Integrate fwupd

[boredsquirrel]

I just found out a machine was 130 UEFI versions behind lol.

Integrating fwupdtool would be really useful if you dont want to use Discover/Software/Packagekit (also Discover couldnt update the firmware while CLI could)

fwupdtool get-updates && fwupdtool get-upgrades && fwupdtool update && fwupdtool upgrade && fwupdtool verify-update

should do the trick. But I have no idea what the differente between:

• fwupdtool and fwupdmgr
• install and upgrade
• get-updates, update, refresh, get-upgrades

are.

all arguments (same for both commands?):

activate              esp-mount             firmware-read         get-report-metadata   --no-safety-check     smbios-dump
--allow-older         esp-unmount           firmware-sign         get-topology          --no-search           switch-branch
--allow-reinstall     export-hwids          --force               get-updates           --plugins             unbind-driver
attach                --filter              get-bios-setting      get-upgrades          --prepare             update
bind-driver           firmware-build        get-details           hwids                 refresh               upgrade
build-firmware        firmware-convert      get-device-flags      --ignore-checksum     reinstall             --verbose
--cleanup             firmware-dump         get-devices           --ignore-vid-pid      --save-backends       verify-update
clear-history         firmware-export       get-firmware-types    install               security              watch
detach                firmware-extract      get-history           install-blob          self-sign             
--disable-ssl-strict  firmware-parse        get-plugins           --method              set-bios-setting      
esp-list              firmware-patch        get-remotes           monitor               --show-all 

NOTE: this tool needs root, unlike the other commands.

[boredsquirrel]

edit: just smashed all possible commands together until I get to see a manpage.

Also I would avoid --force, as they state that some updates blacklist insecure boot entries, which may break installs. So prefer to output an error message with the content of the sterr when possible, if something failed.

[boredsquirrel]

Here is a how-to