Lenovo ThinkPad L14 Gen 2 Ryzen 7 PRO 5850U

ThinkPad L14
Recommended CPU AMD Ryzen™ 7 PRO 5850U
Max. memory 64GB (2 slots)
USB controllers 3
Coreboot not tested
Heads not tested
ME_cleaner not applicable
Qubes OS pre-installed no
Developer tested no
Certified no

I can confirm that qubes 4.0.4 is working out of the box on the Lenovo ThinkPad L14 with the Ryzen 7 PRO 5850U processor.

What i can confirm is working:

  • Keyboard brightness control
  • ACPI volume control and mute
  • FN-lock/FN-lock indicator
  • Capslock/Capslock indicator
  • Mousepad
  • Trackpoint
  • ACPI display menu
  • Webcam
  • Microphone
  • Power control
  • Temperature/fanspeed sensors
  • Fanspeed is regulated as expected
  • Ethernet
  • µSD reader
  • Integrated speaker/Headphones (switches as expected)

If have not tested (yet):

  • LTE module
  • Bluetooth module
  • Smartcard reader
  • Infrared camera
  • Dock
  • Fingerprint reader
  • DisplayPort over USB-C
  • Tamper detection

There are some minor restrictions:

  • Integrated wifi module not working
  • Screen brightness control not working
  • rfkill ACPI Event not working
  • Hibernation not working
  • Suspend-to-RAM not working
  • HDMI out not working

In case you are wondering about the battery life:

  • Screen running, full brightness, 4 qubes idling: 3:20 h
  • Netflix FHD streaming, full brightness, wifi, 7 other qubes idling: 2:00 h

My few performance metrics:

  • Boot time: 59 seconds
  • Whonix-ws-16-dvm creating/opening: 7.5 seconds
  • 8 core mkp224o qube does around 16 mio keys/s with one filter

Things worthy of note (at least to me)

  • Captive screws
  • Additionally shielded module bays and RAM slots
  • Thermal design routes heat around the battery
  • Screen gets notable blackbleed temporarily while closing/opening the lid
  • Screen is embedded in plastic shell, not thin flexible tape
  • Sliding webcam cover only covers the normal camera, not the IR one
  • There is a tamper detection feature

Qubes-HCL-LENOVO-20X50049GE-20211003-082549.yml (864 Bytes)

3 Likes

I suspect that these would be more than just minor restrictions for most users.

Are you sure this laptop has 3 controllers, not just 3 USB ports connected to the same controller?

Thanks for your report!

I would agree. That is why i wrote it in italic. It is minor imo as all the security related features seem to work.

Having to use an external wifi is really becoming a pain in the ass.

I am not that much into “USB controllers” so here is what lspci tells me:

00:00.0 Host bridge: Advanced Micro Devices, Inc. [AMD] Device 1630
00:00.2 IOMMU: Advanced Micro Devices, Inc. [AMD] Device 1631
00:01.0 Host bridge: Advanced Micro Devices, Inc. [AMD] Device 1632
00:02.0 Host bridge: Advanced Micro Devices, Inc. [AMD] Device 1632
00:02.1 PCI bridge: Advanced Micro Devices, Inc. [AMD] Device 1634
00:02.2 PCI bridge: Advanced Micro Devices, Inc. [AMD] Device 1634
00:02.3 PCI bridge: Advanced Micro Devices, Inc. [AMD] Device 1634
00:02.4 PCI bridge: Advanced Micro Devices, Inc. [AMD] Device 1634
00:02.6 PCI bridge: Advanced Micro Devices, Inc. [AMD] Device 1634
00:08.0 Host bridge: Advanced Micro Devices, Inc. [AMD] Device 1632
00:08.1 PCI bridge: Advanced Micro Devices, Inc. [AMD] Device 1635
00:14.0 SMBus: Advanced Micro Devices, Inc. [AMD] FCH SMBus Controller (rev 51)
00:14.3 ISA bridge: Advanced Micro Devices, Inc. [AMD] FCH LPC Bridge (rev 51)
00:18.0 Host bridge: Advanced Micro Devices, Inc. [AMD] Device 166a
00:18.1 Host bridge: Advanced Micro Devices, Inc. [AMD] Device 166b
00:18.2 Host bridge: Advanced Micro Devices, Inc. [AMD] Device 166c
00:18.3 Host bridge: Advanced Micro Devices, Inc. [AMD] Device 166d
00:18.4 Host bridge: Advanced Micro Devices, Inc. [AMD] Device 166e
00:18.5 Host bridge: Advanced Micro Devices, Inc. [AMD] Device 166f
00:18.6 Host bridge: Advanced Micro Devices, Inc. [AMD] Device 1670
00:18.7 Host bridge: Advanced Micro Devices, Inc. [AMD] Device 1671
01:00.0 Non-Volatile memory controller: Sandisk Corp Device 5006
02:00.0 Ethernet controller: Realtek Semiconductor Co., Ltd. RTL8111/8168/8411 PCI Express Gigabit Ethernet Controller (rev 0e)
03:00.0 Network controller: Realtek Semiconductor Co., Ltd. Device 8852
04:00.0 SD Host controller: O2 Micro, Inc. SD/MMC Card Reader Controller (rev 01)
06:00.0 USB controller: Renesas Technology Corp. uPD720202 USB 3.0 Host Controller (rev 02)
07:00.0 VGA compatible controller: Advanced Micro Devices, Inc. [AMD/ATI] Device 1638 (rev d1)
07:00.1 Audio device: Advanced Micro Devices, Inc. [AMD/ATI] Device 1637
07:00.2 Encryption controller: Advanced Micro Devices, Inc. [AMD] Device 15df
07:00.3 USB controller: Advanced Micro Devices, Inc. [AMD] Device 1639
07:00.4 USB controller: Advanced Micro Devices, Inc. [AMD] Device 1639
07:00.5 Multimedia controller: Advanced Micro Devices, Inc. [AMD] Device 15e2 (rev 01)
07:00.6 Audio device: Advanced Micro Devices, Inc. [AMD] Device 15e3

So from what i understand, it might be 2 Controllers? Or 3?

I’m not sure if the lspci info alone is enough to tell what’s going on. You could try creating separate sys-usb’s for each controller. Then you could try to map physical USB ports to them.

Something which often goes unexpressed because it’s more a thing that Engineers know, check out 07:00.x. The bulk of those items likely are grouped under the heading 07:00 because they are behind what is referred to as a bridge & basically this can lead to problems in accessing individual items in an isolated way - big trouble usually for secure access & hence Qubes. When providing basic utility & working with Windows this usually poses no problem at all, but…this isn’t Windows.

So perhaps there are three independent controllers but…two of them being behind a bridge may lead to it being best to accept that you really only have two (effectively). Without knowing the truth about the internals & being a bit of an EE or equivalent, you can mostly speculate.