On Friday, August 10, 2018 at 5:00:43 PM UTC+3, jonbrown...@gmail.com wrote:
> Heyo,
> 
> I am looking for the best laptop for Qubes 4.0+ to take advantage of all the 
> features along with Heads. I know Heads only officially supports Lenovo 
> Thinkpad 230 but is that the best choice to future proof myself and take 
> advantage of all security benefits?
> 
> How is the 230 on the binary blob front and other firmware? Is there any 
> other technology besides Heads that could enhance Qubes or provide 
> better/additional protection?
> 
> Here is more info on Heads http://osresearch.net/
> 
> Any help is greatly appreciated.

I use x220 tablet and it is great laptop for Qubes OS 4

1. Heads support (no problems, easy install, works on my machine, many great 
features kexec etc)
https://github.com/osresearch/heads/tree/master/blobs/x220

Alternative :
https://git.lsd.cat/g/thinkpad-coreboot-qubes

ME disabled (works!)

2. Tomu support (30$ ) (works fine!)
https://www.crowdsupply.com/sutajio-kosagi/tomu

porting gnuk to tomu (opensource analog yubikey, needed to use heads)

https://github.com/osresearch/heads-wiki/blob/master/GPG.md

Dev: https://github.com/aze00/gnuk/tree/efm32
PR: https://github.com/im-tomu/tomu-samples/pull/35
Issue: https://github.com/im-tomu/tomu-samples/issues/4

Alternative - Nitrokey
https://shop.nitrokey.com/shop/product/nitrokey-start-6 (based on gnuk)

3. https://inversepath.com/usbarmory nice compatibility (works without any 
issues)

4. for good work you need a bundle i7 2gen, 16 RAM and good SSD disk ( I 
completely lack 256 gigabytes )

main templates : 
archlinux
artful
bionic
centos-7
debian-9
dev (buster)
fedora-28
kali-rolling
void-template
whonix-ws-14
whonix-gw-14

works fine and easy build from https://github.com/QubesOS/qubes-builder

+ 8-10 services (vpn,tor,wireguard etc)
+ 3-4 disp vm's (internet browsing)
+ 8+10 domains

Total disk usage : 20.4%
lvm : 36.2%  77.4GB/213.8GB

So, 256GB is enough.

5. You can use it like tablet ;)

https://github.com/martin-ueding/thinkpad-scripts

rotate/touchscreen works great and works on every VM machine.

6. TPM ownership/reset (work!)

7. 10 open vms

temp 52 
fan 3496 rpm

8. +3G modem or raspberry pi features

Cheers!

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/58d09c29-c1a7-41f9-a76a-9903da01b621%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to