Table of Contents
1. Property P4 — No hidden persistent storage writable by the OEM
- Objective :: Every block that the Linux kernel can address on the internal SSD must be accounted for by partition table + LUKS + filesystem headers; no “service partitions” may remain mountable.
- Key-result :: Compare the sum of visible partition sizes with the total physical block count reported by hdparm -I; difference must be ≤ 1 % (allowing for rounding and over-provisioning area).
Test:
#+beginsrc_
physblocks=$(hdparm -I dev/nvme0n1 | awk '/LBA48 {print $4}')
sumvisible=$(blockdev –getsize64 /dev/nvme0n1p* | awk '{s+=$1} END{print s/512}')
echo $physblocks $sumvisible | awk '{printf "%.2f %%\n", 100*($1-$2)/$1}'
#+endsrc
Expected output:
≤ 1 %
Tonight’s executable test bash Copy
phys=$(sudo nvme id-ns -H dev/nvme0n1 | awk '/nsze {print \(5}') phys_bytes=\)((phys * 512))
visbytes=$(lsblk -b -o SIZE /dev/nvme0n1p* | awk '{s+=$1} END{print s}')
awk -v p=$physbytes -v v=$visbytes 'BEGIN{printf "%.2f %%\n", 100*(p-v)/p}' Expected stdout ≤ 1 % If the delta is larger, re-check with nvme format -n 1 (destructive) and re-install. Publish the exact command sequence – it is copy-pasteable.