What they would (and do) sign-off on is a one-time purchase of a desktop from an approved vendor for that desktop, which comes with out-of-the-box support for the NVIDIA GPU I've selected. That's more the niche that I feel System76 is really filling.
If the purchaser does not want Dasharo, they can usually compile their own non-Dasharo coreboot and flash it themselves.
Are Purism and System76 using "the same" coreboot based on a reproducible build of an identical release binary?
Usually each laptop OEM ships a unique downstream tree and release build of firmware (UEFI or coreboot), optimized for their hardware and features, similar to the relationship between RedHat/Debian/Android kernels and the mainline Linux kernel.
The main (only?) selling point for NovaCustom is open source coreboot firmware and disabling of Intel ME.
I'd like to see Framework laptop with these features, but those two features do not make a Framework alternative.
- Disabled IME
- Coreboot EDK or Heads
- Removed Camera and Microphone
- Buskill kit
- Privacyscreen
- Tamper-evident Screws and Packaging
Also it's officially certified to run Qubes OS.
NVIDIA, though? We are still a good few months, or years, away from attempting to seriously use NVIDIA and Linux in the same sentence without looking like a complete idiot.
I don't feel like a complete idiot, but now you're making me wonder. What's your experience been?
Good Linux support though.
What am I missing here..?
>Framework. vPro Enterprise Framework devices actually meet HSI level 4, but they unfortunately do not handle firmware updates properly. They have not shipped a single firmware for their 13th generation over a year since its release date, and over 6 months since the disclosure of LogoFail. While they do ship some updates for other devices, how they have been handling so far is not acceptable if you need a secure device.
Using open boot and a neutered Intel ME is a good start but nothing too unique nowadays.
Also at this point hardware privacy is all well and good but if you are going to dump stock Windows 11 on it, well it is called Windows for a reason, lets all your data out of one.
- Clevo ODM laptops with coreboot (OEM: NovaCustom, Purism, System76)
- Some (?) pricy Dell Rugged laptops, at purchase time
- Some (?) standard HP business laptops, via BIOSI was content with 8GB of main RAM in my dev laptop until about a year ago.
But if you don't need to run LLM's these will be fine.
When Apple and AMD sell very descent laptop hardware (M4 or Ryzen AI Max), I find the Intel/Nvidia combo with only 8GB a bit conservative.
and also ships with nvidia gpu
I might have found a new laptop…
but I meant the actual sticker on the keycap (very silly requirement, I know)
I swear that hipster marketing has ruined HN's ability to evaluate products. Next you people are going to start bitching about the logo not lighting up.