baflya
October 3, 2021, 10:01am
1
ThinkPad L14
Recommended CPU
AMD Ryzen™ 7 PRO 5850U
Max. memory
64GB (2 slots)
USB controllers
3
Coreboot
not tested
Heads
not tested
ME_cleaner
not applicable
Qubes OS pre-installed
no
Developer tested
no
Certified
no
I can confirm that qubes 4.0.4 is working out of the box on the Lenovo ThinkPad L14 with the Ryzen 7 PRO 5850U processor.
What i can confirm is working:
Keyboard brightness control
ACPI volume control and mute
FN-lock/FN-lock indicator
Capslock/Capslock indicator
Mousepad
Trackpoint
ACPI display menu
Webcam
Microphone
Power control
Temperature/fanspeed sensors
Fanspeed is regulated as expected
Ethernet
µSD reader
Integrated speaker/Headphones (switches as expected)
If have not tested (yet):
LTE module
Bluetooth module
Smartcard reader
Infrared camera
Dock
Fingerprint reader
DisplayPort over USB-C
Tamper detection
There are some minor restrictions:
Integrated wifi module not working
Screen brightness control not working
rfkill ACPI Event not working
Hibernation not working
Suspend-to-RAM not working
HDMI out not working
In case you are wondering about the battery life:
Screen running, full brightness, 4 qubes idling: 3:20 h
Netflix FHD streaming, full brightness, wifi, 7 other qubes idling: 2:00 h
My few performance metrics:
Boot time: 59 seconds
Whonix-ws-16-dvm creating/opening: 7.5 seconds
8 core mkp224o qube does around 16 mio keys/s with one filter
Things worthy of note (at least to me)
Captive screws
Additionally shielded module bays and RAM slots
Thermal design routes heat around the battery
Screen gets notable blackbleed temporarily while closing/opening the lid
Screen is embedded in plastic shell, not thin flexible tape
Sliding webcam cover only covers the normal camera, not the IR one
There is a tamper detection feature
Qubes-HCL-LENOVO-20X50049GE-20211003-082549.yml (864 Bytes)
3 Likes
I suspect that these would be more than just minor restrictions for most users.
baflya:
USB controllers 3
Are you sure this laptop has 3 controllers, not just 3 USB ports connected to the same controller?
Thanks for your report!
baflya
November 14, 2021, 9:59am
3
I would agree. That is why i wrote it in italic. It is minor imo as all the security related features seem to work.
Having to use an external wifi is really becoming a pain in the ass.
I am not that much into “USB controllers” so here is what lspci
tells me:
00:00.0 Host bridge: Advanced Micro Devices, Inc. [AMD] Device 1630
00:00.2 IOMMU: Advanced Micro Devices, Inc. [AMD] Device 1631
00:01.0 Host bridge: Advanced Micro Devices, Inc. [AMD] Device 1632
00:02.0 Host bridge: Advanced Micro Devices, Inc. [AMD] Device 1632
00:02.1 PCI bridge: Advanced Micro Devices, Inc. [AMD] Device 1634
00:02.2 PCI bridge: Advanced Micro Devices, Inc. [AMD] Device 1634
00:02.3 PCI bridge: Advanced Micro Devices, Inc. [AMD] Device 1634
00:02.4 PCI bridge: Advanced Micro Devices, Inc. [AMD] Device 1634
00:02.6 PCI bridge: Advanced Micro Devices, Inc. [AMD] Device 1634
00:08.0 Host bridge: Advanced Micro Devices, Inc. [AMD] Device 1632
00:08.1 PCI bridge: Advanced Micro Devices, Inc. [AMD] Device 1635
00:14.0 SMBus: Advanced Micro Devices, Inc. [AMD] FCH SMBus Controller (rev 51)
00:14.3 ISA bridge: Advanced Micro Devices, Inc. [AMD] FCH LPC Bridge (rev 51)
00:18.0 Host bridge: Advanced Micro Devices, Inc. [AMD] Device 166a
00:18.1 Host bridge: Advanced Micro Devices, Inc. [AMD] Device 166b
00:18.2 Host bridge: Advanced Micro Devices, Inc. [AMD] Device 166c
00:18.3 Host bridge: Advanced Micro Devices, Inc. [AMD] Device 166d
00:18.4 Host bridge: Advanced Micro Devices, Inc. [AMD] Device 166e
00:18.5 Host bridge: Advanced Micro Devices, Inc. [AMD] Device 166f
00:18.6 Host bridge: Advanced Micro Devices, Inc. [AMD] Device 1670
00:18.7 Host bridge: Advanced Micro Devices, Inc. [AMD] Device 1671
01:00.0 Non-Volatile memory controller: Sandisk Corp Device 5006
02:00.0 Ethernet controller: Realtek Semiconductor Co., Ltd. RTL8111/8168/8411 PCI Express Gigabit Ethernet Controller (rev 0e)
03:00.0 Network controller: Realtek Semiconductor Co., Ltd. Device 8852
04:00.0 SD Host controller: O2 Micro, Inc. SD/MMC Card Reader Controller (rev 01)
06:00.0 USB controller: Renesas Technology Corp. uPD720202 USB 3.0 Host Controller (rev 02)
07:00.0 VGA compatible controller: Advanced Micro Devices, Inc. [AMD/ATI] Device 1638 (rev d1)
07:00.1 Audio device: Advanced Micro Devices, Inc. [AMD/ATI] Device 1637
07:00.2 Encryption controller: Advanced Micro Devices, Inc. [AMD] Device 15df
07:00.3 USB controller: Advanced Micro Devices, Inc. [AMD] Device 1639
07:00.4 USB controller: Advanced Micro Devices, Inc. [AMD] Device 1639
07:00.5 Multimedia controller: Advanced Micro Devices, Inc. [AMD] Device 15e2 (rev 01)
07:00.6 Audio device: Advanced Micro Devices, Inc. [AMD] Device 15e3
So from what i understand, it might be 2 Controllers? Or 3?
I’m not sure if the lspci
info alone is enough to tell what’s going on. You could try creating separate sys-usb’s for each controller. Then you could try to map physical USB ports to them.
Something which often goes unexpressed because it’s more a thing that Engineers know, check out 07:00.x. The bulk of those items likely are grouped under the heading 07:00 because they are behind what is referred to as a bridge & basically this can lead to problems in accessing individual items in an isolated way - big trouble usually for secure access & hence Qubes. When providing basic utility & working with Windows this usually poses no problem at all, but…this isn’t Windows.
So perhaps there are three independent controllers but…two of them being behind a bridge may lead to it being best to accept that you really only have two (effectively). Without knowing the truth about the internals & being a bit of an EE or equivalent, you can mostly speculate.
tasket
October 23, 2022, 11:31pm
6
Based on my experience with older Renoir 4750u (T14), AMD GPU support is buggy in dom0 kernels from 5.15.x to 5.19.x… the GUI compositor crashes after several hours of use.
Kernel 5.10.x has been stable for a long time, but don’t know if that would support ZEN3.
Kernel 6.0.2 (the ‘kernel-latest’ package) has been running on my system for a few days and appears much more stable than 5.15/5.19 and might be as good as 5.10.
Hope this helps.
1 Like