Has anyone got Qubes working on the Framework Laptop?
NixOS on Framework Laptop
81–90 of 250 posts
Re: NixOS on Framework Laptop
#82Is Framework already too big to fail with all this momentum? I really hope so. It's essentially the new Thinkpad.
I'd hesitate to call Framework the new ThinkPad until it adopts the ThinkPad's defining feature, the TrackPoint.
There's a ton of interest, just hoping that it could happen in some form:
https://community.frame.work/t/any-chance-of-trackpoint/1026
Re: NixOS on Framework Laptop
#83Apologies I’m a bit late to the Framework conversation: Are third parties able to make replacement parts and dongles with Framework’s blessing? Or are they trying to lock in the parts market?
We launched an Expansion Card Developer Program this summer as a first step at enabling third parties: https://frame.work/blog/expansion-card-developer-program--ca...
Re: NixOS on Framework Laptop
#84Apologies I’m a bit late to the Framework conversation: Are third parties able to make replacement parts and dongles with Framework’s blessing? Or are they trying to lock in the parts market?
Yep, Framework (as far as I remember) intends to even create a public marketplace for people to sell custom-made addon cards. They have the dimensions on their github and make it pretty easy.
Re: NixOS on Framework Laptop
#85Re: NixOS on Framework Laptop
#86Framework + NixOS is the most exciting hardware + OS going IMHO. If someone wants to do a crowdfunding or devpay or similar to make them work out of the box together, I will gladly donate or pay.
Possibly of interest: SimulaVR (www.simulavr.com) is about to release a crowdfunding campaign for a portable Linux VR headset which will run NixOS stock under the hood (basically NixOS + Simula's window manager).
Re: NixOS on Framework Laptop
#87Earlier quoted context omitted.
It's not what you're asking but I wonder if NixOS's hardware repo could expand to support Framework with some good defaults That being said, I think there could be a good use case for "meta" NixOS distributions. I'm working on such a thing for a NixOS based RetroArch type thing. But could see a PopOS like configuration, focused on on an “out the box experience” https://github.com/NixOS/nixos-hardware
Yes. Anyone with the hardware is welcome to contribute to nixos-hardware! Even "no-op empty configs" are good imo as they show "there's no magic sauce needed".
good to know; didn't think about "empty" configs
Re: NixOS on Framework Laptop
#88> Mozilla requires LUKS full-disk encryption, and having it setup conflicted with NVidia’s proprietary driver I’ve seen this warning in the Ubuntu docs. Can someone explain exactly why a GPU driver would cause issues with disk encryption and UEFI boot?
n=1, but I've run fully-encrypted and /boot-encrypted Linux installs with the proprietary Nvidia-drivers without any issues.
Of course the low-quality binary blobs Nvidia ships can always contain some annoying bugs, so maybe this was fixed already and the author is just cautious or maybe I will run into those problems eventually.
I don't think it's a problem with the current iterations of Nvidia/Linux, though.
As for what can cause the problem, I have several ideas:
- Secure boot and code verification breaking driver loading
- The Nvidia driver, loaded during early startup, freaking out about config files not existing
- Some kind of handover problem between the fallback VGA driver and the proprietary blob that wouldn't exist if the boot files would be available from the bootloader directly
- Nvidia is known to track boot state in their GPU firmware (one way they used to prevent virtualizing consumer GPUs) so it could be related to a second attempt to initialize the GPU
Re: NixOS on Framework Laptop
#89Apologies I’m a bit late to the Framework conversation: Are third parties able to make replacement parts and dongles with Framework’s blessing? Or are they trying to lock in the parts market?
The "expansion port" appears to be a sunken USB-C port that you can plug any old USB-C cable into.
Re: NixOS on Framework Laptop
#90Earlier quoted context omitted.
Doesn't running /boot without encryption open up a class of attacks?
Certainly. Security is always a balancing act. My primary concern is laptop being taken when traveling by Air or stolen. Encrypted root covers that, even with boot un-encrypted Unencrypted boot leaves me vulnerable to a malicious actor taking my laptop, modifing grub and/or linux kernel to send and/or store my password to unlock the boot volume and then handing my laptop back and me typing in my un-lock password Poss…
This is the "Evil maid attack" [1] but it is avoidable. If you have Secure Boot enabled and are properly signing your Bootloader + anything it launches then your machine would just refuse to boot if anyone tampered with critical files in /boot.
The issue I have seen is that a LOT of BIOS (at least on desktop machines) seem to just let you reset the secure boot enforcement status via the BIOS reset jumper... which defeats the point although it does raise the physical access requirement to a longer duration.