Purism, the computer reseller specialised in selling Linux laptops, research that the most recent mannequin of the Qubes OS security-focused desktop working gadget can now be put in with none issues or warnings on its Librem pc sequence.
Last 12 months, Purism started transport coreboot-enabled Librem laptops, and it gained some fascinating feedback from customers who bought them and tried to place in early unencumber candidate pictures of the Qubes 4.zero working gadget, reporting that the Qubes OS installer complained about IOMMU reinforce.
Apparently, IOMMU reinforce wasn’t available in Intel’s Skylake processors that powered Purism’s Librem laptops, nonetheless it’s supported by way of the coreboot firmware, beforehand known as LinuxBIOS, so the company wanted to update its laptops to the latest coreboot release, which lets prospects arrange Qubes OS 4.zero with none warnings.
“Starting with Qubes 4.0, the installer will warn users if their computers do not support certain CPU features such as IOMMU. While you can ignore the warning and complete the install, certain VMs with PCI devices attached such as sys-net and sys-usb will not start unless you change their virtualization mode from HVM to PV, bypassing the protections IOMMU provides,” says Kyle Rankin.
Initial TPM reinforce landed in Purism’s Librem laptops
Purism says that it’s nowadays nonetheless trying out the model new coreboot image with IOMMU reinforce for its Librem laptops, and may shortly start to offer it with all new pc shipments. Therefore, when you want to buy a Librem pc from Purism and must arrange Qubes OS 4.zero on it, you’ll have to wait a bit additional for the updated line-up.
Meanwhile, it looks as if Purism plans add coreboot reinforce for TPM (Trusted Platform Module) to its Librem laptops, and use the TMP with Heads period to supply customers tamper-proofing in opposition to malware which may compromise the kernel, bootloader, and even the BIOS of their Linux-powered laptops.