Re: [qubes-users] Qubes Certified Desktop

Fri, 01 May 2020 02:00:13 -0700 


On May 1, 2020 8:40:57 AM UTC, Anil <[email protected]> wrote:
>> Nope I can't.  You would have to search around for parts following
>this doc, do some soldering to adapt spi chip, buy it, reprogram it
>with firmware built from source, buy compatible RAM and fastest CPU,
>case, power supply and ssd. Information is scattered around. When I
>said adventurous, I meant adventurous.
>
>OK. That means I will have to first spend some time learning more
>about this. I can do the soldering, if I know exactly (or find out)
>what has to be soldered to what.
>
>>
>> Port and upstreamed doc
>> https://www.raptorengineering.com/coreboot/kgpe-d16-status.php
>>
>> https://libreboot.org/docs/hardware/kgpe-d16.html
>>
>> Build instructions are valid:
>> http://osresearch.net/Building
>>
>> Status report on heads. No TPM support as of now. But rom can be
>remotely attested by libremkey if really really adventurous without a
>TPM. Less secure since no internal root of trust. TPM is desired.
>> https://github.com/osresearch/heads/issues/134
>
>This will certainly help. Thanks.
>
>>
>> It needs adventurous developers or funding to get mainstreamed. Since
>the board got dropped by coreboot, I lost a bit of interest pushing for
>that last blob free platform in this lonely path. There is developers
>ready to do the needed work to bring it back. But funders refused the
>grant application. Skilled developers are willing to do required work
>to bring it back but I hesitate to completely self fund the whole
>project right now since priorities changed, but would be willing for
>joint partnership.
>>
>> Anyone interested in bringing back that beast to life contact me at
>insurgo at riseup dot net. This is last RYF x86 platform ever for sure.
>
>I strongly hope some people do that. People working on
>laptops/desktops and phones, but not seemingly on servers. It may not
>be for a data centre, but at least some personal website.
>
>> >Or even just as a desktop, will the setup be nearly as secure as
>> >PrivacyBeast?
>>
>> TPM support lacking under coreboot 4.8.1, present under 4.11. Would
>love to see that beast fully supported and would even sell it myself
>under insurgo umbrella. But I wont do it all alone this time. Partners
>welcome.
>
>If I am able to get the hardware and set it up, I can do some routine
>part of the work that is not too technical in the sense of knowing the
>internal details of TPM or OS kernel etc., with some help, if that can
>reduce the effort required.
>
>> Have funds?
>
>Not really. At most I can buy one.
What is weird is that needed work would be the cost of buying 4 already made 
servers if not less. Could reach out to technoethical and Vikings one last 
time, which profited of work that was paid by Leah Rowe originally to sell 
their d16 branded stuff. 

Maybe they would be willing to give back to the community? If you do not have 
funds but some time to spend,  showing your interest to them of this kind of 
partnership would mean the world me, pointing here, and have a total different 
impact then if I was the one contacting them. Potential customers have a lot 
more impact then they think they have. Show that you want something and rust 
thing will exist. Wait for it to happen or do it on your own and it might go 
instinct just like it did and never get revived.

 The actual reason why that board was dropped by coreboot was because not 
enough people showed they cared.for it to be maintained. Maintainership is a 
hard problem.

I'll take this public space since I don't do it enough. Watch my presentation, 
but most importantly, read the slides 45+ attached to the talk: 
https://fosdem.org/2020/schedule/speaker/thierry_laurion/



The more time between a board being dropped upstream under coreboot and the 
time it is put back under compliance the more expensive it will be. Now.would 
be a good time for collaboration. 

If this community showed interest in having a RYF certified server/desktop 
under Heads, it would happen in a snap.

Chicken and egg problems everywhere.
But if everybody showed their interest for it, it.would happen.  See?
>
>Regards,
>
>अनिल एकलव्य
>(Anil Eklavya)

-- 
Sent from my Android device with K-9 Mail. Please excuse my brevity.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/D504D4DD-7E04-446A-83D3-CF704A5C551F%40gmail.com.






















					Reply via email to