Bought this unit at the end of June to use as a test system, since it has the same configuration (3 Ethernet interfaces) as the APU1D4 that is my main FreedomBox.
It came with BIOS version 4.0.7 that is no longer on the apu-bios-upgrade page: https://teklager.se/en/knowledge-base/apu-bios-upgrade/. Created a FreedomBox testing image on an SD card (256GB SanDisk): Downloaded the latest testing FreedomBox bookworm/debian 12 for the apu1d4: xz -d freedombox-testing_latest_all-amd64.img.xz after mounting it (shows as /dev/sdf1 in df -h) sudo dd bs=1M if=freedombox-testing_latest_all-amd64.img of=/dev/sdf conv=fdatasync status=progress It did not boot from the SD card slot. All I got was 2 loud beeps. Per https://forum.pcengines.dev/index.php?thread/49-how-to-boot-an-apu2/ a work-around is to add a netconsole= parameter. Did this by modifying /etc/default/grub and adding it to GRUB_CMDLINE_LINUX="netconsole=" and running $ sudo grub-mkconfig -o /boot/grub/grub.cfg It didn't work. It would still not boot from the SD card slot. Plugging the SD card into an SD to USB adapter and putting it into the top USB port in the back works. Did the first boot config: Set up the admin user and password Selected FreedomBox is your router Selected public IP address that may change over time Activated frequent feature updates >From https://pcengines.github.io/#mr-62 it appears that 4.0.7 is really ancient (2017), the recommended version is apu2_v4.17.0.3.rom but I also downloaded the latest: apu2_v4.19.0.1.rom. Time to update the BIOS. $ sudo apt-get flashrom >From the connected computer: sftp <admin user>@10.42.0.1 put apu2_v4.17.0.3.rom put apu2_v4.19.0.1.rom Then, per https://teklager.se/en/knowledge-base/apu-bios-upgrade/ installing from debian, method 4, step 4: sudo flashrom -w apu2_v4.17.0.3.rom -p internal:boardmismatch=force -c W25064BV/W25064CV/W25064FV NOTE: without the -c option it failed, but this failure is documented in the above page. $ sudo dmidecode -s bios-version now reports: v4.17.0.3 (the preferred version per the site above) after a complete power-off reboot. Tried to boot from the SD card and it still fails. Tried the "netconsole=" trick on this bios version and it still won't boot. Now, instead of the 2 loud beeps it just sits there for about 30 seconds and then all 3 green lights come on (like at the beginning of a power-on), again and again. Time to try the latest version BIOS: $ sudo flashrom -w apu2_v4.19.0.1.rom -p internal:boardmismatch=force -c W25064BV/W25064CV/W25064FV It still wouldn't boot from the SD card slot, even after using the "netconsole=" trick. Same behavior as v4.17.0.3. I presume no one has encountered this problem or can provide a solution. Of course, the original problem: packets from the inside don't go out unless the firewall is disabled still occurs and I still don't know why. Any hints/solutions would be greatly appreciated. Augustine For completeness, here's the lshw output for the APU2: $ sudo lshw freedombox description: Desktop Computer product: apu2 (4 GB) vendor: PC Engines version: 1.0 serial: 1549586 width: 64 bits capabilities: smbios-3.0.0 dmi-3.0.0 smp vsyscall32 configuration: boot=normal chassis=desktop sku=4 GB *-core description: Motherboard product: apu2 vendor: PC Engines physical id: 0 version: 1.0 serial: 1549586 *-firmware description: BIOS vendor: coreboot physical id: 0 version: v4.19.0.1 date: 01/31/2023 size: 1MiB capacity: 8MiB capabilities: pci pcmcia upgrade bootselect acpi *-cpu description: CPU product: AMD GX-412TC SOC vendor: Advanced Micro Devices [AMD] physical id: 4 bus info: cpu@0 version: 22.48.1 slot: CPU0 size: 900MHz capacity: 1GHz width: 64 bits capabilities: fpu fpu_exception wp vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 ht syscall nx mmxext fxsr_opt pdpe1gb rdtscp x86-64 constant_tsc rep_good acc_power nopl nonstop_tsc cpuid extd_apicid aperfmperf pni pclmulqdq monitor ssse3 cx16 sse4_1 sse4_2 movbe popcnt aes xsave avx f16c lahf_lm cmp_legacy svm extapic cr8_legacy abm sse4a misalignsse 3dnowprefetch osvw ibs skinit wdt topoext perfctr_nb bpext ptsc perfctr_llc cpb hw_pstate ssbd vmmcall bmi1 xsaveopt arat npt lbrv svm_lock nrip_save tsc_scale flushbyasid decodeassists pausefilter pfthreshold overflow_recov cpufreq configuration: microcode=117637381 *-cache description: L2 cache physical id: 7 slot: CACHE2 size: 2MiB capacity: 2MiB capabilities: internal unified configuration: level=2 *-memory description: System Memory physical id: 9 slot: System board or motherboard size: 4GiB capabilities: ecc configuration: errordetection=multi-bit-ecc *-bank description: SODIMM DDR3 Synchronous Unbuffered (Unregistered) 1333 MHz (0.8 ns) physical id: 0 serial: 00000000 slot: DIMM 0 size: 4GiB width: 64 bits clock: 1333MHz (0.8ns) *-pci:0 description: Host bridge product: Family 16h (Models 30h-3fh) Processor Root Complex vendor: Advanced Micro Devices, Inc. [AMD] physical id: 100 bus info: pci@0000:00:00.0 version: 00 width: 32 bits clock: 33MHz *-generic:0 UNCLAIMED description: IOMMU product: Mullins IOMMU vendor: Advanced Micro Devices, Inc. [AMD] physical id: 0.2 bus info: pci@0000:00:00.2 version: 00 width: 32 bits clock: 33MHz capabilities: msi ht cap_list configuration: latency=0 *-pci:0 description: PCI bridge product: Family 16h Processor Functions 5:1 vendor: Advanced Micro Devices, Inc. [AMD] physical id: 2.2 bus info: pci@0000:00:02.2 version: 00 width: 32 bits clock: 33MHz capabilities: pci pm pciexpress msi ht normal_decode bus_master cap_list configuration: driver=pcieport resources: irq:25 ioport:1000(size=4096) memory:d0000000-d00fffff *-network description: Ethernet interface product: I210 Gigabit Network Connection vendor: Intel Corporation physical id: 0 bus info: pci@0000:01:00.0 logical name: enp1s0 version: 03 serial: 00:0d:b9:5e:95:48 size: 1Gbit/s capacity: 1Gbit/s width: 32 bits clock: 33MHz capabilities: pm msi msix pciexpress bus_master cap_list ethernet physical tp 10bt 10bt-fd 100bt 100bt-fd 1000bt-fd autonegotiation configuration: autonegotiation=on broadcast=yes driver=igb driverversion=6.3.0-1-amd64 duplex=full firmware=0. 6-5 ip=192.168.200.184 latency=0 link=yes multicast=yes port=twisted pair speed=1Gbit/s resources: irq:31 memory:d0000000-d001ffff ioport:1000(size=32) memory:d0020000-d0023fff *-pci:1 description: PCI bridge product: Family 16h Processor Functions 5:1 vendor: Advanced Micro Devices, Inc. [AMD] physical id: 2.3 bus info: pci@0000:00:02.3 version: 00 width: 32 bits clock: 33MHz capabilities: pci pm pciexpress msi ht normal_decode bus_master cap_list configuration: driver=pcieport resources: irq:27 ioport:2000(size=4096) memory:d0100000-d01fffff *-network description: Ethernet interface product: I210 Gigabit Network Connection vendor: Intel Corporation physical id: 0 bus info: pci@0000:02:00.0 logical name: enp2s0 version: 03 serial: 00:0d:b9:5e:95:49 capacity: 1Gbit/s width: 32 bits clock: 33MHz capabilities: pm msi msix pciexpress bus_master cap_list ethernet physical tp 10bt 10bt-fd 100bt 100bt-fd 1000bt-fd autonegotiation configuration: autonegotiation=on broadcast=yes driver=igb driverversion=6.3.0-1-amd64 firmware=0. 6-5 latency=0 link=no multicast=yes port=twisted pair resources: irq:37 memory:d0100000-d011ffff ioport:2000(size=32) memory:d0120000-d0123fff *-pci:2 description: PCI bridge product: Family 16h Processor Functions 5:1 vendor: Advanced Micro Devices, Inc. [AMD] physical id: 2.4 bus info: pci@0000:00:02.4 version: 00 width: 32 bits clock: 33MHz capabilities: pci pm pciexpress msi ht normal_decode bus_master cap_list configuration: driver=pcieport resources: irq:29 ioport:3000(size=4096) memory:d0200000-d02fffff *-network description: Ethernet interface product: I210 Gigabit Network Connection vendor: Intel Corporation physical id: 0 bus info: pci@0000:03:00.0 logical name: enp3s0 version: 03 serial: 00:0d:b9:5e:95:4a size: 100Mbit/s capacity: 1Gbit/s width: 32 bits clock: 33MHz capabilities: pm msi msix pciexpress bus_master cap_list ethernet physical tp 10bt 10bt-fd 100bt 100bt-fd 1000bt-fd autonegotiation configuration: autonegotiation=on broadcast=yes driver=igb driverversion=6.3.0-1-amd64 duplex=full firmware=0. 6-5 ip=10.42.0.1 latency=0 link=yes multicast=yes port=twisted pair speed=100Mbit/s resources: irq:43 memory:d0200000-d021ffff ioport:3000(size=32) memory:d0220000-d0223fff *-generic:1 description: Encryption controller product: Kabini/Mullins PSP-Platform Security Processor vendor: Advanced Micro Devices, Inc. [AMD] physical id: 8 bus info: pci@0000:00:08.0 version: 00 width: 64 bits clock: 33MHz capabilities: msix ht pm bus_master cap_list configuration: driver=ccp latency=0 resources: irq:0 memory:d0500000-d051ffff memory:d0300000-d03fffff memory:d0524000-d0524fff memory:d0400000-d04fffff memory:d0520000-d0521fff *-usb:0 description: USB controller product: FCH USB XHCI Controller vendor: Advanced Micro Devices, Inc. [AMD] physical id: 10 bus info: pci@0000:00:10.0 version: 11 width: 64 bits clock: 33MHz capabilities: pm msi msix pciexpress xhci bus_master cap_list configuration: driver=xhci_hcd latency=0 resources: irq:18 memory:d0522000-d0523fff *-usbhost:0 product: xHCI Host Controller vendor: Linux 6.3.0-1-amd64 xhci-hcd physical id: 0 bus info: usb@2 logical name: usb2 version: 6.03 capabilities: usb-2.00 configuration: driver=hub slots=2 speed=480Mbit/s *-usbhost:1 product: xHCI Host Controller vendor: Linux 6.3.0-1-amd64 xhci-hcd physical id: 1 bus info: usb@3 logical name: usb3 version: 6.03 capabilities: usb-3.00 configuration: driver=hub slots=2 speed=5000Mbit/s *-usb description: Mass storage device product: USB Storage vendor: Generic physical id: 2 bus info: usb@3:2 logical name: scsi2 version: 12.06 serial: 000000001206 capabilities: usb-3.00 scsi emulated configuration: driver=usb-storage maxpower=896mA speed=5000Mbit/s *-disk description: SCSI Disk product: STORAGE DEVICE vendor: Generic physical id: 0.0.0 bus info: scsi@2:0.0.0 logical name: /dev/sda version: 1206 serial: 000000001206 size: 238GiB (255GB) capabilities: removable configuration: ansiversion=6 logicalsectorsize=512 sectorsize=512 *-medium physical id: 0 logical name: /dev/sda size: 238GiB (255GB) capabilities: partitioned partitioned:dos configuration: signature=19e1b452 *-volume description: Linux filesystem partition physical id: 1 logical name: /dev/sda1 logical name: / logical name: /.snapshots capacity: 238GiB capabilities: primary bootable configuration: mount.fstype=btrfs mount.options=rw,relatime,compress=zstd:1,space_cache=v2,subvolid=256,subvol=/.snapshots state=mounted *-sata description: SATA controller product: FCH SATA Controller [AHCI mode] vendor: Advanced Micro Devices, Inc. [AMD] physical id: 11 bus info: pci@0000:00:11.0 version: 40 width: 32 bits clock: 66MHz capabilities: sata pm ahci_1.0 bus_master cap_list configuration: driver=ahci latency=64 resources: irq:19 ioport:4010(size=8) ioport:4020(size=4) ioport:4018(size=8) ioport:4024(size=4) ioport:4000(size=16) memory:d0525000-d05253ff *-usb:1 description: USB controller product: FCH USB EHCI Controller vendor: Advanced Micro Devices, Inc. [AMD] physical id: 13 bus info: pci@0000:00:13.0 version: 39 width: 32 bits clock: 66MHz capabilities: pm debug ehci bus_master cap_list configuration: driver=ehci-pci latency=64 resources: irq:18 memory:d0526000-d05260ff *-usbhost product: EHCI Host Controller vendor: Linux 6.3.0-1-amd64 ehci_hcd physical id: 1 bus info: usb@1 logical name: usb1 version: 6.03 capabilities: usb-2.00 configuration: driver=hub slots=2 speed=480Mbit/s *-usb description: USB hub product: Root Hub vendor: Advanced Micro Devices, Inc. physical id: 1 bus info: usb@1:1 version: 0.18 capabilities: usb-2.00 configuration: driver=hub maxpower=100mA slots=4 speed=480Mbit/s *-serial description: SMBus product: FCH SMBus Controller vendor: Advanced Micro Devices, Inc. [AMD] physical id: 14 bus info: pci@0000:00:14.0 version: 42 width: 32 bits clock: 66MHz configuration: driver=piix4_smbus latency=0 resources: irq:0 *-isa description: ISA bridge product: FCH LPC Bridge vendor: Advanced Micro Devices, Inc. [AMD] physical id: 14.3 bus info: pci@0000:00:14.3 version: 11 width: 32 bits clock: 66MHz capabilities: isa bus_master configuration: latency=0 *-pnp00:00 product: PnP device PNP0c02 physical id: 0 capabilities: pnp configuration: driver=system *-pnp00:01 product: PnP device PNP0b00 physical id: 1 capabilities: pnp configuration: driver=rtc_cmos *-pnp00:02 product: PnP device PNP0501 physical id: 2 capabilities: pnp configuration: driver=serial *-pnp00:03 product: PnP device PNP0501 physical id: 3 capabilities: pnp configuration: driver=serial *-generic:2 description: MMC Host product: FCH SD Flash Controller vendor: Advanced Micro Devices, Inc. [AMD] physical id: 14.7 bus info: pci@0000:00:14.7 logical name: mmc0 version: 01 width: 64 bits clock: 66MHz capabilities: bus_master configuration: driver=sdhci-pci latency=71 resources: irq:16 memory:d0527000-d05270ff *-pci:1 description: Host bridge product: Family 16h (Models 30h-3fh) Host Bridge vendor: Advanced Micro Devices, Inc. [AMD] physical id: 101 bus info: pci@0000:00:02.0 version: 00 width: 32 bits clock: 33MHz *-pci:2 description: Host bridge product: Family 16h (Models 30h-3fh) Processor Function 0 vendor: Advanced Micro Devices, Inc. [AMD] physical id: 102 bus info: pci@0000:00:18.0 version: 00 width: 32 bits clock: 33MHz *-pci:3 description: Host bridge product: Family 16h (Models 30h-3fh) Processor Function 1 vendor: Advanced Micro Devices, Inc. [AMD] physical id: 103 bus info: pci@0000:00:18.1 version: 00 width: 32 bits clock: 33MHz *-pci:4 description: Host bridge product: Family 16h (Models 30h-3fh) Processor Function 2 vendor: Advanced Micro Devices, Inc. [AMD] physical id: 104 bus info: pci@0000:00:18.2 version: 00 width: 32 bits clock: 33MHz *-pci:5 description: Host bridge product: Family 16h (Models 30h-3fh) Processor Function 3 vendor: Advanced Micro Devices, Inc. [AMD] physical id: 105 bus info: pci@0000:00:18.3 version: 00 width: 32 bits clock: 33MHz configuration: driver=k10temp resources: irq:0 *-pci:6 description: Host bridge product: Family 16h (Models 30h-3fh) Processor Function 4 vendor: Advanced Micro Devices, Inc. [AMD] physical id: 106 bus info: pci@0000:00:18.4 version: 00 width: 32 bits clock: 33MHz configuration: driver=fam15h_power resources: irq:0 *-pci:7 description: Host bridge product: Family 16h (Models 30h-3fh) Processor Function 5 vendor: Advanced Micro Devices, Inc. [AMD] physical id: 107 bus info: pci@0000:00:18.5 version: 00 width: 32 bits clock: 33MHz *-input:0 product: PRP0001:00 physical id: 1 logical name: input0 logical name: /dev/input/event0 capabilities: platform *-input:1 product: Power Button physical id: 2 logical name: input1 logical name: /dev/input/event1 capabilities: platform *-input:2 product: PC Speaker physical id: 3 logical name: input2 logical name: /dev/input/event2 capabilities: isa _______________________________________________ Freedombox-discuss mailing list Freedombox-discuss@alioth-lists.debian.net https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/freedombox-discuss