New PVE host tool to check for and optionally apply firmware updates
(UEFI/BIOS and supported devices) via fwupd and the Linux Vendor Firmware
Service. Complements microcode.sh, which only handles volatile CPU
microcode.
- Guards for root, supported PVE 8.x/9.x and bare metal (firmware flashing
inside a VM is refused).
- Installs fwupd on demand, refreshes LVFS metadata, lists devices and
available updates, and only applies them after explicit confirmation.
- Clear warnings about flashing risk and reboot requirements.
MickLesk