The "certified" program is stupid in its current form I agree but what
is stopping you from buying a dell business or hpe machine with
iommu/TPM and using that? Nobody says you have to buy stuff from
whatever company gives kickbacks. (purism "coreboot" with FSP is just a
shimboot loader, FSP does all the work so it is far from secure or open
source and it still has ME - dishonest)
If you want a new open source firmware machine that supports adv.
virtualization go hit up IBM, they'll happily sell you a high
performance OpenPOWER8 system with just that, complete with a nice fat
enterprise grade extended support maintenance contract.
Coreboot is hobbyist/embedded pretty much, the reason that only
"outdated" designs are supported is because intel (and now AMD) actively
tries to stop free firmware and people are mostly doing this on their
spare time - it boils down to an issue of funding.
If there were wealthy backers there'd be TALOS type machines on store
shelves complete with a "coreboot + linux" sticker on the front
Just remember that lenovo is not exactly trustworthy, 4x bios rootkits
in the past few years and they're owned by the PRC - the us government
no longer buys them for classified operations computing.
On 11/16/2016 05:35 AM, Achim Patzner wrote:
Am 15.11.2016 um 14:46 schrieb Andrew David Wong:
If you plan to be using the same machines for Qubes 4.x, you should
also take into consideration the updated requirements for
Qubes-certified hardware, which will go into effect for 4.x:
https://www.qubes-os.org/news/2016/07/21/new-hw-certification-for-q4/
These requirements are probably the worst you can do for corporate
users; they prefer "standard hardware"; even I would rather stop using
Qubes than not being able to take any off-the-shelf Lenovo systems but
having to use underperforming boxes from unknown sources. Keep in mind
that the average company doesn't like hardware with broad maintenance
contracts and won't buy outdated designs (and that's about every
system supported by coreboot) either.
Achim
--
You received this message because you are subscribed to the Google Groups
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/qubes-users/28553b7b-0df0-f879-2acf-c7f670ff6324%40gmx.com.
For more options, visit https://groups.google.com/d/optout.
