Dear Qubes Community,
the Starbook by Star Labs (located in the UK) is officially Qubes-certified since 2024, but I got sceptical and would appreciate your help if and how I could trust the Starbook.
Background:
I have been happily using Qubes OS for many years on Dell and Lenovo machines. I am loving Qubes OS and it is a daily part of my life - so, a huge thanks to the team, by the way!!
As I cannot increase memory (16 GB) in my current machines, I wished for a new powerful and portable daily driver laptop which would last me for many years.
Thus, some days ago, I spent a lot of money (3500 Euro) to order a Starbook Ultra 7 with maximum specs:
- 14-inch 4K IPS 625nits Display
- 1.40GHz 16-core Intel® Core™ Ultra 7 Processor 165H (Turbo Boost up to 5GHz, with 24MB Cache)
- 4TB Gen4 PCIe SSD
- 96GB of DDR5 memory
- Intel® Arc™ graphics (2.3 GHz Max Dynamic Frequency)
- coreboot
- preinstalled Ubuntu (I can install Qubes OS myself)
Unfortunately, I am now sceptical…
A) Should I keep the package closed when it arrives and return it within the 14-day period? Since EU taxes and import duties might not be refunded, I might only get back 3000 of the 3500 Euros.
B) Could I be able to find trust in the product to use it as my daily driver with qubes?
Why I got sceptical:
Reason 1: There seems to be Chinese budget hardware inside
1.1) In this review ( https://uk.trustpilot.com/users/6930521ad7ccaa027d5b7248 ), it is stated that: “This isn’t their design in no way(as they market it), but a copy of Chinese brand Machenike(models Machcreator A, Machcreator 14, etc…), which I found by searching for a better fan and matched the part numbers.”
1.2) Internals from official Starbook disassembly ( see Step 3 of StarBook Mk V/ Mk VI / Mk VII - complete disassembly guide | Star Labs | Support , i.e. https://cdn.shopify.com/s/files/1/2059/5897/files/IMG-8821.jpg ) look 95% identical to the “Machenike MachCreator 14” internals filmed in a YouTube review “Best Budget Laptop 2022? - Machenike MachCreator 14 | Unboxing and Full Review” at position of 3 minutes 42 seconds ( https://youtu.be/JCvDM2pUdus?t=222 ).
1.3) The aluminium chassis looks identical between Starbook ( https://cdn.shopify.com/s/files/1/2059/5897/files/IMG-8816.jpg ) and Machenike MachCreator 14 ( https://youtu.be/JCvDM2pUdus?t=112 ). So I why is it written on the Starbook that it is “Designed by Star Labs” when it actually has the same design as the Machenike MachCreator 14?
1.4) Star Labs officially state: “In 2017, we started using Clevo as a supplier” and “When 2018 came around, we started working on our very own laptops. We used a variety of suppliers, design houses and factories.” and “2003 […] We still use Linux and our hardware.” ( About Us - Company Information – Star Labs® ). So, what do they mean by “our hardware”? And might they even still be using Clevo (see Reason 3)?
1.5) By the way, I wonder if it is “regular practice” that Linux laptop sellers, like System76 or Framework, buy Clevo / Tongfang / etc. hardware in China?? (see the company names mentioned on Tongfang Laptop Guide: How to Choose the Right One )
Reason 2: The hardware might be risky to use
Users on this Qubes forum are reporting Starbook hardware issues, like
2.1) “The laptop died slowly while corrupting data (and back-ups) It is likely to be the motherboard (bad quality)” ( Questions about Qubes OS on Starlabs laptop - #5 by curious_cat_8P )
2.2) “I’ve only had this machine for about a year and have taken pretty good care of it. There are sparkling pixel artifacts as well which is why I think it looks like my GPU is failing. Sometimes the screen won’t come on at all or just blinks black and off. […] Update - It does it in the BIOS and when booted from a Fedora live USB as well.” ( StarLabs StarBook Screen Flickering )
2.3) “the laptop would randomly switch off so I contacted support who believed it would be a faulty RAM module, which I believe it was after taking them out one at a time and testing” ( Nova Custom NV41 or Star Labs StarBook? - #20 by jc123 )
2.4) “the Star Labs StarBooks I just got (32 RAM btw) gets nuclear HOT even just sitting at the UEFI login” ( A laptop that can withstand coreboot and Qubes OS - #11 by Vlad )
Outside the Qubes forum, I want to mention one review (I do not understand the coreboot critique)
2.5) “First the hardware issues: the cooling solution(having only one tiny pipe and a single fan) proved to be highly inadequate and was constantly failing to cool the CPU+GPU combo(even under medium load). It had been reaching 90 degrees with some basic load tests(basemark’s web 3.0) not to mention running some phoronix’s suites which made the top-right corner scorching to the touch […] On the software side: the coreboot saga makes those guys so ridiculous that only one word comes to my mind: you swindlers! But here’s my advice to starlabs: if I were you, I’d test quite extensively all models offered by those Chinese before start shipping them trough the mail to customers. I feel like a moron beta tester now of the crappiest laptop meant for mass-production and mass re-brading the Chinese could make up. But my pains are over - yesterday the thing just died. I carried it 200km in a backpack on a drive and when tried starting it, nothing happened - no screen, no fan, only the keyboard lightning and the side one. I am lucky that’s not my single machine and have just received a successor from a reputable brand. […] So, here’s a recap: don’t buy Starlab AMD(and don’t buy Intel for sure)!” ( https://uk.trustpilot.com/users/6930521ad7ccaa027d5b7248 )
Reason 3: There could be security issues due to Chinese budget hardware
Important: I don’t know if Star Labs is still using Clevo as a supplier, but as cited in 1.4) above they have used them in the past. Also, I only did a very quick search on this topic - and it scares me what I have found already…
3.1) June 2024: "RansomHub claims to have infiltrated Clevo’s network and been able to move around its systems for a long time.” ( https://cybernews.com/news/clevo-laptop-ransomware-attack-gaming-ransonhub/ )
3.2) March 2025: “Researchers have discovered a major security vulnerability affecting multiple gaming laptop models using Clevo hardware. […] This incident highlights ongoing challenges in firmware supply chain security. […] Users of affected devices should apply any security updates provided by manufacturers promptly, though the fundamental vulnerability may persist until hardware replacement occurs in some cases.” ( Clevo Devices Boot Guard Private Key Exposed Via Firmware Update Packages )
3.3) October 2025: “Clevo accidentally exposed private keys used in its Intel Boot Guard implementation, allowing attackers to sign malicious firmware that would be trusted during the earliest boot stages […] Researchers warn that this leak can enable stealthy and persistent compromise on systems that use Clevo’s firmware, including devices from other brands that integrate Clevo’s platform components.” ( https://gbhackers.com/clevo-uefi-leak-allows-malicious-firmware/ also see Exposure of Clevo UEFI BootGuard Keys Allows Unauthorized Firmware Signing )
My questions to you all:
Based on the information I collected, would you rather recommend me to
A) return the unopenened package within 14 days of arrival and try to get back as much of my money as possible?
B) aim on using the Starbook as my single daily driver, and run tests (see below) to build trust to eventually store all my local keepass-databases, private email messages of the last decades, all my private and even work related confidential documents, online banking and crypto money on it?
In case of B):
How do you think it would be able to
…build trust in the hardware’s durability?
…by using tools like memtest86 to test memory?
…by observing temperature levels?
…by stress testing CPU and GPU? (don’t know how I would do that, yet)
…by running SMART tests on SSD?
…by any other procedures?
…build trust in the hardware’s security?
…by manually flashing a trusted firmware? (and would this require a hardware programming and debugging toolkit? I know that Star Labs sold one fitting the Starbook, but at the moment they don’t seem to offer it)
…by monitoring network connections? (I would be open to learn it)
I am grateful for any thoughts, ideas, opinions, advices, resources, and instructions!