Found Winbond flash chip "W25Q64.V" (8192 kB, SPI) mapped at physical address 0x00000000ff800000.
This coreboot image (PC Engines:apu2) does not appear to
be correct for the detected mainboard (PC Engines:PCEngines apu2).
Proceeding anyway because user forced us to.
Reading old flash chip contents... done.
Erasing and writing flash chip... Erase/write done.
Verifying flash... VERIFIED.
[root@bs ~]#
There were no problems with the install ( and the use since ).
But I can see an improvement. rngd now runs with HW support ( AMD PSP CCP , fixed since 4.16.0.1 )
a completely uneducated guess: Are you both running the same APU model or revision?
Which is, by the way, also the reason why we cannot drop firmware flashing as a functionality. That causes LSM not to be turned into something meaningful, which means we cannot harden the kernel even further at this time. I guess things are never easy in life…
Still, glad to see all the APUs now have a decent entropy source available.