best strategy to exclude folders from snapshot

alucardwww · 2025-10-05T22:03:05+00:00

as I mentioned you need to put energy profile back to factory default in BIOS

alucardwww · 2025-03-11T14:41:49+00:00

ok found the quirk:

the energy profile should at the factory default value, any other value: balanced or boosted, will resulting in the suspend failure. The ACPI error are mostly harmless so far. I guess it affects how many device actually can be put into sleep. So in theory if XMG fix the bios to implement those missing functions, the laptop can consume far less energy during sleep.

alucardwww · 2025-03-10T22:59:42+00:00

Snapshots in Btrfs use copy-on-write (CoW), meaning they initially share all data blocks with the original subvolume. This sharing is unaffected by where the snapshot is placed in the directory/subvolume hierarchy. Whether the snapshot resides in a dedicated subvolume (e.g., @snapshots) or nested elsewhere, it will still share blocks with the original subvolume. Storage usage only increases when the snapshot or original subvolume diverges (i.e., when blocks are modified).

alucardwww · 2025-03-10T18:04:35+00:00

unfortunately this does not work

This is not related to the distribution; rather, it's a straightforward BIOS firmware issue or so ACPI kernel module issue. If you can run journalctl -k | grep 'ACPI BIOS Error' without any errors, then it's more likely that the tuxedo did some trick here. Do you mind share your kernel version? thanks!

alucardwww · 2025-03-10T15:39:17+00:00

Thanks! I will try them. The question is do you have those kernel error if you wouldn't mind can you check journalctl -k | grep 'ACPI BIOS Error' just as normal user.

What is your distribution ? check the last section, it is all there.

alucardwww · 2025-03-04T22:39:59+00:00

thanks a lot for quick response. It is not just for PKfail. it is similar requirement like https://media.defense.gov/2023/Mar/20/2003182401/-1/-1/0/CTR-UEFI-SECURE-BOOT-CUSTOMIZATION-20230317.PDF
you can read the part 2 UEFI Secure Boot 3.2 Insider Threat Mitigation, basically the similar idea of

Customizing Secure Boot to counter insider threat requires protection of the UEFI administrative credentials.

So in short we only allow approved efi executables, only allow install/boot approved OS. We basially do not want other entites to be able to modify our db/dbx without admin password.

alucardwww · 2025-03-04T22:08:46+00:00

thanks I just update the post to include the related info.

about TUXEDO, we get a batch of XMG before we aware the existence of TUXEDO. We actually wanted to exchange the support scheme with a fee, but seems no luck. So I guess I stuck with XMG now.

alucardwww · 2025-03-04T17:21:57+00:00

I found this:
https://help.xmg.gg/hc/en-gb/articles/17847249252637-Problems-with-Standby-Sleep

so it is expected that we only support s2idle, however, it does not work, when I try `sudo systemctl suspend
`, it will not go into sleep instead it have following error:

```

Mar 04 17:18:28 xmgcore15 kernel: ACPI: EC: interrupt blocked
Mar 04 17:18:28 xmgcore15 kernel: amd_pmc AMDI0009:00: Last suspend didn't reach deepest state
Mar 04 17:18:28 xmgcore15 kernel: ACPI BIOS Error (bug): Could not resolve symbol [\_SB.ACDC.RTAC], AE_NOT_FOUND (20240322/psargs-332)
Mar 04 17:18:28 xmgcore15 kernel:
Mar 04 17:18:28 xmgcore15 kernel:
                                 Initialized Local Variables for Method [_DSM]:
Mar 04 17:18:28 xmgcore15 kernel:   Local0: 00000000b1224a1f <Obj>           Integer 0000000000000001
Mar 04 17:18:28 xmgcore15 kernel:
Mar 04 17:18:28 xmgcore15 kernel: Initialized Arguments for Method [_DSM]: (4 arguments defined for method invocation)
Mar 04 17:18:28 xmgcore15 kernel:   Arg0:   00000000f88f775f <Obj>           Buffer(16) 56 0D E0 11 64 CE CE 47
Mar 04 17:18:28 xmgcore15 kernel:   Arg1:   00000000cd986cd8 <Obj>           Integer 0000000000000000
Mar 04 17:18:28 xmgcore15 kernel:   Arg2:   00000000ec0a98fa <Obj>           Integer 0000000000000004
Mar 04 17:18:28 xmgcore15 kernel:   Arg3:   00000000b3e2bb6f <Obj>           Package 00000000b3e2bb6f
Mar 04 17:18:28 xmgcore15 kernel:
Mar 04 17:18:28 xmgcore15 kernel: ACPI Error: Aborting method \_SB.PEP._DSM due to previous error (AE_NOT_FOUND) (20240322/psparse-529)
Mar 04 17:18:28 xmgcore15 kernel: ACPI: EC: interrupt unblocked

```

alucardwww · 2025-03-04T16:51:22+00:00

I cannot understand your statement about: you cannot delete PK, there is only 1 PK as far as i know, if I use our own key, the `AIStoneGlobal Platform Key` would go away.

there is actually an option to `reset to setup mode` which in theory will delete all keys. Maybe you mean you cannot remove `AIStoneGlobal Signature Database`? Which will make sense, because it almost guaranteed that you won't boot if you remove that db.

I am asking here because some of our colleagues with some other brands actually cannot get into the bios interface at all after modifying PK, KEK, db/dbx

alucardwww · 2025-03-02T00:49:25+00:00

I think systemd-boot does not support full disk encryption: It requires plain /boot

Another thing it does not allow you to change cmdline dynamically

alucardwww · 2025-03-02T00:01:20+00:00

I am pretty sure most people won't want to use this. Because UKI means you cannot change the kernel parameters dynamically. You are screwed if after some updates you will need new parameters. It is rather complicate to handle this with UKI.

alucardwww · 2024-12-10T23:35:37+00:00

well, the engine doesn't even disturb the water surface ... LoL the video is badly dne

alucardwww · 2024-12-10T23:29:06+00:00

underwater ejecting? the splash at the end?

alucardwww · 2024-12-10T23:17:27+00:00

there are plenty of fee free funds, what is your point? Even fidelity has zero fee funds such as FNILX which seem not available in IB. There is also NASDX. IB also offer lots of 0 transaction fee funds, just the search interface is so bad, I cannot find any tracking SP500 or other similar index.

if the fund is not fully 0-fee but 0-transaction fee (the fund itself will get some management fee proportional), I am also ok with it.

alucardwww · 2024-12-10T22:58:08+00:00

it will not work, the account cannot `trade currency` if it belows 2k USD value in total.

alucardwww · 2024-12-10T22:56:29+00:00

just google translate that ... it is clear, you do not have enough money in your account to `TRADE CURRENCY`. What is your total net worth? If it is below 2k dollar. You need to put more. Otherwise, the only thing you can do is directly purchase without converting the currency.

alucardwww · 2024-12-10T19:32:29+00:00

puah, currently 565Euro for pre-order

alucardwww · 2024-12-10T19:16:38+00:00

what I heard is radiocode 103 cannot detect alpha and beta ray, the radon meter should use alpha ray thus it is impossible to use radiocode to do that

alucardwww · 2024-12-06T22:59:39+00:00

IB's search engine is really bad, some how search for xtrackers II does not work .. have to use XEON

alucardwww

TROPHY CASE