: 5 (FOTA)
Partition Block Size/Offset: 24576
Partition Block Count: 40960
File Offset (Obsolete): 0
File Size (Obsolete): 0
Partition Name: EFS
Flash Filename: efs.img
FOTA Filename:

--- Entry #6 ---
Binary Type: 0 (AP)
Device Type: 2 (MMC)
Identifier: 4
Attributes: 5 (Read/Write)
Update Attributes: 1 (FOTA)
Partition Block Size/Offset: 65536
Partition Block Count: 8192
File Offset (Obsolete): 0
File Size (Obsolete): 0
Partition Name: m9kefs1
Flash Filename: m9kefs1.bin
FOTA Filename:

--- Entry #7 ---
Binary Type: 0 (AP)
Device Type: 2 (MMC)
Identifier: 5
Attributes: 5 (Read/Write)
Update Attributes: 1 (FOTA)
Partition Block Size/Offset: 73728
Partition Block Count: 8192
File Offset (Obsolete): 0
File Size (Obsolete): 0
Partition Name: m9kefs2
Flash Filename: m9kefs2.bin
FOTA Filename:

--- Entry #8 ---
Binary Type: 0 (AP)
Device Type: 2 (MMC)
Identifier: 6
Attributes: 5 (Read/Write)
Update Attributes: 1 (FOTA)
Partition Block Size/Offset: 81920
Partition Block Count: 8192
File Offset (Obsolete): 0
File Size (Obsolete): 0
Partition Name: m9kefs3
Flash Filename: m9kefs3.bin
FOTA Filename:

--- Entry #9 ---
Binary Type: 0 (AP)
Device Type: 2 (MMC)
Identifier: 7
Attributes: 5 (Read/Write)
Update Attributes: 5 (FOTA)
Partition Block Size/Offset: 90112
Partition Block Count: 8192
File Offset (Obsolete): 0
File Size (Obsolete): 0
Partition Name: CARRIER
Flash Filename: carrier.img
FOTA Filename:

--- Entry #10 ---
Binary Type: 0 (AP)
Device Type: 2 (MMC)
Identifier: 8
Attributes: 5 (Read/Write)
Update Attributes: 1 (FOTA)
Partition Block Size/Offset: 98304
Partition Block Count: 16384
File Offset (Obsolete): 0
File Size (Obsolete): 0
Partition Name: PARAM
Flash Filename: param.bin
FOTA Filename:

--- Entry #11 ---
Binary Type: 0 (AP)
Device Type: 2 (MMC)
Identifier: 9
Attributes: 5 (Read/Write)
Update Attributes: 1 (FOTA)
Partition Block Size/Offset: 114688
Partition Block Count: 16384
File Offset (Obsolete): 0
File Size (Obsolete): 0
Partition Name: BOOT
Flash Filename: boot.img
FOTA Filename:

--- Entry #12 ---
Binary Type: 0 (AP)
Device Type: 2 (MMC)
Identifier: 10
Attributes: 5 (Read/Write)
Update Attributes: 1 (FOTA)
Partition Block Size/Offset: 131072
Partition Block Count: 20480
File Offset (Obsolete): 0
File Size (Obsolete): 0
Partition Name: RECOVERY
Flash Filename: recovery.img
FOTA Filename:

--- Entry #13 ---
Binary Type: 0 (AP)
Device Type: 2 (MMC)
Identifier: 11
Attributes: 5 (Read/Write)
Update Attributes: 1 (FOTA)
Partition Block Size/Offset: 151552
Partition Block Count: 20480
File Offset (Obsolete): 0
File Size (Obsolete): 0
Partition Name: OTA
Flash Filename: -
FOTA Filename:

--- Entry #14 ---
Binary Type: 0 (AP)
Device Type: 2 (MMC)
Identifier: 12
Attributes: 5 (Read/Write)
Update Attributes: 1 (FOTA)
Partition Block Size/Offset: 172032
Partition Block Count: 8192
File Offset (Obsolete): 0
File Size (Obsolete): 0
Partition Name: CDMA-RADIO
Flash Filename: modem_cdma.bin
FOTA Filename:

--- Entry #15 ---
Binary Type: 0 (AP)
Device Type: 2 (MMC)
Identifier: 13
Attributes: 5 (Read/Write)
Update Attributes: 1 (FOTA)
Partition Block Size/Offset: 180224
Partition Block Count: 40960
File Offset (Obsolete): 0
File Size (Obsolete): 0
Partition Name: RADIO
Flash Filename: modem.bin
FOTA Filename:

--- Entry #16 ---
Binary Type: 0 (AP)
Device Type: 2 (MMC)
Identifier: 14
Attributes: 5 (Read/Write)
Update Attributes: 5 (FOTA)
Partition Block Size/Offset: 221184
Partition Block Count: 8192
File Offset (Obsolete): 0
File Size (Obsolete): 0
Partition Name: TOMBSTONES
Flash Filename: tombstones.img
FOTA Filename:

--- Entry #17 ---
Binary Type: 0 (AP)
Device Type: 2 (MMC)
Identifier: 15
Attributes: 5 (Read/Write)
Update Attributes: 5 (FOTA)
Partition Block Size/Offset: 229376
Partition Block Count: 8192
File Offset (Obsolete): 0
File Size (Obsolete): 0
Partition Name: TDATA
Flash Filename: tdata.img
FOTA Filename:

--- Entry #18 ---
Binary Type: 0 (AP)
Device Type: 2 (MMC)
Identifier: 16
Attributes: 5 (Read/Write)
Update Attributes: 5 (FOTA)
Partition Block Size/Offset: 237568
Partition Block Count: 24576
File Offset (Obsolete): 0
File Size (Obsolete): 0
Partition Name: PERSDATA
Flash Filename: persdata.img
FOTA Filename:

--- Entry #19 ---
Binary Type: 0 (AP)
Device Type: 2 (MMC)
Identifier: 17
Attributes: 5 (Read/Write)
Update Attributes: 1 (FOTA)
Partition Block Size/Offset: 262144
Partition Block Count: 8192
File Offset (Obsolete): 0
File Size (Obsolete): 0
Partition Name: RESERVED2
Flash Filename: -
FOTA Filename:

--- Entry #20 ---
Binary Type: 0 (AP)
Device Type: 2 (MMC)
Identifier: 18
Attributes: 5 (Read/Write)
Update Attributes: 5 (FOTA)
Partition Block Size/Offset: 270336
Partition Block Count: 4935680
File Offset (Obsolete): 0
File Size (Obsolete): 0
Partition Name: SYSTEM
Flash Filename: system.img
FOTA Filename:

--- Entry #21 ---
Binary Type: 0 (AP)
Device Type: 2 (MMC)
Identifier: 19
Attributes: 5 (Read/Write)
Update Attributes: 5 (FOTA)
Partition Block Size/Offset: 5206016
Partition Block Count: 409600
File Offset (Obsolete): 0
File Size (Obsolete): 0
Partition Name: CACHE
Flash Filename: cache.img
FOTA Filename:

--- Entry #22 ---
Binary Type: 0 (AP)
Device Type: 2 (MMC)
Identifier: 20
Attributes: 5 (Read/Write)
Update Attributes: 5 (FOTA)
Partition Block Size/Offset: 5615616
Partition Block Count: 675840
File Offset (Obsolete): 0
File Size (Obsolete): 0
Partition Name: HIDDEN
Flash Filename: hidden.img
FOTA Filename:

--- Entry #23 ---
Binary Type: 0 (AP)
Device Type: 2 (MMC)
Identifier: 21
Attributes: 5 (Read/Write)
Update Attributes: 5 (FOTA)
Partition Block Size/Offset: 6291456
Partition Block Count: 0
File Offset (Obsolete): 0
File Size (Obsolete): 0
Partition Name: USERDATA
Flash Filename: userdata.img
FOTA Filename: remained

# Get partition names from the full PIT text file:
# grep -i 'boot\|system\|recovery\|tz' sm-t800.pit.txt
CPU/bootloader tag: LSI5410
Partition Name: BOOTLOADER
Flash Filename: sboot.bin
Partition Name: BOOT
Flash Filename: boot.img
Partition Name: RECOVERY
Flash Filename: recovery.img
Partition Name: SYSTEM
Flash Filename: system.img

</pre>

=Installing Stock Firmware=
Using the matching partition names from above and with the tablet in download mode, run heimdall to install them:

<pre>
# heimdall flash \
--BOOT boot.img \
--SYSTEM system.img \
--RECOVERY recovery.img \
--BOOTLOADER sboot.bin \
--CACHE cache.img \
--HIDDEN hidden.img

</pre>

If you get an error like this:
<pre>
ERROR: BOOTLOADER partition is too small for given file. Use --skip-size-check to flash anyways.
Ending session...
Rebooting device...
Releasing device interface...
</pre>

Then, if you are sure the file is the correct one and not corrupt, run again with the <tt>--skip-size-check</tt> argument:
<pre>
# heimdall flash \
--BOOT boot.img \
--SYSTEM system.img \
--RECOVERY recovery.img \
--BOOTLOADER sboot.bin \
--CACHE cache.img \
--HIDDEN hidden.img \
--skip-size-check

Heimdall v2.0.2

Copyright (c) 2010-2017 Benjamin Dobell, Glass Echidna
https://www.glassechidna.com.au/

This software is provided free of charge. Copying and redistribution is
encouraged.

If you appreciate this software and you would like to support future
development please consider donating:
https://www.glassechidna.com.au/donate/

Initialising connection...
Detecting device...
Claiming interface...
Initialising protocol...
Resetting device...
Protocol initialisation successful.
...

</pre>

* Reboot (it will take longer than usual the first time after flashing).
* Run a system update from within Android itself ( Settings-> General-> About Phone -> Manually Check for Updates ) and then reboot again.
* At this point, you should be in good shape to upgrade to a custom ROM ( LineageOS, etc ).

Lenovo Thinkpad X1 Extreme Gen 2

2025-06-24T20:49:39Z

Jeremy:

[[File:Lenovo-laptop-thinkpad-x1-extreme-2nd-gen-gallery-1.jpg|320px]]
This is a beast, and everything's working in Linux :-)

* Product page: https://www.lenovo.com/us/en/laptops/thinkpad/thinkpad-x1/X1-Extreme-Gen-2/p/22TP2TXX1E2
* Support page: https://pcsupport.lenovo.com/us/en/products/laptops-and-netbooks/thinkpad-x-series-laptops/thinkpad-x1-extreme-gen-2
* [https://psref.lenovo.com/syspool/Sys/PDF/ThinkPad/ThinkPad_X1_Extreme_2nd_Gen/ThinkPad_X1_Extreme_2nd_Gen_Spec.PDF Product Specifications (PDF)]
* [https://download.lenovo.com/pccbbs/mobiles_pdf/p1gen2_x1extreme_ug_v2_en.pdf ThinkPad X1 Extreme (2nd Gen) Reference (PDF)]
* [https://psref.lenovo.com/syspool/Sys/PDF/datasheet/ThinkPad_X1_Extreme_2nd_Gen_datasheet_EN.pdf ThinkPad X1 Extreme Gen 2 (Marketing PDF)]

Battery Info
* Model Name (?): L18M4P71
* Integrated Li-Polymer 80Wh battery, supports Rapid Charge (charge up to 80% in 1hr)
* Mas battery life: MobileMark® 2014: 14 hr

Battery Replacement Part Options

* Lenovo BATTERY,15.36V,80Wh,4cell
** Part Number: 5B10W13953
** Manufacturer Part Number: SB10T83196
** Substitutes
*** Lenovo BATTERY, 15.36V, 80 Wh, 4cell
**** Model Name: L17C4P72
**** Part Number: 5B10V98091
* Internal,4c,80.4Wh,LiIon,SMP
** Part Number: 01YU911
** Manufacturer Part Number: SBB0U39964
** Substitutes
*** Lenovo BATTERY Internal, 4cell, 80.4 Wh
**** Model Name: L18M4P71
**** Part Number: 5B10W13900

Power Adapter:
* 135W slim tip (2-pin) AC adapter

My config:
* Product type:<pre>LENOVO_MT_20QV_BU_Think_FM_ThinkPad X1 Extreme 2nd</pre>

* Black Paint (FHD Models) / Carbon-Fibre Weave (UHD Models)
* Windows 10 Home 64 (immediately replaced with Linux of course)

* 9th Generation Intel® Core™ i7-9750H Processor (2.60 GHz, up to 4.50 GHz with Turbo Boost, 6 Cores, 12 Threads, 12 MB Cache) - oh yeah!
* 64 GB (32 GB + 32 GB) DDR4 2666MHz - oh yeah!
* 512 GB PCIe SSD - (ordered with a 256 GB option, since upgraded to 512 GB version)
* 15.6" UHD (3840 x 2160) OLED, anti-reflective, anti-smudge, touchscreen with Dolby Vision™ HDR 500 with IR & 720p HD Camera, 400 nits - The most beautiful display you can get!
* Multitouch display - working
* NVIDIA® GeForce® GTX 1650 Max-Q 4GB GDDR5 - working
* Fingerprint Reader - working
* Backlit - US English - working
* IR & 720p HD - working
* Enabled Discrete TPM2.0 - not tested
* 4 cell Li-Polymer, 80Wh - working, but not tested
* 135watt AC - working
* Intel® AX200 Wi-Fi 6 802.11AX (2 x 2) - working
* Bluetooth® 5.0 - working (tested audio only)
* RJ45 Extension Connector - working

Notes:
* There were some firmware updates available (see fwupdmgr) when I first received this machine that fixed Linux support for a few things. Everything I've tested so far is now working great.
* Full control of all LEDs is also working via the <tt>ec_sys</tt> module including modes: on, off, and blink for the following LEDs:
** Red LED on back of screen
** Power button LED
** Red Charge LED
** White Charge LED
** Fn button LED
** Microphone LED
** CAPS lock LED
* The one that is NOT working:
** Mute LED

* Screen backlight control is working via <tt>/sys/class/backlight/intel_backlight/brightness</tt> (min=0, max=2047)
* Keyboard LED backlight is configurable via <tt>/sys/class/leds/tpacpi::kbd_backlight/brightness</tt> (0=off, 1=medium, and 2=high)