31–40 of 44 posts
Earlier quoted context omitted.
I am not the OP, but I got an $150 (at a time) fanless quad core Celeron box at Aliexpress about 5 years ago, and it just runs with zero problems with openmediavault and dockers. Attached is external HDD over USB 3, it’s still fast enough (and the HDD is the bottleneck, not the USB interface).
I wonder if I can run this on a 2 year old celeron laptop
Good reminder that the Raspberry Pis only have good software support if you stick to whatever the foundation is releasing. Because that same foundation has stayed obsessed with their weird custom ways of doing things, instead of furthering efforts like UEFI on ARM. Some of it is insultingly stupid - like for revD of the 5, you better now update the magic boot partition of your RPi with the device tree overlay for rev…
This is exactly why I’ve to replaced my home server by a low-power x86 NUC instead. No custom build needed to run NixOS and idle power consumption turns out to be slightly lower than the Raspberry Pi 5.
Earlier quoted context omitted.
Allow me to ask you what’s the NUC computer you are using?
I am not the OP, but I got an $150 (at a time) fanless quad core Celeron box at Aliexpress about 5 years ago, and it just runs with zero problems with openmediavault and dockers. Attached is external HDD over USB 3, it’s still fast enough (and the HDD is the bottleneck, not the USB interface).
Earlier quoted context omitted.
SecureBoot might be more useful than UEFI on SBC like Pi. The grub EFI shim is signed, but does or doesn't verify kernel image and initrd and module (and IDK optionally drive and CPU and RAM hw) signatures? mokutil does module signature key enrollment. Kernel modules must be signed with a key enrolled in the BIOS otherwise they won't be loaded. To implement SecureBoot without UEFI would be to develop an alternate boo…
mokutil and these commands don't work without UEFI: mokutil --sb-state mokutil --help mokutil --import key.der mokutil --list-new reboot efibootmgr efivar fwupd fwupdtool fwupdmgr get-updates && \ fwupdmgr update tree /sys/firmware/efi systemctl reboot --firmware-setup
UEFI without runtime UEFI variable writes is a thing, and that configuration is incompatible with mokutil.
Earlier quoted context omitted.
This is exactly why I’ve to replaced my home server by a low-power x86 NUC instead. No custom build needed to run NixOS and idle power consumption turns out to be slightly lower than the Raspberry Pi 5.
Allow me to ask you what’s the NUC computer you are using?
And forgot to mention this before: Intel CPUs with built-in GPUs have very performant and energy efficient hardware video codecs, whereas the Raspberry Pi 5 is limited and lacks software support.
Earlier quoted context omitted.
Allow me to ask you what’s the NUC computer you are using?
I’m using an ASUS NUC 14 Essential Kit N355. It’s a bit more expensive than the Pi 5, but also more powerful (8 cores and decent GPU). There is also a more affordable N150 model. And even lower budget are the N150 mini PCs from Chinese manufacturers, but they often mess up things like cooling in a hardware revision (compared to the favorable review that you’d read). And forgot to mention this before: Intel CPUs with…
Earlier quoted context omitted.
I’m using an ASUS NUC 14 Essential Kit N355. It’s a bit more expensive than the Pi 5, but also more powerful (8 cores and decent GPU). There is also a more affordable N150 model. And even lower budget are the N150 mini PCs from Chinese manufacturers, but they often mess up things like cooling in a hardware revision (compared to the favorable review that you’d read). And forgot to mention this before: Intel CPUs with…
And what is the idle power draw that you're seeing on the NUC? Out of the box or did you have to mess around with BIOS and powertop?
I replaced my custom nightmare of nixos on rpi5 (too much disk space used, too much IO used for raspberry) to a raspbian+arm+homebrew and i could not be happier
Earlier quoted context omitted.
mokutil and these commands don't work without UEFI: mokutil --sb-state mokutil --help mokutil --import key.der mokutil --list-new reboot efibootmgr efivar fwupd fwupdtool fwupdmgr get-updates && \ fwupdmgr update tree /sys/firmware/efi systemctl reboot --firmware-setup
Note that UEFI doesn't mean supporting most of those. UEFI without runtime UEFI variable writes is a thing, and that configuration is incompatible with mokutil.
There is no SecureBoot without UEFI.
UEFI without SecureBoot does have advantages over legacy BIOS with DOS MBR.
> UEFI without runtime UEFI variable writes is a thing
Which vendors already support this?
Do any BIOS - e.g. coreboot - support disabling online writes to EFI? (with e.g. efibootmgr or efivar or /sys/firmware/efi)
One of the initial use cases for SecureBoot is preventing MBR malware.
What there be security value to addding checksums or signatures as args to each boot entry in grub.cfg for each kernel image and initial ramdrive?
Unless /boot is encrypted, it's possible for malware to overwrite grub.cfg to just omit signatures for example.