A Few Notes on the Lenovo Tiny M700,M800,M900 Running Debian 12 Linux

Lenovo Tiny Desktops running Debian 12 Linux
Kernel : 6.1.0-33-amd64




Lenovo produced and produces a range of "tiny" desktops, eg m700,m800,m900, m73 etc that are available in various formats. M900 and presumably later models have an inbuilt wifi as well as the ethernet NIC. These are available new and second hand at competitive prices.
The "tiny" format is well engineered and accessible m900 teardown .
These pcs run Linux well, but there can be show-stoppers, a few of which I'll mention. The UEFI bios cannot be disabled, and as usual
the UEFI bios has its usual quota of quirks. The following are the things encountered with the fixes that worked.

1: Debian 12 boot disk fails with:

"Verifying shim SBAT data failed: Security Policy Violation Something has gone seriously wrong: SBAT self-check failed: Security Policy Violation"

Building a new boot disk with its intended "/" partition upgraded using "apt update; apt upgrade" worked. See shim.

2: Boot of installed partition fails with ALERT! /dev/disk/by-uuid/xxxxxxxxx does not exist. Dropping to a shell".

The fix was to edit /etc/initramfs-tools/conf.d/resume on the target partition and replace
"RESUME=UUID=??-whatever??-"
with "RESUME=none".
After this initramfs needs to be updated by mounting the target partition ,chroot to it then running
update-initramfs -u
update-grub