devsetup1-4  Exercise 1: Checks Before Changing Anything
=========================================================

COMMANDS
--------
    lspci -k | grep -A3 -i 'vga\|3d'
    sudo apt install mokutil        # only if mokutil is missing
    mokutil --sb-state
    uname -r

EXAMPLE OF WHAT YOU MIGHT SEE (yours will differ)
-------------------------------------------------
    01:00.0 VGA compatible controller: NVIDIA Corporation GA107 [GeForce RTX 3050 6GB] ...
            Kernel driver in use: nouveau
            Kernel modules: nvidiafb, nouveau

    SecureBoot enabled

    6.12.xx+deb13-amd64

The four facts, and what each one tells you:

1. GPU as reported by lspci
   Expected: an NVIDIA device. This proves the card is seated and detected.
   If no NVIDIA line appears at all, STOP: reseat the card, check the primary
   display setting in the BIOS/UEFI, and check the monitor is plugged into the
   card. Nothing else in the chapter can work until this is fixed.

2. Driver currently in use
   Usually "nouveau" on a fresh install. That means the free driver is
   running and the proprietary one is not installed yet, so Steps 2 and 3 are
   needed. If it already says "nvidia", the driver is installed and you only
   need the verification steps.

3. Secure Boot state
   "SecureBoot enabled"  -> Step 5 (enrol the Machine Owner Key) IS needed.
   "SecureBoot disabled" -> Step 5 can be skipped.

4. Running kernel
   Note it (for example 6.12.xx+deb13-amd64). After installing the driver,
   dkms status must show an nvidia entry for THIS kernel. It also confirms you
   are on Trixie's default kernel rather than a backports kernel.

WHICH STEPS YOU NEED (typical result: nouveau in use, Secure Boot enabled)
--------------------------------------------------------------------------
    Step 1  Check            done (this exercise)
    Step 2  Enable non-free  needed (nvidia-driver is not visible until then)
    Step 3  Install driver   needed
    Step 4  Wayland setting  check the modeset value after the first reboot;
                             change only if it prints N
    Step 5  Secure Boot MOK  needed only if Secure Boot is enabled
    Step 6  Verify           needed

WHY THIS WORKS AS AN ANSWER
---------------------------
Each fact removes a guess. It turns the chapter from a fixed recipe into a
plan that fits this machine, and it records the "before" state so you can tell
afterwards what the installation actually changed.