Lenovo ThinkPad L14 Gen 2 Ryzen 7 PRO 5850U

ThinkPad L14
Recommended CPU AMD Ryzen™ 7 PRO 5850U
Max. memory 64GB (2 slots)
USB controllers 3
Coreboot not tested
Heads not tested
ME_cleaner not applicable
Qubes OS pre-installed no
Developer tested no
Certified no

I can confirm that qubes 4.0.4 is working out of the box on the Lenovo ThinkPad L14 with the Ryzen 7 PRO 5850U processor.

What i can confirm is working:

  • Keyboard brightness control
  • ACPI volume control and mute
  • FN-lock/FN-lock indicator
  • Capslock/Capslock indicator
  • Mousepad
  • Trackpoint
  • ACPI display menu
  • Webcam
  • Microphone
  • Power control
  • Temperature/fanspeed sensors
  • Fanspeed is regulated as expected
  • Ethernet
  • µSD reader
  • Integrated speaker/Headphones (switches as expected)

If have not tested (yet):

  • LTE module
  • Bluetooth module
  • Smartcard reader
  • Infrared camera
  • Dock
  • Fingerprint reader
  • DisplayPort over USB-C
  • Tamper detection

There are some minor restrictions:

  • Integrated wifi module not working
  • Screen brightness control not working
  • rfkill ACPI Event not working
  • Hibernation not working
  • Suspend-to-RAM not working
  • HDMI out not working

In case you are wondering about the battery life:

  • Screen running, full brightness, 4 qubes idling: 3:20 h
  • Netflix FHD streaming, full brightness, wifi, 7 other qubes idling: 2:00 h

My few performance metrics:

  • Boot time: 59 seconds
  • Whonix-ws-16-dvm creating/opening: 7.5 seconds
  • 8 core mkp224o qube does around 16 mio keys/s with one filter

Things worthy of note (at least to me)

  • Captive screws
  • Additionally shielded module bays and RAM slots
  • Thermal design routes heat around the battery
  • Screen gets notable blackbleed temporarily while closing/opening the lid
  • Screen is embedded in plastic shell, not thin flexible tape
  • Sliding webcam cover only covers the normal camera, not the IR one
  • There is a tamper detection feature

Qubes-HCL-LENOVO-20X50049GE-20211003-082549.yml (864 Bytes)

3 Likes

I suspect that these would be more than just minor restrictions for most users.

Are you sure this laptop has 3 controllers, not just 3 USB ports connected to the same controller?

Thanks for your report!

I would agree. That is why i wrote it in italic. It is minor imo as all the security related features seem to work.

Having to use an external wifi is really becoming a pain in the ass.

I am not that much into “USB controllers” so here is what lspci tells me:

00:00.0 Host bridge: Advanced Micro Devices, Inc. [AMD] Device 1630
00:00.2 IOMMU: Advanced Micro Devices, Inc. [AMD] Device 1631
00:01.0 Host bridge: Advanced Micro Devices, Inc. [AMD] Device 1632
00:02.0 Host bridge: Advanced Micro Devices, Inc. [AMD] Device 1632
00:02.1 PCI bridge: Advanced Micro Devices, Inc. [AMD] Device 1634
00:02.2 PCI bridge: Advanced Micro Devices, Inc. [AMD] Device 1634
00:02.3 PCI bridge: Advanced Micro Devices, Inc. [AMD] Device 1634
00:02.4 PCI bridge: Advanced Micro Devices, Inc. [AMD] Device 1634
00:02.6 PCI bridge: Advanced Micro Devices, Inc. [AMD] Device 1634
00:08.0 Host bridge: Advanced Micro Devices, Inc. [AMD] Device 1632
00:08.1 PCI bridge: Advanced Micro Devices, Inc. [AMD] Device 1635
00:14.0 SMBus: Advanced Micro Devices, Inc. [AMD] FCH SMBus Controller (rev 51)
00:14.3 ISA bridge: Advanced Micro Devices, Inc. [AMD] FCH LPC Bridge (rev 51)
00:18.0 Host bridge: Advanced Micro Devices, Inc. [AMD] Device 166a
00:18.1 Host bridge: Advanced Micro Devices, Inc. [AMD] Device 166b
00:18.2 Host bridge: Advanced Micro Devices, Inc. [AMD] Device 166c
00:18.3 Host bridge: Advanced Micro Devices, Inc. [AMD] Device 166d
00:18.4 Host bridge: Advanced Micro Devices, Inc. [AMD] Device 166e
00:18.5 Host bridge: Advanced Micro Devices, Inc. [AMD] Device 166f
00:18.6 Host bridge: Advanced Micro Devices, Inc. [AMD] Device 1670
00:18.7 Host bridge: Advanced Micro Devices, Inc. [AMD] Device 1671
01:00.0 Non-Volatile memory controller: Sandisk Corp Device 5006
02:00.0 Ethernet controller: Realtek Semiconductor Co., Ltd. RTL8111/8168/8411 PCI Express Gigabit Ethernet Controller (rev 0e)
03:00.0 Network controller: Realtek Semiconductor Co., Ltd. Device 8852
04:00.0 SD Host controller: O2 Micro, Inc. SD/MMC Card Reader Controller (rev 01)
06:00.0 USB controller: Renesas Technology Corp. uPD720202 USB 3.0 Host Controller (rev 02)
07:00.0 VGA compatible controller: Advanced Micro Devices, Inc. [AMD/ATI] Device 1638 (rev d1)
07:00.1 Audio device: Advanced Micro Devices, Inc. [AMD/ATI] Device 1637
07:00.2 Encryption controller: Advanced Micro Devices, Inc. [AMD] Device 15df
07:00.3 USB controller: Advanced Micro Devices, Inc. [AMD] Device 1639
07:00.4 USB controller: Advanced Micro Devices, Inc. [AMD] Device 1639
07:00.5 Multimedia controller: Advanced Micro Devices, Inc. [AMD] Device 15e2 (rev 01)
07:00.6 Audio device: Advanced Micro Devices, Inc. [AMD] Device 15e3

So from what i understand, it might be 2 Controllers? Or 3?

I’m not sure if the lspci info alone is enough to tell what’s going on. You could try creating separate sys-usb’s for each controller. Then you could try to map physical USB ports to them.

Something which often goes unexpressed because it’s more a thing that Engineers know, check out 07:00.x. The bulk of those items likely are grouped under the heading 07:00 because they are behind what is referred to as a bridge & basically this can lead to problems in accessing individual items in an isolated way - big trouble usually for secure access & hence Qubes. When providing basic utility & working with Windows this usually poses no problem at all, but…this isn’t Windows.

So perhaps there are three independent controllers but…two of them being behind a bridge may lead to it being best to accept that you really only have two (effectively). Without knowing the truth about the internals & being a bit of an EE or equivalent, you can mostly speculate.

Based on my experience with older Renoir 4750u (T14), AMD GPU support is buggy in dom0 kernels from 5.15.x to 5.19.x… the GUI compositor crashes after several hours of use.

Kernel 5.10.x has been stable for a long time, but don’t know if that would support ZEN3.

Kernel 6.0.2 (the ‘kernel-latest’ package) has been running on my system for a few days and appears much more stable than 5.15/5.19 and might be as good as 5.10.

Hope this helps.

1 Like