{joke}980? Oh man that cpu must have more pcie lanes than I imagined.{/joke}
If intel hadn’t limited RAM to 128GB on non-server cpus, I wouldn’t be so torn on choosing between amd and intel considering the difficulties xen/qubes is having with amd.
interesting, thanks for the input. i really wanted to run newest gen amd stuff but if it wont work and last gen intel will i guess thats what i gotta go with
I only switched to Intel because coreboot became available for current gen CPUs, but I’m happy I did, running Qubes on a current gen AMD does seem like a lot of headaches.
Currently using a zen 4 cpu
( zen 4 7950X + asus rog STRIX X670E-F + 128gb ram + RTX 4080 )
The road have been quite long ( https://forum.qubes-os.org/t/ryzen-7000-serie/ ), but all the required upgrade and patch are in qubes development tree (xen + libvirt upgrade + xen patch). Should work out of the box with Qubes R4.2.
I still have a lot of tests to do. I will update my “ryzen-7000-serie” posts until I can confirm that everything work.
I have 3 extra PCI cards added to the system, which might slow down the boot process.
It takes Dasharo around 15 sec to initialize the system, which slows down the boot process.
Then it takes around 15 sec to get to the LUKS password prompt.
Then it takes 20 sec to get to the xorg login prompt.
Around 50 sec from I hit the power button until I see the xorg login prompt.
I’m running a log in script that starts 5 qubes and 4 disp browser, so it’s kinda hard to say exactly when the desktop is loaded, it does a lot of extra work when I log in.
Let me stop ya on your tracks right there. Don’t get a powerful modern computer, get a powerful old one that doesn’t have gubbyment-mandated spyware (IME/PSP). I wouldn’t even bother with Qubes at all if I didn’t have free hardware to install it on. x86 is morally bankrupt in 2023
I’m missing two components for this build, I will attempt to run QubesOS on it based on the data provided by @renehoj:
cpu: i9-13900k (13gen) motherboard: MSI Pro Z690-A DDR5 RAM: DDR5 5600 MHz SSD: Samsung 980 PRO SSD 2TB GPU: shitty one because I do not game GTX 1060 6GB
I’d get the latest motherboard Z790 but I’m not sure it’ll work, I might order it and then return just for the same of science.
You are trying to enforce your threat models on other people. I do not give a flying fsck on iME (to the best of my knowledge ATM) but I need a fast modern computer. There is no such thing as “powerful old one”. You cannot have decent performance on a 4k monitor with pre-Xe video.
Currently I’m using a laptop. So I turn it off to save power and for security.
I may consider a desktop or mini pc that I don’t turn off. However, it would need to be power efficient and/or support suspend. What would you recommend? I am actually looking for something to drive 4k at a high refresh rate.
I am currently on 11th generation NUC and it is just fine. Gen12 should be even better, but I am not that sure about compatibility, need someone to test it (NUC 11 “just works”, zero issues). However, never tried suspend. Its power consumption is small enough for me to not care.
i go with that - thats how i do it if im going to my hackerspace. lock the screen, unplug everything and plug everything in when i arrived.
the only “bad” thing about is, is, when im arriving the hackerspace after ~1h so im loosing ~60% of battery.
I wish it was a threat model… We’re talking actual threats here. Don’t get me wrong bro I wasn’t trynna enforce anything on u, I just don’t understand the practicality of putting an OS built for privacy and security on hardware that’s built to offer zero of those two things… it’s about as bad an idea as sticking it inside virtualbox for windows. Unless you just wanted the eye candy in which case nevermind Qubes do be looking gorgeous with the color window borders n whatnot
For several billion PC users out there, do we have a single confirmed case of iME-based attack? I think the “tinfoil hat community” mindset harms Qubes in just every aspect – usability, actual security and adoption. If we had got our focus more realistic, we would be out to the moon already.
please continue in the existing more relevant thread: